Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

danieloda/world-cup-2026

https://github.com/danieloda/world-cup-2026 · scanned 2026-06-17 01:53 UTC (1 month, 1 week ago)

183 raw signals (0 security + 183 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 month, 1 week ago · v2 · last Δ -13.8 (diff) · 166 actionable findings from 1 signal source. 17 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
62.9
/100
Security checks
63
0 findings
System graph
63
88.9% cov · 166 findings
Critical
14
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 14 High 0 Medium 33 Low 65 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 166 Crowd 0 Layer: Frontend 61 Security 37 Cicd 3 Quality 65

All 1460 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
shot software healthy _ui-capture.mjs:shot
gotoQuiet software healthy _ui-capture.mjs:gotoQuiet
newCtx software healthy _ui-capture.mjs:newCtx
loginInto software healthy _ui-capture.mjs:loginInto
mk software healthy tests/unit/lock-alerts.test.js:mk
public software healthy tests/unit/alerts-wiring.test.js:public
collectJs software healthy tests/unit/script-paths.test.js:collectJs
extractDirnameJoins software healthy tests/unit/script-paths.test.js:extractDirnameJoins
gitIgnored software healthy tests/unit/script-paths.test.js:gitIgnored
labels software healthy tests/unit/scoring.test.js:labels
keys software healthy tests/unit/scoring.test.js:keys
latestViewDef software healthy tests/unit/leaderboard-parity.test.js:latestViewDef
sortLeaderboard software healthy tests/unit/leaderboard-parity.test.js:sortLeaderboard
runProbe software healthy tests/unit/date-tz-invariance.test.js:runProbe
expectAnchor software healthy tests/unit/date-tz-invariance.test.js:expectAnchor
workflowFiles software healthy tests/unit/workflow-paths.test.js:workflowFiles
gitIgnored software healthy tests/unit/workflow-paths.test.js:gitIgnored
expectedDeadline software healthy tests/unit/deadline-parity.test.js:expectedDeadline
public software healthy tests/unit/deadline-parity.test.js:public
minutesBrt software healthy tests/unit/integrity-guards.test.js:minutesBrt
collectJs software healthy tests/unit/script-syntax.test.js:collectJs
msg software healthy tests/unit/script-syntax.test.js:msg
parseTopology software healthy tests/unit/bracket.test.js:parseTopology
isResolvedTeam software healthy tests/unit/bracket.test.js:isResolvedTeam
randomCompletePreds software healthy tests/unit/bracket.test.js:randomCompletePreds
pen software healthy tests/unit/bracket.test.js:pen
randomPartialPreds software healthy tests/unit/bracket.test.js:randomPartialPreds
randomMixedMatches software healthy tests/unit/bracket.test.js:randomMixedMatches
assertNoGarbage software healthy tests/unit/bracket.test.js:assertNoGarbage
U software healthy tests/unit/prize.test.js:U
makeDeps software healthy tests/unit/progression.test.js:makeDeps
latestPolicy software healthy tests/unit/rls-invariants.test.js:latestPolicy
lastStatement software healthy tests/unit/rls-invariants.test.js:lastStatement
public software healthy tests/unit/rls-invariants.test.js:public
makeMatch software healthy tests/unit/util.test.js:makeMatch
collectJs software healthy tests/unit/date-tz-guard.test.js:collectJs
public software healthy tests/unit/scoring-parity.test.js:public
latestFnBody software healthy tests/unit/scoring-parity.test.js:latestFnBody
parseCase software healthy tests/unit/scoring-parity.test.js:parseCase
valueFor software healthy tests/unit/scoring-parity.test.js:valueFor
sliceAssign software healthy tests/unit/scoring-parity.test.js:sliceAssign
clean software healthy tests/unit/raiox-render.test.js:clean
noThrow software healthy tests/unit/raiox-render.test.js:noThrow
xAt software healthy tests/unit/chart-utils.test.js:xAt
groupMatches software healthy tests/unit/standings-tiebreak.test.js:groupMatches
greedy software healthy tests/unit/thirds-assign.test.js:greedy
fail software healthy scripts/probes/probe-scorer-audit.mjs:fail
sha256 software healthy scripts/integrity/verify.js:sha256
fail software healthy scripts/integrity/verify.js:fail
fail software healthy scripts/integrity/confirm-publication.js:fail

