https://github.com/pnpm/pnpm
· scanned 2026-05-15 00:07 UTC (3 weeks ago)
· 10 languages
305 findings (23 legacy + 282 scanner) 52nd percentile · Typescript · large (100-500K LoC) Scanner says 61 (higher by 15)
Last scanned 3 weeks ago · v1 · 20 findings from 1 source. Findings combine the legacy security pipeline AND the multi-layer engine (atlas, wiring, flows, ranked) AND verified AI agent contributions.
| Component | Sub-score | Weight | Contribution |
|---|---|---|---|
structure_score |
60.0 | 0.15 | 9.00 |
security_score |
87.7 | 0.25 | 21.93 |
testing_score |
80.0 | 0.20 | 16.00 |
documentation_score |
75.0 | 0.15 | 11.25 |
practices_score |
75.0 | 0.15 | 11.25 |
code_quality |
64.5 | 0.10 | 6.45 |
| Overall | 1.00 | 75.9 |
authz: 1.2 ·
docker: 5.2 ·
threat: 6.0
All 7273 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.
| Label | Layer | Status | Path |
|---|---|---|---|
rust-toolchain.toml |
software | healthy | rust-toolchain.toml |
renovate.json |
software | healthy | renovate.json |
deny.toml |
software | healthy | deny.toml |
Cargo.toml |
software | healthy | Cargo.toml |
cspell.json |
software | healthy | cspell.json |
.taplo.toml |
software | healthy | .taplo.toml |
README.md |
software | healthy | README.md |
rustfmt.toml |
software | healthy | rustfmt.toml |
pnpm-lock.yaml |
software | healthy | pnpm-lock.yaml |
package.json |
software | healthy | package.json |
CONTRIBUTING.md |
software | healthy | CONTRIBUTING.md |
tsconfig.lint.json |
software | healthy | tsconfig.lint.json |
pnpm-workspace.yaml |
software | healthy | pnpm-workspace.yaml |
FUNDING.json |
software | healthy | FUNDING.json |
dylint.toml |
software | healthy | dylint.toml |
CODE_OF_CONDUCT.md |
software | healthy | CODE_OF_CONDUCT.md |
SECURITY.md |
software | healthy | SECURITY.md |
verdaccio.yaml |
software | healthy | verdaccio.yaml |
AGENTS.md |
software | healthy | AGENTS.md |
.typos.toml |
software | healthy | .typos.toml |
README.md |
software | healthy | pnpm/README.md |
package.json |
software | healthy | pnpm/package.json |
tsconfig.lint.json |
software | healthy | pnpm/tsconfig.lint.json |
tsconfig.json |
software | healthy | pnpm/tsconfig.json |
bundle-deps.ts |
software | healthy | pnpm/bundle-deps.ts |
bundle.ts |
software | warning | pnpm/bundle.ts |
CHANGELOG.md |
software | healthy | pnpm/CHANGELOG.md |
filterProd.test.ts |
software | warning | pnpm/test/filterProd.test.ts |
config.ts |
software | warning | pnpm/test/config.ts |
run.ts |
software | healthy | pnpm/test/run.ts |
syncInjectedDepsAfterScripts-bin.ts |
software | warning | pnpm/test/syncInjectedDepsAfterScripts-bin.ts |
ci.ts |
software | warning | pnpm/test/ci.ts |
switchingVersions.test.ts |
software | warning | pnpm/test/switchingVersions.test.ts |
deploy.ts |
software | warning | pnpm/test/deploy.ts |
packageManagerCheck.test.ts |
software | warning | pnpm/test/packageManagerCheck.test.ts |
formatError.test.ts |
software | warning | pnpm/test/formatError.test.ts |
hooks.ts |
software | healthy | pnpm/test/hooks.ts |
update.ts |
software | warning | pnpm/test/update.ts |
bin.ts |
software | warning | pnpm/test/bin.ts |
syncInjectedDepsAfterScripts.ts |
software | healthy | pnpm/test/syncInjectedDepsAfterScripts.ts |
uninstall.ts |
software | warning | pnpm/test/uninstall.ts |
dlx.ts |
software | healthy | pnpm/test/dlx.ts |
clean.ts |
software | healthy | pnpm/test/clean.ts |
cli.ts |
software | healthy | pnpm/test/cli.ts |
sbom.ts |
software | warning | pnpm/test/sbom.ts |
errorHandler.test.ts |
software | warning | pnpm/test/errorHandler.test.ts |
exec.ts |
software | warning | pnpm/test/exec.ts |
getConfig.test.ts |
software | healthy | pnpm/test/getConfig.test.ts |
list.ts |
software | healthy | pnpm/test/list.ts |
tsconfig.json |
