fatedier/frp

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

43 of your 193 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 3.24s · analysis 19.06s · 2.4 MB · GitHub preflight 418ms

https://github.com/fatedier/frp · scanned 2026-06-05 05:50 UTC (5 hours, 30 minutes ago) · 10 languages

251 findings (183 legacy + 68 scanner) 56th percentile · Go · medium (20-100K LoC) Scanner says 75 (lower by 4)

File as issue Image v2 schema

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 hours, 30 minutes ago · v2 · 217 findings from 2 sources. Findings combine the legacy security pipeline AND the multi-layer engine (atlas, wiring, flows, ranked) AND verified AI agent contributions.

JSON

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	85.0	0.15	12.75
`security_score`	53.0	0.25	13.25
`testing_score`	85.0	0.20	17.00
`documentation_score`	63.0	0.15	9.45
`practices_score`	85.0	0.15	12.75
`code_quality`	60.7	0.10	6.07
Overall		1.00	71.3

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 2 High 106 Medium 28 Low 52 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Legacy 183 9-layer 34 Crowd 0 Layer: Software 130 Security 3 Quality 71 Api 1 Network 1 Cicd 11

Exclude dismissed / FP Exclude test files

All 745 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`.golangci.yml`	software	healthy	`.golangci.yml`
`README_zh.md`	software	healthy	`README_zh.md`
`package.sh`	software	healthy	`package.sh`
`README.md`	software	healthy	`README.md`
`.goreleaser.yml`	software	healthy	`.goreleaser.yml`
`Release.md`	software	healthy	`Release.md`
`go.mod`	software	healthy	`go.mod`
`Makefile`	software	healthy	`Makefile`
`AGENTS.md`	software	healthy	`AGENTS.md`
`api_router.go`	software	healthy	`client/api_router.go`
`control_session.go`	software	healthy	`client/control_session.go`
`connector.go`	software	healthy	`client/connector.go`
`config_manager_test.go`	software	healthy	`client/config_manager_test.go`
`control_session_test.go`	software	healthy	`client/control_session_test.go`
`control.go`	software	healthy	`client/control.go`
`config_manager.go`	software	healthy	`client/config_manager.go`
`service_test.go`	software	healthy	`client/service_test.go`
`service.go`	software	healthy	`client/service.go`
`health.go`	software	healthy	`client/health/health.go`
`controller_test.go`	software	healthy	`client/http/controller_test.go`
`controller.go`	software	healthy	`client/http/controller.go`
`types.go`	software	healthy	`client/http/model/types.go`
`visitor_definition.go`	software	healthy	`client/http/model/visitor_definition.go`
`proxy_definition.go`	software	healthy	`client/http/model/proxy_definition.go`
`types.go`	software	healthy	`client/configmgmt/types.go`
`proxy_manager.go`	software	healthy	`client/proxy/proxy_manager.go`
`sudp.go`	software	healthy	`client/proxy/sudp.go`
`udp.go`	software	healthy	`client/proxy/udp.go`
`xtcp_test.go`	software	healthy	`client/proxy/xtcp_test.go`
`general_tcp.go`	software	healthy	`client/proxy/general_tcp.go`
`xtcp.go`	software	healthy	`client/proxy/xtcp.go`
`proxy.go`	software	healthy	`client/proxy/proxy.go`
`proxy_wrapper.go`	software	healthy	`client/proxy/proxy_wrapper.go`
`sudp.go`	software	healthy	`client/visitor/sudp.go`
`visitor_manager.go`	software	healthy	`client/visitor/visitor_manager.go`
`visitor.go`	software	healthy	`client/visitor/visitor.go`
`xtcp.go`	software	healthy	`client/visitor/xtcp.go`
`stcp.go`	software	healthy	`client/visitor/stcp.go`
`event.go`	software	healthy	`client/event/event.go`
`config.yml`	software	healthy	`.circleci/config.yml`
`examples.go`	software	healthy	`test/e2e/examples.go`
`e2e.go`	software	healthy	`test/e2e/e2e.go`
`suites.go`	software	healthy	`test/e2e/suites.go`
`e2e_test.go`	software	healthy	`test/e2e/e2e_test.go`
`server.go`	software	healthy	`test/e2e/v1/plugin/server.go`
`client.go`	software	healthy	`test/e2e/v1/plugin/client.go`
`cmd.go`	software	healthy	`test/e2e/v1/basic/cmd.go`
`http.go`	software	healthy	`test/e2e/v1/basic/http.go`
