neomjs/neo

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

31 of your 89 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Upstream (GitHub) caused delay on this scan — not Repobility.

GitHub API rate-limited (HTTP 403) — preflight skipped, fell back to direct git clone.
Clone from GitHub took 32.46s for a 63.7 MB repo slow.
Repobility's analysis ran in 15.55s after the clone landed.

https://github.com/neomjs/neo · scanned 2026-06-06 00:07 UTC (4 days, 3 hours ago) · 10 languages

153 raw signals (67 security + 86 graph) 11/13 scanners ran 97th percentile · Javascript · tiny (<2K LoC) System graph score 70 (higher by 16)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 4 days, 3 hours ago · v2 · 53 actionable findings from 2 signal sources. 57 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

88.9% cov · 17 findings

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	85.0	0.15	12.75
`security_score`	100.0	0.25	25.00
`testing_score`	85.0	0.20	17.00
`documentation_score`	75.0	0.15	11.25
`practices_score`	78.0	0.15	11.70
`code_quality`	80.0	0.10	8.00
Overall		1.00	85.7

security_score may be inflated — optional security scanners were skipped on this fast scan

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 2 High 4 Medium 15 Low 7 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 36 System graph 17 Crowd 0 Layer: Security 9 Quality 23 Software 3 Cicd 4 Frontend 2 Network 7 Hardware 5