software | healthy | pnpm/test/tsconfig.json |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
cleanupNodeModules |
software | healthy | pnpm/bundle-deps.ts:cleanupNodeModules |
createDistNodeModules |
software | healthy | pnpm/bundle-deps.ts:createDistNodeModules |
scriptsRan |
software | healthy | pnpm/test/run.ts:scriptsRan |
readPackage |
software | healthy | pnpm/test/hooks.ts:readPackage |
filterLog |
software | healthy | pnpm/test/hooks.ts:filterLog |
importPackage |
software | healthy | pnpm/test/hooks.ts:importPackage |
prepareInjectedDepsWorkspace |
software | healthy | pnpm/test/syncInjectedDepsAfterScripts.ts:prepareInjectedDe… |
createCacheKey |
software | healthy | pnpm/test/dlx.ts:createCacheKey |
cutoff |
software | healthy | pnpm/test/dlx.ts:cutoff |
writeJsonFile |
software | healthy | pnpm/test/clean.ts:writeJsonFile |
packageManifestInodeBefore |
software | healthy | pnpm/test/cli.ts:packageManifestInodeBefore |
packageManifestInodeAfter |
software | healthy | pnpm/test/cli.ts:packageManifestInodeAfter |
buildBaseConfig |
software | healthy | pnpm/test/getConfig.test.ts:buildBaseConfig |
hasPeerA |
software | healthy | pnpm/test/list.ts:hasPeerA |
writeFailingConfigDep |
software | healthy | pnpm/test/configurationalDependencies.test.ts:writeFailingC… |
realPort |
software | healthy | pnpm/test/install/pnpmRegistry.ts:realPort |
readPackage |
software | healthy | pnpm/test/install/hooks.ts:readPackage |
to |
software | healthy | pnpm/test/install/hooks.ts:to |
preResolution |
software | healthy | pnpm/test/install/hooks.ts:preResolution |
expectNoNodeBin |
software | healthy | pnpm/test/install/runtimeOnFail.ts:expectNoNodeBin |
globalPkgDir |
software | healthy | pnpm/test/install/global.ts:globalPkgDir |
findGlobalPkg |
software | healthy | pnpm/test/install/global.ts:findGlobalPkg |
findGlobalPkgInstall |
software | healthy | pnpm/test/install/global.ts:findGlobalPkgInstall |
configGet |
software | healthy | pnpm/test/config/get.ts:configGet |
getChangedProjects |
software | healthy | pnpm/test/monorepo/index.ts:getChangedProjects |
readPackage |
software | healthy | pnpm/test/monorepo/index.ts:readPackage |
add |
software | healthy | pnpm/test/utils/distTags.ts:add |
isPortInUse |
software | healthy | pnpm/test/utils/isPortInUse.ts:isPortInUse |
execPnpm |
software | healthy | pnpm/test/utils/execPnpm.ts:execPnpm |
spawnPnpm |
software | healthy | pnpm/test/utils/execPnpm.ts:spawnPnpm |
execPnpx |
software | healthy | pnpm/test/utils/execPnpm.ts:execPnpx |
spawnPnpx |
software | healthy | pnpm/test/utils/execPnpm.ts:spawnPnpx |
execPnpmSync |
software | healthy | pnpm/test/utils/execPnpm.ts:execPnpmSync |
execPnpxSync |
software | healthy | pnpm/test/utils/execPnpm.ts:execPnpxSync |
createEnv |
software | healthy | pnpm/test/utils/execPnpm.ts:createEnv |
fallback |
software | healthy | pnpm/test/utils/execPnpm.ts:fallback |
registerProcessTimeout |
software | healthy | pnpm/test/utils/execPnpm.ts:registerProcessTimeout |
testDefaults |
software | healthy | pnpm/test/utils/testDefaults.ts:testDefaults |
pathToLocalPkg |
software | healthy | pnpm/test/utils/localPkg.ts:pathToLocalPkg |
local |
software | healthy | pnpm/test/utils/localPkg.ts:local |
readPackage |
software | healthy | pnpm/test/recursive/misc.ts:readPackage |
linkSync |
software | healthy | pnpm/artifacts/exe/setup.js:linkSync |
exePlatformPkgName |
software | healthy | pnpm/artifacts/exe/platform-pkg-name.js:exePlatformPkgName |
legacyOsSegment |
software | healthy | pnpm/artifacts/exe/platform-pkg-name.js:legacyOsSegment |
buildFailurePathSandbox |
software | healthy | pnpm/artifacts/exe/test/setup.test.ts:buildFailurePathSandb… |
buildWinSetupSandbox |
software | healthy | pnpm/artifacts/exe/test/setup.test.ts:buildWinSetupSandbox |
bashAvailable |