`client_server.go`	software	healthy	`test/e2e/v1/basic/client_server.go`
`basic.go`	software	healthy	`test/e2e/v1/basic/basic.go`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`client`	software	healthy	`client`
`health`	software	healthy	`client/health`
`http`	software	healthy	`client/http`
`model`	software	healthy	`client/http/model`
`configmgmt`	software	healthy	`client/configmgmt`
`proxy`	software	healthy	`client/proxy`
`visitor`	software	healthy	`client/visitor`
`event`	software	healthy	`client/event`
`.circleci`	software	healthy	`.circleci`
`test`	software	healthy	`test`
`e2e`	software	healthy	`test/e2e`
`v1`	software	healthy	`test/e2e/v1`
`plugin`	software	healthy	`test/e2e/v1/plugin`
`basic`	software	healthy	`test/e2e/v1/basic`
`features`	software	healthy	`test/e2e/v1/features`
`compatibility`	software	healthy	`test/e2e/compatibility`
`mock`	software	healthy	`test/e2e/mock`
`server`	software	healthy	`test/e2e/mock/server`
`streamserver`	software	healthy	`test/e2e/mock/server/streamserver`
`oidcserver`	software	healthy	`test/e2e/mock/server/oidcserver`
`httpserver`	software	healthy	`test/e2e/mock/server/httpserver`
`framework`	software	healthy	`test/e2e/framework`
`consts`	software	healthy	`test/e2e/framework/consts`
`legacy`	software	healthy	`test/e2e/legacy`
`plugin`	software	healthy	`test/e2e/legacy/plugin`
`basic`	software	healthy	`test/e2e/legacy/basic`
`features`	software	healthy	`test/e2e/legacy/features`
`pkg`	software	healthy	`test/e2e/pkg`
`process`	software	healthy	`test/e2e/pkg/process`
`plugin`	software	healthy	`test/e2e/pkg/plugin`
`port`	software	healthy	`test/e2e/pkg/port`
`rpc`	software	healthy	`test/e2e/pkg/rpc`
`ssh`	software	healthy	`test/e2e/pkg/ssh`
`cert`	software	healthy	`test/e2e/pkg/cert`
`request`	software	healthy	`test/e2e/pkg/request`
`cmd`	software	healthy	`cmd`
`frpc`	software	healthy	`cmd/frpc`
`sub`	software	healthy	`cmd/frpc/sub`
`frps`	software	healthy	`cmd/frps`
`conf`	software	healthy	`conf`
`assets`	software	healthy	`assets`
`doc`	software	healthy	`doc`
`agents`	software	healthy	`doc/agents`
`web`	software	healthy	`web`
`frpc`	software	healthy	`web/frpc`
`src`	software	healthy	`web/frpc/src`
`types`	software	healthy	`web/frpc/src/types`
`router`	software	healthy	`web/frpc/src/router`
`stores`	software	healthy	`web/frpc/src/stores`
`api`	software	healthy	`web/frpc/src/api`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`formToStoreProxy`	software	healthy	`web/frpc/src/types/proxy-converters.ts:formToStoreProxy`
`formToStoreVisitor`	software	healthy	`web/frpc/src/types/proxy-converters.ts:formToStoreVisitor`
`getStoreProxyBlock`	software	healthy	`web/frpc/src/types/proxy-converters.ts:getStoreProxyBlock`
`withStoreProxyBlock`	software	healthy	`web/frpc/src/types/proxy-converters.ts:withStoreProxyBlock`
`getStoreVisitorBlock`	software	healthy	`web/frpc/src/types/proxy-converters.ts:getStoreVisitorBlock`
`withStoreVisitorBlock`	software	healthy	`web/frpc/src/types/proxy-converters.ts:withStoreVisitorBlock`
`storeProxyToForm`	software	healthy	`web/frpc/src/types/proxy-converters.ts:storeProxyToForm`
`storeVisitorToForm`	software	healthy	`web/frpc/src/types/proxy-converters.ts:storeVisitorToForm`
`createDefaultProxyForm`	software	healthy	`web/frpc/src/types/proxy-form.ts:createDefaultProxyForm`
`createDefaultVisitorForm`	software	healthy	`web/frpc/src/types/proxy-form.ts:createDefaultVisitorForm`
`fetchStoreVisitors`	software	healthy	`web/frpc/src/stores/visitor.ts:fetchStoreVisitors`
`checkStoreEnabled`	software	healthy	`web/frpc/src/stores/visitor.ts:checkStoreEnabled`
`createVisitor`	software	healthy	`web/frpc/src/stores/visitor.ts:createVisitor`
`updateVisitor`	software	healthy	`web/frpc/src/stores/visitor.ts:updateVisitor`
`deleteVisitor`	software	healthy	`web/frpc/src/stores/visitor.ts:deleteVisitor`
`fetchConfig`	software	healthy	`web/frpc/src/stores/client.ts:fetchConfig`
`saveConfig`	software	healthy	`web/frpc/src/stores/client.ts:saveConfig`
`reload`	software	healthy	`web/frpc/src/stores/client.ts:reload`
