Scan timing: clone 1.3s · analysis 0.64s · 0.7 MB · GitHub API rate-limit (preflight)
https://github.com/vinayluffy-12/payrollproject.git
· scanned 2026-05-28 06:07 UTC (1 week, 1 day ago)
· 10 languages
270 findings (88 legacy + 182 scanner) 32nd percentile · Javascript · small (2-20K LoC)
Last scanned 1 week, 1 day ago · v2 · 179 findings from 2 sources. Findings combine the legacy security pipeline AND the multi-layer engine (atlas, wiring, flows, ranked) AND verified AI agent contributions.
| Component | Sub-score | Weight | Contribution |
|---|---|---|---|
structure_score |
75.0 | 0.15 | 11.25 |
security_score |
65.9 | 0.25 | 16.48 |
testing_score |
0.0 | 0.20 | 0.00 |
documentation_score |
40.0 | 0.15 | 6.00 |
practices_score |
50.0 | 0.15 | 7.50 |
code_quality |
69.4 | 0.10 | 6.94 |
| Overall | 1.00 | 48.2 |
All 206 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.
| Label | Layer | Status | Path |
|---|---|---|---|
POST /api/v1/fraud/check-run |
api | healthy | payrollos/fraud-service/main.py |
GET /api/v1/fraud/health |
api | healthy | payrollos/fraud-service/main.py |
USE /api/ |
api | healthy | payrollos/backend/src/app.js |
USE /api/v1/auth |
api | healthy | payrollos/backend/src/app.js |
USE /api/v1/employees |
api | healthy | payrollos/backend/src/app.js |
USE /api/v1/payroll |
api | healthy | payrollos/backend/src/app.js |
USE /api/v1/attendance |
api | healthy | payrollos/backend/src/app.js |
USE /api/v1/leaves |
api | healthy | payrollos/backend/src/app.js |
USE /api/v1/wallets |
api | healthy | payrollos/backend/src/app.js |
USE /api/v1/fraud-alerts |
api | healthy | payrollos/backend/src/app.js |
USE /api/v1/reports |
api | healthy | payrollos/backend/src/app.js |
USE /api/v1/currencies |
api | healthy | payrollos/backend/src/app.js |
USE /api/v1/admin |
api | healthy | payrollos/backend/src/app.js |
GET /api/v1/health |
api | healthy | payrollos/backend/src/app.js |
GET /verification-queue |
api | healthy | payrollos/backend/src/routes/admin.js |
PUT /verify/:requestId |
api | healthy | payrollos/backend/src/routes/admin.js |
GET /audit-logs |
api | healthy | payrollos/backend/src/routes/admin.js |
GET /system-health |
api | healthy | payrollos/backend/src/routes/admin.js |
GET /:employeeId |
api | healthy | payrollos/backend/src/routes/wallet.js |
GET /:id/transactions |
api | healthy | payrollos/backend/src/routes/wallet.js |
POST /:id/withdraw |
api | healthy | payrollos/backend/src/routes/wallet.js |
GET / |
api | healthy | payrollos/backend/src/routes/attendance.js |
POST /checkin |
api | healthy | payrollos/backend/src/routes/attendance.js |
POST /checkout |
api | healthy | payrollos/backend/src/routes/attendance.js |
GET /rates |
api | healthy | payrollos/backend/src/routes/currency.js |
PUT /:code |
api | healthy | payrollos/backend/src/routes/currency.js |
POST /login |
api | healthy | payrollos/backend/src/routes/auth.js |
POST /register |
api | healthy | payrollos/backend/src/routes/auth.js |
POST /verify-otp |
api | healthy | payrollos/backend/src/routes/auth.js |
POST /forgot-password |
api | healthy | payrollos/backend/src/routes/auth.js |
POST /2fa/setup |
api | healthy | payrollos/backend/src/routes/auth.js |
POST /2fa/verify |
api | healthy | payrollos/backend/src/routes/auth.js |
POST /refresh |
api | healthy | payrollos/backend/src/routes/auth.js |
POST /logout |
api | healthy | payrollos/backend/src/routes/auth.js |
POST / |
api | healthy | payrollos/backend/src/routes/employees.js |
GET /:id |
api | healthy | payrollos/backend/src/routes/employees.js |
GET /:id/payslips |
api | healthy | payrollos/backend/src/routes/employees.js |
GET /:id/attendance |
api | healthy | payrollos/backend/src/routes/employees.js |
GET /:id/wallet |
api | healthy | payrollos/backend/src/routes/employees.js |
GET /:id/leaves |
api | healthy | payrollos/backend/src/routes/employees.js |
PUT /:id |
api | healthy | payrollos/backend/src/routes/employees.js |
DELETE /:id |
api | healthy | payrollos/backend/src/routes/employees.js |
