Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

Scan timing: clone 2.29s · analysis 19.84s · 5.3 MB · GitHub API rate-limit (preflight)

SAP-samples/ui5-typescript-tutorial

https://github.com/SAP-samples/ui5-typescript-tutorial · scanned 2026-06-05 16:57 UTC (4 days, 23 hours ago) · 10 languages

222 raw signals (104 security + 118 graph) 31st percentile · Typescript · small (2-20K LoC) System graph score 94 (lower by 34)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 4 days, 23 hours ago · v2 · 126 actionable findings from 2 signal sources. 37 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
73.1
/100
Security checks
52
67 findings
System graph
94
66.7% cov · 59 findings
Critical
0
click to filter
Agents
6
0 votes
Crowd
0
reported
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 40.0 0.15 6.00
security_score 55.0 0.25 13.75
testing_score 85.0 0.20 17.00
documentation_score 64.0 0.15 9.60
practices_score 50.0 0.15 7.50
code_quality 62.6 0.10 6.26
Overall 1.00 60.1
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 0 High 21 Medium 42 Low 60 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 67 System graph 59 Crowd 0 Layer: Software 115 Quality 7 Api 1 Security 1 Cicd 2
Scan summary Quality grade C+ (60/100). Dimensions: security 55, maintainability 40. 104 findings (64 security). 3,026 lines analyzed.

Showing 123 of 126 actionable findings. 163 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

high Security checks software dependencies conf 0.88 braces: GHSA-grv7-fg5c-xmjg
Uncontrolled resource consumption in braces
generator/package-lock.json
high Security checks software dependencies conf 0.88 cross-spawn: GHSA-3xgq-45jj-v275
Regular Expression Denial of Service (ReDoS) in cross-spawn
generator/package-lock.json
high Security checks software dependencies conf 0.88 flatted: GHSA-25h7-pfq9-p65f
flatted vulnerable to unbounded recursion DoS in parse() revive phase
generator/package-lock.json
high Security checks software dependencies conf 0.88 flatted: GHSA-rf6f-7fwh-wjgh
Prototype Pollution via parse() in NodeJS flatted
generator/package-lock.json
high Security checks software dependencies conf 0.88 glob: GHSA-5j98-mcp5-4vw2
glob CLI: Command injection via -c/--cmd executes matches with shell:true
generator/package-lock.json
high Security checks software dependencies conf 0.88 ip: GHSA-2p57-rm9w-gvfp
ip SSRF improper categorization in isPublic
generator/package-lock.json
high Security checks software dependencies conf 0.88 lodash: GHSA-r5fr-rjxr-66jc
lodash vulnerable to Code Injection via `_.template` imports key names
generator/package-lock.json
high Security checks software dependencies conf 0.88 minimatch: GHSA-23c5-xmqv-rm74
minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions
generator/package-lock.json
high Security checks software dependencies conf 0.88 minimatch: GHSA-3ppc-4f35-3m26
minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern
generator/package-lock.json
high Security checks software dependencies conf 0.88 minimatch: GHSA-7r86-cg39-jmmj
minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments
generator/package-lock.json
high Security checks software dependencies conf 0.88 path-to-regexp: GHSA-9wv6-86v2-598j
path-to-regexp outputs backtracking regular expressions
generator/package-lock.json
high Security checks software dependencies conf 0.88 picomatch: GHSA-c2c7-rcm5-vvqj
Picomatch has a ReDoS vulnerability via extglob quantifiers
generator/package-lock.json
high Security checks software dependencies conf 0.88 semver: GHSA-c2qf-rxjj-qqgw
semver vulnerable to Regular Expression Denial of Service
generator/package-lock.json
high Security checks software dependencies conf 0.88 2 occurrences tar: GHSA-34x7-hfp2-rc4v
node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal
2 files, 2 locations
exercises/ex1/com.myorg.myapp/package-lock.json
generator/package-lock.json
high Security checks software dependencies conf 0.88 2 occurrences tar: GHSA-83g3-92jg-28cx
Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction
2 files, 2 locations
exercises/ex1/com.myorg.myapp/package-lock.json
generator/package-lock.json
high Security checks software dependencies conf 0.88 2 occurrences tar: GHSA-8qq5-rm4j-mr97