`fetchStatus`	software	healthy	`web/frpc/src/stores/proxy.ts:fetchStatus`
`fetchStoreProxies`	software	healthy	`web/frpc/src/stores/proxy.ts:fetchStoreProxies`
`checkStoreEnabled`	software	healthy	`web/frpc/src/stores/proxy.ts:checkStoreEnabled`
`createProxy`	software	healthy	`web/frpc/src/stores/proxy.ts:createProxy`
`updateProxy`	software	healthy	`web/frpc/src/stores/proxy.ts:updateProxy`
`deleteProxy`	software	healthy	`web/frpc/src/stores/proxy.ts:deleteProxy`
`toggleProxy`	software	healthy	`web/frpc/src/stores/proxy.ts:toggleProxy`
`block`	software	healthy	`web/frpc/src/stores/proxy.ts:block`
`storeProxyWithStatus`	software	healthy	`web/frpc/src/stores/proxy.ts:storeProxyWithStatus`
`request`	software	healthy	`web/frpc/src/api/http.ts:request`
`getStatus`	software	healthy	`web/frpc/src/api/frpc.ts:getStatus`
`getConfig`	software	healthy	`web/frpc/src/api/frpc.ts:getConfig`
`putConfig`	software	healthy	`web/frpc/src/api/frpc.ts:putConfig`
`reloadConfig`	software	healthy	`web/frpc/src/api/frpc.ts:reloadConfig`
`getProxyConfig`	software	healthy	`web/frpc/src/api/frpc.ts:getProxyConfig`
`getVisitorConfig`	software	healthy	`web/frpc/src/api/frpc.ts:getVisitorConfig`
`listStoreProxies`	software	healthy	`web/frpc/src/api/frpc.ts:listStoreProxies`
`getStoreProxy`	software	healthy	`web/frpc/src/api/frpc.ts:getStoreProxy`
`createStoreProxy`	software	healthy	`web/frpc/src/api/frpc.ts:createStoreProxy`
`updateStoreProxy`	software	healthy	`web/frpc/src/api/frpc.ts:updateStoreProxy`
`deleteStoreProxy`	software	healthy	`web/frpc/src/api/frpc.ts:deleteStoreProxy`
`listStoreVisitors`	software	healthy	`web/frpc/src/api/frpc.ts:listStoreVisitors`
`getStoreVisitor`	software	healthy	`web/frpc/src/api/frpc.ts:getStoreVisitor`
`createStoreVisitor`	software	healthy	`web/frpc/src/api/frpc.ts:createStoreVisitor`
`updateStoreVisitor`	software	healthy	`web/frpc/src/api/frpc.ts:updateStoreVisitor`
`deleteStoreVisitor`	software	healthy	`web/frpc/src/api/frpc.ts:deleteStoreVisitor`
`useResponsive`	software	healthy	`web/frpc/src/composables/useResponsive.ts:useResponsive`
`formatDistanceToNow`	software	healthy	`web/frpc/src/utils/format.ts:formatDistanceToNow`
`formatFileSize`	software	healthy	`web/frpc/src/utils/format.ts:formatFileSize`
`getClients`	software	healthy	`web/frps/src/api/client.ts:getClients`
`getClientsV2`	software	healthy	`web/frps/src/api/client.ts:getClientsV2`
`getClient`	software	healthy	`web/frps/src/api/client.ts:getClient`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`auth::pkg/config/v1/validation/client.go`	security	healthy	`pkg/config/v1/validation/client.go`
`auth::conf/frps_full_example.toml`	security	healthy	`conf/frps_full_example.toml`
`auth::pkg/config/v1/validation/validation.go`	security	healthy	`pkg/config/v1/validation/validation.go`
`auth::pkg/auth/oidc.go`	security	healthy	`pkg/auth/oidc.go`
`auth::client/service_test.go`	security	healthy	`client/service_test.go`
`auth::test/e2e/mock/server/oidcserver/oidcserver.go`	security	healthy	`test/e2e/mock/server/oidcserver/oidcserver.go`
`auth::test/e2e/v1/basic/oidc.go`	security	healthy	`test/e2e/v1/basic/oidc.go`
`auth::pkg/auth/legacy/legacy.go`	security	healthy	`pkg/auth/legacy/legacy.go`
`auth::pkg/auth/auth.go`	security	healthy	`pkg/auth/auth.go`
`auth::pkg/config/v1/validation/oidc_test.go`	security	healthy	`pkg/config/v1/validation/oidc_test.go`
`auth::go.mod`	security	healthy	`go.mod`
`auth::pkg/config/v1/server.go`	security	healthy	`pkg/config/v1/server.go`
`auth::pkg/auth/oidc_test.go`	security	healthy	`pkg/auth/oidc_test.go`
`auth::pkg/config/v1/client.go`	security	healthy	`pkg/config/v1/client.go`
`auth::pkg/config/v1/validation/oidc.go`	security	healthy	`pkg/config/v1/validation/oidc.go`
`auth::pkg/config/v1/common.go`	security	healthy	`pkg/config/v1/common.go`
`auth::conf/frpc_full_example.toml`	security	healthy	`conf/frpc_full_example.toml`
`auth::pkg/config/legacy/conversion.go`	security	healthy	`pkg/config/legacy/conversion.go`

