starship/starship

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

11 of your 58 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 9.6s · analysis 6.23s · 18.5 MB · GitHub API rate-limit (preflight)

https://github.com/starship/starship · scanned 2026-06-05 09:53 UTC (5 days, 17 hours ago) · 10 languages

77 raw signals (57 security + 20 graph) 42nd percentile · Rust · medium (20-100K LoC) System graph score 99 (lower by 33)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days, 17 hours ago · v2 · 22 actionable findings from 2 signal sources. 45 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

88.9% cov · 10 findings

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	85.0	0.15	12.75
`security_score`	87.9	0.25	21.98
`testing_score`	15.0	0.20	3.00
`documentation_score`	89.6	0.15	13.44
`practices_score`	75.0	0.15	11.25
`code_quality`	36.7	0.10	3.67
Overall		1.00	66.1

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 1 High 3 Medium 6 Low 6 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 12 System graph 10 Crowd 0 Layer: Software 3 Quality 11 Security 4 Cicd 2 Api 1 Frontend 1

Exclude dismissed / FP Exclude test files

All 1006 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`typos.toml`	software	healthy	`typos.toml`
`clippy.toml`	software	healthy	`clippy.toml`
`deny.toml`	software	healthy	`deny.toml`
`Cargo.toml`	software	healthy	`Cargo.toml`
`AI_POLICY.md`	software	healthy	`AI_POLICY.md`
`.rustfmt.toml`	software	healthy	`.rustfmt.toml`
`release-please-config.json`	software	healthy	`release-please-config.json`
`README.md`	software	healthy	`README.md`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`build.rs`	software	healthy	`build.rs`
`.dprint.json`	software	healthy	`.dprint.json`
`CODE_OF_CONDUCT.md`	software	healthy	`CODE_OF_CONDUCT.md`
`SECURITY.md`	software	healthy	`SECURITY.md`
`CHANGELOG.md`	software	healthy	`CHANGELOG.md`
`crowdin.yml`	software	healthy	`crowdin.yml`
`.codecov.yml`	software	healthy	`.codecov.yml`
`install.sh`	software	healthy	`install/install.sh`
`build_distribution_package.sh`	software	healthy	`install/macos_packages/build_distribution_package.sh`
`build_and_notarize.sh`	software	healthy	`install/macos_packages/build_and_notarize.sh`
`build_component_package.sh`	software	healthy	`install/macos_packages/build_component_package.sh`
`common.sh`	software	healthy	`install/macos_packages/common.sh`
`readme.md`	software	healthy	`install/macos_packages/readme.md`
`license.html`	software	healthy	`install/macos_packages/pkg_resources/English.lproj/license.…`
`welcome.html`	software	healthy	`install/macos_packages/pkg_resources/English.lproj/welcome.…`
`conclusion.html`	software	healthy	`install/macos_packages/pkg_resources/English.lproj/conclusi…`
`README.md`	software	healthy	`docs/README.md`
`package.json`	software	healthy	`docs/package.json`
`package-lock.json`	software	healthy	`docs/package-lock.json`
`README.md`	software	healthy	`docs/pt-PT/README.md`
`bracketed-segments.md`	software	healthy	`docs/pt-PT/presets/bracketed-segments.md`
`pure-preset.md`	software	healthy	`docs/pt-PT/presets/pure-preset.md`
`no-runtimes.md`	software	healthy	`docs/pt-PT/presets/no-runtimes.md`
`gruvbox-rainbow.md`	software	healthy	`docs/pt-PT/presets/gruvbox-rainbow.md`
`jetpack.md`	software	healthy	`docs/pt-PT/presets/jetpack.md`
`no-nerd-font.md`	software	healthy	`docs/pt-PT/presets/no-nerd-font.md`
`README.md`	software	healthy	`docs/pt-PT/presets/README.md`
`catppuccin-powerline.md`	software	healthy	`docs/pt-PT/presets/catppuccin-powerline.md`
`no-empty-icons.md`	software	healthy	`docs/pt-PT/presets/no-empty-icons.md`
`nerd-font.md`	software	healthy	`docs/pt-PT/presets/nerd-font.md`
`plain-text.md`	software	healthy	`docs/pt-PT/presets/plain-text.md`
`pastel-powerline.md`	software	healthy	`docs/pt-PT/presets/pastel-powerline.md`
`tokyo-night.md`	software	healthy	`docs/pt-PT/presets/tokyo-night.md`
`README.md`	software	healthy	`docs/pt-PT/config/README.md`
`README.md`	software	healthy	`docs/pt-PT/installing/README.md`
`README.md`	software	healthy	`docs/pt-PT/migrating-to-0.45.0/README.md`
`README.md`	software	healthy	`docs/pt-PT/advanced-config/README.md`
`README.md`	software	healthy	`docs/pt-PT/guide/README.md`
`README.md`	software	healthy	`docs/pt-PT/faq/README.md`
`README.md`	software	healthy	`docs/tr-TR/README.md`
`bracketed-segments.md`	software	healthy	`docs/tr-TR/presets/bracketed-segments.md`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`install`	software	healthy	`install`
`macos_packages`	software	healthy	`install/macos_packages`
`pkg_resources`	software	healthy	`install/macos_packages/pkg_resources`
`English.lproj`	software	healthy	`install/macos_packages/pkg_resources/English.lproj`
`docs`	software	healthy	`docs`
`pt-PT`	software	healthy	`docs/pt-PT`
`presets`	software	healthy	`docs/pt-PT/presets`
`config`	software	healthy	`docs/pt-PT/config`
`installing`	software	healthy	`docs/pt-PT/installing`