node-tar is Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization
2 files, 2 locations
exercises/ex1/com.myorg.myapp/package-lock.json
generator/package-lock.json
high Security checks software dependencies conf 0.88 2 occurrences tar: GHSA-9ppj-qmqm-q256
node-tar Symlink Path Traversal via Drive-Relative Linkpath
2 files, 2 locations
exercises/ex1/com.myorg.myapp/package-lock.json
generator/package-lock.json
high Security checks software dependencies conf 0.88 2 occurrences tar: GHSA-qffp-2rhf-9h96
tar has Hardlink Path Traversal via Drive-Relative Linkpath
2 files, 2 locations
exercises/ex1/com.myorg.myapp/package-lock.json
generator/package-lock.json
high Security checks software dependencies conf 0.88 2 occurrences tar: GHSA-r6q2-hw4h-h46w
Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS
2 files, 2 locations
exercises/ex1/com.myorg.myapp/package-lock.json
generator/package-lock.json
high Security checks software dependencies conf 0.88 2 occurrences tmp: GHSA-ph9p-34f9-6g65
tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape
2 files, 2 locations
exercises/ex1/com.myorg.myapp/package-lock.json
generator/package-lock.json
high Security checks software dependencies conf 0.88 yeoman-environment: GHSA-vv9j-gjw2-j8wp
yeoman-environment Vulnerable to Arbitrary Package Installation without User Confirmation
generator/package-lock.json
medium Security checks software dependencies conf 0.88 @octokit/plugin-paginate-rest: GHSA-h5c3-5r3r-rr8q
@octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
generator/package-lock.json
medium Security checks software dependencies conf 0.88 @octokit/request-error: GHSA-xx4v-prfh-6cgc
@octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
generator/package-lock.json
medium Security checks software dependencies conf 0.88 @octokit/request: GHSA-rmvr-2pp2-xj38
@octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
generator/package-lock.json
medium Security checks software dependencies conf 0.88 ajv: GHSA-2g4f-4pwh-qvx6
ajv has ReDoS when using `$data` option
generator/package-lock.json
medium Security checks software dependencies conf 0.88 2 occurrences brace-expansion: GHSA-f886-m6hf-6m8v
brace-expansion: Zero-step sequence causes process hang and memory exhaustion
2 files, 2 locations
exercises/ex1/com.myorg.myapp/package-lock.json
generator/package-lock.json
medium Security checks software dependencies conf 0.88 ejs: GHSA-ghr5-ch3p-vcr6
ejs lacks certain pollution protection
generator/package-lock.json
medium Security checks software dependencies conf 0.88 fast-xml-parser: GHSA-gh4j-gqv2-49f6
fast-xml-parser XMLBuilder: XML Comment and CDATA Injection via Unescaped Delimiters
exercises/ex4/com.myorg.myapp/package-lock.json
medium Security checks software dependencies conf 0.88 js-yaml: GHSA-mh29-5h37-fv8m
js-yaml has prototype pollution in merge (<<)
generator/package-lock.json
medium Security checks software dependencies conf 0.88 lodash: GHSA-f23m-r3pf-42rh
lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`
generator/package-lock.json
medium Security checks software dependencies conf 0.88 lodash: GHSA-xxjr-mmjv-4gpg
Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions
generator/package-lock.json
medium Security checks software dependencies conf 0.88 micromatch: GHSA-952p-6rrq-rcjv
Regular Expression Denial of Service (ReDoS) in micromatch
generator/package-lock.json
medium Security checks software dependencies conf 0.90 npm package `@prettier/plugin-xml` is 1 major version(s) behind (2.2.0 -> 3.4.2)
`@prettier/plugin-xml` is pinned/resolved at 2.2.0 but the latest stable release on the npm registry is 3.4.2 (1 major version(s) behind). Outdated dependencies accumulate unpatched bugs and make future security upgrades harder. This is the version-currency signal Dependabot version-update PRs rais…
generator/package.json
medium Security checks software dependencies conf 0.90 npm package `chalk` is 3 major version(s) behind (2.4.2 -> 5.6.2)
`chalk` is pinned/resolved at 2.4.2 but the latest stable release on the npm registry is 5.6.2 (3 major version(s) behind). Outdated dependencies accumulate unpatched bugs and make future security upgrades harder. This is the version-currency signal Dependabot version-update PRs raise.
