https://github.com/Comfy-Org/ComfyUI
· scanned 2026-05-17 20:33 UTC (2 weeks, 4 days ago)
· 10 languages
551 findings (51 legacy + 500 scanner) 8/10 scanners ran 72nd percentile · Python · large (100-500K LoC) Scanner says 66 (higher by 15)
Last scanned 2 weeks, 4 days ago · v2 · 51 findings from 1 source. Findings combine the legacy security pipeline AND the multi-layer engine (atlas, wiring, flows, ranked) AND verified AI agent contributions.
All 10658 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.
| Label | Layer | Status | Path |
|---|---|---|---|
get_gpu_names |
software | healthy | cuda_malloc.py:7 |
enum_display_devices |
software | healthy | cuda_malloc.py:26 |
cuda_malloc_supported |
software | healthy | cuda_malloc.py:53 |
get_torch_version_noimport |
software | healthy | cuda_malloc.py:100 |
__init__ |
software | healthy | execution.py:1222 |
get |
software | healthy | execution.py:1238 |
init_classic_cache |
software | healthy | execution.py:130 |
init_lru_cache |
software | healthy | execution.py:134 |
init_ram_cache |
software | healthy | execution.py:138 |
init_null_cache |
software | healthy | execution.py:142 |
recursive_debug_dump |
software | healthy | execution.py:146 |
get_input_data |
software | healthy | execution.py:154 |
mark_missing |
software | healthy | execution.py:166 |
resolve_map_node_over_list_results |
software | healthy | execution.py:222 |
_async_map_node_over_list |
software | healthy | execution.py:234 |
slice_dict |
software | healthy | execution.py:244 |
process_inputs |
software | healthy | execution.py:248 |
async_wrapper |
software | healthy | execution.py:284 |
merge_result_data |
software | healthy | execution.py:313 |
get_output_data |
software | healthy | execution.py:334 |
get_output_from_returns |
software | healthy | execution.py:342 |
format_value |
software | healthy | execution.py:407 |
_is_intermediate_output |
software | healthy | execution.py:415 |
_send_cached_ui |
software | healthy | execution.py:420 |
execute |
software | healthy | execution.py:712 |
execution_block_cb |
software | healthy | execution.py:512 |
pre_execute_cb |
software | healthy | execution.py:530 |
await_completion |
software | healthy | execution.py:547 |
reset |
software | healthy | execution.py:657 |
add_message |
software | healthy | execution.py:662 |
handle_execution_error |
software | healthy | execution.py:671 |
_notify_prompt_lifecycle |
software | healthy | execution.py:699 |
execute_async |
software | healthy | execution.py:715 |
validate_inputs |
software | healthy | execution.py:816 |
full_type_name |
software | healthy | execution.py:1092 |
validate_prompt |
software | healthy | execution.py:1098 |
put |
software | healthy | execution.py:1232 |
task_done |
software | healthy | execution.py:1256 |
get_current_queue |
software | healthy | execution.py:1279 |
get_current_queue_volatile |
software | healthy | execution.py:1287 |
get_tasks_remaining |
software | healthy | execution.py:1293 |
wipe_queue |
software | healthy | execution.py:1297 |
delete_queue_item |
software | healthy | execution.py:1302 |
get_history |
software | healthy | execution.py:1315 |
wipe_history |
software | healthy | execution.py:1342 |
delete_history_item |
software | healthy | execution.py:1346 |
set_flag |
software | healthy | execution.py:1350 |
get_flags |
software | healthy | execution.py:1355 |
__init__ |
software | healthy | folder_paths.py:74 |
get |
software | healthy | folder_paths.py:78 |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
BinaryEventTypes |
software | healthy | protocol.py:2 |
DISPLAY_DEVICEA |