software | healthy | pnpm/artifacts/exe/test/setup.test.ts:bashAvailable |
removeMapFiles |
software | healthy | pnpm/artifacts/exe/scripts/build-artifacts.ts:removeMapFiles |
errorHandler |
software | healthy | pnpm/src/errorHandler.ts:errorHandler |
killProcesses |
software | healthy | pnpm/src/errorHandler.ts:killProcesses |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
pnpm |
software | healthy | pnpm |
test |
software | healthy | pnpm/test |
verifyDepsBeforeRun |
software | healthy | pnpm/test/verifyDepsBeforeRun |
install |
software | healthy | pnpm/test/install |
config |
software | healthy | pnpm/test/config |
__fixtures__ |
software | healthy | pnpm/test/__fixtures__ |
workspace-with-circular-peers |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers |
addons |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons |
addon10 |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
package |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
test-app |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
addon1 |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
package |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
test-app |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
addon2 |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
package |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
test-app |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
addon8 |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
package |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
test-app |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
addon15 |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
package |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
test-app |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
addon5 |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
package |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
test-app |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
addon11 |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
package |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
test-app |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
addon13 |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
package |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
test-app |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
addon7 |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
package |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
test-app |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
addon9 |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
package |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
test-app |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
addon12 |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
package |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
test-app |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
addon3 |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
package |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
test-app |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
addon6 |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
package |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
test-app |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
addon4 |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
package |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
test-app |
software | healthy | pnpm/test/__fixtures__/workspace-with-circular-peers/addons… |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
VersionSwitchFail |
software | healthy | pnpm/src/switchCliVersion.ts:VersionSwitchFail |
ConfigSetKeyEmptyKeyError |
software | healthy | config/commands/src/configSet.ts:ConfigSetKeyEmptyKeyError |