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
.env.example software healthy .env.example
vitest.config.js software healthy vitest.config.js
playwright.config.js software healthy playwright.config.js
package-lock.json software healthy package-lock.json
README.md software healthy README.md
netlify.toml software healthy netlify.toml
_ui-capture.mjs software healthy _ui-capture.mjs
LICENSE software healthy LICENSE
package.json software healthy package.json
RLS_TEST_STRATEGY.md software healthy tests/RLS_TEST_STRATEGY.md
lock-alerts.test.js software healthy tests/unit/lock-alerts.test.js
alerts-wiring.test.js software healthy tests/unit/alerts-wiring.test.js
script-paths.test.js software healthy tests/unit/script-paths.test.js
scoring.test.js software healthy tests/unit/scoring.test.js
leaderboard-parity.test.js software healthy tests/unit/leaderboard-parity.test.js
date-tz-invariance.test.js software healthy tests/unit/date-tz-invariance.test.js
workflow-paths.test.js software healthy tests/unit/workflow-paths.test.js
deadline-parity.test.js software healthy tests/unit/deadline-parity.test.js
integrity-guards.test.js software healthy tests/unit/integrity-guards.test.js
script-syntax.test.js software healthy tests/unit/script-syntax.test.js
integrity-report.test.js software healthy tests/unit/integrity-report.test.js
bracket.test.js software healthy tests/unit/bracket.test.js
prize.test.js software healthy tests/unit/prize.test.js
qualifier.test.js software healthy tests/unit/qualifier.test.js
env-guard.test.js software healthy tests/unit/env-guard.test.js
card-results.test.js software healthy tests/unit/card-results.test.js
integrity-telegram-picks.test.js software healthy tests/unit/integrity-telegram-picks.test.js
progression.test.js software healthy tests/unit/progression.test.js
rls-invariants.test.js software healthy tests/unit/rls-invariants.test.js
util.test.js software healthy tests/unit/util.test.js
date-tz-guard.test.js software healthy tests/unit/date-tz-guard.test.js
scoring-parity.test.js software healthy tests/unit/scoring-parity.test.js
raiox-render.test.js software healthy tests/unit/raiox-render.test.js
chart-utils.test.js software healthy tests/unit/chart-utils.test.js
standings-tiebreak.test.js software healthy tests/unit/standings-tiebreak.test.js
thirds-assign.test.js software healthy tests/unit/thirds-assign.test.js
tz-probe.mjs software healthy tests/fixtures/tz-probe.mjs
expected-tournament.json software healthy tests/fixtures/expected-tournament.json
auth.spec.js software healthy tests/e2e/auth.spec.js
predictions.spec.js software healthy tests/e2e/predictions.spec.js
build-config.js software healthy scripts/build-config.js
probe-scorer-audit.mjs software healthy scripts/probes/probe-scorer-audit.mjs
probe-client-errors.mjs software healthy scripts/probes/probe-client-errors.mjs
verify.js software healthy scripts/integrity/verify.js
confirm-publication.js software healthy scripts/integrity/confirm-publication.js
telegram-picks.js software healthy scripts/integrity/telegram-picks.js
snapshot.js software healthy scripts/integrity/snapshot.js
report.js software healthy scripts/integrity/report.js
post-picks.js software healthy scripts/integrity/post-picks.js
reset-my-predictions.js software healthy scripts/dev/reset-my-predictions.js

