Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
62 of your 92 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.
Upstream (GitHub) caused delay on this scan — not Repobility.
  • GitHub API rate-limited (HTTP 403) — preflight skipped, fell back to direct git clone.
  • Clone from GitHub took 136.12s for a 162.5 MB repo slow.
  • Repobility's analysis ran in 31.77s after the clone landed.

microsoft/PowerToys

https://github.com/microsoft/PowerToys · scanned 2026-06-05 04:55 UTC (12 hours, 41 minutes ago) · 10 languages

202 findings (84 legacy + 118 scanner) 11/13 scanners ran Scanner says 92 (lower by 24)

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 12 hours, 41 minutes ago · v2 · 143 findings from 2 sources. Findings combine the legacy security pipeline AND the multi-layer engine (atlas, wiring, flows, ranked) AND verified AI agent contributions.

JSON
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 65.0 0.15 9.75
security_score 100.0 0.25 25.00
testing_score 12.0 0.20 2.40
documentation_score 90.0 0.15 13.50
practices_score 71.0 0.15 10.65
code_quality 71.0 0.10 7.10
Overall 1.00 68.4
security_score may be inflated — optional security scanners were skipped on this fast scan
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all

All 7371 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
DATA_AND_PRIVACY.md software healthy DATA_AND_PRIVACY.md
README.md software healthy README.md
CONTRIBUTING.md software healthy CONTRIBUTING.md
COMMUNITY.md software healthy COMMUNITY.md
vcpkg.json software healthy vcpkg.json
SUPPORT.md software healthy SUPPORT.md
vcpkg-configuration.json software healthy vcpkg-configuration.json
CODE_OF_CONDUCT.md software healthy CODE_OF_CONDUCT.md
SECURITY.md software healthy SECURITY.md
NOTICE.md software healthy NOTICE.md
AGENTS.md software healthy AGENTS.md
unofficialInstallMethods.md software healthy doc/unofficialInstallMethods.md
thirdPartyRunPlugins.md software healthy doc/thirdPartyRunPlugins.md
README.md software healthy doc/gpo/README.md
cli-conventions.md software healthy doc/devdocs/cli-conventions.md
guidance.md software healthy doc/devdocs/guidance.md
commands.md software healthy doc/devdocs/commands.md
akaLinks.md software healthy doc/devdocs/akaLinks.md
events.md software healthy doc/devdocs/events.md
logging.md software healthy doc/devdocs/logging.md
run-as-admin-detection.md software healthy doc/devdocs/run-as-admin-detection.md
embedded-msix.md software healthy doc/devdocs/embedded-msix.md
disk-usage-footprint.md software healthy doc/devdocs/disk-usage-footprint.md
readme.md software healthy doc/devdocs/readme.md
new-powertoy.md software healthy doc/devdocs/development/new-powertoy.md
dev-with-vscode.md software healthy doc/devdocs/development/dev-with-vscode.md
ui-tests.md software healthy doc/devdocs/development/ui-tests.md
logging.md software healthy doc/devdocs/development/logging.md
guidelines.md software healthy doc/devdocs/development/guidelines.md
debugging.md software healthy doc/devdocs/development/debugging.md
localization.md software healthy doc/devdocs/development/localization.md
test-winget-install-locally.md software healthy doc/devdocs/development/test-winget-install-locally.md
style.md software healthy doc/devdocs/development/style.md
FilePreviewCommon.md software healthy doc/devdocs/common/FilePreviewCommon.md
context-menus.md software healthy doc/devdocs/common/context-menus.md
monaco-editor.md software healthy doc/devdocs/common/monaco-editor.md
common.md software healthy doc/devdocs/common/common.md
readme.md software healthy doc/devdocs/common/readme.md
update-process.md software healthy doc/devdocs/processes/update-process.md
release-process.md software healthy doc/devdocs/processes/release-process.md
gpo.md software healthy doc/devdocs/processes/gpo.md
workspaces.md software healthy doc/devdocs/modules/workspaces.md
fancyzones.md software healthy doc/devdocs/modules/fancyzones.md
interface.md software healthy doc/devdocs/modules/interface.md
filelocksmith.md software healthy doc/devdocs/modules/filelocksmith.md
environmentvariables.md software healthy doc/devdocs/modules/environmentvariables.md
newplus.md software healthy doc/devdocs/modules/newplus.md
lightswitch.md software healthy doc/devdocs/modules/lightswitch.md
quickaccent.md software healthy doc/devdocs/modules/quickaccent.md
fileexploreraddons.md software healthy doc/devdocs/modules/fileexploreraddons.md

