https://github.com/mozilla/pdf.js
· scanned 2026-06-05 11:07 UTC (5 days, 13 hours ago)
· 10 languages
574 raw signals (46 security + 528 graph) 11/13 scanners ran 43rd percentile · Javascript · large (100-500K LoC) System graph score 83 (lower by 9)
Last scanned 5 days, 13 hours ago · v2 · 275 actionable findings from 2 signal sources. 34 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.
| Component | Sub-score | Weight | Contribution |
|---|---|---|---|
structure_score |
100.0 | 0.15 | 15.00 |
security_score |
100.0 | 0.25 | 25.00 |
testing_score |
44.0 | 0.20 | 8.80 |
documentation_score |
62.0 | 0.15 | 9.30 |
practices_score |
69.0 | 0.15 | 10.35 |
code_quality |
50.0 | 0.10 | 5.00 |
| Overall | 1.00 | 73.5 |
All 3233 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.
| Label | Layer | Status | Path |
|---|---|---|---|
OpenJPEG |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:OpenJPEG |
quit_ |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:quit_ |
instantiate |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:instantiate |
i |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:i |
s |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:s |
Zc |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:Zc |
ib |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:ib |
eb |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:eb |
pc |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:pc |
sb |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:sb |
sa |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:sa |
updateMemoryViews |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:updateMemoryV… |
findWasmBinary |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:findWasmBinary |
__abort_js |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:__abort_js |
__emscripten_runtime_keepalive_clear |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:__emscripten_… |
keepRuntimeAlive |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:keepRuntimeAl… |
exitJS |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:exitJS |
maybeExit |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:maybeExit |
_emscripten_get_now |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:_emscripten_g… |
__setitimer_js |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:__setitimer_js |
_copy_pixels_1 |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:_copy_pixels_1 |
alignMemory |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:alignMemory |
pages |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:pages |
getExecutableName |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:getExecutable… |
getEnvStrings |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:getEnvStrings |
stringToUTF8Array |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:stringToUTF8A… |
stringToUTF8 |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:stringToUTF8 |
_environ_get |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:_environ_get |
_environ_sizes_get |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:_environ_size… |
convertI32PairToI53Checked |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:convertI32Pai… |
_fd_seek |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:_fd_seek |
findStringEnd |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:findStringEnd |
UTF8ArrayToString |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:UTF8ArrayToSt… |
printChar |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:printChar |
UTF8ToString |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:UTF8ToString |
_fd_write |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:_fd_write |
_gray_to_rgba |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:_gray_to_rgba |
assignWasmExports |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:assignWasmExp… |
run |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:run |
doRun |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:doRun |
OpenJPEG |
