Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

jamiepine/voicebox

https://github.com/jamiepine/voicebox · scanned 2026-07-23 10:38 UTC (5 days, 8 hours ago)

437 raw signals (0 security + 437 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days, 8 hours ago · v5 · last Δ +17.5 (diff) · 435 actionable findings from 1 signal source. 2 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

100.0% cov · 435 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 1 High 149 Medium 130 Low 111 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 435 Crowd 0 Layer: Software 13 Frontend 35 Security 186 Hardware 3 Cicd 4 Quality 47 Dependencies 85 Api 62

Exclude dismissed / FP Exclude test files

Last 5 scans of this repo. Each new scan persists a full payload — historical comparison is exact, not lossy.

Jul 23 05:29

Jul 23 05:51

Jul 23 07:35

Jul 23 08:24

Jul 23 10:36

Diff: previous → latest scan

Score Δ

17.50

Gaps added

Gaps resolved

126

Edges changed

+0 / -0

New gaps in latest scan:

Debug logging residue appears in source files low
Placeholder or mock-heavy implementation detected medium
Critical user flow still appears backed by mock or placeholder data medium
Vulnerable dependency next 16.1.4: GHSA-267c-6grr-h53f high
Vulnerable dependency next 16.1.4: GHSA-26hh-7cqf-hhc6 high
+ 49 more

Gaps resolved since last scan:

Docker base image is tag-pinned but not digest-pinned: python:3.11-slim
GitHub Action is tag-pinned rather than SHA-pinned
GitHub Action is tag-pinned rather than SHA-pinned
GitHub Action is tag-pinned rather than SHA-pinned
GitHub Action is tag-pinned rather than SHA-pinned

v#	ID	Status	Score	Gaps	Nodes	Commit	Started
v	`scan_task_68498a6166588f6e3a0c73efda04b5fe`	ok	59.1	437	2764	`52f8d8d`	Jul 23 10:36
v	`scan_a2f1185223ff`	ok	41.6	513	2733	`52f8d8d`	Jul 23 08:24
v	`scan_196358fce286`	ok	46.5	385	2568	`52f8d8d`	Jul 23 07:35
v	`scan_87112049c3c1`	ok	46.5	387	2568	`52f8d8d`	Jul 23 05:51
v	`scan_b890f046866d`	failed	—	—	—	—	Jul 23 05:29

Recent failures

scan_b890f046866d — 5 days, 13 hours ago

clone failed: git clone failed for https://github.com/jamiepine/voicebox: fatal: unable to access 'https://github.com/jamiepine/voicebox/': Could not resolve host: github.com

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/10ed9790-dd7c-4ca8-a4ad-adb99bbaefdf/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/10ed9790-dd7c-4ca8-a4ad-adb99bbaefdf/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.