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
doc software healthy doc
gpo software healthy doc/gpo
devdocs software healthy doc/devdocs
development software healthy doc/devdocs/development
common software healthy doc/devdocs/common
processes software healthy doc/devdocs/processes
modules software healthy doc/devdocs/modules
powerdisplay software healthy doc/devdocs/modules/powerdisplay
launcher software healthy doc/devdocs/modules/launcher
plugins software healthy doc/devdocs/modules/launcher/plugins
mouseutils software healthy doc/devdocs/modules/mouseutils
keyboardmanager software healthy doc/devdocs/modules/keyboardmanager
peek software healthy doc/devdocs/modules/peek
tools software healthy doc/devdocs/tools
core software healthy doc/devdocs/core
settings software healthy doc/devdocs/core/settings
dsc software healthy doc/dsc
modules software healthy doc/dsc/modules
planning software healthy doc/planning
specs software healthy doc/specs
tools software healthy tools
project_template software healthy tools/project_template
ModuleTemplate software healthy tools/project_template/ModuleTemplate
CleanUp_tool software healthy tools/CleanUp_tool
FancyZones_zonable_tester software healthy tools/FancyZones_zonable_tester
mcp software healthy tools/mcp
github-artifacts software healthy tools/mcp/github-artifacts
BugReportTool software healthy tools/BugReportTool
BugReportTool software healthy tools/BugReportTool/BugReportTool
ZipTools software healthy tools/BugReportTool/BugReportTool/ZipTools
module_loader software healthy tools/module_loader
src software healthy tools/module_loader/src
StylesReportTool software healthy tools/StylesReportTool
MonitorReportTool software healthy tools/MonitorReportTool
FancyZones_DrawLayoutTest software healthy tools/FancyZones_DrawLayoutTest
FancyZone_HitTest software healthy tools/FancyZone_HitTest
FancyZone_HitTest software healthy tools/FancyZone_HitTest/FancyZone_HitTest
installer software healthy installer
PowerToysSetupCustomActionsVNext software healthy installer/PowerToysSetupCustomActionsVNext
PowerToysSetupVNext software healthy installer/PowerToysSetupVNext
SilentFilesInUseBA software healthy installer/PowerToysSetupVNext/SilentFilesInUseBA
deps software healthy deps
vcpkg-overlays software healthy deps/vcpkg-overlays
spdlog software healthy deps/vcpkg-overlays/spdlog
.github software healthy .github
ISSUE_TEMPLATE software healthy .github/ISSUE_TEMPLATE
instructions software healthy .github/instructions
scripts software healthy .github/scripts
review-tools software healthy .github/review-tools
agents software healthy .github/agents

