iii-hq/iii

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

189 of your 284 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Upstream (GitHub) caused delay on this scan — not Repobility.

GitHub API rate-limited (HTTP 403) — preflight skipped, fell back to direct git clone.
Clone from GitHub took 72.83s for a 132.9 MB repo slow.
Repobility's analysis ran in 11.41s after the clone landed.

https://github.com/iii-hq/iii · scanned 2026-06-05 21:31 UTC (1 week, 2 days ago) · 10 languages

788 raw signals (264 security + 524 graph) 11/13 scanners ran 98th percentile · Rust · large (100-500K LoC) System graph score 73 (higher by 16)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 week, 2 days ago · v2 · 267 actionable findings from 2 signal sources. 257 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

100.0% cov · 171 findings

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	60.0	0.15	9.00
`security_score`	100.0	0.25	25.00
`testing_score`	100.0	0.20	20.00
`documentation_score`	93.0	0.15	13.95
`practices_score`	100.0	0.15	15.00
`code_quality`	58.0	0.10	5.80
Overall		1.00	88.8

security_score may be inflated — optional security scanners were skipped on this fast scan

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 2 High 21 Medium 31 Low 124 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 96 System graph 171 Crowd 0 Layer: Quality 130 Cicd 18 Software 77 Security 2 Api 1 Frontend 32 Network 1 Hardware 6

Exclude dismissed / FP Exclude test files

Top 10 actions, ranked by impact × ease. Severity drives impact; tag-based fix-clarity drives ease.

Blocking `urllib.request.urlopen(...)` inside `async def _fetch_example` — sdk/packages/python/iii-example/src/main.py:187

GapSeverity.HIGH Layer.QUALITY score 0.394

Why: high severity · crashes are likely without this

Fix: Add a `timeout=N` argument and wrap in `try/except` in sdk/packages/python/iii-example/src/main.py:187 to prevent hung calls.

sdk/packages/python/iii-example/src/main.py:187

Blocking `urllib.request.urlopen(...)` inside `async def _post_example` — sdk/packages/python/iii-example/src/main.py:201

GapSeverity.HIGH Layer.QUALITY score 0.394

Why: high severity · crashes are likely without this

Fix: Add a `timeout=N` argument and wrap in `try/except` in sdk/packages/python/iii-example/src/main.py:201 to prevent hung calls.

sdk/packages/python/iii-example/src/main.py:201

Privileged port 14 in use

GapSeverity.MEDIUM Layer.NETWORK score 0.338

Why: medium severity · misconfigured network surface

Fix: If the number in crates/iii-worker/src/sandbox_daemon/iii.worker.yaml is a real port, change the binding to ≥1024 or run behind a proxy.

crates/iii-worker/src/sandbox_daemon/iii.worker.yaml

Insecure pattern 'cors_wildcard' in engine/src/workers/rest_api/config.rs:164

GapSeverity.MEDIUM Layer.SECURITY score 0.248

Why: medium severity · OWASP-class risk

engine/src/workers/rest_api/config.rs:164