software | healthy | external/openjpeg/openjpeg.js:OpenJPEG |
quit_ |
software | healthy | external/openjpeg/openjpeg.js:quit_ |
locateFile |
software | healthy | external/openjpeg/openjpeg.js:locateFile |
updateMemoryViews |
software | healthy | external/openjpeg/openjpeg.js:updateMemoryViews |
findWasmBinary |
software | healthy | external/openjpeg/openjpeg.js:findWasmBinary |
getWasmBinary |
software | healthy | external/openjpeg/openjpeg.js:getWasmBinary |
instantiateArrayBuffer |
software | healthy | external/openjpeg/openjpeg.js:instantiateArrayBuffer |
instantiateAsync |
software | healthy | external/openjpeg/openjpeg.js:instantiateAsync |
createWasm |
software | healthy | external/openjpeg/openjpeg.js:createWasm |
__abort_js |
software | healthy | external/openjpeg/openjpeg.js:__abort_js |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
EmscriptenEH |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js:EmscriptenEH |
EmscriptenEH |
software | healthy | external/openjpeg/openjpeg.js:EmscriptenEH |
C |
software | healthy | external/builder/fixtures_babel/deadcode.js:C |
A |
software | healthy | external/builder/fixtures_babel/constructors.js:A |
B |
software | healthy | external/builder/fixtures_babel/constructors.js:B |
C |
software | healthy | external/builder/fixtures_babel/constructors.js:C |
D |
software | healthy | external/builder/fixtures_babel/constructors.js:D |
E |
software | healthy | external/builder/fixtures_babel/constructors.js:E |
F |
software | healthy | external/builder/fixtures_babel/constructors.js:F |
G |
software | healthy | external/builder/fixtures_babel/constructors.js:G |
A |
software | healthy | external/builder/fixtures_babel/staticblock-expected.js:A |
A |
software | healthy | external/builder/fixtures_babel/staticblock.js:A |
A |
software | healthy | external/builder/fixtures_babel/constructors-expected.js:A |
B |
software | healthy | external/builder/fixtures_babel/constructors-expected.js:B |
C |
software | healthy | external/builder/fixtures_babel/constructors-expected.js:C |
D |
software | healthy | external/builder/fixtures_babel/constructors-expected.js:D |
E |
software | healthy | external/builder/fixtures_babel/constructors-expected.js:E |
F |
software | healthy | external/builder/fixtures_babel/constructors-expected.js:F |
G |
software | healthy | external/builder/fixtures_babel/constructors-expected.js:G |
C |
software | healthy | external/builder/fixtures_babel/deadcode-expected.js:C |
EmscriptenEH |
software | healthy | external/jbig2/jbig2_nowasm_fallback.js:EmscriptenEH |
ExceptionInfo |
software | healthy | external/jbig2/jbig2_nowasm_fallback.js:ExceptionInfo |
QCMS |
software | healthy | external/qcms/qcms_utils.js:QCMS |
Rasterize |
software | healthy | test/driver.js:Rasterize |
Driver |
software | healthy | test/driver.js:Driver |
MainTest |
software | healthy | test/types/legacy.ts:MainTest |
MainTest |
software | healthy | test/types/modern.ts:MainTest |
MyParser |
software | healthy | test/unit/xml_spec.js:MyParser |
extends |
software | healthy | test/unit/app_options_spec.js:extends |
MockLinkService |
software | healthy | test/unit/pdf_find_controller_spec.js:MockLinkService |
extends |
software | healthy | test/unit/pdf_find_controller_spec.js:extends |
DerivedException |
software | healthy | test/unit/util_spec.js:DerivedException |
PDFManagerMock |
software | healthy | test/unit/annotation_spec.js:PDFManagerMock |
HandlerMock |
software | healthy | test/unit/annotation_spec.js:HandlerMock |
to |
software | healthy | test/unit/bidi_spec.js:to |
DefaultFileReaderFactory |
software | healthy | test/unit/test_utils.js:DefaultFileReaderFactory |
XRefMock |
software | healthy | test/unit/test_utils.js:XRefMock |
TestPdfsServer |
software | healthy | test/unit/test_utils.js:TestPdfsServer |
StreamSinkMock |
software | healthy | test/unit/evaluator_spec.js:StreamSinkMock |
XfaLayerBuilder |
software | healthy | web/xfa_layer_builder.js:XfaLayerBuilder |
BasePDFPageView |