Label	Layer	Status	Path
`/`	frontend	healthy	`web/frpc/src/router/index.ts`
`/proxies`	frontend	healthy	`web/frpc/src/router/index.ts`
`/proxies/detail/:name`	frontend	healthy	`web/frpc/src/router/index.ts`
`/proxies/create`	frontend	healthy	`web/frpc/src/router/index.ts`
`/proxies/:name/edit`	frontend	healthy	`web/frpc/src/router/index.ts`
`/visitors`	frontend	healthy	`web/frpc/src/router/index.ts`
`/visitors/detail/:name`	frontend	healthy	`web/frpc/src/router/index.ts`
`/visitors/create`	frontend	healthy	`web/frpc/src/router/index.ts`
`/visitors/:name/edit`	frontend	healthy	`web/frpc/src/router/index.ts`
`/config`	frontend	healthy	`web/frpc/src/router/index.ts`
`/clients`	frontend	healthy	`web/frps/src/router/index.ts`
`/clients/:key`	frontend	healthy	`web/frps/src/router/index.ts`
`/proxies/:type?`	frontend	healthy	`web/frps/src/router/index.ts`
`/proxy/:name`	frontend	healthy	`web/frps/src/router/index.ts`

Label	Layer	Status	Path
`HTTPError`	software	healthy	`web/frpc/src/api/http.ts:HTTPError`
`HTTPError`	software	healthy	`web/frps/src/api/http.ts:HTTPError`
`Client`	software	healthy	`web/frps/src/utils/client.ts:Client`
`BaseProxy`	software	healthy	`web/frps/src/utils/proxy.ts:BaseProxy`
`TCPProxy`	software	healthy	`web/frps/src/utils/proxy.ts:TCPProxy`
`UDPProxy`	software	healthy	`web/frps/src/utils/proxy.ts:UDPProxy`
`HTTPProxy`	software	healthy	`web/frps/src/utils/proxy.ts:HTTPProxy`
`HTTPSProxy`	software	healthy	`web/frps/src/utils/proxy.ts:HTTPSProxy`
`TCPMuxProxy`	software	healthy	`web/frps/src/utils/proxy.ts:TCPMuxProxy`
`STCPProxy`	software	healthy	`web/frps/src/utils/proxy.ts:STCPProxy`
`SUDPProxy`	software	healthy	`web/frps/src/utils/proxy.ts:SUDPProxy`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`client/service_test.go`
`10.0.0.1`	network	healthy	`client/http/controller_test.go`
`2.2.2.2`	network	healthy	`test/e2e/v1/features/real_ip.go`
`3.3.3.3`	network	healthy	`test/e2e/v1/features/real_ip.go`
`127.0.0.2`	network	healthy	`server/http/controller_v2_test.go`
`127.0.0.3`	network	healthy	`server/http/controller_v2_test.go`
`10.0.0.2`	network	healthy	`pkg/config/v1/clone_test.go`
`8.8.8.8`	network	healthy	`pkg/util/system/system_android.go`
`192.168.1.100`	network	healthy	`pkg/util/net/proxyprotocol_test.go`