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
035_audit_trail.sql data healthy supabase/migrations/035_audit_trail.sql
039_match_status.sql data healthy supabase/migrations/039_match_status.sql
015_fifa_rank_tiebreaker.sql data healthy supabase/migrations/015_fifa_rank_tiebreaker.sql
003_scoring.sql data healthy supabase/migrations/003_scoring.sql
038_profiles_email_lockdown.sql data healthy supabase/migrations/038_profiles_email_lockdown.sql
032_match_predictions.sql data healthy supabase/migrations/032_match_predictions.sql
006_avatar.sql data healthy supabase/migrations/006_avatar.sql
059_disable_cs_payments_alerts.sql data healthy supabase/migrations/059_disable_cs_payments_alerts.sql
047_client_errors.sql data healthy supabase/migrations/047_client_errors.sql
012_fix_resolve_slots_multipass.sql data healthy supabase/migrations/012_fix_resolve_slots_multipass.sql
041_group_completeness_lock_levels.sql data healthy supabase/migrations/041_group_completeness_lock_levels.sql
043_alert_lists_no_cap.sql data healthy supabase/migrations/043_alert_lists_no_cap.sql
030_team_h2h.sql data healthy supabase/migrations/030_team_h2h.sql
046_rls_auto_enable.sql data healthy supabase/migrations/046_rls_auto_enable.sql
050_dedup_star_players.sql data healthy supabase/migrations/050_dedup_star_players.sql
036_result_integrity.sql data healthy supabase/migrations/036_result_integrity.sql
054_admin_defensive_alerts.sql data healthy supabase/migrations/054_admin_defensive_alerts.sql
013_fix_thirds_uniqueness.sql data healthy supabase/migrations/013_fix_thirds_uniqueness.sql
052_resync_squads_from_api.sql data healthy supabase/migrations/052_resync_squads_from_api.sql
055_group_lock_reorg.sql data healthy supabase/migrations/055_group_lock_reorg.sql
044_payments_direct_link.sql data healthy supabase/migrations/044_payments_direct_link.sql
037_pii_and_cleanup.sql data healthy supabase/migrations/037_pii_and_cleanup.sql
008_admin_reset.sql data healthy supabase/migrations/008_admin_reset.sql
004_profile_self_signup.sql data healthy supabase/migrations/004_profile_self_signup.sql
009_admin_reset_picks.sql data healthy supabase/migrations/009_admin_reset_picks.sql
001_schema.sql data healthy supabase/migrations/001_schema.sql
040_fix_leaderboard_grants.sql data healthy supabase/migrations/040_fix_leaderboard_grants.sql
031_h2h_drop_check.sql data healthy supabase/migrations/031_h2h_drop_check.sql
053_alerts_revamp_admin_request.sql data healthy supabase/migrations/053_alerts_revamp_admin_request.sql
051_star_players_full_names.sql data healthy supabase/migrations/051_star_players_full_names.sql
023_prediction_deadline.sql data healthy supabase/migrations/023_prediction_deadline.sql
016_avatar_storage.sql data healthy supabase/migrations/016_avatar_storage.sql
049_client_errors_digest.sql data healthy supabase/migrations/049_client_errors_digest.sql
026_alerts_daily_revamp.sql data healthy supabase/migrations/026_alerts_daily_revamp.sql
048_client_errors_alert.sql data healthy supabase/migrations/048_client_errors_alert.sql
020_match_odds.sql data healthy supabase/migrations/020_match_odds.sql
024_fix_cs_deadline_quotes.sql data healthy supabase/migrations/024_fix_cs_deadline_quotes.sql
057_regrant_leaderboard_fns.sql data healthy supabase/migrations/057_regrant_leaderboard_fns.sql
002_rls.sql data healthy supabase/migrations/002_rls.sql
018_rename_turkey_to_turkiye.sql data healthy supabase/migrations/018_rename_turkey_to_turkiye.sql
028_team_history_stats.sql data healthy supabase/migrations/028_team_history_stats.sql
061_client_errors_drop_noise.sql data healthy supabase/migrations/061_client_errors_drop_noise.sql
029_drop_team_history.sql data healthy supabase/migrations/029_drop_team_history.sql
021_qualifier_bonus.sql data healthy supabase/migrations/021_qualifier_bonus.sql
033_update_site_url.sql data healthy supabase/migrations/033_update_site_url.sql
034_rls_hardening.sql data healthy supabase/migrations/034_rls_hardening.sql
045_send_alert_direct_links.sql data healthy supabase/migrations/045_send_alert_direct_links.sql
060_reveal_after_publication.sql data healthy supabase/migrations/060_reveal_after_publication.sql
062_integrity_snapshot_cron_dispatch.sql data healthy supabase/migrations/062_integrity_snapshot_cron_dispatch.sql
017_fix_cs_deadline.sql data healthy supabase/migrations/017_fix_cs_deadline.sql