software | healthy | web/base_pdf_page_view.js:BasePDFPageView |
is |
software | healthy | web/base_pdf_page_view.js:is |
definitions |
software | healthy | web/pdf_find_controller.js:definitions |
PDFFindController |
software | healthy | web/pdf_find_controller.js:PDFFindController |
DownloadManager |
software | healthy | web/chromecom.js:DownloadManager |
Preferences |
software | healthy | web/chromecom.js:Preferences |
ExternalServices |
software | healthy | web/chromecom.js:ExternalServices |
MLManager |
software | healthy | web/chromecom.js:MLManager |
PDFPageView |
software | healthy | web/pdf_page_view.js:PDFPageView |
ViewHistory |
software | healthy | web/view_history.js:ViewHistory |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
.svglintrc.js |
software | warning | .svglintrc.js |
.mcp.json |
software | healthy | .mcp.json |
jsdoc.json |
software | healthy | jsdoc.json |
README.md |
software | healthy | README.md |
CLAUDE.md |
software | healthy | CLAUDE.md |
package.json |
software | healthy | package.json |
.puppeteerrc.json |
software | healthy | .puppeteerrc.json |
stylelint-mozcentral.json |
software | healthy | stylelint-mozcentral.json |
package-lock.json |
software | healthy | package-lock.json |
tsconfig.json |
software | healthy | tsconfig.json |
CODE_OF_CONDUCT.md |
software | healthy | CODE_OF_CONDUCT.md |
AGENTS.md |
software | healthy | AGENTS.md |
codecov.yml |
software | healthy | codecov.yml |
README.md |
software | healthy | l10n/README.md |
README.md |
software | healthy | external/cmapscompress/README.md |
openjpeg_nowasm_fallback.js |
software | healthy | external/openjpeg/openjpeg_nowasm_fallback.js |
README.md |
software | healthy | external/openjpeg/README.md |
openjpeg.js |
software | healthy | external/openjpeg/openjpeg.js |
README.md |
software | healthy | external/standard_fonts/README.md |
undefined-define-expected.js |
software | warning | external/builder/fixtures/undefined-define-expected.js |
if-true-elif-false-else.js |
software | warning | external/builder/fixtures/if-true-elif-false-else.js |
elif.js |
software | warning | external/builder/fixtures/elif.js |
if-nested.css |
software | healthy | external/builder/fixtures/if-nested.css |
unsupported-ifdef.js |
software | warning | external/builder/fixtures/unsupported-ifdef.js |
expand.html |
software | healthy | external/builder/fixtures/expand.html |
if-nested-expected.css |
software | healthy | external/builder/fixtures/if-nested-expected.css |
undefined-define.js |
software | warning | external/builder/fixtures/undefined-define.js |
if-true-elif-false-else-expected.js |
software | warning | external/builder/fixtures/if-true-elif-false-else-expected.… |
expand-expected.html |
software | healthy | external/builder/fixtures/expand-expected.html |
elif-expected.js |
software | warning | external/builder/fixtures/elif-expected.js |
else-expected.js |
software | warning | external/builder/fixtures/else-expected.js |
else.js |
software | warning | external/builder/fixtures/else.js |
include-expected.html |
software | healthy | external/builder/fixtures/include-expected.html |
if-unclosed-expected.js |
software | warning | external/builder/fixtures/if-unclosed-expected.js |
if-unclosed.js |
software | warning | external/builder/fixtures/if-unclosed.js |
error-false-expected.js |
software | warning | external/builder/fixtures/error-false-expected.js |
error-false.js |
software | warning | external/builder/fixtures/error-false.js |
confusing-comment-expected.js |
software | warning | external/builder/fixtures/confusing-comment-expected.js |
if-nested-expected.js |
software | warning | external/builder/fixtures/if-nested-expected.js |
if-false-elif-false-else-expected.js |
software | warning | external/builder/fixtures/if-false-elif-false-else-expected… |
if-true-else.js |
software | warning | external/builder/fixtures/if-true-else.js |
if-false-elif-true-else.js |
software | warning | external/builder/fixtures/if-false-elif-true-else.js |