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
extractImageUrls software healthy tools/mcp/github-artifacts/server.js:extractImageUrls
extractZipUrls software healthy tools/mcp/github-artifacts/server.js:extractZipUrls
fetchJson software healthy tools/mcp/github-artifacts/server.js:fetchJson
downloadBytes software healthy tools/mcp/github-artifacts/server.js:downloadBytes
downloadZipBytes software healthy tools/mcp/github-artifacts/server.js:downloadZipBytes
tryFetch software healthy tools/mcp/github-artifacts/server.js:tryFetch
contentType software healthy tools/mcp/github-artifacts/server.js:contentType
execFileAsync software healthy tools/mcp/github-artifacts/server.js:execFileAsync
extractZipToFolder software healthy tools/mcp/github-artifacts/server.js:extractZipToFolder
listFilesRecursively software healthy tools/mcp/github-artifacts/server.js:listFilesRecursively
pathExists software healthy tools/mcp/github-artifacts/server.js:pathExists
fetchAllComments software healthy tools/mcp/github-artifacts/server.js:fetchAllComments
fetchIssueAndComments software healthy tools/mcp/github-artifacts/server.js:fetchIssueAndComments
buildBlobs software healthy tools/mcp/github-artifacts/server.js:buildBlobs
requireEnv software healthy .github/scripts/telemetry-pr-check.js:requireEnv
validateRepository software healthy .github/scripts/telemetry-pr-check.js:validateRepository
readEventPayload software healthy .github/scripts/telemetry-pr-check.js:readEventPayload
resolvePullNumber software healthy .github/scripts/telemetry-pr-check.js:resolvePullNumber
isTelemetryPath software healthy .github/scripts/telemetry-pr-check.js:isTelemetryPath
changedLinesFromPatch software healthy .github/scripts/telemetry-pr-check.js:changedLinesFromPatch
hasTelemetryLineSignal software healthy .github/scripts/telemetry-pr-check.js:hasTelemetryLineSignal
apiRequest software healthy .github/scripts/telemetry-pr-check.js:apiRequest
getAllPullFiles software healthy .github/scripts/telemetry-pr-check.js:getAllPullFiles
findExistingTelemetryComment software healthy .github/scripts/telemetry-pr-check.js:findExistingTelemetry…
detectTelemetryChanges software healthy .github/scripts/telemetry-pr-check.js:detectTelemetryChanges
hasDataAndPrivacyChange software healthy .github/scripts/telemetry-pr-check.js:hasDataAndPrivacyChan…
filename software healthy .github/scripts/telemetry-pr-check.js:filename
upsertPrComment software healthy .github/scripts/telemetry-pr-check.js:upsertPrComment
main software healthy .github/scripts/telemetry-pr-check.js:main
width software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
height software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
center_x software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
center_y software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
overlaps software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
__init__ software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
_detect_outer_edges software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
_collect_all_edges software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
_is_outer_edge software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
_get_opposite_edge_type software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
_ranges_overlap software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
calculate_wrap_position software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
_is_on_edge software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
_wrap_from_edge software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
_point_in_range software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
load_from_file software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
generate_all_configs software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
_single_monitor_configs software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
_two_monitor_configs software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
_three_monitor_configs software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
_four_monitor_configs software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
MonitorInfo software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
EdgeType software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
Edge software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
TestFailure software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
MonitorTopology software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
TestConfigGenerator software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
EdgeDetectionValidator software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
TestRunner software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/monitor_l…
TestResultAnalyzer software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/analyze_t…
EdgeType software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/WrapSimul…
WrapMode software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/WrapSimul…
MonitorInfo software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/WrapSimul…
MonitorEdge software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/WrapSimul…
ProblemReason software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/WrapSimul…
ProblemAnalysis software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/WrapSimul…
EdgeSegment software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/WrapSimul…
GapInfo software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/WrapSimul…
CursorLogEntry software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/WrapSimul…
MonitorTopology software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/WrapSimul…
WrapSimulatorApp software healthy src/modules/MouseUtils/CursorWrap/CursorWrapTests/WrapSimul…
y software healthy src/Monaco/monacoSRC/min/vs/loader.js:y
m software healthy src/Monaco/monacoSRC/min/vs/loader.js:m
p software healthy src/Monaco/monacoSRC/min/vs/loader.js:p
r software healthy src/Monaco/monacoSRC/min/vs/loader.js:r
c software healthy src/Monaco/monacoSRC/min/vs/loader.js:c
names software healthy src/Monaco/monacoSRC/min/vs/language/html/htmlWorker.js:nam…
applies software healthy src/Monaco/monacoSRC/min/vs/language/css/cssWorker.js:appli…
t software healthy src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:t
M software healthy src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:M
R software healthy src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:R
d software healthy src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:d
_ software healthy src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:_
B software healthy src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:B
z software healthy src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:z
c software healthy src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:c
i software healthy src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:i
s software healthy src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:s
l software healthy src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:l
u software healthy src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:u
f software healthy src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:f
y software healthy src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:y
w software healthy src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:w
E software healthy src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:E
S software healthy src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:S
C software healthy src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:C
p software healthy src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:p
o software healthy src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:o
L software healthy src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:L
be software healthy src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:be
_e software healthy src/Monaco/monacoSRC/min/vs/base/worker/workerMain.js:_e