Exclude dismissed / FP Exclude test files

All 16735 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`README.md`	software	healthy	`README.md`
`package.json`	software	healthy	`package.json`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`BACKERS.md`	software	healthy	`BACKERS.md`
`package-lock.json`	software	healthy	`package-lock.json`
`AGENTS_STARTUP.md`	software	healthy	`AGENTS_STARTUP.md`
`ROADMAP.md`	software	healthy	`ROADMAP.md`
`AGENTS.md`	software	healthy	`AGENTS.md`
`sdk-manifest.md`	software	healthy	`ai/sdk-manifest.md`
`PROTOCOL.md`	software	healthy	`ai/demo-agents/PROTOCOL.md`
`openapi.yaml`	software	healthy	`ai/mcp/server/github-workflow/openapi.yaml`
`openapi.yaml`	software	healthy	`ai/mcp/server/neural-link/openapi.yaml`
`openapi.yaml`	software	healthy	`ai/mcp/server/knowledge-base/openapi.yaml`
`openapi.yaml`	software	healthy	`ai/mcp/server/file-system/openapi.yaml`
`openapi.yaml`	software	healthy	`ai/mcp/server/gitlab-workflow/openapi.yaml`
`openapi.yaml`	software	healthy	`ai/mcp/server/memory-core/openapi.yaml`
`setup_mlx.sh`	software	healthy	`ai/mcp/server/memory-core/scripts/setup_mlx.sh`
`wake-prompt-landing-matrix.md`	software	healthy	`ai/docs/wake-prompt-landing-matrix.md`
`docker-compose.test.yml`	software	healthy	`ai/deploy/docker-compose.test.yml`
`docker-compose.dev.yml`	software	healthy	`ai/deploy/docker-compose.dev.yml`
`Dockerfile`	software	healthy	`ai/deploy/Dockerfile`
`docker-compose.yml`	software	healthy	`ai/deploy/docker-compose.yml`
`README.md`	software	healthy	`ai/examples/cloud-deployment/README.md`
`deploy-pipeline.sh`	software	healthy	`ai/examples/cloud-deployment/deploy-pipeline.sh`
`pre-push-hook.sh`	software	healthy	`ai/examples/cloud-deployment/pre-push-hook.sh`
`README.md`	software	healthy	`ai/examples/cloud-deployment/minimal-external-workspace/REA…`
`package.json`	software	healthy	`ai/examples/cloud-deployment/minimal-external-workspace/pac…`
`example.proto`	software	healthy	`ai/examples/cloud-deployment/minimal-external-workspace/pro…`
`CONTENT_GRAMMAR.md`	software	healthy	`ai/services/github-workflow/sync/CONTENT_GRAMMAR.md`
`identity-tuple.md`	software	healthy	`ai/services/knowledge-base/parser/identity-tuple.md`
`backup-record-v1.schema.json`	software	healthy	`ai/services/knowledge-base/parser/backup-record-v1.schema.j…`
`deletion-signaling-contract.md`	software	healthy	`ai/services/knowledge-base/parser/deletion-signaling-contra…`
`parsed-chunk-v1.schema.json`	software	healthy	`ai/services/knowledge-base/parser/parsed-chunk-v1.schema.js…`
`Glossary.md`	software	healthy	`learn/Glossary.md`
`tree.json`	software	healthy	`learn/tree.json`
`README.md`	software	healthy	`learn/README.md`
`UsingTheseTopics.md`	software	healthy	`learn/UsingTheseTopics.md`
`benchmarking-frontends-2025.md`	software	healthy	`learn/blog/benchmarking-frontends-2025.md`
`json-blueprints-and-shared-workers.md`	software	healthy	`learn/blog/json-blueprints-and-shared-workers.md`
`context-window-tax.md`	software	healthy	`learn/blog/context-window-tax.md`
`v10-deep-dive-reactivity.md`	software	healthy	`learn/blog/v10-deep-dive-reactivity.md`
`v10-deep-dive-functional-components.md`	software	healthy	`learn/blog/v10-deep-dive-functional-components.md`
`v10-deep-dive-vdom-revolution.md`	software	healthy	`learn/blog/v10-deep-dive-vdom-revolution.md`
`context-engineering-done-right.md`	software	healthy	`learn/blog/context-engineering-done-right.md`
`v10-deep-dive-state-provider.md`	software	healthy	`learn/blog/v10-deep-dive-state-provider.md`
`Gemini3_MCP_Contributor.md`	software	healthy	`learn/blog/Gemini3_MCP_Contributor.md`
`v10-post1-love-story.md`	software	healthy	`learn/blog/v10-post1-love-story.md`
`ai-native-platform-answers-questions.md`	software	healthy	`learn/blog/ai-native-platform-answers-questions.md`
`NeoVsExtJs.md`	software	healthy	`learn/comparisons/NeoVsExtJs.md`
`NeoVsNextJs.md`	software	healthy	`learn/comparisons/NeoVsNextJs.md`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`ai`	software	healthy	`ai`
`demo-agents`	software	healthy	`ai/demo-agents`
`mcp`	software	healthy	`ai/mcp`
`server`	software	healthy	`ai/mcp/server`
`github-workflow`	software	healthy	`ai/mcp/server/github-workflow`
`neural-link`	software	healthy	`ai/mcp/server/neural-link`
`knowledge-base`	software	healthy	`ai/mcp/server/knowledge-base`
`file-system`	software	healthy	`ai/mcp/server/file-system`
`gitlab-workflow`	software	healthy	`ai/mcp/server/gitlab-workflow`
`memory-core`	software	healthy	`ai/mcp/server/memory-core`
`scripts`	software	healthy	`ai/mcp/server/memory-core/scripts`
`docs`	software	healthy	`ai/docs`
`deploy`	software	healthy	`ai/deploy`
`examples`	software	healthy	`ai/examples`
`cloud-deployment`	software	healthy	`ai/examples/cloud-deployment`
`minimal-external-workspace`	software	healthy	`ai/examples/cloud-deployment/minimal-external-workspace`
`proto`	software	healthy	`ai/examples/cloud-deployment/minimal-external-workspace/pro…`
`services`	software	healthy	`ai/services`
`github-workflow`	software	healthy	`ai/services/github-workflow`
`sync`	software	healthy	`ai/services/github-workflow/sync`
`knowledge-base`	software	healthy	`ai/services/knowledge-base`
`parser`	software	healthy	`ai/services/knowledge-base/parser`
`learn`	software	healthy	`learn`
`blog`	software	healthy	`learn/blog`
`comparisons`	software	healthy	`learn/comparisons`
`gettingstarted`	software	healthy	`learn/gettingstarted`
`javascript`	software	healthy	`learn/javascript`
`benefits`	software	healthy	`learn/benefits`
`agentos`	software	healthy	`learn/agentos`
`measurements`	software	healthy	`learn/agentos/measurements`
`wake-substrate`	software	healthy	`learn/agentos/wake-substrate`
`process`	software	healthy	`learn/agentos/process`
`tooling`	software	healthy	`learn/agentos/tooling`
`incidents`	software	healthy	`learn/agentos/incidents`
`cloud-deployment`	software	healthy	`learn/agentos/cloud-deployment`
`decisions`	software	healthy	`learn/agentos/decisions`
`guides`	software	healthy	`learn/guides`
`devindex`	software	healthy	`learn/guides/devindex`
`frontend`	software	healthy	`learn/guides/devindex/frontend`
`personas`	software	healthy	`learn/guides/devindex/personas`
`data-factory`	software	healthy	`learn/guides/devindex/data-factory`
`testing`	software	healthy	`learn/guides/testing`
`coreengine`	software	healthy	`learn/guides/coreengine`
`specificfeatures`	software	healthy	`learn/guides/specificfeatures`
`datahandling`	software	healthy	`learn/guides/datahandling`
`uibuildingblocks`	software	healthy	`learn/guides/uibuildingblocks`
`userinteraction`	software	healthy	`learn/guides/userinteraction`
`events`	software	healthy	`learn/guides/userinteraction/events`
`form_fields`	software	healthy	`learn/guides/userinteraction/form_fields`
`fundamentals`	software	healthy	`learn/guides/fundamentals`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`port:02`	network	healthy	`ai/mcp/server/github-workflow/openapi.yaml`
`port:49`	network	healthy	`ai/mcp/server/github-workflow/openapi.yaml`
`port:12`	network	healthy	`ai/mcp/server/github-workflow/openapi.yaml`
`port:01`	network	healthy	`ai/mcp/server/github-workflow/openapi.yaml`
`port:48`	network	healthy	`ai/mcp/server/github-workflow/openapi.yaml`
`port:15`	network	healthy	`ai/mcp/server/github-workflow/openapi.yaml`
`port:10`	network	healthy	`ai/mcp/server/github-workflow/openapi.yaml`
`port:13`	network	healthy	`ai/mcp/server/memory-core/openapi.yaml`
`port:33`	network	healthy	`ai/mcp/server/memory-core/openapi.yaml`
`port:18080`	network	healthy	`ai/deploy/docker-compose.test.yml`
`port:8000`	network	healthy	`ai/deploy/docker-compose.test.yml`
`port:13000`	network	healthy	`ai/deploy/docker-compose.test.yml`
`port:3000`	network	healthy	`ai/deploy/docker-compose.test.yml`
`port:13003`	network	healthy	`ai/deploy/docker-compose.test.yml`
`port:3003`	network	healthy	`ai/deploy/docker-compose.test.yml`
`port:13001`	network	healthy	`ai/deploy/docker-compose.test.yml`
`port:3001`	network	healthy	`ai/deploy/docker-compose.test.yml`
`port:13002`	network	healthy	`ai/deploy/docker-compose.test.yml`
`port:3002`	network	healthy	`ai/deploy/docker-compose.test.yml`
`port:443`	network	healthy	`ai/deploy/docker-compose.yml`

