https://github.com/microsoft/PowerToys
· scanned 2026-06-05 04:55 UTC (12 hours, 41 minutes ago)
· 10 languages
202 findings (84 legacy + 118 scanner) 11/13 scanners ran Scanner says 92 (lower by 24)
Last scanned 12 hours, 41 minutes ago · v2 · 143 findings from 2 sources. Findings combine the legacy security pipeline AND the multi-layer engine (atlas, wiring, flows, ranked) AND verified AI agent contributions.
| Component | Sub-score | Weight | Contribution |
|---|---|---|---|
structure_score |
65.0 | 0.15 | 9.75 |
security_score |
100.0 | 0.25 | 25.00 |
testing_score |
12.0 | 0.20 | 2.40 |
documentation_score |
90.0 | 0.15 | 13.50 |
practices_score |
71.0 | 0.15 | 10.65 |
code_quality |
71.0 | 0.10 | 7.10 |
| Overall | 1.00 | 68.4 |
All 7371 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.
| Label | Layer | Status | Path |
|---|---|---|---|
DATA_AND_PRIVACY.md |
software | healthy | DATA_AND_PRIVACY.md |
README.md |
software | healthy | README.md |
CONTRIBUTING.md |
software | healthy | CONTRIBUTING.md |
COMMUNITY.md |
software | healthy | COMMUNITY.md |
vcpkg.json |
software | healthy | vcpkg.json |
SUPPORT.md |
software | healthy | SUPPORT.md |
vcpkg-configuration.json |
software | healthy | vcpkg-configuration.json |
CODE_OF_CONDUCT.md |
software | healthy | CODE_OF_CONDUCT.md |
SECURITY.md |
software | healthy | SECURITY.md |
NOTICE.md |
software | healthy | NOTICE.md |
AGENTS.md |
software | healthy | AGENTS.md |
unofficialInstallMethods.md |
software | healthy | doc/unofficialInstallMethods.md |
thirdPartyRunPlugins.md |
software | healthy | doc/thirdPartyRunPlugins.md |
README.md |
software | healthy | doc/gpo/README.md |
cli-conventions.md |
software | healthy | doc/devdocs/cli-conventions.md |
guidance.md |
software | healthy | doc/devdocs/guidance.md |
commands.md |
software | healthy | doc/devdocs/commands.md |
akaLinks.md |
software | healthy | doc/devdocs/akaLinks.md |
events.md |
software | healthy | doc/devdocs/events.md |
logging.md |
software | healthy | doc/devdocs/logging.md |
run-as-admin-detection.md |
software | healthy | doc/devdocs/run-as-admin-detection.md |
embedded-msix.md |
software | healthy | doc/devdocs/embedded-msix.md |
disk-usage-footprint.md |
software | healthy | doc/devdocs/disk-usage-footprint.md |
readme.md |
software | healthy | doc/devdocs/readme.md |
new-powertoy.md |
software | healthy | doc/devdocs/development/new-powertoy.md |
dev-with-vscode.md |
software | healthy | doc/devdocs/development/dev-with-vscode.md |
ui-tests.md |
software | healthy | doc/devdocs/development/ui-tests.md |
logging.md |
software | healthy | doc/devdocs/development/logging.md |
guidelines.md |
software | healthy | doc/devdocs/development/guidelines.md |
debugging.md |
software | healthy | doc/devdocs/development/debugging.md |
localization.md |
software | healthy | doc/devdocs/development/localization.md |
test-winget-install-locally.md |
software | healthy | doc/devdocs/development/test-winget-install-locally.md |
style.md |
software | healthy | doc/devdocs/development/style.md |
FilePreviewCommon.md |
software | healthy | doc/devdocs/common/FilePreviewCommon.md |
context-menus.md |
software | healthy | doc/devdocs/common/context-menus.md |
monaco-editor.md |
software | healthy | doc/devdocs/common/monaco-editor.md |
common.md |
software | healthy | doc/devdocs/common/common.md |
readme.md |
software | healthy | doc/devdocs/common/readme.md |
update-process.md |
software | healthy | doc/devdocs/processes/update-process.md |
release-process.md |
software | healthy | doc/devdocs/processes/release-process.md |
gpo.md |
software | healthy | doc/devdocs/processes/gpo.md |
workspaces.md |
software | healthy | doc/devdocs/modules/workspaces.md |
fancyzones.md |
software | healthy | doc/devdocs/modules/fancyzones.md |
interface.md |
software | healthy | doc/devdocs/modules/interface.md |
filelocksmith.md |
software | healthy | doc/devdocs/modules/filelocksmith.md |
environmentvariables.md |
software | healthy | doc/devdocs/modules/environmentvariables.md |
newplus.md |
software | healthy | doc/devdocs/modules/newplus.md |
lightswitch.md |
software | healthy | doc/devdocs/modules/lightswitch.md |
quickaccent.md |
software | healthy | doc/devdocs/modules/quickaccent.md |
fileexploreraddons.md |
software | healthy | doc/devdocs/modules/fileexploreraddons.md |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
doc |
software | healthy | doc |
gpo |
software | healthy | doc/gpo |
devdocs |
software | healthy | doc/devdocs |
development |
software | healthy | doc/devdocs/development |
common |
software | healthy | doc/devdocs/common |
processes |
software | healthy | doc/devdocs/processes |
modules |
software | healthy | doc/devdocs/modules |
powerdisplay |