if-nested.js |
software | warning | external/builder/fixtures/if-nested.js |
css-comment.css |
software | healthy | external/builder/fixtures/css-comment.css |
include.html |
software | healthy | external/builder/fixtures/include.html |
error-expected.js |
software | warning | external/builder/fixtures/error-expected.js |
error.js |
software | warning | external/builder/fixtures/error.js |
js-comment-expected.js |
software | warning | external/builder/fixtures/js-comment-expected.js |
if-false-else.js |
software | warning | external/builder/fixtures/if-false-else.js |
include-non-existent.html |
software | healthy | external/builder/fixtures/include-non-existent.html |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
l10n |
software | healthy | l10n |
external |
software | healthy | external |
cmapscompress |
software | healthy | external/cmapscompress |
openjpeg |
software | healthy | external/openjpeg |
standard_fonts |
software | healthy | external/standard_fonts |
builder |
software | healthy | external/builder |
fixtures |
software | healthy | external/builder/fixtures |
fixtures_babel |
software | healthy | external/builder/fixtures_babel |
iccs |
software | healthy | external/iccs |
quickjs |
software | healthy | external/quickjs |
brotli |
software | healthy | external/brotli |
jbig2 |
software | healthy | external/jbig2 |
qcms |
software | healthy | external/qcms |
test |
software | healthy | test |
types |
software | healthy | test/types |
integration |
software | healthy | test/integration |
unit |
software | healthy | test/unit |
resources |
software | healthy | test/resources |
components |
software | healthy | test/components |
font |
software | healthy | test/font |
stats |
software | healthy | test/stats |
chromium |
software | healthy | test/chromium |
docs |
software | healthy | docs |
contents |
software | healthy | docs/contents |
getting_started |
software | healthy | docs/contents/getting_started |
api |
software | healthy | docs/contents/api |
js |
software | healthy | docs/contents/js |
css |
software | healthy | docs/contents/css |
examples |
software | healthy | docs/contents/examples |
extensions |
software | healthy | extensions |
chromium |
software | healthy | extensions/chromium |
options |
software | healthy | extensions/chromium/options |
web |
software | healthy | web |
internal |
software | healthy | web/internal |
examples |
software | healthy | examples |
node |
software | healthy | examples/node |
pdf2png |
software | healthy | examples/node/pdf2png |
image_decoders |
software | healthy | examples/image_decoders |
learning |
software | healthy | examples/learning |
components |
software | healthy | examples/components |
webpack |
software | healthy | examples/webpack |
mobile-viewer |
software | healthy | examples/mobile-viewer |
text-only |
software | healthy | examples/text-only |
.github |
software | healthy | .github |
ISSUE_TEMPLATE |
software | healthy | .github/ISSUE_TEMPLATE |
workflows |
software | healthy | .github/workflows |
src |
software | healthy | src |
display |
software | healthy | src/display |
editor |
software | healthy | src/display/editor |
drawers |
software | healthy | src/display/editor/drawers |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
4.0.102.0 |
network | healthy | test/unit/metadata_spec.js |
127.0.0.1 |
network | healthy | test/unit/test_utils.js |
12.3.2.2 |
network | healthy | web/pdf_viewer.js |
8.9.5.3 |
network | healthy | src/display/canvas.js |
8.7.3.1 |
network | healthy | src/display/pattern_helper.js |
7.6.3.2 |
network | healthy | src/shared/util.js |
12.6.4.7 |
network | healthy | src/shared/util.js |
9.6.6.2 |
network | healthy | src/core/fonts_utils.js |
11.6.5.2 |
network | healthy | src/core/evaluator.js |
9.6.6.1 |
network | healthy | src/core/evaluator.js |
7.5.8.3 |
network | healthy | src/core/writer.js |
12.5.6.10 |
network | healthy | src/core/annotation.js |
12.7.3.3 |
network | healthy | src/core/annotation.js |
12.5.6.4 |