ConfigSetDeepKeyError |
software | healthy | config/commands/src/configSet.ts:ConfigSetDeepKeyError |
ConfigSetUnsupportedIniConfigKeyError |
software | healthy | config/commands/src/configSet.ts:ConfigSetUnsupportedIniCon… |
ConfigSetUnsupportedWorkspaceKeyError |
software | healthy | config/commands/src/configSet.ts:ConfigSetUnsupportedWorksp… |
ConfigSetUnsupportedYamlConfigKeyError |
software | healthy | config/commands/src/configSet.ts:ConfigSetUnsupportedYamlCo… |
AuthMissingSeparatorError |
software | healthy | config/reader/src/parseCreds.ts:AuthMissingSeparatorError |
TokenHelperUnsupportedCharacterError |
software | healthy | config/reader/src/parseCreds.ts:TokenHelperUnsupportedChara… |
ProjectConfigIsNotAnObjectError |
software | healthy | config/reader/src/projectConfig.ts:ProjectConfigIsNotAnObje… |
ProjectConfigInvalidValueTypeError |
software | healthy | config/reader/src/projectConfig.ts:ProjectConfigInvalidValu… |
ProjectConfigUnsupportedFieldError |
software | healthy | config/reader/src/projectConfig.ts:ProjectConfigUnsupported… |
ProjectConfigsIsNeitherObjectNorArrayError |
software | healthy | config/reader/src/projectConfig.ts:ProjectConfigsIsNeitherO… |
ProjectConfigsArrayItemIsNotAnObjectError |
software | healthy | config/reader/src/projectConfig.ts:ProjectConfigsArrayItemI… |
ProjectConfigsArrayItemMatchIsNotDefinedError |
software | healthy | config/reader/src/projectConfig.ts:ProjectConfigsArrayItemM… |
ProjectConfigsArrayItemMatchIsNotAnArrayError |
software | healthy | config/reader/src/projectConfig.ts:ProjectConfigsArrayItemM… |
ProjectConfigsMatchItemIsNotAStringError |
software | healthy | config/reader/src/projectConfig.ts:ProjectConfigsMatchItemI… |
UnsupportedPlatformError |
software | healthy | config/package-is-installable/src/checkPlatform.ts:Unsuppor… |
UnsupportedEngineError |
software | healthy | config/package-is-installable/src/checkEngine.ts:Unsupporte… |
LoginNonInteractiveError |
software | healthy | auth/commands/src/login.ts:LoginNonInteractiveError |
LoginInvalidResponseError |
software | healthy | auth/commands/src/login.ts:LoginInvalidResponseError |
LoginMissingCredentialsError |
software | healthy | auth/commands/src/login.ts:LoginMissingCredentialsError |
LoginNoTokenError |
software | healthy | auth/commands/src/login.ts:LoginNoTokenError |
ClassicLoginError |
software | healthy | auth/commands/src/login.ts:ClassicLoginError |
WebLoginError |
software | healthy | auth/commands/src/login.ts:WebLoginError |
LogoutNotLoggedInError |
software | healthy | auth/commands/src/logout.ts:LogoutNotLoggedInError |
LogoutFailedError |
software | healthy | auth/commands/src/logout.ts:LogoutFailedError |
DedupeCheckIssuesError |
software | healthy | installing/dedupe/check/src/DedupeCheckIssuesError.ts:Dedup… |
RemoveMissingDepsError |
software | healthy | installing/commands/src/remove.ts:RemoveMissingDepsError |
PeerDependencyIssuesError |
software | healthy | installing/deps-installer/src/install/reportPeerDependencyI… |
LockfileConfigMismatchError |
software | healthy | installing/deps-installer/src/install/index.ts:LockfileConf… |
IgnoredBuildsError |
software | healthy | installing/deps-installer/src/install/index.ts:IgnoredBuild… |
UnexpectedVirtualStoreDirError |
software | healthy | installing/deps-installer/src/install/checkCompatibility/Un… |
BreakingChangeError |
software | healthy | installing/deps-installer/src/install/checkCompatibility/Br… |
CatalogVersionMismatchError |
software | healthy | installing/deps-installer/src/install/checkCompatibility/Ca… |
ModulesBreakingChangeError |
software | healthy | installing/deps-installer/src/install/checkCompatibility/Mo… |
UnexpectedStoreError |
software | healthy | installing/deps-installer/src/install/checkCompatibility/Un… |
status |