software | healthy | cuda_malloc.py:12 |
ExecutionResult |
software | healthy | execution.py:47 |
DuplicateNodeError |
software | healthy | execution.py:52 |
IsChangedCache |
software | healthy | execution.py:55 |
CacheEntry |
software | healthy | execution.py:99 |
CacheType |
software | healthy | execution.py:104 |
CacheSet |
software | healthy | execution.py:111 |
PromptExecutor |
software | healthy | execution.py:650 |
PromptQueue |
software | healthy | execution.py:1221 |
ExecutionStatus |
software | healthy | execution.py:1251 |
CacheHelper |
software | healthy | folder_paths.py:70 |
PromptServer |
software | healthy | server.py:203 |
CLIPTextEncode |
software | healthy | nodes.py:59 |
ConditioningCombine |
software | healthy | nodes.py:83 |
ConditioningAverage |
software | healthy | nodes.py:97 |
ConditioningConcat |
software | healthy | nodes.py:137 |
ConditioningSetArea |
software | healthy | nodes.py:165 |
ConditioningSetAreaPercentage |
software | healthy | nodes.py:188 |
ConditioningSetAreaStrength |
software | healthy | nodes.py:209 |
ConditioningSetMask |
software | healthy | nodes.py:225 |
ConditioningZeroOut |
software | healthy | nodes.py:252 |
ConditioningSetTimestepRange |
software | healthy | nodes.py:277 |
VAEDecode |
software | healthy | nodes.py:294 |
VAEDecodeTiled |
software | healthy | nodes.py:321 |
VAEEncode |
software | healthy | nodes.py:354 |
VAEEncodeTiled |
software | healthy | nodes.py:368 |
VAEEncodeForInpaint |
software | healthy | nodes.py:386 |
InpaintModelConditioning |
software | healthy | nodes.py:427 |
SaveLatent |
software | healthy | nodes.py:479 |
LoadLatent |
software | healthy | nodes.py:532 |
CheckpointLoader |
software | healthy | nodes.py:570 |
CheckpointLoaderSimple |
software | healthy | nodes.py:588 |
DiffusersLoader |
software | healthy | nodes.py:611 |
unCLIPCheckpointLoader |
software | healthy | nodes.py:640 |
CLIPSetLastLayer |
software | healthy | nodes.py:655 |
LoraLoader |
software | healthy | nodes.py:671 |
LoraLoaderModelOnly |
software | healthy | nodes.py:718 |
VAELoader |
software | healthy | nodes.py:731 |
ControlNetLoader |
software | healthy | nodes.py:817 |
DiffControlNetLoader |
software | healthy | nodes.py:835 |
ControlNetApply |
software | healthy | nodes.py:852 |
ControlNetApplyAdvanced |
software | healthy | nodes.py:883 |
UNETLoader |
software | healthy | nodes.py:934 |
CLIPLoader |
software | healthy | nodes.py:959 |
DualCLIPLoader |
software | healthy | nodes.py:986 |
CLIPVisionLoader |
software | healthy | nodes.py:1016 |
CLIPVisionEncode |
software | healthy | nodes.py:1033 |
StyleModelLoader |
software | healthy | nodes.py:1052 |
StyleModelApply |
software | healthy | nodes.py:1068 |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
protocol.py |
software | healthy | protocol.py |
cuda_malloc.py |
software | healthy | cuda_malloc.py |
README.md |
software | healthy | README.md |
execution.py |
software | healthy | execution.py |
CONTRIBUTING.md |
software | healthy | CONTRIBUTING.md |
QUANTIZATION.md |
software | healthy | QUANTIZATION.md |
folder_paths.py |
software | healthy | folder_paths.py |
new_updater.py |
software | healthy | new_updater.py |
.spectral.yaml |
software | healthy | .spectral.yaml |
hook_breaker_ac10a0.py |
software | healthy | hook_breaker_ac10a0.py |
.coderabbit.yaml |
software | healthy | .coderabbit.yaml |
server.py |
software | healthy | server.py |
pyproject.toml |
software | healthy | pyproject.toml |
nodes.py |
software | healthy | nodes.py |
openapi.yaml |
software | healthy | openapi.yaml |
main.py |
software | healthy | main.py |
requirements.txt |
