localsend/localsend

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

44 of your 126 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 6.64s · analysis 10.56s · 14.4 MB · GitHub preflight 469ms

https://github.com/localsend/localsend · scanned 2026-06-05 11:04 UTC (5 days, 13 hours ago) · 10 languages

197 raw signals (109 security + 88 graph) System graph score 82 (lower by 26)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days, 13 hours ago · v2 · 60 actionable findings from 2 signal sources. 92 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

88.9% cov · 8 findings

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	65.0	0.15	9.75
`security_score`	50.8	0.25	12.70
`testing_score`	20.0	0.20	4.00
`documentation_score`	92.0	0.15	13.80
`practices_score`	65.0	0.15	9.75
`code_quality`	61.6	0.10	6.16
Overall		1.00	56.2

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 2 High 35 Medium 4 Low 6 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 52 System graph 8 Crowd 0 Layer: Cicd 4 Software 34 Quality 14 Security 2 Api 1 Hardware 4 Frontend 1

Exclude dismissed / FP Exclude test files

All 423 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`README.md`	software	healthy	`README.md`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`pubspec.yaml`	software	healthy	`common/pubspec.yaml`
`README.md`	software	healthy	`common/README.md`
`analysis_options.yaml`	software	healthy	`common/analysis_options.yaml`
`build.yaml`	software	healthy	`common/build.yaml`
`README.md`	software	healthy	`common/lib/src/task/README.md`
`compile_android_apk.sh`	software	healthy	`scripts/compile_android_apk.sh`
`compile_linux_appimage.sh`	software	healthy	`scripts/compile_linux_appimage.sh`
`compile_mac_appstore.sh`	software	healthy	`scripts/compile_mac_appstore.sh`
`compile_mac_dmg.sh`	software	healthy	`scripts/compile_mac_dmg.sh`
`compile_ios.sh`	software	healthy	`scripts/compile_ios.sh`
`remove_proprietary_dependencies.sh`	software	healthy	`scripts/remove_proprietary_dependencies.sh`
`AppImageBuilder_arm_64.yml`	software	healthy	`scripts/appimage/AppImageBuilder_arm_64.yml`
`AppImageBuilder_x86_64.yml`	software	healthy	`scripts/appimage/AppImageBuilder_x86_64.yml`
`pubspec.yaml`	software	healthy	`cli/pubspec.yaml`
`README.md`	software	healthy	`cli/README.md`
`analysis_options.yaml`	software	healthy	`cli/analysis_options.yaml`
`rust-toolchain.toml`	software	healthy	`app/rust-toolchain.toml`
`pubspec.yaml`	software	healthy	`app/pubspec.yaml`
`flutter_rust_bridge.yaml`	software	healthy	`app/flutter_rust_bridge.yaml`
`analysis_options.yaml`	software	healthy	`app/analysis_options.yaml`
`build.yaml`	software	healthy	`app/build.yaml`
`build.gradle`	software	healthy	`app/android/build.gradle`
`build.gradle`	software	healthy	`app/android/app/build.gradle`
`FileOpener.kt`	software	healthy	`app/android/app/src/main/kotlin/org/localsend/localsend_app…`
`MainActivity.kt`	software	healthy	`app/android/app/src/main/kotlin/org/localsend/localsend_app…`
`QuickTileService.kt`	software	healthy	`app/android/app/src/main/kotlin/org/localsend/localsend_app…`
`FastDocumentFile.kt`	software	healthy	`app/android/app/src/main/kotlin/org/localsend/localsend_app…`
`pubspec.yaml`	software	healthy	`app/rust_builder/pubspec.yaml`
`README.md`	software	healthy	`app/rust_builder/README.md`
`build.gradle`	software	healthy	`app/rust_builder/android/build.gradle`
`build_pod.sh`	software	healthy	`app/rust_builder/cargokit/build_pod.sh`
`run_build_tool.sh`	software	healthy	`app/rust_builder/cargokit/run_build_tool.sh`
`pubspec.yaml`	software	healthy	`app/rust_builder/cargokit/build_tool/pubspec.yaml`
`README.md`	software	healthy	`app/rust_builder/cargokit/build_tool/README.md`
`analysis_options.yaml`	software	healthy	`app/rust_builder/cargokit/build_tool/analysis_options.yaml`
`dummy_file.c`	software	healthy	`app/rust_builder/ios/Classes/dummy_file.c`
`dummy_file.c`	software	healthy	`app/rust_builder/macos/Classes/dummy_file.c`
`win32_window.cpp`	software	healthy	`app/windows/runner/win32_window.cpp`
`main.cpp`	software	healthy	`app/windows/runner/main.cpp`
`winrt_ext.h`	software	healthy	`app/windows/runner/winrt_ext.h`
`utils.cpp`	software	healthy	`app/windows/runner/utils.cpp`
`flutter_window.h`	software	healthy	`app/windows/runner/flutter_window.h`
`winrt_ext.cpp`	software	healthy	`app/windows/runner/winrt_ext.cpp`
`resource.h`	software	healthy	`app/windows/runner/resource.h`
`utils.h`	software	healthy	`app/windows/runner/utils.h`
