jd-opensource/OxyGent

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

Scan timing: clone 2.91s · analysis 8.19s · 17.8 MB · GitHub API rate-limit (preflight)

https://github.com/jd-opensource/OxyGent · scanned 2026-05-31 01:24 UTC (5 days, 8 hours ago) · 10 languages

707 findings (257 legacy + 450 scanner) 61st percentile · Python · medium (20-100K LoC) Scanner says 57 (higher by 6)

File as issue Image v2 schema

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days, 8 hours ago · v2 · 482 findings from 2 sources. Findings combine the legacy security pipeline AND the multi-layer engine (atlas, wiring, flows, ranked) AND verified AI agent contributions.

JSON

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	40.0	0.15	6.00
`security_score`	34.2	0.25	8.55
`testing_score`	93.0	0.20	18.60
`documentation_score`	100.0	0.15	15.00
`practices_score`	77.0	0.15	11.55
`code_quality`	30.6	0.10	3.06
Overall		1.00	62.8

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 2 High 249 Medium 18 Low 173 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Legacy 257 9-layer 225 Crowd 0 Layer: Security 94 Quality 246 Software 77 Frontend 11 Cicd 4 Api 50

Exclude dismissed / FP Exclude test files

Last 2 scans of this repo. Each new scan persists a full payload — historical comparison is exact, not lossy.

May 14 09:28

May 31 01:29

Diff unavailable: ValidationError: 8 validation errors for ScanResult score.by_layer.`Layer.API`.[key] Input should be 'software', 'api', 'data', 'network', 'hardware', 'frontend', 'security', 'cicd' or 'quality' [type=enum, input_value='Layer.API', input_type=str] For further information visit https://errors.pydantic.dev/2.13/v/enum score.by_layer.`Layer.CICD`.[key] Input should be 'software', 'api', 'data', 'network', 'hardware', 'frontend', 'security', 'cicd' or 'quality' [type=enum, input_value='Layer.CICD', input_type=str] For further information visit https://errors.pydantic.dev/2.13/v/enum score.by_layer.`Layer.DATA`.[key] Input should be 'software', 'api', 'data', 'network', 'hardware', 'frontend', 'security', 'cicd' or 'quality' [type=enum, input_value='Layer.DATA', input_type=str] For further information visit https://errors.pydantic.dev/2.13/v/enum score.by_layer.`Layer.NETWORK`.[key] Input should be 'software', 'api', 'data', 'network', 'hardware', 'frontend', 'security', 'cicd' or 'quality' [type=enum, input_value='Layer.NETWORK', input_type=str] For further information visit https://errors.pydantic.dev/2.13/v/enum score.by_layer.`Layer.QUALITY`.[key] Input should be 'software', 'api', 'data', 'network', 'hardware', 'frontend', 'security', 'cicd' or 'quality' [type=enum, input_value='Layer.QUALITY', input_type=str] For further information visit https://errors.pydantic.dev/2.13/v/enum score.by_layer.`Layer.FRONTEND`.[key] Input should be 'software', 'api', 'data', 'network', 'hardware', 'frontend', 'security', 'cicd' or 'quality' [type=enum, input_value='Layer.FRONTEND', input_type=str] For further information visit https://errors.pydantic.dev/2.13/v/enum score.by_layer.`Layer.SECURITY`.[key] Input should be 'software', 'api', 'data', 'network', 'hardware', 'frontend', 'security', 'cicd' or 'quality' [type=enum, input_value='Layer.SECURITY', input_type=str] For further information visit https://errors.pydantic.dev/2.13/v/enum score.by_layer.`Layer.SOFTWARE`.[key] Input should be 'software', 'api', 'data', 'network', 'hardware', 'frontend', 'security', 'cicd' or 'quality' [type=enum, input_value='Layer.SOFTWARE', input_type=str] For further information visit https://errors.pydantic.dev/2.13/v/enum

v#	ID	Status	Score	Gaps	Nodes	Commit	Started
v	`scan_c4863fba7676`	ok	56.9	225	4381	`8abf0fd`	May 31 01:29
v	`scan_29a6fcd0ccd3`	ok	56.7	225	3272	`de32cb7`	May 14 09:28

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/265b0750-c349-4696-b5c2-85ab2c95b0b9/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/265b0750-c349-4696-b5c2-85ab2c95b0b9/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.