software | healthy | requirements.txt |
node_helpers.py |
software | healthy | node_helpers.py |
SECURITY.md |
software | healthy | SECURITY.md |
latent_preview.py |
software | healthy | latent_preview.py |
comfyui_version.py |
software | warning | comfyui_version.py |
util.py |
software | warning | comfy_api/util.py |
feature_flags.py |
software | healthy | comfy_api/feature_flags.py |
version_list.py |
software | warning | comfy_api/version_list.py |
generate_api_stubs.py |
software | healthy | comfy_api/generate_api_stubs.py |
__init__.py |
software | healthy | comfy_api/input_impl/__init__.py |
video_types.py |
software | warning | comfy_api/input_impl/video_types.py |
__init__.py |
software | healthy | comfy_api/input/__init__.py |
basic_types.py |
software | warning | comfy_api/input/basic_types.py |
video_types.py |
software | warning | comfy_api/input/video_types.py |
_io_public.py |
software | warning | comfy_api/latest/_io_public.py |
__init__.py |
software | healthy | comfy_api/latest/__init__.py |
_io.py |
software | healthy | comfy_api/latest/_io.py |
_caching.py |
software | healthy | comfy_api/latest/_caching.py |
_ui_public.py |
software | warning | comfy_api/latest/_ui_public.py |
_ui.py |
software | healthy | comfy_api/latest/_ui.py |
__init__.py |
software | healthy | comfy_api/latest/_util/__init__.py |
image_types.py |
software | healthy | comfy_api/latest/_util/image_types.py |
geometry_types.py |
software | healthy | comfy_api/latest/_util/geometry_types.py |
video_types.py |
software | healthy | comfy_api/latest/_util/video_types.py |
__init__.py |
software | healthy | comfy_api/latest/_input/__init__.py |
range_types.py |
software | healthy | comfy_api/latest/_input/range_types.py |
curve_types.py |
software | healthy | comfy_api/latest/_input/curve_types.py |
basic_types.py |
software | healthy | comfy_api/latest/_input/basic_types.py |
video_types.py |
software | healthy | comfy_api/latest/_input/video_types.py |
__init__.py |
software | healthy | comfy_api/latest/_input_impl/__init__.py |
video_types.py |
software | healthy | comfy_api/latest/_input_impl/video_types.py |
__init__.py |
software | healthy | comfy_api/util/__init__.py |
video_types.py |
software | warning | comfy_api/util/video_types.py |
__init__.py |
software | healthy | comfy_api/internal/__init__.py |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
comfy_api |
software | healthy | comfy_api |
input_impl |
software | healthy | comfy_api/input_impl |
input |
software | healthy | comfy_api/input |
latest |
software | healthy | comfy_api/latest |
_util |
software | healthy | comfy_api/latest/_util |
_input |
software | healthy | comfy_api/latest/_input |
_input_impl |
software | healthy | comfy_api/latest/_input_impl |
util |
software | healthy | comfy_api/util |
internal |
software | healthy | comfy_api/internal |
v0_0_1 |
software | healthy | comfy_api/v0_0_1 |
torch_helpers |
software | healthy | comfy_api/torch_helpers |
v0_0_2 |
software | healthy | comfy_api/v0_0_2 |
models |
software | healthy | models |
configs |
software | healthy | models/configs |
comfy_config |
software | healthy | comfy_config |
tests |
software | healthy | tests |
execution |
software | healthy | tests/execution |
testing_nodes |
software | healthy | tests/execution/testing_nodes |
testing-pack |
software | healthy | tests/execution/testing_nodes/testing-pack |
inference |
software | healthy | tests/inference |
graphs |
software | healthy | tests/inference/graphs |
compare |
software | healthy | tests/compare |
comfy |
software | healthy | comfy |
cldm |
