Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo
40 of your 235 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 2.58s · analysis 40.36s · 9.4 MB · GitHub API rate-limit (preflight)

evanw/esbuild

https://github.com/evanw/esbuild · scanned 2026-06-12 04:36 UTC (1 day, 3 hours ago) · 10 languages

770 raw signals (225 security + 545 graph) 33rd percentile · Go · large (100-500K LoC) System graph score 67 (higher by 3)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 day, 3 hours ago · v5 · 274 actionable findings from 2 signal sources. 60 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
68.2
/100
Security checks
70
189 findings
System graph
67
88.9% cov · 85 findings
Critical
2
click to filter
Agents
6
0 votes
Crowd
0
reported
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 85.0 0.15 12.75
security_score 55.0 0.25 13.75
testing_score 76.0 0.20 15.20
documentation_score 72.0 0.15 10.80
practices_score 84.0 0.15 12.60
code_quality 45.5 0.10 4.55
Overall 1.00 69.6
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 2 High 142 Medium 27 Low 67 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 189 System graph 85 Crowd 0 Layer: Quality 73 Software 170 Security 3 Cicd 5 Api 1 Frontend 22

All 1003 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
jsFeatureString software healthy compat-table/src/js_table.ts:jsFeatureString
simpleMap software healthy compat-table/src/js_table.ts:simpleMap
compareEngines software healthy compat-table/src/js_table.ts:compareEngines
jsTableMap software healthy compat-table/src/js_table.ts:jsTableMap
whyNotKeys software healthy compat-table/src/js_table.ts:whyNotKeys
engineKeys software healthy compat-table/src/js_table.ts:engineKeys
jsTableValidEnginesMap software healthy compat-table/src/js_table.ts:jsTableValidEnginesMap
generateTableForJS software healthy compat-table/src/js_table.ts:generateTableForJS
enginesKeys software healthy compat-table/src/js_table.ts:enginesKeys
cssFeatureString software healthy compat-table/src/css_table.ts:cssFeatureString
simpleMap software healthy compat-table/src/css_table.ts:simpleMap
compareEngines software healthy compat-table/src/css_table.ts:compareEngines
cssTableMap software healthy compat-table/src/css_table.ts:cssTableMap
engineKeys software healthy compat-table/src/css_table.ts:engineKeys
cssPrefixName software healthy compat-table/src/css_table.ts:cssPrefixName
cssPrefixMap software healthy compat-table/src/css_table.ts:cssPrefixMap
generateTableForCSS software healthy compat-table/src/css_table.ts:generateTableForCSS
compareVersions software healthy compat-table/src/caniuse.ts:compareVersions
compareVersions software healthy compat-table/src/index.ts:compareVersions
mergePrefixMaps software healthy compat-table/src/index.ts:mergePrefixMaps
installGitHubDependencies software healthy compat-table/src/index.ts:installGitHubDependencies
and software healthy compat-table/src/index.ts:and
compareVersions software healthy compat-table/src/mdn.ts:compareVersions
extractProperty software healthy compat-table/src/mdn.ts:extractProperty
isSupported software healthy compat-table/src/mdn.ts:isSupported
parameters software healthy compat-table/src/compat-table.ts:parameters
parameter software healthy compat-table/src/compat-table.ts:parameter
f software healthy compat-table/src/compat-table.ts:f
getValueOfTest software healthy compat-table/src/compat-table.ts:getValueOfTest
updateMap software healthy compat-table/src/compat-table.ts:updateMap
mergeIndividualTestResults software healthy compat-table/src/compat-table.ts:mergeIndividualTestResults
mergeAllTestResults software healthy compat-table/src/compat-table.ts:mergeAllTestResults
buildNeutralLib software healthy scripts/esbuild.js:buildNeutralLib
generateBinaryHashes software healthy scripts/esbuild.js:generateBinaryHashes
generateWorkerCode software healthy scripts/esbuild.js:generateWorkerCode
wasmExecAndWorker software healthy scripts/esbuild.js:wasmExecAndWorker
buildDenoLib software healthy scripts/esbuild.js:buildDenoLib
updateVersionGo software healthy scripts/esbuild.js:updateVersionGo
generateTestCase software healthy scripts/destructuring-fuzzer.js:generateTestCase
choice software healthy scripts/destructuring-fuzzer.js:choice
patternAndValue software healthy scripts/destructuring-fuzzer.js:patternAndValue
sideEffect software healthy scripts/destructuring-fuzzer.js:sideEffect
indent software healthy scripts/destructuring-fuzzer.js:indent
id software healthy scripts/destructuring-fuzzer.js:id
array software healthy scripts/destructuring-fuzzer.js:array
object software healthy scripts/destructuring-fuzzer.js:object
evaluate software healthy scripts/destructuring-fuzzer.js:evaluate
generateTestCases software healthy scripts/destructuring-fuzzer.js:generateTestCases
AssignmentOperator software healthy scripts/destructuring-fuzzer.js:AssignmentOperator
NamespaceExport software healthy scripts/destructuring-fuzzer.js:NamespaceExport