software | healthy | network/fetch/src/fetch.ts:status |
ResponseError |
software | healthy | network/fetch/src/fetch.ts:ResponseError |
SyntheticOtpError |
software | healthy | network/web-auth/src/withOtpHandling.ts:SyntheticOtpError |
OtpNonInteractiveError |
software | healthy | network/web-auth/src/withOtpHandling.ts:OtpNonInteractiveEr… |
OtpSecondChallengeError |
software | healthy | network/web-auth/src/withOtpHandling.ts:OtpSecondChallengeE… |
WebAuthTimeoutError |
software | healthy | network/web-auth/src/WebAuthTimeoutError.ts:WebAuthTimeoutE… |
RecursiveFailError |
software | healthy | cli/utils/src/recursiveSummary.ts:RecursiveFailError |
MetadataStore |
software | healthy | agent/server/src/metadataStore.ts:MetadataStore |
FileStore |
software | healthy | agent/server/src/fileStore.ts:FileStore |
TarballIntegrityError |
software | healthy | worker/src/index.ts:TarballIntegrityError |
DirPatcher |
software | healthy | workspace/injected-deps-syncer/src/DirPatcher.ts:DirPatcher |
InvalidWorkspaceManifestError |
software | healthy | workspace/workspace-manifest-reader/src/errors/InvalidWorks… |
WorkspaceSpec |
software | healthy | workspace/spec-parser/src/index.ts:WorkspaceSpec |
LockfileBreakingChangeError |
software | healthy | lockfile/fs/src/errors/LockfileBreakingChangeError.ts:Lockf… |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
/is-positive/-/is-positive-1.0.0.tgz |
frontend | healthy | installing/package-requester/test/index.ts |
/kevva/is-positive |
frontend | healthy | installing/commands/test/saveCatalog.ts |
/kevva/is-negative |
frontend | healthy | installing/deps-installer/test/lockfile.ts |
/is-positive |
frontend | healthy | installing/deps-installer/test/lockfile.ts |
/is-positive/-/is-positive-3.1.0.tgz |
frontend | healthy | installing/deps-installer/test/lockfile.ts |
/is-positive/download/is-positive-3.1.0.tgz |
frontend | healthy | installing/deps-installer/test/lockfile.ts |
/zkochan/hi |
frontend | healthy | installing/deps-installer/test/install/fromRepo.ts |
/pnpm/for-testing.no-package-json |
frontend | healthy | installing/deps-installer/test/install/fromRepo.ts |
/RexSkz/test-git-subfolder-fetch |
frontend | healthy | installing/deps-installer/test/install/fromRepo.ts |
/pnpm/only-allow |
frontend | healthy | installing/deps-installer/test/install/fromRepo.ts |
/repos/denoland/deno/releases/tags/v2.4.2 |
frontend | healthy | installing/deps-installer/test/install/denoRuntime.ts |
/@pnpm.e2e%2Fpkg-with-1-dep |
frontend | healthy | installing/deps-installer/test/install/errors.ts |
/@pnpm.e2e%2Fdep-of-pkg-with-1-dep |
frontend | healthy | installing/deps-installer/test/install/errors.ts |
/@pnpm.e2e/pkg-with-1-dep/-/@pnpm.e2e/pkg-with-1-dep-100.0.… |
frontend | healthy | installing/deps-installer/test/install/errors.ts |
/@pnpm.e2e/dep-of-pkg-with-1-dep/-/@pnpm.e2e/dep-of-pkg-wit… |
frontend | healthy | installing/deps-installer/test/install/errors.ts |
/is-positive-new |
frontend | healthy | network/fetch/test/fetchFromRegistry.test.ts |
/foo |
frontend | healthy | network/fetch/test/fetchFromRegistry.test.ts |
/bar/baz |
frontend | healthy | network/fetch/test/fetchFromRegistry.test.ts |
/vue@14175 |
frontend | healthy | network/fetch/test/fetchFromRegistry.test.ts |
/vuejs/core/vue@14182 |
frontend | healthy | network/fetch/test/fetchFromRegistry.test.ts |
/vuejs/core/vue@82a13bb6faaa9f77a06b57e69e0934b9f620f333 |
frontend | healthy | network/fetch/test/fetchFromRegistry.test.ts |
/missing-location |
frontend | healthy | network/fetch/test/fetchFromRegistry.test.ts |
/ping |
frontend | healthy | network/fetch/test/fetchFromRegistry.test.ts |
/bad-dates |
frontend | healthy | resolving/npm-resolver/test/publishedBy.test.ts |
/JSON |
frontend | healthy | resolving/npm-resolver/test/index.ts |
