https://github.com/frappe/erpnext.git
· scanned 2026-05-20 01:10 UTC (3 weeks, 3 days ago)
· 10 languages
932 raw signals (95 security + 837 graph) 11/13 scanners ran 58th percentile · Python · medium (20-100K LoC) System graph score 71 (lower by 3)
Last scanned 3 weeks, 3 days ago · v3 · 258 actionable findings from 2 signal sources. 116 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.
| Component | Sub-score | Weight | Contribution |
|---|---|---|---|
structure_score |
60.0 | 0.15 | 9.00 |
security_score |
100.0 | 0.25 | 25.00 |
testing_score |
40.0 | 0.20 | 8.00 |
documentation_score |
63.0 | 0.15 | 9.45 |
practices_score |
64.0 | 0.15 | 9.60 |
code_quality |
69.0 | 0.10 | 6.90 |
| Overall | 1.00 | 68.0 |
Showing 211 of 258 actionable findings. 374 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.
erpnext/accounts/doctype/accounts_settings/accounts_settings.py:116, 117, 120, 122, 126, 128, 132, 134, +8 more (16 hits)erpnext/accounts/custom/address.py:12, 13, 20, 26, 28, 31, 47, 48 (9 hits).github/workflows/docker-release.yml:13.github/workflows/patch.yml:32.github/workflows/run-individual-tests.yml:67.github/workflows/server-tests-mariadb.yml:58.github/workflows/server-tests-postgres.yml:36banking/src/components/features/BankReconciliation/BankEntryModal.tsx:255
Eval used
banking/src/components/features/BankReconciliation/Rules/RuleForm.tsx:452
Eval used
erpnext/accounts/doctype/bank_transaction_rule/bank_transaction_rule.py:117
erpnext/accounts/doctype/bank_statement_import/bank_statement_import.py:162
Error handlingquality
.github/workflows/linters.yml:24.github/workflows/server-tests-mariadb.yml:161.github/workflows/generate-pot-file.yml
CI/CD securitySupply chainGithub actions
banking/src/components/features/BankReconciliation/BankClearanceSummary.tsx:210
Dangerous innerhtml
banking/src/components/features/BankReconciliation/BankReconciliationStatement.tsx:196
Dangerous innerhtml
banking/src/components/features/BankReconciliation/BankTransactionList.tsx:250
Dangerous innerhtml
banking/src/components/features/BankReconciliation/IncorrectlyClearedEntries.tsx:184
Dangerous innerhtml
banking/src/components/features/BankReconciliation/MatchAndReconcile.tsx:137banking/src/components/features/BankReconciliation/Rules/RuleForm.tsx:444banking/src/components/features/BankReconciliation/TransferModal.tsx:180banking/src/components/ui/select.tsx:24banking/src/components/ui/textarea.tsx:12.github/workflows/run-individual-tests.yml:20, 76, 79, 84, 93, 102, 116 (13 hits).github/workflows/patch.yml:41, 52, 60, 69, 78, 92 (11 hits).github/workflows/server-tests-mariadb.yml:68, 71, 84, 93, 102, 144, 155, 158 (8 hits).github/workflows/server-tests-postgres.yml:50, 53, 66, 75, 84 (8 hits).github/workflows/generate-pot-file.yml:24, 29, 34 (6 hits).github/workflows/docs-checker.yml:16, 21 (4 hits).github/workflows/label-base-on-title.yml:15 (2 hits).github/workflows/linters.yml:18, 33 (2 hits)repo-level (16 hits)repo-level (2 hits)package.json
CI/CD securitySupply chainNpm
erpnext/projects/doctype/task/task.py:318
erpnext/subcontracting/doctype/subcontracting_bom/subcontracting_bom.py:35
erpnext/manufacturing/doctype/bom_creator/bom_creator.py:73
erpnext/manufacturing/doctype/bom_creator/bom_creator.py:163
erpnext/commands/__init__.py:7
erpnext/__init__.py:178
erpnext/deprecation_dumpster.py:87
erpnext/projects/doctype/task/task.py:296
erpnext/erpnext_integrations/utils.py:11
erpnext/projects/doctype/project/project.py:187
erpnext/__init__.py:58
erpnext/erpnext_integrations/utils.py:10
This page is publicly accessible at:
https://repobility.com/scan/7bfa3179-7646-4f6c-9965-6c3558bc8cc9/
To check status programmatically (no auth required):
curl -s https://repobility.com/api/v1/public/scan/7bfa3179-7646-4f6c-9965-6c3558bc8cc9/
Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.