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
tests software healthy tests
unit software healthy tests/unit
fixtures software healthy tests/fixtures
e2e software healthy tests/e2e
scripts software healthy scripts
probes software healthy scripts/probes
integrity software healthy scripts/integrity
dev software healthy scripts/dev
alerts software healthy scripts/alerts
maintenance software healthy scripts/maintenance
lib software healthy scripts/lib
e2e software healthy scripts/e2e
scenarios software healthy scripts/e2e/scenarios
lib software healthy scripts/e2e/lib
.github software healthy .github
workflows software healthy .github/workflows
src software healthy src
js software healthy src/js
pages software healthy src/js/pages
css software healthy src/css
integrity software healthy integrity
snapshots software healthy integrity/snapshots
reports software healthy integrity/reports
docs software healthy docs
testing software healthy docs/testing
features software healthy docs/features
design software healthy docs/design
ui-audit-2026-06-10 software healthy docs/design/ui-audit-2026-06-10
protos software healthy docs/design/ui-audit-2026-06-10/protos
supabase software healthy supabase
scripts software healthy supabase/scripts
templates software healthy supabase/templates
functions software healthy supabase/functions
telegram-alert software healthy supabase/functions/telegram-alert
seed software healthy supabase/seed
migrations software healthy supabase/migrations

LabelLayerStatusPath
password_literal::_ui-capture.mjs security healthy _ui-capture.mjs
password_literal::scripts/dev/ui-mob-audit.mjs security healthy scripts/dev/ui-mob-audit.mjs
password_literal::scripts/alerts/test-alerts-integration.js security healthy scripts/alerts/test-alerts-integration.js
password_literal::scripts/e2e/test-historico-scorer.js security healthy scripts/e2e/test-historico-scorer.js
password_literal::scripts/e2e/test-rls-hostile.js security healthy scripts/e2e/test-rls-hostile.js
password_literal::scripts/e2e/test-rank-chart.js security healthy scripts/e2e/test-rank-chart.js
password_literal::scripts/e2e/seed-harness-state.js security healthy scripts/e2e/seed-harness-state.js
password_literal::scripts/e2e/test-xss-hostile.js security healthy scripts/e2e/test-xss-hostile.js
password_literal::scripts/e2e/test-load-concurrency.js security healthy scripts/e2e/test-load-concurrency.js
password_literal::scripts/e2e/seed-scale.js security healthy scripts/e2e/seed-scale.js
password_literal::scripts/e2e/test-render-adversarial.js security healthy scripts/e2e/test-render-adversarial.js
password_literal::scripts/e2e/test-avatar-upload.js security healthy scripts/e2e/test-avatar-upload.js
password_literal::scripts/e2e/test-signup-flow.js security healthy scripts/e2e/test-signup-flow.js
password_literal::scripts/e2e/03-palpitar.js security healthy scripts/e2e/03-palpitar.js
password_literal::scripts/e2e/test-date-locks.js security healthy scripts/e2e/test-date-locks.js

LabelLayerStatusPath
/regras frontend healthy src/js/pages/regras.js
/ranking frontend healthy src/js/pages/ranking.js
/palpites-grupos frontend healthy src/js/pages/palpites-grupos.js
/campeao-artilheiro frontend healthy src/js/pages/campeao-artilheiro.js
/complete-profile frontend healthy src/js/pages/complete-profile.js
/historico frontend healthy src/js/pages/historico.js
/reset-password frontend healthy src/js/pages/reset-password.js
/forgot-password frontend healthy src/js/pages/forgot-password.js
/signup frontend healthy src/js/pages/signup.js
/inicio frontend healthy src/js/pages/inicio.js
/palpites-mata frontend healthy src/js/pages/palpites-mata.js
/login frontend healthy src/js/pages/login.js
/admin frontend healthy src/js/pages/admin.js