/@sindresorhus%2Fis |
frontend | healthy | resolving/npm-resolver/test/index.ts |
/needs-auth |
frontend | healthy | resolving/npm-resolver/test/index.ts |
/bad-pkg |
frontend | healthy | resolving/npm-resolver/test/index.ts |
/code-snippet |
frontend | healthy | resolving/npm-resolver/test/index.ts |
/owner/is-positive |
frontend | healthy | resolving/npm-resolver/test/index.ts |
/platform-pkg |
frontend | healthy | resolving/npm-resolver/test/optionalDependencies.test.ts |
/cache-test |
frontend | healthy | resolving/npm-resolver/test/optionalDependencies.test.ts |
/packages/simple-react-app |
frontend | healthy | resolving/git-resolver/test/index.ts |
/@pnpm%2Fexe |
frontend | healthy | engine/pm/commands/test/self-updater/selfUpdate.test.ts |
/pnpm |
frontend | healthy | engine/pm/commands/test/self-updater/selfUpdate.test.ts |
/pnpm/-/pnpm-9.1.0.tgz |
frontend | healthy | engine/pm/commands/test/self-updater/selfUpdate.test.ts |
/-/npm/v1/keys |
frontend | healthy | deps/security/signatures/test/verifySignatures.ts |
/signed-pkg |
frontend | healthy | deps/security/signatures/test/verifySignatures.ts |
/-/npm/v1/security/advisories/bulk |
frontend | healthy | deps/compliance/commands/test/audit/index.ts |
/path/to/package/[email protected]/node_modules |
frontend | healthy | deps/compliance/license-scanner/test/licenses.spec.ts |
/path/to/package/[email protected]/node_modules |
frontend | healthy | deps/compliance/license-scanner/test/licenses.spec.ts |
/path/to/package/[email protected]/node_modules |
frontend | healthy | deps/compliance/license-scanner/test/licenses.spec.ts |
/path/to/package/[email protected]/node_modules |
frontend | healthy | deps/compliance/license-scanner/test/licenses.spec.ts |
/path/to/package/[email protected]/node_modules |
frontend | healthy | deps/compliance/license-scanner/test/licenses.spec.ts |
/test/path/node_modules/.pnpm/@pnpm.e2e+pkg-with-1-dep@100.… |
frontend | healthy | deps/inspection/list/test/index.ts |
/test/path/local-pkg |
frontend | healthy | deps/inspection/list/test/index.ts |
/workspace/packages/pkg-a |
frontend | healthy | deps/inspection/list/test/index.ts |
/workspace/packages/shared |
frontend | healthy | deps/inspection/list/test/index.ts |
/workspace/packages/pkg-b |
frontend | healthy | deps/inspection/list/test/index.ts |
/workspace |
frontend | healthy | deps/inspection/list/test/index.ts |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
test |
cicd | healthy | .github/workflows/test.yml |
bloat |
cicd | healthy | .github/workflows/pacquet-cargo-unused.yml |
check-dependencies |
cicd | healthy | .github/workflows/pacquet-cargo-unused.yml |
analyze |
cicd | healthy | .github/workflows/codeql-analysis.yml |
benchmark |
cicd | healthy | .github/workflows/pacquet-integrated-benchmark.yml |
build |
cicd | healthy | .github/workflows/docker.yml |
benchmark |
cicd | healthy | .github/workflows/pacquet-micro-benchmark.yml |
benchmark-compare |
cicd | healthy | .github/workflows/pacquet-micro-benchmark.yml |
audit |
cicd | healthy | .github/workflows/audit.yml |
update-lockfile |
cicd | healthy | .github/workflows/update-lockfile.yml |
comment |
cicd | healthy | .github/workflows/pacquet-integrated-benchmark-comment.yml |
compile-and-lint |
cicd | healthy | .github/workflows/ci.yml |
test-smoke |
cicd | healthy | .github/workflows/ci.yml |
test |
cicd | healthy | .github/workflows/ci.yml |
build |
cicd | healthy | .github/workflows/pacquet-release-to-npm.yml |
publish |
cicd | healthy | .github/workflows/pacquet-release-to-npm.yml |
coverage |
cicd | healthy | .github/workflows/pacquet-codecov.yml |
upload-codecov |
cicd | healthy | .github/workflows/pacquet-codecov.yml |
test |
cicd | healthy | .github/workflows/pacquet-ci.yml |
doc |