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
CHANGELOG-2022.md software healthy CHANGELOG-2022.md
RUNBOOK.md software healthy RUNBOOK.md
README.md software healthy README.md
LICENSE.md software healthy LICENSE.md
go.mod software healthy go.mod
Makefile software healthy Makefile
CHANGELOG-2023.md software healthy CHANGELOG-2023.md
CHANGELOG-2020.md software healthy CHANGELOG-2020.md
CHANGELOG-2025.md software healthy CHANGELOG-2025.md
CHANGELOG-2024.md software healthy CHANGELOG-2024.md
CHANGELOG-2021.md software healthy CHANGELOG-2021.md
CHANGELOG.md software healthy CHANGELOG.md
dl.sh software healthy dl.sh
README.md software healthy compat-table/README.md
package.json software healthy compat-table/package.json
package-lock.json software healthy compat-table/package-lock.json
tsconfig.json software healthy compat-table/tsconfig.json
js_table.ts software healthy compat-table/src/js_table.ts
css_table.ts software healthy compat-table/src/css_table.ts
caniuse.ts software healthy compat-table/src/caniuse.ts
index.ts software healthy compat-table/src/index.ts
types.d.ts software warning compat-table/src/types.d.ts
mdn.ts software healthy compat-table/src/mdn.ts
compat-table.ts software healthy compat-table/src/compat-table.ts
package.json software healthy require/parcel2/package.json
package-lock.json software healthy require/parcel2/package-lock.json
package.json software healthy require/webpack5/package.json
package-lock.json software healthy require/webpack5/package-lock.json
package.json software healthy require/yarnpnp/package.json
tsconfig.json software healthy require/yarnpnp/tsconfig.json
index.js software healthy require/yarnpnp/bar/index.js
package.json software healthy require/yarnpnp/foo/package.json
index.js software healthy require/yarnpnp/foo/index.js
package.json software healthy require/rollup/package.json
package-lock.json software healthy require/rollup/package-lock.json
README.md software healthy require/old-ts/README.md
package.json software healthy require/old-ts/package.json
package-lock.json software healthy require/old-ts/package-lock.json
ast.go software healthy internal/ast/ast.go
bundler.go software healthy internal/bundler/bundler.go
bundler_default_test.go software healthy internal/bundler_tests/bundler_default_test.go
bundler_css_test.go software healthy internal/bundler_tests/bundler_css_test.go
bundler_lower_test.go software healthy internal/bundler_tests/bundler_lower_test.go
bundler_dce_test.go software healthy internal/bundler_tests/bundler_dce_test.go
bundler_loader_test.go software healthy internal/bundler_tests/bundler_loader_test.go
bundler_ts_test.go software healthy internal/bundler_tests/bundler_ts_test.go
bundler_importphase_test.go software healthy internal/bundler_tests/bundler_importphase_test.go
bundler_yarnpnp_test.go software healthy internal/bundler_tests/bundler_yarnpnp_test.go
bundler_tsconfig_test.go software healthy internal/bundler_tests/bundler_tsconfig_test.go
bundler_splitting_test.go software healthy internal/bundler_tests/bundler_splitting_test.go

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
literals software healthy compat-table/src/index.ts:literals
fields software healthy compat-table/src/compat-table.ts:fields
methods software healthy compat-table/src/compat-table.ts:methods
Foo software healthy scripts/js-api-tests.js:Foo
body software healthy scripts/js-api-tests.js:body
Bar software healthy scripts/js-api-tests.js:Bar
blocks software healthy scripts/js-api-tests.js:blocks
syntax software healthy scripts/js-api-tests.js:syntax
Field software healthy scripts/js-api-tests.js:Field
Method software healthy scripts/js-api-tests.js:Method
Accessor software healthy scripts/js-api-tests.js:Accessor
StaticField software healthy scripts/js-api-tests.js:StaticField
StaticMethod software healthy scripts/js-api-tests.js:StaticMethod
StaticAccessor software healthy scripts/js-api-tests.js:StaticAccessor
StaticFieldThis software healthy scripts/js-api-tests.js:StaticFieldThis
StaticMethodThis software healthy scripts/js-api-tests.js:StaticMethodThis
StaticAccessorThis software healthy scripts/js-api-tests.js:StaticAccessorThis
FieldFromStatic software healthy scripts/js-api-tests.js:FieldFromStatic
MethodFromStatic software healthy scripts/js-api-tests.js:MethodFromStatic
AccessorFromStatic software healthy scripts/js-api-tests.js:AccessorFromStatic
Foo software healthy scripts/decorator-tests.ts:Foo
Baz software healthy scripts/decorator-tests.ts:Baz
Class software healthy scripts/decorator-tests.ts:Class
Class2 software healthy scripts/decorator-tests.ts:Class2
extends software healthy scripts/decorator-tests.ts:extends
Dummy software healthy scripts/decorator-tests.ts:Dummy
decorator software healthy scripts/decorator-tests.ts:decorator
element software healthy scripts/decorator-tests.ts:element
Outer software healthy scripts/decorator-tests.ts:Outer
name software healthy scripts/decorator-tests.ts:name
itself software healthy scripts/decorator-tests.ts:itself
binding software healthy scripts/decorator-tests.ts:binding
decorators software healthy scripts/decorator-tests.ts:decorators
environment software healthy scripts/decorator-tests.ts:environment
statement software healthy scripts/decorator-tests.ts:statement
Bar software healthy scripts/decorator-tests.ts:Bar
class software healthy scripts/decorator-tests.ts:class
BarNoDec software healthy scripts/decorator-tests.ts:BarNoDec
with software healthy scripts/decorator-tests.ts:with
FooOneDec software healthy scripts/decorator-tests.ts:FooOneDec
BarOneDec software healthy scripts/decorator-tests.ts:BarOneDec
expression software healthy scripts/decorator-tests.ts:expression
const software healthy scripts/decorator-tests.ts:const
Test software healthy scripts/end-to-end-tests.js:Test
x software healthy scripts/end-to-end-tests.js:x
Foo software healthy scripts/end-to-end-tests.js:Foo
y software healthy scripts/end-to-end-tests.js:y
ToPrimitive software healthy scripts/end-to-end-tests.js:ToPrimitive
foo software healthy scripts/end-to-end-tests.js:foo
Bar software healthy scripts/end-to-end-tests.js:Bar