Label	Layer	Status	Path
`DOCKERHUB_USERNAME`	cicd	healthy	`—`
`TAG_FRPC_GPR`	cicd	healthy	`—`
`TAG_NAME`	cicd	healthy	`—`
`TAG_FRPS`	cicd	healthy	`—`
`DOCKERHUB_PASSWORD`	cicd	healthy	`—`
`TAG_FRPS_GPR`	cicd	healthy	`—`
`GPR_TOKEN`	cicd	healthy	`—`
`TAG_FRPC`	cicd	healthy	`—`

Label	Layer	Status	Path
`gha::golangci-lint`	cicd	healthy	`.github/workflows/golangci-lint.yml`
`gha::build-and-push-image`	cicd	healthy	`.github/workflows/build-and-push-image.yml`
`gha::stale`	cicd	healthy	`.github/workflows/stale.yml`
`gha::goreleaser`	cicd	healthy	`.github/workflows/goreleaser.yml`
`circleci`	cicd	healthy	`.circleci/config.yml`

Label	Layer	Status	Path
`golangci`	cicd	healthy	`.github/workflows/golangci-lint.yml`
`image`	cicd	healthy	`.github/workflows/build-and-push-image.yml`
`stale`	cicd	healthy	`.github/workflows/stale.yml`
`goreleaser`	cicd	healthy	`.github/workflows/goreleaser.yml`

Label	Layer	Status	Path
`password_literal::test/e2e/v1/basic/http.go`	security	healthy	`test/e2e/v1/basic/http.go`
`password_literal::server/http/controller_test.go`	security	healthy	`server/http/controller_test.go`
`password_literal::pkg/util/vhost/http_test.go`	security	healthy	`pkg/util/vhost/http_test.go`

Label	Layer	Status	Path
`repobility-clone-usdzxuka`	software	healthy	`/tmp/repobility-clone-usdzxuka`

Label	Layer	Status	Path
`loadbalancer`	network	healthy	`test/e2e/v1/features/group.go`

Label	Layer	Status	Path
`port:13`	network	healthy	`test/e2e/pkg/port/port.go`

Label	Layer	Status	Path
`vps::azure`	hardware	healthy	`go.mod`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/63a5dcbb-05a2-49a9-ba26-bc3a6d948f74/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/63a5dcbb-05a2-49a9-ba26-bc3a6d948f74/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

fatedier/frp

Complete repo analysis

file 50+

directory 50+

function 50+

auth 18

route 14

class 11

service 9

env_var 8

pipeline 5

job 4

secret 3

repo 1

load_balancer 1

port 1

vps 1