GET /payroll-summary |
api | healthy | payrollos/backend/src/routes/reports.js |
GET /salary-register |
api | healthy | payrollos/backend/src/routes/reports.js |
GET /attendance |
api | healthy | payrollos/backend/src/routes/reports.js |
GET /tax-liability |
api | healthy | payrollos/backend/src/routes/reports.js |
GET /headcount |
api | healthy | payrollos/backend/src/routes/reports.js |
POST /generate-ai |
api | healthy | payrollos/backend/src/routes/reports.js |
GET /runs |
api | healthy | payrollos/backend/src/routes/payroll.js |
POST /runs |
api | healthy | payrollos/backend/src/routes/payroll.js |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
vercel.json |
software | healthy | vercel.json |
README.md |
software | healthy | README.md |
package.json |
software | healthy | package.json |
docker-compose.yml |
software | healthy | docker-compose.yml |
index.js |
software | healthy | api/index.js |
vite.config.js |
software | warning | payrollos/frontend/vite.config.js |
vercel.json |
software | healthy | payrollos/frontend/vercel.json |
README.md |
software | healthy | payrollos/frontend/README.md |
tailwind.config.js |
software | warning | payrollos/frontend/tailwind.config.js |
package.json |
software | healthy | payrollos/frontend/package.json |
index.html |
software | healthy | payrollos/frontend/index.html |
Dockerfile |
software | healthy | payrollos/frontend/Dockerfile |
package-lock.json |
software | healthy | payrollos/frontend/package-lock.json |
eslint.config.js |
software | warning | payrollos/frontend/eslint.config.js |
postcss.config.js |
software | warning | payrollos/frontend/postcss.config.js |
index.css |
software | healthy | payrollos/frontend/src/index.css |
App.jsx |
software | healthy | payrollos/frontend/src/App.jsx |
App.css |
software | healthy | payrollos/frontend/src/App.css |
main.jsx |
software | warning | payrollos/frontend/src/main.jsx |
Sidebar.jsx |
software | healthy | payrollos/frontend/src/components/Sidebar.jsx |
TopHeader.jsx |
software | healthy | payrollos/frontend/src/components/TopHeader.jsx |
Dockerfile |
software | healthy | payrollos/fraud-service/Dockerfile |
main.py |
software | healthy | payrollos/fraud-service/main.py |
requirements.txt |
software | healthy | payrollos/fraud-service/requirements.txt |
deployment.yml |
software | healthy | payrollos/k8s/deployment.yml |
vercel.json |
software | healthy | payrollos/backend/vercel.json |
package.json |
software | healthy | payrollos/backend/package.json |
Dockerfile |
software | healthy | payrollos/backend/Dockerfile |
package-lock.json |
software | healthy | payrollos/backend/package-lock.json |
index.js |
software | healthy | payrollos/backend/api/index.js |
app.js |
software | warning | payrollos/backend/src/app.js |
index.js |
software | healthy | payrollos/backend/src/index.js |
index.js |
software | healthy | payrollos/backend/src/models/index.js |
db.js |
software | warning | payrollos/backend/src/config/db.js |
auth.js |
software | healthy | payrollos/backend/src/middleware/auth.js |
seeder.js |
software | healthy | payrollos/backend/src/utils/seeder.js |
admin.js |
software | warning | payrollos/backend/src/routes/admin.js |
wallet.js |
software | warning | payrollos/backend/src/routes/wallet.js |
attendance.js |
software | healthy | payrollos/backend/src/routes/attendance.js |
currency.js |
software | warning | payrollos/backend/src/routes/currency.js |
auth.js |
software | warning | payrollos/backend/src/routes/auth.js |
employees.js |
software | warning | payrollos/backend/src/routes/employees.js |
reports.js |
software | warning | payrollos/backend/src/routes/reports.js |
payroll.js |
software | healthy | payrollos/backend/src/routes/payroll.js |
fraud.js |
software | warning | payrollos/backend/src/routes/fraud.js |
leave.js |
software | warning | payrollos/backend/src/routes/leave.js |
ci-cd.yml |
software | healthy | payrollos/.github/workflows/ci-cd.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
invoke |
