Scan timing: clone 9.71s · analysis 21.08s · 35.1 MB · GitHub API rate-limit (preflight)
https://github.com/ggml-org/whisper.cpp
· scanned 2026-06-05 11:43 UTC (5 days, 11 hours ago)
· 10 languages
380 raw signals (148 security + 232 graph) 11/13 scanners ran 62nd percentile · Cpp · large (100-500K LoC) System graph score 77 (lower by 9)
Last scanned 5 days, 11 hours ago · v2 · 98 actionable findings from 2 signal sources. 166 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.
| Component | Sub-score | Weight | Contribution |
|---|---|---|---|
structure_score |
65.0 | 0.15 | 9.75 |
security_score |
100.0 | 0.25 | 25.00 |
testing_score |
26.0 | 0.20 | 5.20 |
documentation_score |
87.0 | 0.15 | 13.05 |
practices_score |
71.0 | 0.15 | 10.65 |
code_quality |
44.0 | 0.10 | 4.40 |
| Overall | 1.00 | 68.0 |
All 1576 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.
| Label | Layer | Status | Path |
|---|---|---|---|
README.md |
software | healthy | README.md |
build-xcframework.sh |
software | healthy | build-xcframework.sh |
CONTRIBUTING.md |
software | healthy | CONTRIBUTING.md |
close-issue.yml |
software | healthy | close-issue.yml |
README_sycl.md |
software | healthy | README_sycl.md |
Makefile |
software | healthy | Makefile |
CMakePresets.json |
software | healthy | CMakePresets.json |
AGENTS.md |
software | healthy | AGENTS.md |
README.md |
software | healthy | bindings/ruby/README.md |
extsources.rb |
software | healthy | bindings/ruby/extsources.rb |
ruby_whisper.h |
software | healthy | bindings/ruby/ext/ruby_whisper.h |
dependencies_for_windows.rb |
software | healthy | bindings/ruby/ext/dependencies_for_windows.rb |
ruby_whisper_vad_context.c |
software | healthy | bindings/ruby/ext/ruby_whisper_vad_context.c |
options.rb |
software | healthy | bindings/ruby/ext/options.rb |
ruby_whisper_error.c |
software | healthy | bindings/ruby/ext/ruby_whisper_error.c |
ruby_whisper_vad_segments.c |
software | healthy | bindings/ruby/ext/ruby_whisper_vad_segments.c |
ruby_whisper.c |
software | healthy | bindings/ruby/ext/ruby_whisper.c |
ruby_whisper_vad_params.c |
software | healthy | bindings/ruby/ext/ruby_whisper_vad_params.c |
ruby_whisper_params.c |
software | healthy | bindings/ruby/ext/ruby_whisper_params.c |
ruby_whisper_vad_context_detect.cpp |
software | healthy | bindings/ruby/ext/ruby_whisper_vad_context_detect.cpp |
ruby_whisper_transcribe.cpp |
software | healthy | bindings/ruby/ext/ruby_whisper_transcribe.cpp |
extconf.rb |
software | healthy | bindings/ruby/ext/extconf.rb |
ruby_whisper_vad_segment.c |
software | healthy | bindings/ruby/ext/ruby_whisper_vad_segment.c |
options_for_windows.rb |
software | healthy | bindings/ruby/ext/options_for_windows.rb |
dependencies.rb |
software | healthy | bindings/ruby/ext/dependencies.rb |
ruby_whisper_context_params.c |
software | healthy | bindings/ruby/ext/ruby_whisper_context_params.c |
ruby_whisper_context.c |
software | healthy | bindings/ruby/ext/ruby_whisper_context.c |
ruby_whisper_model.c |
software | healthy | bindings/ruby/ext/ruby_whisper_model.c |
ruby_whisper_token.c |
software | healthy | bindings/ruby/ext/ruby_whisper_token.c |
ruby_whisper_segment.c |
software | healthy | bindings/ruby/ext/ruby_whisper_segment.c |
test_vad_params.rb |
software | healthy | bindings/ruby/test/test_vad_params.rb |
test_context_params.rb |
software | healthy | bindings/ruby/test/test_context_params.rb |
test_vad.rb |
software | healthy | bindings/ruby/test/test_vad.rb |
test_error.rb |
software | healthy | bindings/ruby/test/test_error.rb |
test_segment.rb |
software | healthy | bindings/ruby/test/test_segment.rb |
test_vad_segment.rb |
software | healthy | bindings/ruby/test/test_vad_segment.rb |
test_callback.rb |