`win32_window.h`	software	healthy	`app/windows/runner/win32_window.h`
`flutter_window.cpp`	software	healthy	`app/windows/runner/flutter_window.cpp`
`generated_plugin_registrant.h`	software	healthy	`app/windows/flutter/generated_plugin_registrant.h`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`common`	software	healthy	`common`
`lib`	software	healthy	`common/lib`
`src`	software	healthy	`common/lib/src`
`task`	software	healthy	`common/lib/src/task`
`scripts`	software	healthy	`scripts`
`appimage`	software	healthy	`scripts/appimage`
`cli`	software	healthy	`cli`
`app`	software	healthy	`app`
`android`	software	healthy	`app/android`
`app`	software	healthy	`app/android/app`
`src`	software	healthy	`app/android/app/src`
`main`	software	healthy	`app/android/app/src/main`
`kotlin`	software	healthy	`app/android/app/src/main/kotlin`
`org`	software	healthy	`app/android/app/src/main/kotlin/org`
`localsend`	software	healthy	`app/android/app/src/main/kotlin/org/localsend`
`localsend_app`	software	healthy	`app/android/app/src/main/kotlin/org/localsend/localsend_app`
`rust_builder`	software	healthy	`app/rust_builder`
`android`	software	healthy	`app/rust_builder/android`
`cargokit`	software	healthy	`app/rust_builder/cargokit`
`build_tool`	software	healthy	`app/rust_builder/cargokit/build_tool`
`ios`	software	healthy	`app/rust_builder/ios`
`Classes`	software	healthy	`app/rust_builder/ios/Classes`
`macos`	software	healthy	`app/rust_builder/macos`
`Classes`	software	healthy	`app/rust_builder/macos/Classes`
`windows`	software	healthy	`app/windows`
`runner`	software	healthy	`app/windows/runner`
`flutter`	software	healthy	`app/windows/flutter`
`rust`	software	healthy	`app/rust`
`src`	software	healthy	`app/rust/src`
`util`	software	healthy	`app/rust/src/util`
`api`	software	healthy	`app/rust/src/api`
`linux`	software	healthy	`app/linux`
`packaging`	software	healthy	`app/linux/packaging`
`deb`	software	healthy	`app/linux/packaging/deb`
`rpm`	software	healthy	`app/linux/packaging/rpm`
`flutter`	software	healthy	`app/linux/flutter`
`assets`	software	healthy	`app/assets`
`i18n`	software	healthy	`app/assets/i18n`
`web`	software	healthy	`app/assets/web`
`ios`	software	healthy	`app/ios`
`Runner`	software	healthy	`app/ios/Runner`
`Assets.xcassets`	software	healthy	`app/ios/Runner/Assets.xcassets`
`AppIcon.appiconset`	software	healthy	`app/ios/Runner/Assets.xcassets/AppIcon.appiconset`
`LaunchImage.imageset`	software	healthy	`app/ios/Runner/Assets.xcassets/LaunchImage.imageset`
`ShareExtension`	software	healthy	`app/ios/ShareExtension`
`web`	software	healthy	`app/web`
`macos`	software	healthy	`app/macos`
`Flutter`	software	healthy	`app/macos/Flutter`
`Runner`	software	healthy	`app/macos/Runner`
`Assets.xcassets`	software	healthy	`app/macos/Runner/Assets.xcassets`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`build`	cicd	healthy	`.github/workflows/test_arm64_tar.yml`
`build_tar_arm_64`	cicd	healthy	`.github/workflows/test_arm64_tar.yml`
`build`	cicd	healthy	`.github/workflows/compile_apk.yml`
`build_apk`	cicd	healthy	`.github/workflows/compile_apk.yml`
`build`	cicd	healthy	`.github/workflows/test_rpm.yml`
`build_rpm`	cicd	healthy	`.github/workflows/test_rpm.yml`
`build`	cicd	healthy	`.github/workflows/compile_arm64_appimage.yml`
`build_appimage_arm_64`	cicd	healthy	`.github/workflows/compile_arm64_appimage.yml`
`build`	cicd	healthy	`.github/workflows/test_zip.yml`
`build_windows_zip`	cicd	healthy	`.github/workflows/test_zip.yml`
`format`	cicd	healthy	`.github/workflows/ci.yml`
`test`	cicd	healthy	`.github/workflows/ci.yml`
`packaging`	cicd	healthy	`.github/workflows/ci.yml`
`publish`	cicd	healthy	`.github/workflows/winget.yml`
`del_runs`	cicd	healthy	`.github/workflows/clear_workflows.yml`
`build`	cicd	healthy	`.github/workflows/release.yml`
`build_apk`	cicd	healthy	`.github/workflows/release.yml`
`build_tar_x86_64`	cicd	healthy	`.github/workflows/release.yml`
`build_tar_arm_64`	cicd	healthy	`.github/workflows/release.yml`
`build_deb_x86_64`	cicd	healthy	`.github/workflows/release.yml`
`build_deb_arm_64`	cicd	healthy	`.github/workflows/release.yml`
`build_appimage_x86_64`	cicd	healthy	`.github/workflows/release.yml`
`build_windows_zip_x86_64`	cicd	healthy	`.github/workflows/release.yml`
`release`	cicd	healthy	`.github/workflows/release.yml`
`build`	cicd	healthy	`.github/workflows/test_arm64_deb.yml`
`build_deb_arm_64`	cicd	healthy	`.github/workflows/test_arm64_deb.yml`
`build`	cicd	healthy	`.github/workflows/linux_build.yml`
`build_appimage`	cicd	healthy	`.github/workflows/linux_build.yml`