software | healthy | api/index.js:invoke |
App |
software | healthy | payrollos/frontend/src/App.jsx:App |
markAllRead |
software | healthy | payrollos/frontend/src/App.jsx:markAllRead |
sendChatMessage |
software | healthy | payrollos/frontend/src/App.jsx:sendChatMessage |
val |
software | healthy | payrollos/frontend/src/App.jsx:val |
Sidebar |
software | healthy | payrollos/frontend/src/components/Sidebar.jsx:Sidebar |
getNavItems |
software | healthy | payrollos/frontend/src/components/Sidebar.jsx:getNavItems |
handleRoleChange |
software | healthy | payrollos/frontend/src/components/Sidebar.jsx:handleRoleCha… |
TopHeader |
software | healthy | payrollos/frontend/src/components/TopHeader.jsx:TopHeader |
getPageTitle |
software | healthy | payrollos/frontend/src/components/TopHeader.jsx:getPageTitle |
check_payroll_run |
software | healthy | payrollos/fraud-service/main.py:49 |
fraud_health |
software | healthy | payrollos/fraud-service/main.py:188 |
invoke |
software | healthy | payrollos/backend/api/index.js:invoke |
startServer |
software | healthy | payrollos/backend/src/index.js:startServer |
verifyToken |
software | healthy | payrollos/backend/src/middleware/auth.js:verifyToken |
checkRole |
software | healthy | payrollos/backend/src/middleware/auth.js:checkRole |
seedDatabase |
software | healthy | payrollos/backend/src/utils/seeder.js:seedDatabase |
parseTime |
software | healthy | payrollos/backend/src/routes/attendance.js:parseTime |
to24Hour |
software | healthy | payrollos/backend/src/routes/attendance.js:to24Hour |
hourlyRate |
software | healthy | payrollos/backend/src/routes/payroll.js:hourlyRate |
⚙ CORSMiddleware |
software | healthy | payrollos/fraud-service/main.py |
⚙ helmet |
software | healthy | payrollos/backend/src/app.js |
⚙ cors( |
software | healthy | payrollos/backend/src/app.js |
⚙ express.json( |
software | healthy | payrollos/backend/src/app.js |
⚙ limiter |
software | healthy | payrollos/backend/src/app.js |
⚙ authRouter |
software | healthy | payrollos/backend/src/app.js |
⚙ employeeRouter |
software | healthy | payrollos/backend/src/app.js |
⚙ payrollRouter |
software | healthy | payrollos/backend/src/app.js |
⚙ attendanceRouter |
software | healthy | payrollos/backend/src/app.js |
⚙ leaveRouter |
software | healthy | payrollos/backend/src/app.js |
⚙ walletRouter |
software | healthy | payrollos/backend/src/app.js |
⚙ fraudRouter |
software | healthy | payrollos/backend/src/app.js |
⚙ reportRouter |
software | healthy | payrollos/backend/src/app.js |
⚙ currencyRouter |
software | healthy | payrollos/backend/src/app.js |
⚙ adminRouter |
software | healthy | payrollos/backend/src/app.js |
⚙ verifyToken |
software | healthy | payrollos/backend/src/routes/admin.js |
| Label | Layer | Status | Path |
|---|---|---|---|
api |
software | healthy | api |
payrollos |
software | healthy | payrollos |
frontend |
software | healthy | payrollos/frontend |
src |
software | healthy | payrollos/frontend/src |
components |
software | healthy | payrollos/frontend/src/components |
fraud-service |
software | healthy | payrollos/fraud-service |
k8s |
software | healthy | payrollos/k8s |
backend |
software | healthy | payrollos/backend |
api |
software | healthy | payrollos/backend/api |
src |
software | healthy | payrollos/backend/src |
models |
software | healthy | payrollos/backend/src/models |
config |
software | healthy | payrollos/backend/src/config |
middleware |
software | healthy | payrollos/backend/src/middleware |
utils |
software | healthy | payrollos/backend/src/utils |
routes |
software | healthy | payrollos/backend/src/routes |
.github |
software | healthy | payrollos/.github |
workflows |
software | healthy | payrollos/.github/workflows |
| Label | Layer | Status | Path |
|---|---|---|---|
image::payrollos/frontend/Dockerfile |
hardware | healthy | payrollos/frontend/Dockerfile |
image::payrollos/fraud-service/Dockerfile |
hardware | healthy | payrollos/fraud-service/Dockerfile |
image::payrollos/backend/Dockerfile |
