GitHub Integrity Guard 作者: Ahmed Samy Elkhouly

GitHub Integrity Guard is an advanced, open-source browser extension architected to eliminate star-farming deception. It injects a real-time, highly accessible scorecard directly into GitHub repositories, analyzing authentic community health and protecting independent developers from bot-driven metrics.
Going entirely against the current trend, this tool is 100% AI-free. There are no black-box LLMs, no hallucinations, and no data tracking. It relies entirely on deterministic math applied directly to GitHub's raw API to provide instant, objective transparency.
How It Works (The Engine & UI)
Token-Powered API: Securely utilizes your GitHub Personal Access Token (PAT) via local AES-GCM encryption to bypass strict rate limits.
Smart UI Injection: Seamlessly injects a clean Scorecard into the native GitHub sidebar. If the sidebar is missing, a resilient Floating Card appears.
Visual Transparency: Displays a definitive Trust Score (out of 100) using a traffic-light color system: Red (Danger), Yellow (Warning), and Green (Healthy).
Full Breakdown: Exposes the raw numbers underneath the score: Fork-to-Star ratio, 90-day Commits, Issue Health, and Discussion Depth.
24-Hour Smart Cache: Successful audits are cached locally for 24 hours to preserve your API limits.
The Tiered Scoring Architecture
To prevent penalizing new or niche projects, the algorithm dynamically adjusts its rules based on the repository's total stars:
Tier 1 (Incubator | < 200 Stars): Baseline 90+ score. Penalized only if absolutely dormant for > 365 days.
Tier 2 (Growth | 200 - 5,000 Stars): Pulse-focused auditing. Rewards active commit cadence and community issue discussions over raw fork numbers.
Tier 3 (Established | 5,000 - 10,000 Stars): Balanced auditing. Matches organic community adoption with the project's growing popularity.
Tier 4 (High-Traffic | > 10,000 Stars): Strict anti-fraud enforcement. Hard-caps scores at 30 (Danger Zone) if the fork ratio falls below 3% to kill bot farms.
Uncompromised Accessibility (WCAG 2.1 Compliant)
Engineered natively for screen-reader users, this tool actively rejects cluttered charts in favor of pure semantic data:
Instant Audio Briefing: A visually-hidden aria-live region reads a concise summary of the Trust Score directly upon load.
Accessible Export: A dedicated native button allows you to copy the entire metrics breakdown to your clipboard with an instant audio confirmation.
Keyboard Native: Every element is strictly navigable via standard keyboard inputs.
Initial Setup & Privacy (Zero Telemetry)
Step 1: Generate a minimal-scope GitHub Personal Access Token (or run gh auth token).
Step 2: Open the extension's Options page, paste your token, and save.
Military-Grade Local Encryption: Your token is immediately encrypted locally using AES-GCM via the native Web Crypto API.
Zero Telemetry: Your data never leaves your device. We do not track you, and there are zero external servers involved.