Label	Layer	Status	Path
`gha::test_arm64_tar`	cicd	healthy	`.github/workflows/test_arm64_tar.yml`
`gha::compile_apk`	cicd	healthy	`.github/workflows/compile_apk.yml`
`gha::test_rpm`	cicd	healthy	`.github/workflows/test_rpm.yml`
`gha::compile_arm64_appimage`	cicd	healthy	`.github/workflows/compile_arm64_appimage.yml`
`gha::test_zip`	cicd	healthy	`.github/workflows/test_zip.yml`
`gha::ci`	cicd	healthy	`.github/workflows/ci.yml`
`gha::winget`	cicd	healthy	`.github/workflows/winget.yml`
`gha::clear_workflows`	cicd	healthy	`.github/workflows/clear_workflows.yml`
`gha::release`	cicd	healthy	`.github/workflows/release.yml`
`gha::test_arm64_deb`	cicd	healthy	`.github/workflows/test_arm64_deb.yml`
`gha::linux_build`	cicd	healthy	`.github/workflows/linux_build.yml`

Label	Layer	Status	Path
`firstRequestFiles`	software	healthy	`app/assets/web/main.js:firstRequestFiles`
`pinRequestFiles`	software	healthy	`app/assets/web/main.js:pinRequestFiles`
`makeRequest`	software	healthy	`app/assets/web/main.js:makeRequest`
`fetchI18n`	software	healthy	`app/assets/web/main.js:fetchI18n`
`init`	software	healthy	`app/assets/web/main.js:init`
`handleSuccess`	software	healthy	`app/assets/web/main.js:handleSuccess`
`handleFilesDisplay`	software	healthy	`app/assets/web/main.js:handleFilesDisplay`
`escapeHtml`	software	healthy	`app/assets/web/main.js:escapeHtml`
`formatBytes`	software	healthy	`app/assets/web/main.js:formatBytes`
`getKeys`	software	healthy	`app/assets/web/main.js:getKeys`

Label	Layer	Status	Path
`APK_BUILD_DIR`	cicd	healthy	`—`
`ANDROID_KEY_PROPERTIES`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`
`WINGET_TOKEN`	cicd	healthy	`—`
`FLUTTER_VERSION`	cicd	healthy	`—`
`RUST_VERSION`	cicd	healthy	`—`
`ANDROID_KEY_STORE`	cicd	healthy	`—`

Label	Layer	Status	Path
`port:3000`	network	healthy	`server/Dockerfile`
`port:53317`	network	healthy	`core/src/main.rs`

Label	Layer	Status	Path
`1.2.3.4`	network	healthy	`server/src/util/ip.rs`
`192.168.1.1`	network	healthy	`core/src/http/client/url.rs`

Label	Layer	Status	Path
`repobility-clone-cgwcf80x`	software	healthy	`/tmp/repobility-clone-cgwcf80x`

Label	Layer	Status	Path
`image::server/Dockerfile`	hardware	healthy	`server/Dockerfile`

Label	Layer	Status	Path
`auth::server/src/config/error.rs`	security	healthy	`server/src/config/error.rs`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/6f84cbb8-978e-42dd-be40-0a5e04aea6f7/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/6f84cbb8-978e-42dd-be40-0a5e04aea6f7/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

localsend/localsend

Complete repo analysis

file 50+

directory 50+

job 28

pipeline 11

function 10

env_var 7

port 2

service 2

repo 1

container 1

auth 1