software | healthy | comfy/cldm |
taesd |
software | healthy | comfy/taesd |
comfy_types |
software | healthy | comfy/comfy_types |
examples |
software | healthy | comfy/comfy_types/examples |
ldm |
software | healthy | comfy/ldm |
genmo |
software | healthy | comfy/ldm/genmo |
vae |
software | healthy | comfy/ldm/genmo/vae |
joint_model |
software | healthy | comfy/ldm/genmo/joint_model |
chroma |
software | healthy | comfy/ldm/chroma |
hidream_o1 |
software | healthy | comfy/ldm/hidream_o1 |
rt_detr |
software | healthy | comfy/ldm/rt_detr |
lightricks |
software | healthy | comfy/ldm/lightricks |
vae |
software | healthy | comfy/ldm/lightricks/vae |
vocoders |
software | healthy | comfy/ldm/lightricks/vocoders |
models |
software | healthy | comfy/ldm/models |
sam3 |
software | healthy | comfy/ldm/sam3 |
kandinsky5 |
software | healthy | comfy/ldm/kandinsky5 |
moge |
software | healthy | comfy/ldm/moge |
aura |
software | healthy | comfy/ldm/aura |
chroma_radiance |
software | healthy | comfy/ldm/chroma_radiance |
hunyuan_video |
software | healthy | comfy/ldm/hunyuan_video |
cogvideo |
software | healthy | comfy/ldm/cogvideo |
audio |
software | healthy | comfy/ldm/audio |
hunyuan3dv2_1 |
software | healthy | comfy/ldm/hunyuan3dv2_1 |
flux |
software | healthy | comfy/ldm/flux |
pixart |
software | healthy | comfy/ldm/pixart |
wan |
software | healthy | comfy/ldm/wan |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
GET /ws |
api | healthy | server.py |
GET / |
api | healthy | server.py |
GET /embeddings |
api | healthy | server.py |
GET /models |
api | healthy | server.py |
GET /models/{folder} |
api | healthy | server.py |
GET /extensions |
api | healthy | server.py |
POST /upload/image |
api | healthy | server.py |
POST /upload/mask |
api | healthy | server.py |
GET /view |
api | healthy | server.py |
GET /view_metadata/{folder_name} |
api | healthy | server.py |
GET /system_stats |
api | healthy | server.py |
GET /features |
api | healthy | server.py |
GET /prompt |
api | healthy | server.py |
GET /object_info |
api | healthy | server.py |
GET /object_info/{node_class} |
api | healthy | server.py |
GET /api/jobs |
api | healthy | server.py |
GET /api/jobs/{job_id} |
api | healthy | server.py |
GET /history |
api | healthy | server.py |
GET /history/{prompt_id} |
api | healthy | server.py |
GET /queue |
api | healthy | server.py |
POST /prompt |
api | healthy | server.py |
POST /queue |
api | healthy | server.py |
POST /interrupt |
api | healthy | server.py |
POST /free |
api | healthy | server.py |
POST /history |
api | healthy | server.py |
GET /users |
api | healthy | app/user_manager.py |
POST /users |
api | healthy | app/user_manager.py |
GET /userdata |
api | healthy | app/user_manager.py |
GET /v2/userdata |
api | healthy | app/user_manager.py |
GET /userdata/{file} |
api | healthy | app/user_manager.py |
POST /userdata/{file} |
api | healthy | app/user_manager.py |
DELETE /userdata/{file} |
api | healthy | app/user_manager.py |
POST /userdata/{file}/move/{dest} |
api | healthy | app/user_manager.py |
GET /workflow_templates |
api | healthy | app/custom_node_manager.py |
GET /i18n |
api | healthy | app/custom_node_manager.py |
GET /experiment/models |
api | healthy | app/model_manager.py |
GET /experiment/models/{folder} |
api | healthy | app/model_manager.py |
GET /experiment/models/preview/{folder}/{path_index}/{filen… |
api | healthy | app/model_manager.py |
GET /global_subgraphs |
api | healthy | app/subgraph_manager.py |
GET /global_subgraphs/{id} |
api | healthy | app/subgraph_manager.py |
GET /node_replacements |
api | healthy | app/node_replace_manager.py |