hardware | healthy | payrollos/backend/Dockerfile |
mysql |
hardware | healthy | docker-compose.yml |
redis |
hardware | healthy | docker-compose.yml |
backend |
hardware | healthy | docker-compose.yml |
fraud-service |
hardware | healthy | docker-compose.yml |
frontend |
hardware | healthy | docker-compose.yml |
k8s::PersistentVolumeClaim::payrollos/k8s/deployment.yml |
hardware | healthy | payrollos/k8s/deployment.yml |
k8s::HorizontalPodAutoscaler::payrollos/k8s/deployment.yml |
hardware | healthy | payrollos/k8s/deployment.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
port:5000 |
network | healthy | docker-compose.yml |
port:8000 |
network | healthy | docker-compose.yml |
port:3306 |
network | healthy | docker-compose.yml |
port:6379 |
network | healthy | docker-compose.yml |
port:80 |
network | healthy | docker-compose.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
mysql |
data | healthy | docker-compose.yml |
redis |
data | healthy | docker-compose.yml |
mariadb |
data | healthy | payrollos/backend/package-lock.json |
sqlite |
data | healthy | payrollos/backend/src/config/db.js |
| Label | Layer | Status | Path |
|---|---|---|---|
auth::payrollos/backend/src/middleware/auth.js |
security | healthy | payrollos/backend/src/middleware/auth.js |
auth::payrollos/backend/src/routes/auth.js |
security | healthy | payrollos/backend/src/routes/auth.js |
auth::payrollos/backend/src/models/index.js |
security | healthy | payrollos/backend/src/models/index.js |
auth::payrollos/frontend/src/App.jsx |
security | healthy | payrollos/frontend/src/App.jsx |
| Label | Layer | Status | Path |
|---|---|---|---|
test |
cicd | healthy | payrollos/.github/workflows/ci-cd.yml |
build-and-push |
cicd | healthy | payrollos/.github/workflows/ci-cd.yml |
deploy-staging |
cicd | healthy | payrollos/.github/workflows/ci-cd.yml |
deploy-production |
cicd | healthy | payrollos/.github/workflows/ci-cd.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
KUBE_CONFIG_PRODUCTION |
cicd | healthy | — |
AWS_SECRET_ACCESS_KEY |
cicd | healthy | — |
KUBE_CONFIG_STAGING |
cicd | healthy | — |
AWS_ACCESS_KEY_ID |
cicd | healthy | — |
| Label | Layer | Status | Path |
|---|---|---|---|
RunCheckRequest |
software | healthy | payrollos/fraud-service/main.py:26 |
AnomalyResult |
software | healthy | payrollos/fraud-service/main.py:31 |
FraudCheckResponse |
software | healthy | payrollos/fraud-service/main.py:40 |
| Label | Layer | Status | Path |
|---|---|---|---|
192.168.1.1 |
network | healthy | payrollos/frontend/src/App.jsx |
192.168.1.4 |
network | healthy | payrollos/frontend/src/App.jsx |
127.0.0.1 |
network | healthy | payrollos/frontend/src/App.jsx |
| Label | Layer | Status | Path |
|---|---|---|---|
App |
frontend | healthy | payrollos/frontend/src/App.jsx |
Sidebar |
frontend | healthy | payrollos/frontend/src/components/Sidebar.jsx |
TopHeader |
frontend | healthy | payrollos/frontend/src/components/TopHeader.jsx |
| Label | Layer | Status | Path |
|---|---|---|---|
nginx |
network | healthy | docker-compose.yml |
loadbalancer |
network | healthy | payrollos/k8s/deployment.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
vps::aws |
hardware | healthy | payrollos/frontend/src/App.jsx |
vps::azure |
hardware | healthy | payrollos/.github/workflows/ci-cd.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
repobility-clone-rne70o5b |
software | healthy | /tmp/repobility-clone-rne70o5b |
| Label | Layer | Status | Path |
|---|---|---|---|
k8s::Deployment::payrollos/k8s/deployment.yml |
hardware | healthy | payrollos/k8s/deployment.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
gha::ci-cd |
cicd | healthy | payrollos/.github/workflows/ci-cd.yml |
This page is publicly accessible at:
https://repobility.com/scan/5e3a4bfb-9ca7-4f09-bc7e-de3da5e404e0/
To check status programmatically (no auth required):
curl -s https://repobility.com/api/v1/public/scan/5e3a4bfb-9ca7-4f09-bc7e-de3da5e404e0/
Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.