generator/package.json
medium Security checks software dependencies conf 0.90 npm package `glob` is 6 major version(s) behind (7.2.3 -> 13.0.6)
`glob` is pinned/resolved at 7.2.3 but the latest stable release on the npm registry is 13.0.6 (6 major version(s) behind). Outdated dependencies accumulate unpatched bugs and make future security upgrades harder. This is the version-currency signal Dependabot version-update PRs raise.
generator/package.json
medium Security checks software dependencies conf 0.90 npm package `husky` is 1 major version(s) behind (8.0.3 -> 9.1.7)
`husky` is pinned/resolved at 8.0.3 but the latest stable release on the npm registry is 9.1.7 (1 major version(s) behind). Outdated dependencies accumulate unpatched bugs and make future security upgrades harder. This is the version-currency signal Dependabot version-update PRs raise.
generator/package.json
medium Security checks software dependencies conf 0.90 npm package `karma-ui5-transpile` is 3 major version(s) behind (0.3.23 -> 3.6.4)
`karma-ui5-transpile` is pinned/resolved at 0.3.23 but the latest stable release on the npm registry is 3.6.4 (3 major version(s) behind). Outdated dependencies accumulate unpatched bugs and make future security upgrades harder. This is the version-currency signal Dependabot version-update PRs rais…
exercises/ex5/com.myorg.myapp/package.json
medium Security checks software dependencies conf 0.90 npm package `karma-ui5` is 1 major version(s) behind (3.0.3 -> 4.1.0)
`karma-ui5` is pinned/resolved at 3.0.3 but the latest stable release on the npm registry is 4.1.0 (1 major version(s) behind). Outdated dependencies accumulate unpatched bugs and make future security upgrades harder. This is the version-currency signal Dependabot version-update PRs raise.
exercises/ex5/com.myorg.myapp/package.json
medium Security checks software dependencies conf 0.90 npm package `lint-staged` is 4 major version(s) behind (13.2.2 -> 17.0.7)
`lint-staged` is pinned/resolved at 13.2.2 but the latest stable release on the npm registry is 17.0.7 (4 major version(s) behind). Outdated dependencies accumulate unpatched bugs and make future security upgrades harder. This is the version-currency signal Dependabot version-update PRs raise.
generator/package.json
medium Security checks software dependencies conf 0.90 npm package `package-json` is 2 major version(s) behind (8.1.1 -> 10.0.1)
`package-json` is pinned/resolved at 8.1.1 but the latest stable release on the npm registry is 10.0.1 (2 major version(s) behind). Outdated dependencies accumulate unpatched bugs and make future security upgrades harder. This is the version-currency signal Dependabot version-update PRs raise.
generator/package.json
medium Security checks software dependencies conf 0.90 npm package `prettier` is 1 major version(s) behind (2.8.8 -> 3.8.3)
`prettier` is pinned/resolved at 2.8.8 but the latest stable release on the npm registry is 3.8.3 (1 major version(s) behind). Outdated dependencies accumulate unpatched bugs and make future security upgrades harder. This is the version-currency signal Dependabot version-update PRs raise.
generator/package.json
medium Security checks software dependencies conf 0.90 npm package `pretty-quick` is 1 major version(s) behind (3.1.3 -> 4.2.2)
`pretty-quick` is pinned/resolved at 3.1.3 but the latest stable release on the npm registry is 4.2.2 (1 major version(s) behind). Outdated dependencies accumulate unpatched bugs and make future security upgrades harder. This is the version-currency signal Dependabot version-update PRs raise.
generator/package.json
medium Security checks software dependencies conf 0.90 npm package `rimraf` is 3 major version(s) behind (3.0.2 -> 6.1.3)
`rimraf` is pinned/resolved at 3.0.2 but the latest stable release on the npm registry is 6.1.3 (3 major version(s) behind). Outdated dependencies accumulate unpatched bugs and make future security upgrades harder. This is the version-currency signal Dependabot version-update PRs raise.