cicd | healthy | .github/workflows/pacquet-ci.yml |
typos |
cicd | healthy | .github/workflows/pacquet-ci.yml |
deny |
cicd | healthy | .github/workflows/pacquet-ci.yml |
format |
cicd | healthy | .github/workflows/pacquet-ci.yml |
dylint |
cicd | healthy | .github/workflows/pacquet-ci.yml |
release |
cicd | healthy | .github/workflows/release.yml |
tag-in-registry |
cicd | healthy | .github/workflows/update-latest.yml |
publish-to-winget |
cicd | healthy | .github/workflows/update-latest.yml |
post-to-reddit |
cicd | healthy | .github/workflows/update-latest.yml |
post-to-mastodon |
cicd | healthy | .github/workflows/update-latest.yml |
zizmor |
cicd | healthy | .github/workflows/zizmor.yml |
benchmark |
cicd | healthy | .github/workflows/benchmark.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
gha::test |
cicd | healthy | .github/workflows/test.yml |
gha::pacquet-cargo-unused |
cicd | healthy | .github/workflows/pacquet-cargo-unused.yml |
gha::codeql-analysis |
cicd | healthy | .github/workflows/codeql-analysis.yml |
gha::pacquet-integrated-benchmark |
cicd | healthy | .github/workflows/pacquet-integrated-benchmark.yml |
gha::docker |
cicd | healthy | .github/workflows/docker.yml |
gha::pacquet-micro-benchmark |
cicd | healthy | .github/workflows/pacquet-micro-benchmark.yml |
gha::audit |
cicd | healthy | .github/workflows/audit.yml |
gha::update-lockfile |
cicd | healthy | .github/workflows/update-lockfile.yml |
gha::pacquet-integrated-benchmark-comment |
cicd | healthy | .github/workflows/pacquet-integrated-benchmark-comment.yml |
gha::ci |
cicd | healthy | .github/workflows/ci.yml |
gha::pacquet-release-to-npm |
cicd | healthy | .github/workflows/pacquet-release-to-npm.yml |
gha::pacquet-codecov |
cicd | healthy | .github/workflows/pacquet-codecov.yml |
gha::pacquet-ci |
cicd | healthy | .github/workflows/pacquet-ci.yml |
gha::release |
cicd | healthy | .github/workflows/release.yml |
gha::update-latest |
cicd | healthy | .github/workflows/update-latest.yml |
gha::zizmor |
cicd | healthy | .github/workflows/zizmor.yml |
gha::benchmark |
cicd | healthy | .github/workflows/benchmark.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
auth::releasing/commands/test/publish/publish.ts |
security | healthy | releasing/commands/test/publish/publish.ts |
auth::releasing/commands/src/publish/oidc/idToken.ts |
security | healthy | releasing/commands/src/publish/oidc/idToken.ts |
auth::.github/workflows/pacquet-release-to-npm.yml |
security | healthy | .github/workflows/pacquet-release-to-npm.yml |
auth::resolving/git-resolver/test/index.ts |
security | healthy | resolving/git-resolver/test/index.ts |
auth::releasing/commands/src/publish/oidc/authToken.ts |
security | healthy | releasing/commands/src/publish/oidc/authToken.ts |
auth::releasing/commands/src/publish/publishPackedPkg.ts |
security | healthy | releasing/commands/src/publish/publishPackedPkg.ts |
auth::releasing/commands/test/publish/oidcAuthToken.test.ts |
security | healthy | releasing/commands/test/publish/oidcAuthToken.test.ts |
auth::releasing/commands/src/publish/oidc/provenance.ts |
security | healthy | releasing/commands/src/publish/oidc/provenance.ts |
auth::.github/workflows/release.yml |
security | healthy | .github/workflows/release.yml |
auth::releasing/commands/test/publish/oidcIdToken.test.ts |
security | healthy | releasing/commands/test/publish/oidcIdToken.test.ts |
auth::releasing/commands/test/publish/oidcOrchestrator.test… |
security | healthy | releasing/commands/test/publish/oidcOrchestrator.test.ts |
auth::releasing/commands/test/publish/oidcProvenance.test.ts |
security | healthy | releasing/commands/test/publish/oidcProvenance.test.ts |
auth::releasing/commands/src/publish/utils/shared-context.ts |
security | healthy | releasing/commands/src/publish/utils/shared-context.ts |