GET /settings |
api | healthy | app/app_settings.py |
GET /settings/{id} |
api | healthy | app/app_settings.py |
POST /settings |
api | healthy | app/app_settings.py |
POST /settings/{id} |
api | healthy | app/app_settings.py |
GET /api/assets |
api | healthy | app/assets/api/routes.py |
POST /api/assets/from-hash |
api | healthy | app/assets/api/routes.py |
POST /api/assets |
api | healthy | app/assets/api/routes.py |
GET /api/tags |
api | healthy | app/assets/api/routes.py |
GET /api/assets/tags/refine |
api | healthy | app/assets/api/routes.py |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
check-ai-co-authors |
cicd | healthy | .github/workflows/check-ai-co-authors.yml |
stale |
cicd | healthy | .github/workflows/stale-issues.yml |
update-version |
cicd | healthy | .github/workflows/update-version.yml |
pr-test-stable |
cicd | healthy | .github/workflows/pullrequest-ci-run.yml |
comment |
cicd | healthy | .github/workflows/pullrequest-ci-run.yml |
package_comfyui |
cicd | healthy | .github/workflows/windows_release_package.yml |
check-line-endings |
cicd | healthy | .github/workflows/check-line-endings.yml |
dispatch-cloud |
cicd | healthy | .github/workflows/tag-dispatch-cloud.yml |
spectral |
cicd | healthy | .github/workflows/openapi-lint.yml |
build |
cicd | healthy | .github/workflows/windows_release_nightly_pytorch.yml |
release_nvidia_default |
cicd | healthy | .github/workflows/release-stable-all.yml |
release_nvidia_cu126 |
cicd | healthy | .github/workflows/release-stable-all.yml |
release_amd_rocm |
cicd | healthy | .github/workflows/release-stable-all.yml |
release_xpu |
cicd | healthy | .github/workflows/release-stable-all.yml |
inject |
cicd | healthy | .github/workflows/api-node-template.yml |
build_dependencies |
cicd | healthy | .github/workflows/windows_release_dependencies_manual.yml |
generate-models |
cicd | healthy | .github/workflows/update-api-stubs.yml |
ruff |
cicd | healthy | .github/workflows/ruff.yml |
pylint |
cicd | healthy | .github/workflows/ruff.yml |
test-stable |
cicd | healthy | .github/workflows/test-ci.yml |
test-unix-nightly |
cicd | healthy | .github/workflows/test-ci.yml |
package_comfy_windows |
cicd | healthy | .github/workflows/stable-release.yml |
test |
cicd | healthy | .github/workflows/test-launch.yml |
send-webhook |
cicd | healthy | .github/workflows/release-webhook.yml |
build_dependencies |
cicd | healthy | .github/workflows/windows_release_dependencies.yml |
build |
cicd | healthy | .github/workflows/test-build.yml |
test |
cicd | healthy | .github/workflows/test-unit.yml |
update-ci-container |
cicd | healthy | .github/workflows/update-ci-container.yml |
test |
cicd | healthy | .github/workflows/test-execution.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
gha::check-ai-co-authors |
cicd | healthy | .github/workflows/check-ai-co-authors.yml |
gha::stale-issues |
cicd | healthy | .github/workflows/stale-issues.yml |
gha::update-version |
cicd | healthy | .github/workflows/update-version.yml |
gha::pullrequest-ci-run |
cicd | healthy | .github/workflows/pullrequest-ci-run.yml |
gha::windows_release_package |
cicd | healthy | .github/workflows/windows_release_package.yml |
gha::check-line-endings |
cicd | healthy | .github/workflows/check-line-endings.yml |
gha::tag-dispatch-cloud |
cicd | healthy | .github/workflows/tag-dispatch-cloud.yml |
gha::openapi-lint |
cicd | healthy | .github/workflows/openapi-lint.yml |
gha::windows_release_nightly_pytorch |
cicd | healthy | .github/workflows/windows_release_nightly_pytorch.yml |
gha::release-stable-all |