exercises/ex5/com.myorg.myapp/package.json
medium Security checks software dependencies conf 0.90 npm package `semver` is 2 major version(s) behind (5.7.1 -> 7.8.2)
`semver` is pinned/resolved at 5.7.1 but the latest stable release on the npm registry is 7.8.2 (2 major version(s) behind). Outdated dependencies accumulate unpatched bugs and make future security upgrades harder. This is the version-currency signal Dependabot version-update PRs raise.
generator/package.json
medium Security checks software dependencies conf 0.90 npm package `ui5-middleware-livereload` is 3 major version(s) behind (0.8.4 -> 3.3.1)
`ui5-middleware-livereload` is pinned/resolved at 0.8.4 but the latest stable release on the npm registry is 3.3.1 (3 major version(s) behind). Outdated dependencies accumulate unpatched bugs and make future security upgrades harder. This is the version-currency signal Dependabot version-update PRs…
exercises/ex5/com.myorg.myapp/package.json
medium Security checks software dependencies conf 0.90 npm package `ui5-tooling-modules` is 3 major version(s) behind (0.9.12 -> 3.37.1)
`ui5-tooling-modules` is pinned/resolved at 0.9.12 but the latest stable release on the npm registry is 3.37.1 (3 major version(s) behind). Outdated dependencies accumulate unpatched bugs and make future security upgrades harder. This is the version-currency signal Dependabot version-update PRs rai…
exercises/ex5/com.myorg.myapp/package.json
medium Security checks software dependencies conf 0.90 npm package `ui5-tooling-transpile` is 3 major version(s) behind (0.7.18 -> 3.11.2)
`ui5-tooling-transpile` is pinned/resolved at 0.7.18 but the latest stable release on the npm registry is 3.11.2 (3 major version(s) behind). Outdated dependencies accumulate unpatched bugs and make future security upgrades harder. This is the version-currency signal Dependabot version-update PRs r…
exercises/ex5/com.myorg.myapp/package.json
medium Security checks software dependencies conf 0.90 npm package `upath` is 1 major version(s) behind (2.0.1 -> 3.0.7)
`upath` is pinned/resolved at 2.0.1 but the latest stable release on the npm registry is 3.0.7 (1 major version(s) behind). Outdated dependencies accumulate unpatched bugs and make future security upgrades harder. This is the version-currency signal Dependabot version-update PRs raise.
generator/package.json
medium Security checks software dependencies conf 0.90 npm package `yeoman-generator` is 3 major version(s) behind (5.9.0 -> 8.2.2)
`yeoman-generator` is pinned/resolved at 5.9.0 but the latest stable release on the npm registry is 8.2.2 (3 major version(s) behind). Outdated dependencies accumulate unpatched bugs and make future security upgrades harder. This is the version-currency signal Dependabot version-update PRs raise.
generator/package.json
medium Security checks software dependencies conf 0.90 npm package `yeoman-test` is 4 major version(s) behind (7.4.0 -> 11.5.2)
`yeoman-test` is pinned/resolved at 7.4.0 but the latest stable release on the npm registry is 11.5.2 (4 major version(s) behind). Outdated dependencies accumulate unpatched bugs and make future security upgrades harder. This is the version-currency signal Dependabot version-update PRs raise.
generator/package.json
medium Security checks software dependencies conf 0.90 npm package `yosay` is 1 major version(s) behind (2.0.2 -> 3.0.0)
`yosay` is pinned/resolved at 2.0.2 but the latest stable release on the npm registry is 3.0.0 (1 major version(s) behind). Outdated dependencies accumulate unpatched bugs and make future security upgrades harder. This is the version-currency signal Dependabot version-update PRs raise.