software | healthy | doc/devdocs/modules/powerdisplay |
launcher |
software | healthy | doc/devdocs/modules/launcher |
plugins |
software | healthy | doc/devdocs/modules/launcher/plugins |
mouseutils |
software | healthy | doc/devdocs/modules/mouseutils |
keyboardmanager |
software | healthy | doc/devdocs/modules/keyboardmanager |
peek |
software | healthy | doc/devdocs/modules/peek |
tools |
software | healthy | doc/devdocs/tools |
core |
software | healthy | doc/devdocs/core |
settings |
software | healthy | doc/devdocs/core/settings |
dsc |
software | healthy | doc/dsc |
modules |
software | healthy | doc/dsc/modules |
planning |
software | healthy | doc/planning |
specs |
software | healthy | doc/specs |
tools |
software | healthy | tools |
project_template |
software | healthy | tools/project_template |
ModuleTemplate |
software | healthy | tools/project_template/ModuleTemplate |
CleanUp_tool |
software | healthy | tools/CleanUp_tool |
FancyZones_zonable_tester |
software | healthy | tools/FancyZones_zonable_tester |
mcp |
software | healthy | tools/mcp |
github-artifacts |
software | healthy | tools/mcp/github-artifacts |
BugReportTool |
software | healthy | tools/BugReportTool |
BugReportTool |
software | healthy | tools/BugReportTool/BugReportTool |
ZipTools |
software | healthy | tools/BugReportTool/BugReportTool/ZipTools |
module_loader |
software | healthy | tools/module_loader |
src |
software | healthy | tools/module_loader/src |
StylesReportTool |
software | healthy | tools/StylesReportTool |
MonitorReportTool |
software | healthy | tools/MonitorReportTool |
FancyZones_DrawLayoutTest |
software | healthy | tools/FancyZones_DrawLayoutTest |
FancyZone_HitTest |
software | healthy | tools/FancyZone_HitTest |
FancyZone_HitTest |
software | healthy | tools/FancyZone_HitTest/FancyZone_HitTest |
installer |
software | healthy | installer |
PowerToysSetupCustomActionsVNext |
software | healthy | installer/PowerToysSetupCustomActionsVNext |
PowerToysSetupVNext |
software | healthy | installer/PowerToysSetupVNext |
SilentFilesInUseBA |
software | healthy | installer/PowerToysSetupVNext/SilentFilesInUseBA |
deps |
software | healthy | deps |
vcpkg-overlays |
software | healthy | deps/vcpkg-overlays |
spdlog |
software | healthy | deps/vcpkg-overlays/spdlog |
.github |
software | healthy | .github |
ISSUE_TEMPLATE |
software | healthy | .github/ISSUE_TEMPLATE |
instructions |
software | healthy | .github/instructions |
scripts |
software | healthy | .github/scripts |
review-tools |
software | healthy | .github/review-tools |
agents |
software | healthy | .github/agents |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
extractImageUrls |
software | healthy | tools/mcp/github-artifacts/server.js:extractImageUrls |
extractZipUrls |
software | healthy | tools/mcp/github-artifacts/server.js:extractZipUrls |
fetchJson |
software | healthy | tools/mcp/github-artifacts/server.js:fetchJson |
downloadBytes |
software | healthy | tools/mcp/github-artifacts/server.js:downloadBytes |
downloadZipBytes |
software | healthy | tools/mcp/github-artifacts/server.js:downloadZipBytes |
tryFetch |
software | healthy | tools/mcp/github-artifacts/server.js:tryFetch |
contentType |
software | healthy | tools/mcp/github-artifacts/server.js:contentType |
execFileAsync |
software | healthy | tools/mcp/github-artifacts/server.js:execFileAsync |
extractZipToFolder |
software | healthy | tools/mcp/github-artifacts/server.js:extractZipToFolder |
listFilesRecursively |
software | healthy | tools/mcp/github-artifacts/server.js:listFilesRecursively |
pathExists |
software | healthy | tools/mcp/github-artifacts/server.js:pathExists |
fetchAllComments |
software | healthy | tools/mcp/github-artifacts/server.js:fetchAllComments |
fetchIssueAndComments |
software | healthy | tools/mcp/github-artifacts/server.js:fetchIssueAndComments |
buildBlobs |
software | healthy | tools/mcp/github-artifacts/server.js:buildBlobs |
requireEnv |
software | healthy | .github/scripts/telemetry-pr-check.js:requireEnv |
validateRepository |
software | healthy | .github/scripts/telemetry-pr-check.js:validateRepository |
readEventPayload |
software | healthy | .github/scripts/telemetry-pr-check.js:readEventPayload |
resolvePullNumber |
software | healthy | .github/scripts/telemetry-pr-check.js:resolvePullNumber |
isTelemetryPath |
software | healthy | .github/scripts/telemetry-pr-check.js:isTelemetryPath |
changedLinesFromPatch |
software | healthy | .github/scripts/telemetry-pr-check.js:changedLinesFromPatch |
hasTelemetryLineSignal |
software | healthy | .github/scripts/telemetry-pr-check.js:hasTelemetryLineSignal |
apiRequest |
software | healthy | .github/scripts/telemetry-pr-check.js:apiRequest |
getAllPullFiles |
software | healthy | .github/scripts/telemetry-pr-check.js:getAllPullFiles |
