Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

CakeML/cakeml

https://github.com/CakeML/cakeml · scanned 2026-06-17 01:21 UTC (1 month, 2 weeks ago)

11 raw signals (0 security + 11 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 month, 2 weeks ago · v2 · last Δ +0.5 (diff) · 9 actionable findings from 1 signal source. 2 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

33.3% cov · 9 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 0 Medium 3 Low 4 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 9 Crowd 0 Layer: Software 4 Security 1 Quality 4

Exclude dismissed / FP Exclude test files

All 517 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`how-to.md`	software	healthy	`how-to.md`
`code-of-conduct.md`	software	healthy	`code-of-conduct.md`
`build-instructions.sh`	software	healthy	`build-instructions.sh`
`README.md`	software	healthy	`README.md`
`LICENSE`	software	healthy	`LICENSE`
`README.md`	software	healthy	`compiler/README.md`
`README.md`	software	healthy	`compiler/inference/README.md`
`README.md`	software	healthy	`compiler/inference/tests/README.md`
`README.md`	software	healthy	`compiler/inference/proofs/README.md`
`README.md`	software	healthy	`compiler/backend/README.md`
`README.md`	software	healthy	`compiler/backend/mips/README.md`
`README.md`	software	healthy	`compiler/backend/mips/proofs/README.md`
`README.md`	software	healthy	`compiler/backend/cv_compute/README.md`
`README.md`	software	healthy	`compiler/backend/reg_alloc/README.md`
`README.md`	software	healthy	`compiler/backend/reg_alloc/proofs/README.md`
`README.md`	software	healthy	`compiler/backend/arm8_asl/README.md`
`README.md`	software	healthy	`compiler/backend/San/README.md`
`README.md`	software	healthy	`compiler/backend/x64/README.md`
`README.md`	software	healthy	`compiler/backend/x64/proofs/README.md`
`README.md`	software	healthy	`compiler/backend/semantics/README.md`
`README.md`	software	healthy	`compiler/backend/serialiser/README.md`
`README.md`	software	healthy	`compiler/backend/arm8/README.md`
`README.md`	software	healthy	`compiler/backend/arm8/proofs/README.md`
`README.md`	software	healthy	`compiler/backend/riscv/README.md`
`README.md`	software	healthy	`compiler/backend/riscv/proofs/README.md`
`README.md`	software	healthy	`compiler/backend/proofs/README.md`
`README.md`	software	healthy	`compiler/backend/pattern_matching/README.md`
`README.md`	software	healthy	`compiler/backend/gc/README.md`
`README.md`	software	healthy	`compiler/backend/arm7/README.md`
`README.md`	software	healthy	`compiler/backend/arm7/proofs/README.md`
`README.md`	software	healthy	`compiler/backend/ag32/README.md`
`README.md`	software	healthy	`compiler/backend/ag32/proofs/README.md`
`requirements.txt`	software	healthy	`compiler/benchmarks/requirements.txt`
`README.md`	software	healthy	`compiler/benchmarks/README.md`
`README.md`	software	healthy	`compiler/benchmarks/mlton_benchmarks/README.md`
`benchmark.py`	software	healthy	`compiler/benchmarks/mlton_benchmarks/benchmark.py`
`README.md`	software	healthy	`compiler/benchmarks/mlton_benchmarks/sml/README.md`
`Makefile`	software	healthy	`compiler/benchmarks/mlton_benchmarks/sml/Makefile`
`make_all.sh`	software	healthy	`compiler/benchmarks/mlton_benchmarks/cakeml/make_all.sh`
`README.md`	software	healthy	`compiler/benchmarks/mlton_benchmarks/cakeml/README.md`
`README.md`	software	healthy	`compiler/benchmarks/cakeml_benchmarks/README.md`
`benchmark.py`	software	healthy	`compiler/benchmarks/cakeml_benchmarks/benchmark.py`
`run_all.sh`	software	healthy	`compiler/benchmarks/cakeml_benchmarks/run_all.sh`
`README.md`	software	healthy	`compiler/benchmarks/cakeml_benchmarks/ocaml/README.md`
`Makefile`	software	healthy	`compiler/benchmarks/cakeml_benchmarks/ocaml/Makefile`
`README.md`	software	healthy	`compiler/benchmarks/cakeml_benchmarks/sml/README.md`
`Makefile`	software	healthy	`compiler/benchmarks/cakeml_benchmarks/sml/Makefile`
`make_all.sh`	software	healthy	`compiler/benchmarks/cakeml_benchmarks/cakeml/make_all.sh`
`README.md`	software	healthy	`compiler/benchmarks/cakeml_benchmarks/cakeml/README.md`