`migrating-to-0.45.0`	software	healthy	`docs/pt-PT/migrating-to-0.45.0`
`advanced-config`	software	healthy	`docs/pt-PT/advanced-config`
`guide`	software	healthy	`docs/pt-PT/guide`
`faq`	software	healthy	`docs/pt-PT/faq`
`tr-TR`	software	healthy	`docs/tr-TR`
`presets`	software	healthy	`docs/tr-TR/presets`
`config`	software	healthy	`docs/tr-TR/config`
`installing`	software	healthy	`docs/tr-TR/installing`
`migrating-to-0.45.0`	software	healthy	`docs/tr-TR/migrating-to-0.45.0`
`advanced-config`	software	healthy	`docs/tr-TR/advanced-config`
`guide`	software	healthy	`docs/tr-TR/guide`
`faq`	software	healthy	`docs/tr-TR/faq`
`presets`	software	healthy	`docs/presets`
`config`	software	healthy	`docs/config`
`installing`	software	healthy	`docs/installing`
`ru-RU`	software	healthy	`docs/ru-RU`
`presets`	software	healthy	`docs/ru-RU/presets`
`config`	software	healthy	`docs/ru-RU/config`
`installing`	software	healthy	`docs/ru-RU/installing`
`migrating-to-0.45.0`	software	healthy	`docs/ru-RU/migrating-to-0.45.0`
`advanced-config`	software	healthy	`docs/ru-RU/advanced-config`
`guide`	software	healthy	`docs/ru-RU/guide`
`faq`	software	healthy	`docs/ru-RU/faq`
`id-ID`	software	healthy	`docs/id-ID`
`presets`	software	healthy	`docs/id-ID/presets`
`config`	software	healthy	`docs/id-ID/config`
`installing`	software	healthy	`docs/id-ID/installing`
`migrating-to-0.45.0`	software	healthy	`docs/id-ID/migrating-to-0.45.0`
`advanced-config`	software	healthy	`docs/id-ID/advanced-config`
`guide`	software	healthy	`docs/id-ID/guide`
`faq`	software	healthy	`docs/id-ID/faq`
`migrating-to-0.45.0`	software	healthy	`docs/migrating-to-0.45.0`
`pl-PL`	software	healthy	`docs/pl-PL`
`presets`	software	healthy	`docs/pl-PL/presets`
`config`	software	healthy	`docs/pl-PL/config`
`installing`	software	healthy	`docs/pl-PL/installing`
`migrating-to-0.45.0`	software	healthy	`docs/pl-PL/migrating-to-0.45.0`
`advanced-config`	software	healthy	`docs/pl-PL/advanced-config`
`guide`	software	healthy	`docs/pl-PL/guide`
`faq`	software	healthy	`docs/pl-PL/faq`
`pt-BR`	software	healthy	`docs/pt-BR`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`trigger_crowdin_tm`	cicd	healthy	`.github/workflows/crowdin-pretranslate.yml`
`dprint`	cicd	healthy	`.github/workflows/format-workflow.yml`
`taplo`	cicd	healthy	`.github/workflows/format-workflow.yml`
`block-crowdin`	cicd	healthy	`.github/workflows/format-workflow.yml`
`vitepress`	cicd	healthy	`.github/workflows/format-workflow.yml`
`security_audit`	cicd	healthy	`.github/workflows/security-audit.yml`
`publish_docs`	cicd	healthy	`.github/workflows/publish-docs.yml`
`rustfmt`	cicd	healthy	`.github/workflows/workflow.yml`
`clippy`	cicd	healthy	`.github/workflows/workflow.yml`
`cargo_check`	cicd	healthy	`.github/workflows/workflow.yml`
`cargo_check_no_features`	cicd	healthy	`.github/workflows/workflow.yml`
`cargo_check_all_features`	cicd	healthy	`.github/workflows/workflow.yml`
`check_if_config_schema_up_to_date`	cicd	healthy	`.github/workflows/workflow.yml`
`test`	cicd	healthy	`.github/workflows/workflow.yml`
`shellcheck`	cicd	healthy	`.github/workflows/install-script.yml`
`shfmt`	cicd	healthy	`.github/workflows/install-script.yml`
`test_install_script`	cicd	healthy	`.github/workflows/install-script.yml`
`release_please`	cicd	healthy	`.github/workflows/release.yml`
`github_build`	cicd	healthy	`.github/workflows/release.yml`
`notarize_and_pkgbuild`	cicd	healthy	`.github/workflows/release.yml`
`upload_artifacts`	cicd	healthy	`.github/workflows/release.yml`
`cargo_publish`	cicd	healthy	`.github/workflows/release.yml`
`update_brew_formula`	cicd	healthy	`.github/workflows/release.yml`
`winget_update`	cicd	healthy	`.github/workflows/release.yml`
`choco_update`	cicd	healthy	`.github/workflows/release.yml`
`merge_crowdin_pr`	cicd	healthy	`.github/workflows/release.yml`
`publish_docs`	cicd	healthy	`.github/workflows/release.yml`
`typos`	cicd	healthy	`.github/workflows/spell-check.yml`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`install/macos_packages/build_component_package.sh`
`3.1.2.0`	network	healthy	`src/utils/mod.rs`
`8.40.0.25`	network	healthy	`src/modules/java.rs`
`8.0.222.0`	network	healthy	`src/modules/java.rs`
`11.0.4.0`	network	healthy	`src/modules/java.rs`
`19.2.0.1`	network	healthy	`src/modules/java.rs`
`192.0.2.0`	network	healthy	`src/modules/localip.rs`
`0.13.0.1`	network	healthy	`src/modules/haskell.rs`
`0.1.2.1`	network	healthy	`src/modules/haskell.rs`
`0.6.0.6`	network	healthy	`src/modules/haskell.rs`
`0.20.0.0`	network	healthy	`src/modules/haskell.rs`
`0.1.0.4`	network	healthy	`src/modules/haskell.rs`
`0.11.0.0`	network	healthy	`src/modules/haskell.rs`
`1.3.0.0`	network	healthy	`src/modules/haskell.rs`
`3.1.2.1`	network	healthy	`src/modules/haskell.rs`
`192.168.223.17`	network	healthy	`src/modules/username.rs`
`192.168.223.229`	network	healthy	`src/modules/username.rs`
`192.168.0.101`	network	healthy	`src/modules/username.rs`