findExistingTelemetryComment |
software | healthy | .github/scripts/telemetry-pr-check.js:findExistingTelemetry… |
detectTelemetryChanges |
software | healthy | .github/scripts/telemetry-pr-check.js:detectTelemetryChanges |
hasDataAndPrivacyChange |
software | healthy | .github/scripts/telemetry-pr-check.js:hasDataAndPrivacyChan… |
filename |
software | healthy | .github/scripts/telemetry-pr-check.js:filename |
upsertPrComment |
software | healthy | .github/scripts/telemetry-pr-check.js:upsertPrComment |
main |
software | healthy | .github/scripts/telemetry-pr-check.js:main |
width |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
height |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
center_x |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
center_y |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
overlaps |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
__init__ |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
_detect_outer_edges |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
_collect_all_edges |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
_is_outer_edge |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
_get_opposite_edge_type |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
_ranges_overlap |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
calculate_wrap_position |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
_is_on_edge |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
_wrap_from_edge |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
_point_in_range |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
load_from_file |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
generate_all_configs |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
_single_monitor_configs |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
_two_monitor_configs |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
_three_monitor_configs |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
_four_monitor_configs |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
MonitorInfo |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
EdgeType |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
Edge |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
TestFailure |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
MonitorTopology |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
TestConfigGenerator |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
EdgeDetectionValidator |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
TestRunner |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l… |
TestResultAnalyzer |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/analyze_t… |
EdgeType |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/WrapSimul… |
WrapMode |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/WrapSimul… |
MonitorInfo |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/WrapSimul… |
MonitorEdge |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/WrapSimul… |
ProblemReason |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/WrapSimul… |
ProblemAnalysis |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/WrapSimul… |
EdgeSegment |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/WrapSimul… |
GapInfo |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/WrapSimul… |
CursorLogEntry |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/WrapSimul… |
MonitorTopology |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/WrapSimul… |
WrapSimulatorApp |
software | healthy | src/modules/MouseUtils/CursorWrap/CursorWrapTests/WrapSimul… |
y |
software | healthy | src/Monaco/monacoSRC/min/vs/loader.js:y |
m |
software | healthy | src/Monaco/monacoSRC/min/vs/loader.js:m |
p |
software | healthy | src/Monaco/monacoSRC/min/vs/loader.js:p |
r |
software | healthy | src/Monaco/monacoSRC/min/vs/loader.js:r |
c |
software | healthy | src/Monaco/monacoSRC/min/vs/loader.js:c |
names |
software | healthy | src/Monaco/monacoSRC/min/vs/language/html/htmlWorker.js:nam… |
applies |
software | healthy | src/Monaco/monacoSRC/min/vs/language/css/cssWorker.js:appli… |
t |
software | healthy | src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:t |
M |
software | healthy | src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:M |
R |
software | healthy | src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:R |
d |
software | healthy | src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:d |
_ |
software | healthy | src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:_ |
B |
software | healthy | src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:B |
z |
software | healthy | src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:z |
c |
