Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

ryojikakizaki-art/ironworks-ado

https://github.com/ryojikakizaki-art/ironworks-ado · scanned 2026-06-15 23:58 UTC (2 months, 3 weeks ago)

99 raw signals (0 security + 99 graph)

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 3 weeks ago · v1 · 99 actionable findings from 1 signal source. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Severity distribution — click a segment to filter
Active filters: layer: api × excluding tests × Reset all
Corpus Intelligence Cross-corpus context (cohort percentile, top patterns, fix plan) is shown only on repositories you own. Sign up and connect your repo to view it.
Scan summary Repository scanned at 61.6/100 with 88.9% coverage. It contains 1175 nodes across 30 cross-layer flows, written primarily in mixed languages. Engine surfaced 99 findings — concentrated in quality (29), security (26), api (25). Risk profile is high: 0 critical, 25 high, 42 medium. Recommended next step: open the quality layer findings first — that's where the highest-impact wins live.

Showing 25 of 99 actionable findings. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

high System graph api Wiring conf 1.00 Dangling fetch: GET /api/admin/order/${row} (v0-design/app/admin/delivery-note/page.tsx:137)
`v0-design/app/admin/delivery-note/page.tsx:137` calls `GET /api/admin/order/${row}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/order/<p>` If this points at an external API, prefix it with `https://` so th…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/admin/orders (v0-design/app/admin/orders/page.tsx:103)
`v0-design/app/admin/orders/page.tsx:103` calls `GET /api/admin/orders` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/orders` If this points at an external API, prefix it with `https://` so the matcher skips …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/session?id=${encodeURIComponent(sessionId)} (v0-design/app/thanks/page.tsx:77)
`v0-design/app/thanks/page.tsx:77` calls `GET /api/session?id=${encodeURIComponent(sessionId)}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/session` If this points at an external API, prefix it with `https://` so…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PATCH /api/admin/order/${row} (v0-design/app/admin/orders/page.tsx:127)
`v0-design/app/admin/orders/page.tsx:127` calls `PATCH /api/admin/order/${row}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/order/<p>` If this points at an external API, prefix it with `https://` so the mat…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/admin/order/${row}/confirm-payment (v0-design/app/admin/orders/page.tsx:159)
`v0-design/app/admin/orders/page.tsx:159` calls `POST /api/admin/order/${row}/confirm-payment` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/order/<p>/confirm-payment` If this points at an external API, prefi…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/admin/order/${row}/notify (v0-design/app/admin/orders/page.tsx:201)
`v0-design/app/admin/orders/page.tsx:201` calls `POST /api/admin/order/${row}/notify` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/order/<p>/notify` If this points at an external API, prefix it with `https:/…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/bank-order (v0-design/components/checkout/bank-order-modal.tsx:69)
`v0-design/components/checkout/bank-order-modal.tsx:69` calls `POST /api/bank-order` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/bank-order` If this points at an external API, prefix it with `https://` so the mat…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/checkout (v0-design/app/products/[slug]/page.tsx:407)
`v0-design/app/products/[slug]/page.tsx:407` calls `POST /api/checkout` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/checkout` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/checkout/simple (v0-design/components/simple-product-page.tsx:376)
`v0-design/components/simple-product-page.tsx:376` calls `POST /api/checkout/simple` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/checkout/simple` If this points at an external API, prefix it with `https://` so th…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/contact (v0-design/app/contact/page.tsx:259)
`v0-design/app/contact/page.tsx:259` calls `POST /api/contact` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/contact` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/contact (v0-design/app/kaigo/page.tsx:151)
`v0-design/app/kaigo/page.tsx:151` calls `POST /api/contact` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/contact` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/contact (v0-design/app/trade/page.tsx:294)
`v0-design/app/trade/page.tsx:294` calls `POST /api/contact` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/contact` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/contact (v0-design/components/review-form.tsx:65)
`v0-design/components/review-form.tsx:65` calls `POST /api/contact` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/contact` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.resend.com/emails (api/contact.js:101)
`api/contact.js:101` calls `POST https://api.resend.com/emails` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.resend.com/emails` If this points at an external API, prefix it with `https://` so the matche…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.resend.com/emails (api/contact.js:93)
`api/contact.js:93` calls `POST https://api.resend.com/emails` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.resend.com/emails` If this points at an external API, prefix it with `https://` so the matcher…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.resend.com/emails (v0-design/app/api/admin/order/[row]/confirm-payment/route.ts:188)
`v0-design/app/api/admin/order/[row]/confirm-payment/route.ts:188` calls `POST https://api.resend.com/emails` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.resend.com/emails` If this points at an externa…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.resend.com/emails (v0-design/app/api/bank-order/route.ts:274)
`v0-design/app/api/bank-order/route.ts:274` calls `POST https://api.resend.com/emails` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.resend.com/emails` If this points at an external API, prefix it with `…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.resend.com/emails (v0-design/app/api/contact/route.ts:166)
`v0-design/app/api/contact/route.ts:166` calls `POST https://api.resend.com/emails` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.resend.com/emails` If this points at an external API, prefix it with `htt…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.resend.com/emails (v0-design/app/api/contact/route.ts:176)
`v0-design/app/api/contact/route.ts:176` calls `POST https://api.resend.com/emails` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.resend.com/emails` If this points at an external API, prefix it with `htt…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.resend.com/emails (v0-design/app/api/webhook/route.ts:245)
`v0-design/app/api/webhook/route.ts:245` calls `POST https://api.resend.com/emails` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.resend.com/emails` If this points at an external API, prefix it with `htt…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.resend.com/emails (v0-design/app/api/webhook/route.ts:347)
`v0-design/app/api/webhook/route.ts:347` calls `POST https://api.resend.com/emails` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.resend.com/emails` If this points at an external API, prefix it with `htt…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.resend.com/emails (v0-design/app/api/webhook/route.ts:515)
`v0-design/app/api/webhook/route.ts:515` calls `POST https://api.resend.com/emails` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.resend.com/emails` If this points at an external API, prefix it with `htt…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.resend.com/emails (v0-design/lib/shipment-notify.ts:182)
`v0-design/lib/shipment-notify.ts:182` calls `POST https://api.resend.com/emails` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.resend.com/emails` If this points at an external API, prefix it with `https…
Dangling fetchFetch
low System graph api Wiring conf 1.00 Unused endpoint: POST /api/drafting2d
`drafting-agent/main.py` declares `POST /api/drafting2d` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /api/drafting2d/download
`drafting-agent/main.py` declares `POST /api/drafting2d/download` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/8c5be0e5-d8a0-4f41-a89f-a8d8d9c29d2b/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/8c5be0e5-d8a0-4f41-a89f-a8d8d9c29d2b/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.