`README.md`	software	healthy	`compiler/scheme/README.md`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`compiler`	software	healthy	`compiler`
`inference`	software	healthy	`compiler/inference`
`tests`	software	healthy	`compiler/inference/tests`
`proofs`	software	healthy	`compiler/inference/proofs`
`backend`	software	healthy	`compiler/backend`
`mips`	software	healthy	`compiler/backend/mips`
`proofs`	software	healthy	`compiler/backend/mips/proofs`
`cv_compute`	software	healthy	`compiler/backend/cv_compute`
`reg_alloc`	software	healthy	`compiler/backend/reg_alloc`
`proofs`	software	healthy	`compiler/backend/reg_alloc/proofs`
`arm8_asl`	software	healthy	`compiler/backend/arm8_asl`
`San`	software	healthy	`compiler/backend/San`
`x64`	software	healthy	`compiler/backend/x64`
`proofs`	software	healthy	`compiler/backend/x64/proofs`
`semantics`	software	healthy	`compiler/backend/semantics`
`serialiser`	software	healthy	`compiler/backend/serialiser`
`arm8`	software	healthy	`compiler/backend/arm8`
`proofs`	software	healthy	`compiler/backend/arm8/proofs`
`riscv`	software	healthy	`compiler/backend/riscv`
`proofs`	software	healthy	`compiler/backend/riscv/proofs`
`proofs`	software	healthy	`compiler/backend/proofs`
`pattern_matching`	software	healthy	`compiler/backend/pattern_matching`
`gc`	software	healthy	`compiler/backend/gc`
`arm7`	software	healthy	`compiler/backend/arm7`
`proofs`	software	healthy	`compiler/backend/arm7/proofs`
`ag32`	software	healthy	`compiler/backend/ag32`
`proofs`	software	healthy	`compiler/backend/ag32/proofs`
`benchmarks`	software	healthy	`compiler/benchmarks`
`mlton_benchmarks`	software	healthy	`compiler/benchmarks/mlton_benchmarks`
`sml`	software	healthy	`compiler/benchmarks/mlton_benchmarks/sml`
`cakeml`	software	healthy	`compiler/benchmarks/mlton_benchmarks/cakeml`
`cakeml_benchmarks`	software	healthy	`compiler/benchmarks/cakeml_benchmarks`
`ocaml`	software	healthy	`compiler/benchmarks/cakeml_benchmarks/ocaml`
`sml`	software	healthy	`compiler/benchmarks/cakeml_benchmarks/sml`
`cakeml`	software	healthy	`compiler/benchmarks/cakeml_benchmarks/cakeml`
`scheme`	software	healthy	`compiler/scheme`
`examples`	software	healthy	`compiler/scheme/examples`
`compilation`	software	healthy	`compiler/scheme/compilation`
`translation`	software	healthy	`compiler/scheme/translation`
`unverified`	software	healthy	`compiler/scheme/unverified`
`proofs`	software	healthy	`compiler/scheme/proofs`
`printing`	software	healthy	`compiler/printing`
`test`	software	healthy	`compiler/printing/test`
`encoders`	software	healthy	`compiler/encoders`
`tests`	software	healthy	`compiler/encoders/tests`
`mips`	software	healthy	`compiler/encoders/mips`
`proofs`	software	healthy	`compiler/encoders/mips/proofs`
`arm8_asl`	software	healthy	`compiler/encoders/arm8_asl`
`proofs`	software	healthy	`compiler/encoders/arm8_asl/proofs`
`x64`	software	healthy	`compiler/encoders/x64`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`timecmd`	software	healthy	`compiler/benchmarks/mlton_benchmarks/benchmark.py:83`
`timecmd`	software	healthy	`compiler/benchmarks/cakeml_benchmarks/benchmark.py:74`
`main`	software	healthy	`compiler/dafny/examples/dafny_compiler.py:15`
`dafny_compiler`	software	healthy	`compiler/dafny/examples/dafny_compiler.py:86`
`parse_args`	software	healthy	`compiler/dafny/examples/dafny_compiler.py:165`
`program_path`	software	dead	`compiler/dafny/examples/dafny_compiler.py:190`
`file_path`	software	healthy	`compiler/dafny/examples/dafny_compiler.py:197`
`folder_path`	software	dead	`compiler/dafny/examples/dafny_compiler.py:204`
`get_edges`	software	healthy	`examples/sat_encodings/demo/drawGraph.py:29`
`check_compressed`	software	healthy	`examples/deflate/translation/compilation/test.py:29`
`test_files`	software	healthy	`examples/deflate/translation/compilation/test.py:34`
`test_random_text`	software	healthy	`examples/deflate/translation/compilation/test.py:53`