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
compat-table software healthy compat-table
src software healthy compat-table/src
require software healthy require
parcel2 software healthy require/parcel2
webpack5 software healthy require/webpack5
yarnpnp software healthy require/yarnpnp
bar software healthy require/yarnpnp/bar
foo software healthy require/yarnpnp/foo
rollup software healthy require/rollup
old-ts software healthy require/old-ts
internal software healthy internal
ast software healthy internal/ast
bundler software healthy internal/bundler
bundler_tests software healthy internal/bundler_tests
config software healthy internal/config
renamer software healthy internal/renamer
js_lexer software healthy internal/js_lexer
compat software healthy internal/compat
css_parser software healthy internal/css_parser
test software healthy internal/test
sourcemap software healthy internal/sourcemap
cache software healthy internal/cache
logger software healthy internal/logger
js_parser software healthy internal/js_parser
helpers software healthy internal/helpers
css_ast software healthy internal/css_ast
xxhash software healthy internal/xxhash
resolver software healthy internal/resolver
runtime software healthy internal/runtime
js_ast software healthy internal/js_ast
cli_helpers software healthy internal/cli_helpers
css_lexer software healthy internal/css_lexer
js_printer software healthy internal/js_printer
api_helpers software healthy internal/api_helpers
css_printer software healthy internal/css_printer
graph software healthy internal/graph
linker software healthy internal/linker
fs software healthy internal/fs
docs software healthy docs
scripts software healthy scripts
browser software healthy scripts/browser
cmd software healthy cmd
esbuild software healthy cmd/esbuild
lib software healthy lib
shared software healthy lib/shared
npm software healthy lib/npm
deno software healthy lib/deno
npm software healthy npm
@esbuild software healthy npm/@esbuild
darwin-arm64 software healthy npm/@esbuild/darwin-arm64

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
esbuild-platforms cicd healthy .github/workflows/ci.yml
esbuild-slow cicd healthy .github/workflows/ci.yml
esbuild cicd healthy .github/workflows/ci.yml
esbuild-old-go-version cicd healthy .github/workflows/ci.yml
esbuild-old-deno-version cicd healthy .github/workflows/ci.yml
validate cicd healthy .github/workflows/e2e.yml
release cicd healthy .github/workflows/validate.yml
publish cicd healthy .github/workflows/publish.yml

LabelLayerStatusPath
gha::ci cicd healthy .github/workflows/ci.yml
gha::e2e cicd healthy .github/workflows/e2e.yml
gha::validate cicd healthy .github/workflows/validate.yml
gha::publish cicd healthy .github/workflows/publish.yml

LabelLayerStatusPath
GITHUB_TOKEN cicd healthy —
ESBUILD_VERSION cicd healthy —
CHANGELOG cicd healthy —
GO_VERSION cicd healthy —

LabelLayerStatusPath
11.8.6.1 network healthy internal/js_lexer/js_lexer.go
127.0.0.1 network healthy scripts/js-api-tests.js
1.2.3.4 network healthy scripts/js-api-tests.js

LabelLayerStatusPath
repobility-clone-h2r17l8u software healthy /tmp/repobility-clone-h2r17l8u

LabelLayerStatusPath
vps::aws hardware healthy require/yarnpnp/package.json

LabelLayerStatusPath
/folder/file.js frontend healthy scripts/verify-source-map.js

LabelLayerStatusPath
auth::require/yarnpnp/package.json security healthy require/yarnpnp/package.json
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/8da981ac-3685-4c52-b871-6094005ae9e9/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/8da981ac-3685-4c52-b871-6094005ae9e9/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.