utelle/SQLite3MultipleCiphers

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

53 of your 88 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 7.3s · analysis 3.62s · 31.3 MB · GitHub API rate-limit (preflight)

https://github.com/utelle/SQLite3MultipleCiphers · scanned 2026-06-05 16:46 UTC (4 days, 23 hours ago) · 10 languages

190 raw signals (88 security + 102 graph) 11/13 scanners ran 57th percentile · C · large (100-500K LoC) System graph score 83 (lower by 16)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 4 days, 23 hours ago · v2 · 30 actionable findings from 2 signal sources. 109 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

88.9% cov · 18 findings

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	80.0	0.15	12.00
`security_score`	100.0	0.25	25.00
`testing_score`	0.0	0.20	0.00
`documentation_score`	85.0	0.15	12.75
`practices_score`	81.0	0.15	12.15
`code_quality`	50.0	0.10	5.00
Overall		1.00	66.9

security_score may be inflated — optional security scanners were skipped on this fast scan

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 1 Medium 6 Low 14 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 12 System graph 18 Crowd 0 Layer: Quality 15 Cicd 4 Software 7 Api 1 Network 2 Frontend 1

Exclude dismissed / FP Exclude test files

Scan summary Quality grade B- (67/100). Dimensions: security 100, maintainability 80. 88 findings (25 security). 139,765 lines analyzed.

Showing 21 of 30 actionable findings. 139 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

high Security checks quality Quality conf 1.00 ✓ Repobility 25 occurrences [MINED108] `self.conan_data` used but never assigned in __init__: Method `source` of class `sqlite3mc` reads `self.conan_data`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance.

Initialize `self.conan_data = <default>` in __init__, or add a class-level default.

2 files, 25 locations

scripts/amalgamate.py:53, 59, 60, 68, 70, 98, 100, 101, +14 more (22 hits)

conan/all/conanfile.py:124, 131, 133 (3 hits)

low Security checks cicd CI/CD security conf 0.90 ✓ Repobility 52 occurrences GitHub Action is tag-pinned rather than SHA-pinned

[MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout@v6` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lo…

5 files, 52 locations

.github/workflows/build-release.yml:53, 209, 235, 243, 335, 362, 368, 385, +12 more (36 hits)

.github/workflows/generate-amalgamation.yml:24, 32, 108 (6 hits)

.github/workflows/ci4sqlite3mc.yml:27, 51 (4 hits)

.github/workflows/update-sqlite.yml:54, 62, 120, 350 (4 hits)

.github/workflows/codeql-analysis.yml:46 (2 hits)

CI/CD securitySupply chainGitHub Actions

medium Security checks cicd CI/CD security conf 0.90 ✓ Repobility 6 occurrences GitHub Action is tag-pinned rather than SHA-pinned

[MINED115] Action `uraimo/run-on-arch-action` pinned to mutable ref `@v3`: `uses: uraimo/run-on-arch-action@v3` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-ch…

2 files, 6 locations

.github/workflows/codeql-analysis.yml:50, 78 (4 hits)

.github/workflows/ci4sqlite3mc.yml:55 (2 hits)

CI/CD securitySupply chainGitHub Actions

medium Security checks quality Quality Average file size is 685 lines (recommend <300)

Refactor large files by extracting related functions into separate modules. Target files with 300+ lines first. Use the Single Responsibility Principle — each module should have one clear purpose.

medium System graph cicd CI/CD security conf 1.00 GitHub Actions workflow grants broad write permissions

CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions.

.github/workflows/build-release.yml CI/CD securitySupply chainGithub actions

medium System graph cicd CI/CD security conf 1.00 GitHub Actions workflow grants broad write permissions

CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions.

.github/workflows/update-sqlite.yml CI/CD securitySupply chainGithub actions

medium System graph network Security conf 1.00 Privileged port 13 in use

Port 13 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer.

conan/all/conandata.yml Ports

medium System graph network Security conf 1.00 Privileged port 256 in use

Port 256 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer.

conan/all/conandata.yml Ports

low Security checks quality Quality conf 0.60 30 occurrences Duplicated implementation block across source files

Duplicate implementation blocks are maintenance debt. Keep them visible, but they are not a high-severity defect unless the duplicated logic is security-sensitive or drifting.

12 files, 19 locations

src/aegis/aegis128x4/aegis128x4_common.h:46, 97 (2 hits)

src/aegis/aegis256/aegis256_altivec.c:2, 31 (2 hits)

src/aegis/aegis256/aegis256_armcrypto.c:3, 32 (2 hits)

src/aegis/aegis256/aegis256_common.h:106, 255 (2 hits)

src/aegis/aegis256/aegis256_soft.c:2, 31 (2 hits)

src/aegis/aegis256x2/aegis256x2_aesni.c:5, 37 (2 hits)

src/aegis/aegis256x2/aegis256x2_altivec.c:5, 37 (2 hits)

src/aegis/aegis128l/aegis128l_armcrypto.c:32

duplicationquality

low Security checks quality Quality conf 0.70 Generated build artifact directory is present at repository root

Remove generated output from version control, add it to .gitignore and .dockerignore where relevant, and regenerate it in CI or release jobs.

build:1

low System graph software Dead code candidate conf 1.00 File has no detected symbols: scripts/update_autoconf.py

Source file with no class/function declarations — possible config, dead code, or scratch file.

low System graph quality Tests conf 1.00 Low test-to-source ratio

1 tests / 8 src (ratio 0.12).

low System graph quality Integrity conf 1.00 Near-duplicate function bodies in 2 places

Functions with the same first-5-line body hash: scripts/update_config.py:validate_sqlite3mc_version, scripts/update_config.py:validate_sqlite_version This is *the* AI-coder failure mode (4× more duplication in vibe-coded repos — see https://jw.hn/ai-code-hygiene). Consolidate or document why they'…

duplicatesduplication

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `use_sqleet_legacy` in conan/all/conanfile.py:62

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph software Dead code conf 1.00 Possibly dead Python function: config_options