Label	Layer	Status	Path
`gha::test`	cicd	healthy	`.github/workflows/test.yml`
`gha::npm-publish`	cicd	healthy	`.github/workflows/npm-publish.yml`
`gha::codeql-analysis`	cicd	healthy	`.github/workflows/codeql-analysis.yml`
`gha::check-retired-primitives`	cicd	healthy	`.github/workflows/check-retired-primitives.yml`
`gha::close-inactive-issues`	cicd	healthy	`.github/workflows/close-inactive-issues.yml`
`gha::mcp-test-location-lint`	cicd	healthy	`.github/workflows/mcp-test-location-lint.yml`
`gha::skill-manifest-lint`	cicd	healthy	`.github/workflows/skill-manifest-lint.yml`
`gha::config-template-ssot-lint`	cicd	healthy	`.github/workflows/config-template-ssot-lint.yml`
`gha::pr-base-guard`	cicd	healthy	`.github/workflows/pr-base-guard.yml`
`gha::agent-pr-body-lint`	cicd	healthy	`.github/workflows/agent-pr-body-lint.yml`
`gha::substrate-size-guard`	cicd	healthy	`.github/workflows/substrate-size-guard.yml`
`gha::data-sync-pipeline`	cicd	healthy	`.github/workflows/data-sync-pipeline.yml`
`gha::tree-json-lint`	cicd	healthy	`.github/workflows/tree-json-lint.yml`
`gha::prevent-reopen`	cicd	healthy	`.github/workflows/prevent-reopen.yml`
`gha::agent-pr-review-body-lint`	cicd	healthy	`.github/workflows/agent-pr-review-body-lint.yml`