LabelLayerStatusPath
smoke cicd healthy .github/workflows/monitor-prod.yml
verify cicd healthy .github/workflows/monitor-prod.yml
refresh cicd healthy .github/workflows/refresh-predictions.yml
verify cicd healthy .github/workflows/verify-fixtures.yml
refresh cicd healthy .github/workflows/refresh-odds.yml
snapshot cicd healthy .github/workflows/integrity-snapshot.yml
refresh cicd healthy .github/workflows/refresh-recent-matches.yml
test cicd healthy .github/workflows/ci.yml
e2e cicd healthy .github/workflows/ci.yml
build cicd healthy .github/workflows/ci.yml

LabelLayerStatusPath
port:06 network healthy .github/workflows/monitor-prod.yml
port:15 network healthy .github/workflows/monitor-prod.yml
port:03 network healthy .github/workflows/monitor-prod.yml
port:10 network healthy .github/workflows/refresh-predictions.yml
port:07 network healthy .github/workflows/verify-fixtures.yml
port:04 network healthy .github/workflows/verify-fixtures.yml
port:09 network healthy .github/workflows/integrity-snapshot.yml
port:08 network healthy .github/workflows/refresh-recent-matches.yml
port:05 network healthy .github/workflows/refresh-recent-matches.yml

LabelLayerStatusPath
TEST_USER_EMAIL cicd healthy —
SUPABASE_PUBLISHABLE_KEY cicd healthy —
TELEGRAM_TOKEN cicd healthy —
TELEGRAM_CHAT_ID cicd healthy —
SUPABASE_SERVICE_ROLE_KEY cicd healthy —
ADMIN_EMAIL cicd healthy —
API_FOOTBALL_KEY cicd healthy —
TEST_USER_PASSWORD cicd healthy —
ADMIN_PASSWORD cicd healthy —

LabelLayerStatusPath
gha::monitor-prod cicd healthy .github/workflows/monitor-prod.yml
gha::refresh-predictions cicd healthy .github/workflows/refresh-predictions.yml
gha::verify-fixtures cicd healthy .github/workflows/verify-fixtures.yml
gha::refresh-odds cicd healthy .github/workflows/refresh-odds.yml
gha::integrity-snapshot cicd healthy .github/workflows/integrity-snapshot.yml
gha::refresh-recent-matches cicd healthy .github/workflows/refresh-recent-matches.yml
gha::ci cicd healthy .github/workflows/ci.yml

LabelLayerStatusPath
auth::src/js/auth.js security healthy src/js/auth.js
auth::scripts/e2e/test-session.js security healthy scripts/e2e/test-session.js
auth::integrity/README.md security healthy integrity/README.md
auth::supabase/config.toml security healthy supabase/config.toml

LabelLayerStatusPath
const software healthy tests/e2e/predictions.spec.js:const
ErrorTracker software healthy scripts/e2e/lib/error-tracker.js:ErrorTracker

LabelLayerStatusPath
postgresql data healthy README.md
postgres data healthy scripts/dev/probe-prod-grants.mjs

LabelLayerStatusPath
public data healthy supabase/migrations/035_audit_trail.sql
AS data healthy supabase/migrations/046_rls_auto_enable.sql

LabelLayerStatusPath
127.0.0.1 network healthy scripts/dev/seed-demo-r32.sh
192.0.2.1 network healthy scripts/alerts/test-telegram-format.js

LabelLayerStatusPath
vps::azure hardware healthy supabase/config.toml
vps::aws hardware healthy supabase/config.toml

LabelLayerStatusPath
danieloda__world-cup-2026 software healthy /data/fable5_failed_archive/danieloda__world-cup-2026
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/154ec5f9-9d53-4d07-a806-ecb0643e2689/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/154ec5f9-9d53-4d07-a806-ecb0643e2689/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.