https://github.com/PerryTS/perry
· scanned 2026-06-05 19:19 UTC (4 days, 15 hours ago)
· 10 languages
10278 raw signals (93 security + 10185 graph) 11/13 scanners ran 51st percentile · Rust · large (100-500K LoC) System graph score 44 (higher by 25)
Last scanned 4 days, 15 hours ago · v2 · 5042 actionable findings from 2 signal sources. 144 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.
| Component | Sub-score | Weight | Contribution |
|---|---|---|---|
structure_score |
60.0 | 0.15 | 9.00 |
security_score |
100.0 | 0.25 | 25.00 |
testing_score |
20.0 | 0.20 | 4.00 |
documentation_score |
76.0 | 0.15 | 11.40 |
practices_score |
82.0 | 0.15 | 12.30 |
code_quality |
67.0 | 0.10 | 6.70 |
| Overall | 1.00 | 68.4 |
Showing 4155 of 5042 actionable findings. 5186 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.
crates/perry-ext-mysql2/src/lib.rs:1114
crates/perry/src/commands/run/metadata.rs:236
crates/perry/src/commands/setup/ios.rs:349
crates/perry/src/commands/setup/macos.rs:157
Dockerfile:15, 37, 60 (3 hits)crates/perry-codegen-wasm/src/wasm_runtime.js:3401
Eval used
crates/perry/src/commands/explain.rs:102
Eval used
crates/perry/src/commands/install/scanner/obfuscation.rs:210
Eval used
crates/perry/src/commands/install/scanner/patterns.rs:233
Eval used
.dockerignore
CI/CD securitycontainers
Dockerfile:60
CI/CD securitycontainers
crates/perry-codegen-wasm/src/wasm_runtime.js:3761
crates/perry-codegen-js/src/web_runtime.js:671
.github/workflows/test.yml:55, 58, 95, 152, 251, 373, 509, 884, +3 more (12 hits).github/workflows/container-tests.yml:97, 170, 211, 253 (8 hits).github/workflows/benchmark.yml:41, 201, 298 (3 hits).github/workflows/node-core-subset.yml:37, 38 (3 hits).github/workflows/coverage.yml:33, 46 (2 hits).github/workflows/release-packages.yml:181, 712 (2 hits).github/workflows/feature-matrix.yml:36.github/workflows/npm-package-sweep.yml:42.github/workflows/benchmark.yml.github/workflows/docs.yml.github/workflows/release-hono-server.yml.github/workflows/release-packages.ymlcrates/perry-codegen-js/src/emit/exprs.rs:951
Weak hash
crates/perry-runtime/src/object/buffer_dispatch.rs:308
Weak hash
crates/perry-runtime/src/object/native_module.rs:6279
Weak hash
crates/perry-runtime/src/tls.rs:22
Weak hash
crates/perry-stdlib/src/crypto/kdf.rs:382
Weak hash
crates/perry-stdlib/src/tls.rs:46
Weak hash
crates/perry-stdlib/src/webcrypto/util.rs:491
Weak hash
crates/perry-stdlib/src/webcrypto/wrap.rs:651
Weak hash
winget-manifests/PerryTS.Perry.installer.yaml
Ports
winget-manifests/PerryTS.Perry.installer.yaml
Ports
.github/workflows/release-packages.yml
Ports
.github/workflows/release-packages.yml
Ports
.github/workflows/release-packages.yml
Ports
.github/workflows/release-packages.yml
Ports
benchmarks/json_polyglot/bench_field_access.go:44
benchmarks/json_polyglot/bench.go:43
Dockerfile:20, 40, 62 (3 hits)crates/perry-codegen-arkts/src/widgets/structure.rs:3, 21, 39 (3 hits)crates/perry-codegen-arkts/src/widgets/stack.rs:4, 29 (2 hits)crates/perry-codegen-wasm/src/emit/expr/classes.rs:29, 232 (2 hits)crates/perry-codegen-wasm/src/emit/expr/net_fetch_crypto.rs:54, 64 (2 hits)crates/perry-codegen-wasm/src/emit/expr/objects.rs:41, 320 (2 hits)crates/perry-codegen/src/collectors/refs.rs:181, 186 (2 hits)crates/perry-codegen/src/expr/binary.rs:1, 21 (2 hits)crates/perry-codegen-arkts/src/widgets/image.rs:25crates/perry-codegen-arkts/src/state_rewrite.rs:1
Dockerfile:37, 60 (2 hits)Dockerfile:15
containersPinned dependencies
.github/workflows/container-tests.yml:87, 100, 162, 173, 208, 214, 250, 256, +3 more (17 hits).github/workflows/test.yml:52, 329, 381, 453, 470, 773, 836, 953, +3 more (11 hits).github/workflows/benchmark.yml:44, 54, 183, 204, 283, 333, 355 (7 hits).github/workflows/release-packages.yml:583, 590, 975, 1134, 1307, 1335, 1543 (7 hits).github/workflows/node-core-subset.yml:34, 45, 108 (5 hits).github/workflows/coverage.yml:110, 119 (2 hits).github/workflows/feature-matrix.yml:44, 73 (2 hits).github/workflows/npm-package-sweep.yml:50, 89 (2 hits)repo-level (10 hits)repo-level (2 hits)scripts/compiler_output_harness/capture.py:456
scripts/native_abi_evidence_report.py:166
Showing first 300 of 4155. Refine filters or use the findings page for deep search.
This page is publicly accessible at:
https://repobility.com/scan/3745be9b-7f14-4c23-b30a-b764b629630e/
To check status programmatically (no auth required):
curl -s https://repobility.com/api/v1/public/scan/3745be9b-7f14-4c23-b30a-b764b629630e/
Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.