generator/package.json
medium Security checks software dependencies conf 0.88 picomatch: GHSA-3v7f-55p6-f55p
Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching
generator/package-lock.json
medium Security checks software dependencies conf 0.88 qs: GHSA-q8mj-m7cp-5q26
qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set
exercises/ex1/com.myorg.myapp/package-lock.json
medium Security checks software dependencies conf 0.88 tar: GHSA-f5x3-32g6-xq36
Denial of service while parsing a tar file due to lack of folders count validation
generator/package-lock.json
medium Security checks software dependencies conf 0.88 word-wrap: GHSA-j8xg-fqg3-53r7
word-wrap vulnerable to Regular Expression Denial of Service
generator/package-lock.json
medium Security checks software dependencies conf 0.88 yaml: GHSA-48c2-rrv3-qjmp
yaml is vulnerable to Stack Overflow via deeply nested YAML collections
generator/package-lock.json
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — exercises/ex2/com.myorg.myapp/webapp/controller/Main.controller.ts:23
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — exercises/ex3/com.myorg.myapp/webapp/controller/Main.controller.ts:34
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — exercises/ex4/com.myorg.myapp/webapp/controller/Main.controller.ts:37
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — exercises/ex5/com.myorg.myapp/webapp/controller/Main.controller.ts:37
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — exercises/ex6/com.myorg.myapp/webapp/controller/Main.controller.ts:37
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph security Coverage conf 1.00 No auth library detected
The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). Either auth lives in custom code, in a separate service, or is missing.
auth
medium System graph cicd CI/CD security conf 1.00 No CI/CD pipelines detected
No GitHub Actions, GitLab CI, or CircleCI configs found. Without CI you can't gate deploys on tests/lints.
CI/CD securityCoverage
low Security checks software dependencies conf 0.88 @tootallnate/once: GHSA-vpq2-c234-7xj6
@tootallnate/once vulnerable to Incorrect Control Flow Scoping
generator/package-lock.json
low Security checks software dependencies conf 0.88 2 occurrences brace-expansion: GHSA-v6h2-p8h4-qcjw
brace-expansion Regular Expression Denial of Service vulnerability
2 files, 2 locations
exercises/ex1/com.myorg.myapp/package-lock.json
generator/package-lock.json
low Security checks software dependencies conf 0.88 diff: GHSA-73rr-hh4g-fpgx
jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch
generator/package-lock.json
low Security checks quality Quality conf 0.60 27 occurrences Duplicated implementation block across source files
Duplicate implementation blocks are maintenance debt. Keep them visible, but they are not a high-severity defect unless the duplicated logic is security-sensitive or drifting.
12 files, 14 locations
exercises/ex5/com.myorg.myapp/webapp/controller/Main.controller.ts:1, 13 (2 hits)
exercises/ex6/com.myorg.myapp/webapp/controller/Main.controller.ts:1, 13 (2 hits)
exercises/ex2/com.myorg.myapp/.eslintrc.js:1
exercises/ex2/com.myorg.myapp/karma-ci-cov.conf.js:1
exercises/ex2/com.myorg.myapp/webapp/Component.ts:1
exercises/ex2/com.myorg.myapp/webapp/controller/BaseController.ts:4
exercises/ex3/com.myorg.myapp/.eslintrc.js:1
exercises/ex3/com.myorg.myapp/karma-ci-cov.conf.js:1
duplicationquality
low Security checks software dependencies conf 0.88 ip: GHSA-78xj-cgh5-2h22
NPM IP package incorrectly identifies some private IP addresses as public
generator/package-lock.json
low Security checks software dependencies conf 0.90 2 occurrences npm package `@openui5/types` is minor version(s) behind (1.142.0 -> 1.148.0)
`@openui5/types` is pinned/resolved at 1.142.0 but the latest stable release on the npm registry is 1.148.0 (minor version(s) behind). Outdated dependencies accumulate unpatched bugs and make future security upgrades harder. This is the version-currency signal Dependabot version-update PRs raise.