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
spelling cicd healthy .github/workflows/spelling2.yml
comment-push cicd healthy .github/workflows/spelling2.yml
comment-pr cicd healthy .github/workflows/spelling2.yml
update cicd healthy .github/workflows/spelling2.yml
microsoft_store cicd healthy .github/workflows/msstore-submissions.yml
dependency-review cicd healthy .github/workflows/dependency-review.yml
deduplicate cicd healthy .github/workflows/automatic-issue-deduplication.yml
label cicd healthy .github/workflows/auto-label-issues.yml
winget cicd healthy .github/workflows/package-submissions.yml
deduplicate cicd healthy .github/workflows/manual-batch-issue-deduplication.yml
detect-telemetry-events cicd healthy .github/workflows/telemetry-pr-check.yml

LabelLayerStatusPath
CHECK_SPELLING cicd healthy
AZURE_KEYVAULT_NAME cicd healthy
AZURE_CLIENT_ID cicd healthy
AZURE_SUBSCRIPTION_ID cicd healthy
PT_WINGET cicd healthy
AZURE_AUTH_CERT_NAME cicd healthy
GITHUB_TOKEN cicd healthy
AZURE_TENANT_ID cicd healthy
PRODUCT_ID cicd healthy
SELLER_ID cicd healthy

LabelLayerStatusPath
gha::spelling2 cicd healthy .github/workflows/spelling2.yml
gha::msstore-submissions cicd healthy .github/workflows/msstore-submissions.yml
gha::dependency-review cicd healthy .github/workflows/dependency-review.yml
gha::automatic-issue-deduplication cicd healthy .github/workflows/automatic-issue-deduplication.yml
gha::auto-label-issues cicd healthy .github/workflows/auto-label-issues.yml
gha::package-submissions cicd healthy .github/workflows/package-submissions.yml
gha::manual-batch-issue-deduplication cicd healthy .github/workflows/manual-batch-issue-deduplication.yml
gha::telemetry-pr-check cicd healthy .github/workflows/telemetry-pr-check.yml

LabelLayerStatusPath
mysql data healthy src/Monaco/monaco_languages.json
postgresql data healthy src/Monaco/monaco_languages.json
postgres data healthy src/Monaco/monaco_languages.json
redis data healthy src/Monaco/monaco_languages.json

LabelLayerStatusPath
vps::aws hardware healthy .github/workflows/spelling2.yml
vps::azure hardware healthy .github/workflows/msstore-submissions.yml

LabelLayerStatusPath
repobility-clone-qe1058sy software healthy /tmp/repobility-clone-qe1058sy

LabelLayerStatusPath
pubsub data healthy src/Monaco/monacoSRC/min/vs/basic-languages/redis/redis.js

LabelLayerStatusPath
envoy network healthy src/Monaco/monacoSRC/min/vs/editor/editor.main.nls.fr.js

LabelLayerStatusPath
gpu (detected) hardware healthy src/modules/ShortcutGuide/ShortcutGuide.Ui/Assets/ShortcutG…
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/5bbaf307-4009-4846-ae56-f38d6ab4b085/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/5bbaf307-4009-4846-ae56-f38d6ab4b085/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.