auth::resolving/npm-resolver/test/trustChecks.test.ts |
security | healthy | resolving/npm-resolver/test/trustChecks.test.ts |
auth::resolving/git-resolver/test/createGitHostedPkgId.test… |
security | healthy | resolving/git-resolver/test/createGitHostedPkgId.test.ts |
| Label | Layer | Status | Path |
|---|---|---|---|
REDDIT_APP_ID |
cicd | healthy | — |
REDDIT_APP_SECRET |
cicd | healthy | — |
WINGET_TOKEN |
cicd | healthy | — |
REDDIT_USERNAME |
cicd | healthy | — |
PNPM_HOME |
cicd | healthy | — |
GITHUB_TOKEN |
cicd | healthy | — |
REDDIT_PASSWORD |
cicd | healthy | — |
NPM_TOKEN |
cicd | healthy | — |
GARNET_API_TOKEN |
cicd | healthy | — |
HOME |
cicd | healthy | — |
MASTODON_ACCESS_TOKEN |
cicd | healthy | — |
UPDATE_LOCKFILE_TOKEN |
cicd | healthy | — |
CODECOV_TOKEN |
cicd | healthy | — |
| Label | Layer | Status | Path |
|---|---|---|---|
password_literal::config/reader/test/parseCreds.test.ts |
security | healthy | config/reader/test/parseCreds.test.ts |
password_literal::config/reader/src/getNetworkConfigs.ts |
security | healthy | config/reader/src/getNetworkConfigs.ts |
password_literal::auth/commands/test/login.test.ts |
security | healthy | auth/commands/test/login.test.ts |
password_literal::auth/commands/src/login.ts |
security | healthy | auth/commands/src/login.ts |
password_literal::network/auth-header/test/getAuthHeadersFr… |
security | healthy | network/auth-header/test/getAuthHeadersFromConfig.test.ts |
password_literal::cli/default-reporter/test/reportingErrors… |
security | healthy | cli/default-reporter/test/reportingErrors.ts |
password_literal::pacquet/crates/config/src/npmrc_auth/test… |
security | healthy | pacquet/crates/config/src/npmrc_auth/tests.rs |
password_literal::pacquet/crates/config/src/npmrc_auth/test… |
security | healthy | pacquet/crates/config/src/npmrc_auth/tests.rs |
| Label | Layer | Status | Path |
|---|---|---|---|
127.0.0.1 |
network | healthy | config/commands/test/configSet.test.ts |
10.0.0.1 |
network | healthy | releasing/commands/test/publish/createPublishContext.test.ts |
10.0.0.5 |
network | healthy | pacquet/crates/config/src/npmrc_auth/tests.rs |
192.168.1.42 |
network | healthy | pacquet/crates/config/src/npmrc_auth/tests.rs |
7.1.12.1 |
network | healthy | pacquet/crates/graph-hasher/src/object_hasher.rs |
| Label | Layer | Status | Path |
|---|---|---|---|
port:4873 |
network | healthy | agent/server/Dockerfile |
port:16 |
network | healthy | modules-mounter/daemon/test/__fixtures__/simple/pnpm-lock.y… |
port:35 |
network | healthy | modules-mounter/daemon/test/__fixtures__/simple/pnpm-lock.y… |
port:12 |
network | healthy | modules-mounter/daemon/test/__fixtures__/simple/pnpm-lock.y… |
port:03 |
network | healthy | modules-mounter/daemon/test/__fixtures__/simple/pnpm-lock.y… |
| Label | Layer | Status | Path |
|---|---|---|---|
sqlite |
data | healthy | pnpm/bundle.ts |
redis |
data | healthy | deps/compliance/commands/test/audit/fixtures/has-vulnerabil… |
| Label | Layer | Status | Path |
|---|---|---|---|
image::docker/Dockerfile |
hardware | healthy | docker/Dockerfile |
image::agent/server/Dockerfile |
hardware | healthy | agent/server/Dockerfile |
| Label | Layer | Status | Path |
|---|---|---|---|
vps::aws |
hardware | healthy | deny.toml |
vps::azure |
hardware | healthy | network/fetch/src/dispatcher.ts |
| Label | Layer | Status | Path |
|---|---|---|---|
repobility-clone-t41eu4__ |
software | healthy | /tmp/repobility-clone-t41eu4__ |
This page is publicly accessible at:
https://repobility.com/scan/7bb8abe5-b64a-4a6a-a079-91f6049c3769/
To check status programmatically (no auth required):
curl -s https://repobility.com/api/v1/public/scan/7bb8abe5-b64a-4a6a-a079-91f6049c3769/Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.