Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

soltryxsrl/eCF-Soltryx

https://github.com/soltryxsrl/eCF-Soltryx · scanned 2026-06-16 00:18 UTC (2 months, 2 weeks ago)

239 raw signals (0 security + 239 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 2 weeks ago · v1 · 204 actionable findings from 1 signal source. 35 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

100.0% cov · 204 findings

Severity distribution — click a segment to filter

Active filters: layer: api × excluding tests × Reset all

Severity: Critical 13 High 2 Medium 14 Low 105 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 204 Crowd 0 Layer: Frontend 63 Network 1 Hardware 4 Security 15 Cicd 2 Quality 68 Api 51

Exclude dismissed / FP Exclude test files

Corpus Intelligence Cross-corpus context (cohort percentile, top patterns, fix plan) is shown only on repositories you own. Sign up and connect your repo to view it.

Scan summary Repository scanned at 38.7/100 with 100.0% coverage. It contains 3116 nodes across 30 cross-layer flows, written primarily in mixed languages. Engine surfaced 239 findings — concentrated in quality (79), frontend (63), api (51). Risk profile is high: 30 critical, 2 high, 32 medium. Recommended next step: open the quality layer findings first — that's where the highest-impact wins live.

Showing 51 of 204 actionable findings. 239 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.soltryx.com/api/v1/invoices/ingest (ecf-dashboard/src/docs/code-snippets.ts:33)

`ecf-dashboard/src/docs/code-snippets.ts:33` calls `POST https://api.soltryx.com/api/v1/invoices/ingest` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: axios Normalized path used for matching: `/https:/api.soltryx.com/api/v1/invoices/ingest` If this points a…

Dangling fetchAxios

low System graph api Wiring conf 1.00 Unused endpoint: DELETE /:id

`migracion-nestjs/apps/api/src/certificates/certificates.controller.ts` declares `DELETE /:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting …

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: DELETE /:id/companies/:companyId

`migracion-nestjs/apps/api/src/users/users.controller.ts` declares `DELETE /:id/companies/:companyId` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or docum…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: DELETE /:userId

`migracion-nestjs/apps/api/src/billing/admin-platform-admins.controller.ts` declares `DELETE /:userId` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or docu…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: GET /:id

`migracion-nestjs/apps/api/src/certificates/certificates.controller.ts` declares `GET /:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: GET /app.css

`migracion-nestjs/apps/api/src/dashboard/dashboard.controller.ts` declares `GET /app.css` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who c…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: GET /app.js

`migracion-nestjs/apps/api/src/dashboard/dashboard.controller.ts` declares `GET /app.js` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who co…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: GET /by-company/:companyId

`migracion-nestjs/apps/api/src/billing/admin-subscriptions.controller.ts` declares `GET /by-company/:companyId` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removin…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: GET /live

`migracion-nestjs/apps/api/src/health/health.controller.ts` declares `GET /live` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes i…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: GET /load/status

`migracion-nestjs/apps/api/src/dashboard/dashboard.controller.ts` declares `GET /load/status` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting w…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: GET /lookup

`migracion-nestjs/apps/api/src/users/user-invitations.controller.ts` declares `GET /lookup` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: GET /me

`migracion-nestjs/apps/api/src/auth/auth.controller.ts` declares `GET /me` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: GET /me/permissions

`migracion-nestjs/apps/api/src/auth/auth.controller.ts` declares `GET /me/permissions` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who cons…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: GET /pending

`migracion-nestjs/apps/api/src/users/user-invitations.controller.ts` declares `GET /pending` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting wh…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: GET /permissions

`migracion-nestjs/apps/api/src/roles/roles.controller.ts` declares `GET /permissions` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consu…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: GET /ready

`migracion-nestjs/apps/api/src/health/health.controller.ts` declares `GET /ready` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes …

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: GET /roles

`migracion-nestjs/apps/api/src/roles/roles.controller.ts` declares `GET /roles` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: GET /roles/:id

`migracion-nestjs/apps/api/src/roles/roles.controller.ts` declares `GET /roles/:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consume…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: GET /snapshot

`migracion-nestjs/apps/api/src/dashboard/dashboard.controller.ts` declares `GET /snapshot` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who …

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: GET /stream

`migracion-nestjs/apps/api/src/dashboard/dashboard.controller.ts` declares `GET /stream` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who co…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: GET /usage