network | healthy | src/core/annotation.js |
12.5.6.13 |
network | healthy | src/core/annotation.js |
7.9.2.2 |
network | healthy | src/core/string_utils.js |
9.6.6.4 |
network | healthy | src/core/fonts.js |
7.3.4.3 |
network | healthy | src/core/parser.js |
9.7.6.2 |
network | healthy | src/core/cmap.js |
10.1.1.364 |
network | healthy | src/core/xfa/bind.js |
| Label | Layer | Status | Path |
|---|---|---|---|
test |
cicd | healthy | .github/workflows/coverage_browser_tests.yml |
analyze |
cicd | healthy | .github/workflows/codeql.yml |
lint |
cicd | healthy | .github/workflows/lint.yml |
test |
cicd | healthy | .github/workflows/types_tests.yml |
test |
cicd | healthy | .github/workflows/unit_tests.yml |
build |
cicd | healthy | .github/workflows/publish_website.yml |
deploy |
cicd | healthy | .github/workflows/publish_website.yml |
test |
cicd | healthy | .github/workflows/integration_tests.yml |
notify |
cicd | healthy | .github/workflows/notify-pdf-sync.yml |
test |
cicd | healthy | .github/workflows/ci.yml |
update-locales |
cicd | healthy | .github/workflows/update_locales.yml |
test |
cicd | healthy | .github/workflows/prefs_tests.yml |
publish |
cicd | healthy | .github/workflows/publish_release.yml |
lint |
cicd | healthy | .github/workflows/fluent_linter.yml |
test |
cicd | healthy | .github/workflows/font_tests.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
gha::coverage_browser_tests |
cicd | healthy | .github/workflows/coverage_browser_tests.yml |
gha::codeql |
cicd | healthy | .github/workflows/codeql.yml |
gha::lint |
cicd | healthy | .github/workflows/lint.yml |
gha::types_tests |
cicd | healthy | .github/workflows/types_tests.yml |
gha::unit_tests |
cicd | healthy | .github/workflows/unit_tests.yml |
gha::publish_website |
cicd | healthy | .github/workflows/publish_website.yml |
gha::integration_tests |
cicd | healthy | .github/workflows/integration_tests.yml |
gha::notify-pdf-sync |
cicd | healthy | .github/workflows/notify-pdf-sync.yml |
gha::ci |
cicd | healthy | .github/workflows/ci.yml |
gha::update_locales |
cicd | healthy | .github/workflows/update_locales.yml |
gha::prefs_tests |
cicd | healthy | .github/workflows/prefs_tests.yml |
gha::publish_release |
cicd | healthy | .github/workflows/publish_release.yml |
gha::fluent_linter |
cicd | healthy | .github/workflows/fluent_linter.yml |
gha::font_tests |
cicd | healthy | .github/workflows/font_tests.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
password_literal::test/unit/api_spec.js |
security | healthy | test/unit/api_spec.js |
password_literal::test/unit/api_spec.js |
security | healthy | test/unit/api_spec.js |
password_literal::test/unit/api_spec.js |
security | healthy | test/unit/api_spec.js |
password_literal::test/unit/api_spec.js |
security | healthy | test/unit/api_spec.js |
password_literal::test/unit/api_spec.js |
security | healthy | test/unit/api_spec.js |
password_literal::test/unit/api_spec.js |
security | healthy | test/unit/api_spec.js |
password_literal::test/unit/api_spec.js |
security | healthy | test/unit/api_spec.js |
password_literal::web/internal/debugger.js |
security | healthy | web/internal/debugger.js |
| Label | Layer | Status | Path |
|---|---|---|---|
CODECOV_TOKEN |
cicd | healthy | — |
CLIENT_ID |
cicd | healthy | — |
APP_PRIVATE_KEY |
cicd | healthy | — |
| Label | Layer | Status | Path |
|---|---|---|---|
repobility-clone-jaw84nu6 |
software | healthy | /tmp/repobility-clone-jaw84nu6 |
| Label | Layer | Status | Path |
|---|---|---|---|
migration.js |
data | healthy | extensions/chromium/options/migration.js |
| Label | Layer | Status | Path |
|---|---|---|---|
gpu (detected) |
hardware | healthy | web/internal/page_view.js |
This page is publicly accessible at:
https://repobility.com/scan/2f74ab68-f443-492b-a9d6-3f4280151f6a/
To check status programmatically (no auth required):
curl -s https://repobility.com/api/v1/public/scan/2f74ab68-f443-492b-a9d6-3f4280151f6a/
Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.