cicd | healthy | .github/workflows/release-stable-all.yml |
gha::api-node-template |
cicd | healthy | .github/workflows/api-node-template.yml |
gha::windows_release_dependencies_manual |
cicd | healthy | .github/workflows/windows_release_dependencies_manual.yml |
gha::update-api-stubs |
cicd | healthy | .github/workflows/update-api-stubs.yml |
gha::ruff |
cicd | healthy | .github/workflows/ruff.yml |
gha::test-ci |
cicd | healthy | .github/workflows/test-ci.yml |
gha::stable-release |
cicd | healthy | .github/workflows/stable-release.yml |
gha::test-launch |
cicd | healthy | .github/workflows/test-launch.yml |
gha::release-webhook |
cicd | healthy | .github/workflows/release-webhook.yml |
gha::windows_release_dependencies |
cicd | healthy | .github/workflows/windows_release_dependencies.yml |
gha::test-build |
cicd | healthy | .github/workflows/test-build.yml |
gha::test-unit |
cicd | healthy | .github/workflows/test-unit.yml |
gha::update-ci-container |
cicd | healthy | .github/workflows/update-ci-container.yml |
gha::test-execution |
cicd | healthy | .github/workflows/test-execution.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
Asset |
data | healthy | app/assets/database/models.py |
AssetReference |
data | healthy | app/assets/database/models.py |
AssetReferenceMeta |
data | healthy | app/assets/database/models.py |
AssetReferenceTag |
data | healthy | app/assets/database/models.py |
Tag |
data | healthy | app/assets/database/models.py |
assets |
data | healthy | app/assets/database/models.py |
asset_references |
data | healthy | app/assets/database/models.py |
asset_reference_meta |
data | healthy | app/assets/database/models.py |
asset_reference_tags |
data | healthy | app/assets/database/models.py |
tags |
data | healthy | app/assets/database/models.py |
Base |
data | healthy | app/database/models.py |
| Label | Layer | Status | Path |
|---|---|---|---|
GCS_SERVICE_ACCOUNT_JSON |
cicd | healthy | — |
MINOR_VERSION |
cicd | healthy | — |
DESKTOP_REPO_DISPATCH_TOKEN |
cicd | healthy | — |
RELEASE_GITHUB_WEBHOOK_URL |
cicd | healthy | — |
RELEASE_GITHUB_WEBHOOK_SECRET |
cicd | healthy | — |
CI_CONTAINER_PAT |
cicd | healthy | — |
CLOUD_REPO_DISPATCH_TOKEN |
cicd | healthy | — |
GITHUB_TOKEN |
cicd | healthy | — |
| Label | Layer | Status | Path |
|---|---|---|---|
127.0.0.1 |
network | healthy | server.py |
127.2.2.2 |
network | healthy | comfy/cli_args.py |
127.3.3.3 |
network | healthy | comfy/cli_args.py |
1.29.3.75 |
network | healthy | tests-unit/app_test/frontend_manager_test.py |
| Label | Layer | Status | Path |
|---|---|---|---|
repobility-clone-rlq7tbw0 |
software | healthy | /tmp/repobility-clone-rlq7tbw0 |
| Label | Layer | Status | Path |
|---|---|---|---|
sqlite |
data | healthy | main.py |
| Label | Layer | Status | Path |
|---|---|---|---|
test_migrations.py |
data | healthy | tests-unit/app_test/test_migrations.py |
| Label | Layer | Status | Path |
|---|---|---|---|
port:8188 |
network | healthy | main.py |
| Label | Layer | Status | Path |
|---|---|---|---|
gpu (detected) |
hardware | healthy | cuda_malloc.py |
| Label | Layer | Status | Path |
|---|---|---|---|
vps::aws |
hardware | healthy | models/configs/v2-inpainting-inference.yaml |
| Label | Layer | Status | Path |
|---|---|---|---|
auth::openapi.yaml |
security | healthy | openapi.yaml |
This page is publicly accessible at:
https://repobility.com/scan/7acbf5ae-5fb1-42b7-965c-bdf96fd53d77/
To check status programmatically (no auth required):
curl -s https://repobility.com/api/v1/public/scan/7acbf5ae-5fb1-42b7-965c-bdf96fd53d77/Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.