`migracion-nestjs/apps/api/src/billing/billing.controller.ts` declares `GET /usage` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consume…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: PATCH /:id

`migracion-nestjs/apps/api/src/certificates/certificates.controller.ts` declares `PATCH /:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting w…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: PATCH /me

`migracion-nestjs/apps/api/src/auth/auth.controller.ts` declares `PATCH /me` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /:id/admin-set-password

`migracion-nestjs/apps/api/src/users/users.controller.ts` declares `POST /:id/admin-set-password` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenti…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /:id/approve

`migracion-nestjs/apps/api/src/commercial-approvals/commercial-approvals.controller.ts` declares `POST /:id/approve` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider re…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /:id/companies

`migracion-nestjs/apps/api/src/users/users.controller.ts` declares `POST /:id/companies` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who co…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /:id/reject

`migracion-nestjs/apps/api/src/commercial-approvals/commercial-approvals.controller.ts` declares `POST /:id/reject` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider rem…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /:id/renew

`migracion-nestjs/apps/api/src/billing/admin-subscriptions.controller.ts` declares `POST /:id/renew` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or docume…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /:id/reset-usage

`migracion-nestjs/apps/api/src/billing/admin-subscriptions.controller.ts` declares `POST /:id/reset-usage` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or …

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /:id/resume

`migracion-nestjs/apps/api/src/billing/admin-subscriptions.controller.ts` declares `POST /:id/resume` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or docum…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /:id/revoke

`migracion-nestjs/apps/api/src/dgii-tokens/dgii-tokens.controller.ts` declares `POST /:id/revoke` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenti…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /:id/set-default

`migracion-nestjs/apps/api/src/certificates/certificates.controller.ts` declares `POST /:id/set-default` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or do…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /:id/suspend

`migracion-nestjs/apps/api/src/billing/admin-subscriptions.controller.ts` declares `POST /:id/suspend` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or docu…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /:userId

`migracion-nestjs/apps/api/src/billing/admin-platform-admins.controller.ts` declares `POST /:userId` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or docume…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /accept

`migracion-nestjs/apps/api/src/users/user-invitations.controller.ts` declares `POST /accept` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting wh…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /auth/logout

`ecf-dashboard/src/api/auth.api.ts` declares `POST /auth/logout` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /auth/password/change

`ecf-dashboard/src/api/auth.api.ts` declares `POST /auth/password/change` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /impersonate/:userId

`migracion-nestjs/apps/api/src/auth/auth.controller.ts` declares `POST /impersonate/:userId` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting wh…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /load/clean

`migracion-nestjs/apps/api/src/dashboard/dashboard.controller.ts` declares `POST /load/clean` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting w…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /load/start

`migracion-nestjs/apps/api/src/dashboard/dashboard.controller.ts` declares `POST /load/start` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting w…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /load/stop

`migracion-nestjs/apps/api/src/dashboard/dashboard.controller.ts` declares `POST /load/stop` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting wh…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /login

`migracion-nestjs/apps/api/src/auth/auth.controller.ts` declares `POST /login` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /logout

`migracion-nestjs/apps/api/src/auth/auth.controller.ts` declares `POST /logout` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /password/change

`migracion-nestjs/apps/api/src/auth/auth.controller.ts` declares `POST /password/change` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who co…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /password/reset/confirm

`migracion-nestjs/apps/api/src/auth/auth.controller.ts` declares `POST /password/reset/confirm` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /password/reset/request

`migracion-nestjs/apps/api/src/auth/auth.controller.ts` declares `POST /password/reset/request` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /refresh

`migracion-nestjs/apps/api/src/auth/auth.controller.ts` declares `POST /refresh` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes i…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /run

`migracion-nestjs/apps/api/src/billing/admin-rollover.controller.ts` declares `POST /run` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who c…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /upload

`migracion-nestjs/apps/api/src/certificates/certificates.controller.ts` declares `POST /upload` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: USE /dashboard{/*splat}

`migracion-nestjs/apps/api/src/main.ts` declares `USE /dashboard{/*splat}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: USE /docs{/*splat}

`migracion-nestjs/apps/api/src/main.ts` declares `USE /docs{/*splat}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.

Unused endpoint

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/0f5f39b8-f577-472c-990f-d718f0af9ba2/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/0f5f39b8-f577-472c-990f-d718f0af9ba2/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.