Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

Automattic/wp-calypso

https://github.com/Automattic/wp-calypso · scanned 2026-06-17 01:26 UTC (1 month, 2 weeks ago)

1292 raw signals (0 security + 1292 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 month, 2 weeks ago · v2 · last Δ -31.8 (diff) · 1257 actionable findings from 1 signal source. 35 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

100.0% cov · 1257 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 7 High 14 Medium 215 Low 360 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 1257 Crowd 0 Layer: Frontend 478 Network 1 Hardware 9 Security 104 Cicd 4 Quality 642 Api 19

Exclude dismissed / FP Exclude test files

Last 2 scans of this repo. Each new scan persists a full payload — historical comparison is exact, not lossy.

Jun 16 03:55

Jun 17 01:17

Diff: previous → latest scan

Score Δ

-31.80

Gaps added

1290

Gaps resolved

Edges changed

+58045 / -0

New gaps in latest scan:

TODO/FIXME marker in shipping code — .eslintrc.js:362 info
Stray `console.log` in TS/JS — build-tools/webpack/sections-loader.js:44 low
`dangerouslySetInnerHTML` used in a React component — packages/zendesk-client/src/zendesk-message-converter.tsx:69 medium
TODO/FIXME marker in shipping code — packages/oauth-token/src/index.js:27 info
TODO/FIXME marker in shipping code — packages/calypso-build/webpack.config.js:15 info
+ 1285 more

v#	ID	Status	Score	Gaps	Nodes	Commit	Started
v	`scan_74ad45a39223`	ok	44.9	1292	62661	—	Jun 17 01:17
v	`scan_48b6efb1a265`	ok	76.7	—	1	—	Jun 16 03:55

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/5f7ac02f-c2c3-40e1-ba0c-9b6d648c0ceb/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/5f7ac02f-c2c3-40e1-ba0c-9b6d648c0ceb/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.