Label	Layer	Status	Path
`test`	cicd	healthy	`.github/workflows/test.yml`
`build`	cicd	healthy	`.github/workflows/npm-publish.yml`
`analyze`	cicd	healthy	`.github/workflows/codeql-analysis.yml`
`check`	cicd	healthy	`.github/workflows/check-retired-primitives.yml`
`close-issues`	cicd	healthy	`.github/workflows/close-inactive-issues.yml`
`lint`	cicd	healthy	`.github/workflows/mcp-test-location-lint.yml`
`lint`	cicd	healthy	`.github/workflows/skill-manifest-lint.yml`
`lint`	cicd	healthy	`.github/workflows/config-template-ssot-lint.yml`
`enforce-dev-base`	cicd	healthy	`.github/workflows/pr-base-guard.yml`
`lint-pr-body`	cicd	healthy	`.github/workflows/agent-pr-body-lint.yml`
`check-size`	cicd	healthy	`.github/workflows/substrate-size-guard.yml`
`run-pipeline`	cicd	healthy	`.github/workflows/data-sync-pipeline.yml`
`lint`	cicd	healthy	`.github/workflows/tree-json-lint.yml`
`prevent-reopen`	cicd	healthy	`.github/workflows/prevent-reopen.yml`
`lint-pr-review-body`	cicd	healthy	`.github/workflows/agent-pr-review-body-lint.yml`

Label	Layer	Status	Path
`legacyFormat`	software	healthy	`test/playwright/integration/ai/kb-ingestion/fixtures/extern…`
`LegacyStore`	software	healthy	`test/playwright/integration/ai/kb-ingestion/fixtures/extern…`
`LegacyWidget`	software	healthy	`test/playwright/integration/ai/kb-ingestion/fixtures/extern…`
`r`	software	healthy	`docs/resources/lib/highlight/highlight.pack.js:r`
`do`	software	healthy	`docs/resources/lib/highlight/highlight.pack.js:do`
`r`	software	healthy	`examples/component/toast/resources/lib/highlight/highlight.…`
`do`	software	healthy	`examples/component/toast/resources/lib/highlight/highlight.…`

Label	Layer	Status	Path
`image::ai/deploy/Dockerfile`	hardware	healthy	`ai/deploy/Dockerfile`
`chroma`	hardware	healthy	`ai/deploy/docker-compose.yml`
`kb-server`	hardware	healthy	`ai/deploy/docker-compose.yml`
`mc-server`	hardware	healthy	`ai/deploy/docker-compose.yml`
`orchestrator`	hardware	healthy	`ai/deploy/docker-compose.yml`
`ingress`	hardware	healthy	`ai/deploy/docker-compose.yml`
`local-model`	hardware	healthy	`ai/deploy/docker-compose.yml`

Label	Layer	Status	Path
`auth::learn/tree.json`	security	healthy	`learn/tree.json`
`auth::ai/deploy/docker-compose.test.yml`	security	healthy	`ai/deploy/docker-compose.test.yml`
`auth::ai/mcp/server/memory-core/openapi.yaml`	security	healthy	`ai/mcp/server/memory-core/openapi.yaml`

Label	Layer	Status	Path
`PAGES_DEPLOY_PAT`	cicd	healthy	`—`
`NPM_TOKEN`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`

Label	Layer	Status	Path
`repobility-clone-oua7jrji`	software	healthy	`/tmp/repobility-clone-oua7jrji`

Label	Layer	Status	Path
`BenchmarkSystemReporter`	software	healthy	`test/playwright/e2e/custom-reporter.js:BenchmarkSystemRepor…`

Label	Layer	Status	Path
`grpc::InventoryService`	api	healthy	`ai/examples/cloud-deployment/minimal-external-workspace/pro…`

Label	Layer	Status	Path
`sqlite`	data	healthy	`package.json`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`ai/mcp/server/memory-core/openapi.yaml`

Label	Layer	Status	Path
`caddy`	network	healthy	`ai/deploy/docker-compose.yml`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/73cd45b8-1bb8-438f-a172-fc58bc1cfbb1/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/73cd45b8-1bb8-438f-a172-fc58bc1cfbb1/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

neomjs/neo

Complete repo analysis

file 50+

directory 50+

port 20

pipeline 15

job 15

function 7

container 7

auth 3

env_var 3

repo 1

class 1

grpc 1

database 1

service 1

load_balancer 1