Label	Layer	Status	Path
`APPLEDEV_PASSWORD`	cicd	healthy	`—`
`NETLIFY_AUTH_TOKEN`	cicd	healthy	`—`
`CHOCO_TOKEN`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`
`URL_ARM`	cicd	healthy	`—`
`APPLEDEV_ID_NAME`	cicd	healthy	`—`
`APPLEDEV_TEAM_ID`	cicd	healthy	`—`
`NETLIFY_SITE_ID`	cicd	healthy	`—`
`APPLEDEV_INSTALLERSIGNKEY_BASE64`	cicd	healthy	`—`
`CROWDIN_API_TOKEN`	cicd	healthy	`—`
`CODECOV_TOKEN`	cicd	healthy	`—`
`GH_PAT`	cicd	healthy	`—`
`APPLEDEV_SIGNKEY_PASS`	cicd	healthy	`—`
`URL_64`	cicd	healthy	`—`
`URL_32`	cicd	healthy	`—`
`SIGNPATH_API_TOKEN`	cicd	healthy	`—`
`APPLEDEV_APPSIGNKEY_BASE64`	cicd	healthy	`—`

Label	Layer	Status	Path
`gha::crowdin-pretranslate`	cicd	healthy	`.github/workflows/crowdin-pretranslate.yml`
`gha::format-workflow`	cicd	healthy	`.github/workflows/format-workflow.yml`
`gha::security-audit`	cicd	healthy	`.github/workflows/security-audit.yml`
`gha::publish-docs`	cicd	healthy	`.github/workflows/publish-docs.yml`
`gha::workflow`	cicd	healthy	`.github/workflows/workflow.yml`
`gha::install-script`	cicd	healthy	`.github/workflows/install-script.yml`
`gha::release`	cicd	healthy	`.github/workflows/release.yml`
`gha::spell-check`	cicd	healthy	`.github/workflows/spell-check.yml`

Label	Layer	Status	Path
`vps::aws`	hardware	healthy	`docs/public/presets/toml/jetpack.toml`
`vps::azure`	hardware	healthy	`docs/public/presets/toml/jetpack.toml`
`vps::gcp`	hardware	healthy	`docs/public/presets/toml/plain-text-symbols.toml`

Label	Layer	Status	Path
`repobility-clone-ltsox2zf`	software	healthy	`/tmp/repobility-clone-ltsox2zf`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/514fa833-692c-4c83-9ff4-eccaab0e6e4a/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/514fa833-692c-4c83-9ff4-eccaab0e6e4a/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

starship/starship

Complete repo analysis

file 50+

directory 50+

job 28

service 18

env_var 17

pipeline 8

vps 3

repo 1