moltis

本页为离线静态分析自动生成；分数为信号驱动启发式，请结合证据与人工复核使用。

项目概况

名称: moltis
Git HEAD: 626ba0624902
最近提交: 2026-02-23T21:01:29-08:00
许可证: LICENSE.md
语言: Rust(318), JavaScript(91), Markdown(65), TOML(45), Shell(22), YAML(20)

README 摘要

One binary — sandboxed, secure, yours.

评分（0-10）

维度	分数
代码质量	3.0
可维护性	6.5
健壮性	2.0
可持续性	6.5
可迁移性	3.0
综合	4.2

工程信号

CI / 测试

CI: 6 个 workflow
- .github/workflows/ci.yml, .github/workflows/codspeed.yml, .github/workflows/docs.yml, .github/workflows/e2e.yml, .github/workflows/homebrew.yml, .github/workflows/release.yml
CI 操作系统: linux, self-hosted, windows
Docker: 有

代码质量工具

Lint / 格式化: file:biome.json

安全与治理

安全文档: 有
治理: dir:.github/ISSUE_TEMPLATE/, file:CONTRIBUTING.md

架构与发布

发布信号: ci-file:.github/workflows/release.yml, ci:publish:.github/workflows/docs.yml, ci:publish:.github/workflows/homebrew.yml, ci:release:.github/workflows/docs.yml, ci:release:.github/workflows/homebrew.yml, ci:release:.github/workflows/release.yml

技术栈与依赖

Rust: name=None cargo_lock=True

评分依据（信号 → 证据）

代码质量

+2 CI: 6 workflow(s)
+2 lint/format: file:biome.json
-1 risky code patterns present (review needed)

可维护性

+1 README present
+1 docs dirs: docs/
+1 CHANGELOG present
+1.5 governance: dir:.github/ISSUE_TEMPLATE/, file:CONTRIBUTING.md
+1 Cargo.lock present
+1 CI present

健壮性

+1 config signals: dir:docs/
+1 security docs present
+1 CI present
-1 risky code patterns present (review needed)

可持续性

+1 license present
+1 CHANGELOG present
+0.5 security docs present
+1 release signals: ci-file:.github/workflows/release.yml, ci:publish:.github/workflows/docs.yml, ci:publish:.github/workflows/homebrew.yml, ci:release:.github/workflows/docs.yml, ci:release:.github/workflows/homebrew.yml, ci:release:.github/workflows/release.yml
+1 tags: 86 tag(s)
+2 recent commit (≤30d)

可迁移性

+2 Docker present
+1 CI multi-OS: linux, self-hosted, windows

安全与风险信号（静态扫描）

高风险模式（需人工复核）

curl|bash (code) at install.sh:6
curl|bash (code) at install.sh:9
curl|bash (code) at install.sh:10
curl|bash (code) at install.sh:11
curl|bash (code) at install.sh:88
curl|bash (code) at install.sh:89
curl|bash (code) at install.sh:90
curl|bash (code) at install.sh:401
wget|bash (code) at install.sh:403
eval() (code) at crates/tools/src/calc.rs:449
…及其余 8 条 code 类
文档中的风险模式：8 条（curl|bash 等安装指引，通常为预期行为）

改进建议

补齐最小测试集：smoke + 关键失败路径，并在 CI 中运行。
在 CI 中启用 Rust 静态检查：cargo fmt --check + cargo clippy -D warnings。
在 CI 增加安全扫描（依赖审计/secret 扫描/静态分析等）并设为质量闸门。
审计高风险执行路径（eval/exec/shell=True/curl|bash 等）：最小权限、输入验证、隔离执行。