`debug`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`missing_dbus`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`byte_to_string`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`get_input`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`detect_desktop_environment`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`get_system`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`run_installer`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`__init__`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`save_ca`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`ask`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`show_info`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`confirm_exit`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`alert`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`prompt_nonempty_string`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`get_user_cred`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`__get_username_password`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`__get_graphics_support`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`__process_p12`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`__select_p12_file`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`__save_sb_pfx`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`__get_p12_cred`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`__validate_user_name`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`__prepare_network_block`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`create_wpa_conf`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`connect_to_nm`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`__check_opts`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`__check_nm_version`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`__delete_existing_connection`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`__add_connection`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`add_connections`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`parse_sec`	software	dead	`unverified/parse_sexp.py:6`
`tokens`	software	healthy	`unverified/parse_sexp.py:17`
`is_atom`	software	healthy	`unverified/parse_sexp.py:47`
`parse`	software	healthy	`unverified/parse_sexp.py:50`
`get_decs`	software	healthy	`unverified/parse_sexp.py:67`
`count_toks`	software	healthy	`unverified/parse_sexp.py:90`
`sort_pcons`	software	healthy	`unverified/parse_sexp.py:102`
`print_pcons`	software	healthy	`unverified/parse_sexp.py:108`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`password_literal::examples/deflate/translation/compilation/…`	security	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`password_literal::examples/deflate/translation/compilation/…`	security	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`password_literal::examples/deflate/translation/compilation/…`	security	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`password_literal::examples/deflate/translation/compilation/…`	security	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`password_literal::examples/deflate/translation/compilation/…`	security	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`password_literal::examples/deflate/translation/compilation/…`	security	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`password_literal::examples/deflate/translation/compilation/…`	security	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`password_literal::examples/deflate/translation/compilation/…`	security	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`

Label	Layer	Status	Path
`Messages`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`Config`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`InstallerData`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`WpaConf`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`CatNMConfigTool`	software	healthy	`examples/deflate/translation/compilation/tests/eduroam-linu…`
`bcolors`	software	healthy	`developers/build-everything.py:8`

Label	Layer	Status	Path
`CakeML__cakeml`	software	healthy	`/data/fable5_failed_archive/CakeML__cakeml`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/60f3b445-a6c4-42df-a873-6fac79402684/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/60f3b445-a6c4-42df-a873-6fac79402684/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

CakeML/cakeml

Complete repo analysis

file 50+

directory 50+

function 50+

secret 8

class 6

repo 1