software | healthy | src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:c |
i |
software | healthy | src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:i |
s |
software | healthy | src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:s |
l |
software | healthy | src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:l |
u |
software | healthy | src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:u |
f |
software | healthy | src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:f |
y |
software | healthy | src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:y |
w |
software | healthy | src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:w |
E |
software | healthy | src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:E |
S |
software | healthy | src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:S |
C |
software | healthy | src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:C |
p |
software | healthy | src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:p |
o |
software | healthy | src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:o |
L |
software | healthy | src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:L |
be |
software | healthy | src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:be |
_e |
software | healthy | src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:_e |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
spelling |
cicd | healthy | .github/workflows/spelling2.yml |
comment-push |
cicd | healthy | .github/workflows/spelling2.yml |
comment-pr |
cicd | healthy | .github/workflows/spelling2.yml |
update |
cicd | healthy | .github/workflows/spelling2.yml |
microsoft_store |
cicd | healthy | .github/workflows/msstore-submissions.yml |
dependency-review |
cicd | healthy | .github/workflows/dependency-review.yml |
deduplicate |
cicd | healthy | .github/workflows/automatic-issue-deduplication.yml |
label |
cicd | healthy | .github/workflows/auto-label-issues.yml |
winget |
cicd | healthy | .github/workflows/package-submissions.yml |
deduplicate |
cicd | healthy | .github/workflows/manual-batch-issue-deduplication.yml |
detect-telemetry-events |
cicd | healthy | .github/workflows/telemetry-pr-check.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
CHECK_SPELLING |
cicd | healthy | — |
AZURE_KEYVAULT_NAME |
cicd | healthy | — |
AZURE_CLIENT_ID |
cicd | healthy | — |
AZURE_SUBSCRIPTION_ID |
cicd | healthy | — |
PT_WINGET |
cicd | healthy | — |
AZURE_AUTH_CERT_NAME |
cicd | healthy | — |
GITHUB_TOKEN |
cicd | healthy | — |
AZURE_TENANT_ID |
cicd | healthy | — |
PRODUCT_ID |
cicd | healthy | — |
SELLER_ID |
cicd | healthy | — |
| Label | Layer | Status | Path |
|---|---|---|---|
gha::spelling2 |
cicd | healthy | .github/workflows/spelling2.yml |
gha::msstore-submissions |
cicd | healthy | .github/workflows/msstore-submissions.yml |
gha::dependency-review |
cicd | healthy | .github/workflows/dependency-review.yml |
gha::automatic-issue-deduplication |
cicd | healthy | .github/workflows/automatic-issue-deduplication.yml |
gha::auto-label-issues |
cicd | healthy | .github/workflows/auto-label-issues.yml |
gha::package-submissions |
cicd | healthy | .github/workflows/package-submissions.yml |
gha::manual-batch-issue-deduplication |
cicd | healthy | .github/workflows/manual-batch-issue-deduplication.yml |
gha::telemetry-pr-check |
cicd | healthy | .github/workflows/telemetry-pr-check.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
mysql |
data | healthy | src/Monaco/monaco_languages.json |
postgresql |
data | healthy | src/Monaco/monaco_languages.json |
postgres |
data | healthy | src/Monaco/monaco_languages.json |
redis |
data | healthy | src/Monaco/monaco_languages.json |
| Label | Layer | Status | Path |
|---|---|---|---|
vps::aws |
hardware | healthy | .github/workflows/spelling2.yml |
vps::azure |
hardware | healthy | .github/workflows/msstore-submissions.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
repobility-clone-qe1058sy |
software | healthy | /tmp/repobility-clone-qe1058sy |
| Label | Layer | Status | Path |
|---|---|---|---|
pubsub |
data | healthy | src/Monaco/monacoSRC/min/vs/basic-languages/redis/redis.js |
| Label | Layer | Status | Path |
|---|---|---|---|
envoy |
network | healthy | src/Monaco/monacoSRC/min/vs/editor/editor.main.nls.fr.js |
| Label | Layer | Status | Path |
|---|---|---|---|
gpu (detected) |
hardware | healthy | src/modules/ShortcutGuide/ShortcutGuide.Ui/Assets/ShortcutG… |
This page is publicly accessible at:
https://repobility.com/scan/5bbaf307-4009-4846-ae56-f38d6ab4b085/
To check status programmatically (no auth required):
curl -s https://repobility.com/api/v1/public/scan/5bbaf307-4009-4846-ae56-f38d6ab4b085/
Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.