2 files, 2 locations
exercises/ex3/com.myorg.myapp/package.json
exercises/ex5/com.myorg.myapp/package.json
low Security checks software dependencies conf 0.90 npm package `@ui5/ts-interface-generator` is minor version(s) behind (0.7.0 -> 0.11.1)
`@ui5/ts-interface-generator` is pinned/resolved at 0.7.0 but the latest stable release on the npm registry is 0.11.1 (minor version(s) behind). Outdated dependencies accumulate unpatched bugs and make future security upgrades harder. This is the version-currency signal Dependabot version-update PR…
exercises/ex5/com.myorg.myapp/package.json
low Security checks software dependencies conf 0.90 npm package `prettier-plugin-properties` is minor version(s) behind (0.2.0 -> 0.3.1)
`prettier-plugin-properties` is pinned/resolved at 0.2.0 but the latest stable release on the npm registry is 0.3.1 (minor version(s) behind). Outdated dependencies accumulate unpatched bugs and make future security upgrades harder. This is the version-currency signal Dependabot version-update PRs …
generator/package.json
low Security checks software dependencies conf 0.88 tmp: GHSA-52f5-9888-hmc6
tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter
generator/package-lock.json
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex2/com.myorg.myapp/.eslintrc.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex2/com.myorg.myapp/karma-ci-cov.conf.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex2/com.myorg.myapp/karma-ci.conf.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex2/com.myorg.myapp/karma.conf.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex2/com.myorg.myapp/webapp/test/integration/HelloJourney.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex2/com.myorg.myapp/webapp/test/integration/opaTests.qunit.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex2/com.myorg.myapp/webapp/test/testsuite.qunit.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex2/com.myorg.myapp/webapp/test/unit/unitTests.qunit.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex3/com.myorg.myapp/.eslintrc.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex3/com.myorg.myapp/karma-ci-cov.conf.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex3/com.myorg.myapp/karma-ci.conf.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex3/com.myorg.myapp/karma.conf.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex3/com.myorg.myapp/webapp/model/formatter.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex3/com.myorg.myapp/webapp/model/models.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex3/com.myorg.myapp/webapp/test/integration/HelloJourney.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex3/com.myorg.myapp/webapp/test/integration/opaTests.qunit.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex3/com.myorg.myapp/webapp/test/testsuite.qunit.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex3/com.myorg.myapp/webapp/test/unit/unitTests.qunit.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex4/com.myorg.myapp/.eslintrc.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex4/com.myorg.myapp/karma-ci-cov.conf.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex4/com.myorg.myapp/karma-ci.conf.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex4/com.myorg.myapp/karma.conf.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex4/com.myorg.myapp/webapp/model/formatter.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex4/com.myorg.myapp/webapp/model/models.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex4/com.myorg.myapp/webapp/test/integration/HelloJourney.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex4/com.myorg.myapp/webapp/test/integration/opaTests.qunit.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex4/com.myorg.myapp/webapp/test/testsuite.qunit.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex4/com.myorg.myapp/webapp/test/unit/unitTests.qunit.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex5/com.myorg.myapp/.eslintrc.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex5/com.myorg.myapp/karma-ci-cov.conf.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex5/com.myorg.myapp/karma-ci.conf.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex5/com.myorg.myapp/karma.conf.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex5/com.myorg.myapp/webapp/control/WindDirection.gen.d.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex5/com.myorg.myapp/webapp/model/formatter.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex5/com.myorg.myapp/webapp/model/models.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex5/com.myorg.myapp/webapp/test/integration/HelloJourney.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex5/com.myorg.myapp/webapp/test/integration/opaTests.qunit.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex5/com.myorg.myapp/webapp/test/testsuite.qunit.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex5/com.myorg.myapp/webapp/test/unit/unitTests.qunit.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex6/com.myorg.myapp/.eslintrc.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex6/com.myorg.myapp/karma-ci-cov.conf.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex6/com.myorg.myapp/karma-ci.conf.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex6/com.myorg.myapp/karma.conf.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex6/com.myorg.myapp/webapp/control/WindDirection.gen.d.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex6/com.myorg.myapp/webapp/model/formatter.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex6/com.myorg.myapp/webapp/model/models.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex6/com.myorg.myapp/webapp/test/integration/HelloJourney.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex6/com.myorg.myapp/webapp/test/integration/opaTests.qunit.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex6/com.myorg.myapp/webapp/test/testsuite.qunit.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: exercises/ex6/com.myorg.myapp/webapp/test/unit/unitTests.qunit.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph cicd CI/CD security conf 1.00 package.json defines install-time lifecycle scripts
preinstall/install/postinstall/prepare scripts execute during dependency installation. Review them carefully for network calls, obfuscation, shell execution, or credential access.
generator/package.json CI/CD securitySupply chainNpm
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/553e70e2-2a65-4471-ab0e-262445d1d90d/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/553e70e2-2a65-4471-ab0e-262445d1d90d/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.