software | healthy | bindings/ruby/test/test_callback.rb |
test_vad_context.rb |
software | healthy | bindings/ruby/test/test_vad_context.rb |
test_params.rb |
software | healthy | bindings/ruby/test/test_params.rb |
test_token.rb |
software | healthy | bindings/ruby/test/test_token.rb |
helper.rb |
software | healthy | bindings/ruby/test/helper.rb |
test_vad_segments.rb |
software | healthy | bindings/ruby/test/test_vad_segments.rb |
test_model.rb |
software | healthy | bindings/ruby/test/test_model.rb |
test_whisper.rb |
software | healthy | bindings/ruby/test/test_whisper.rb |
test_package.rb |
software | healthy | bindings/ruby/test/test_package.rb |
jfk_reader.c |
software | healthy | bindings/ruby/test/jfk_reader/jfk_reader.c |
extconf.rb |
software | healthy | bindings/ruby/test/jfk_reader/extconf.rb |
context.rb |
software | healthy | bindings/ruby/lib/whisper/context.rb |
segment.rb |
software | healthy | bindings/ruby/lib/whisper/segment.rb |
uri.rb |
software | healthy | bindings/ruby/lib/whisper/model/uri.rb |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
whisper_factory |
software | healthy | bindings/javascript/whisper.js:whisper_factory |
GROWABLE_HEAP_I8 |
software | healthy | bindings/javascript/whisper.js:GROWABLE_HEAP_I8 |
quit_ |
software | healthy | bindings/javascript/whisper.js:quit_ |
locateFile |
software | healthy | bindings/javascript/whisper.js:locateFile |
assert |
software | healthy | bindings/javascript/whisper.js:assert |
updateMemoryViews |
software | healthy | bindings/javascript/whisper.js:updateMemoryViews |
keepRuntimeAlive |
software | healthy | bindings/javascript/whisper.js:keepRuntimeAlive |
getUniqueRunDependency |
software | healthy | bindings/javascript/whisper.js:getUniqueRunDependency |
isDataURI |
software | healthy | bindings/javascript/whisper.js:isDataURI |
receiveInstance |
software | healthy | bindings/javascript/whisper.js:receiveInstance |
receiveInstantiationResult |
software | healthy | bindings/javascript/whisper.js:receiveInstantiationResult |
ExitStatus |
software | healthy | bindings/javascript/whisper.js:ExitStatus |
initRandomFill |
software | healthy | bindings/javascript/whisper.js:initRandomFill |
trim |
software | healthy | bindings/javascript/whisper.js:trim |
UTF8ArrayToString |
software | healthy | bindings/javascript/whisper.js:UTF8ArrayToString |
stringToUTF8Array |
software | healthy | bindings/javascript/whisper.js:stringToUTF8Array |
intArrayFromString |
software | healthy | bindings/javascript/whisper.js:intArrayFromString |
asyncLoad |
software | healthy | bindings/javascript/whisper.js:asyncLoad |
FS_handledByPreloadPlugin |
software | healthy | bindings/javascript/whisper.js:FS_handledByPreloadPlugin |
FS_createPreloadedFile |
software | healthy | bindings/javascript/whisper.js:FS_createPreloadedFile |
processData |
software | healthy | bindings/javascript/whisper.js:processData |
FS_getMode |
software | healthy | bindings/javascript/whisper.js:FS_getMode |
doCallback |
software | healthy | bindings/javascript/whisper.js:doCallback |
randomByte |
software | healthy | bindings/javascript/whisper.js:randomByte |
hasByteServing |
software | healthy | bindings/javascript/whisper.js:hasByteServing |
usesGzip |
software | healthy | bindings/javascript/whisper.js:usesGzip |
doXHR |
software | healthy | bindings/javascript/whisper.js:doXHR |
end |
software | healthy | bindings/javascript/whisper.js:end |
writeChunks |
software | healthy | bindings/javascript/whisper.js:writeChunks |
UTF8ToString |
software | healthy | bindings/javascript/whisper.js:UTF8ToString |
_proc_exit |
software | healthy | bindings/javascript/whisper.js:_proc_exit |
establishStackSpace |
software | healthy | bindings/javascript/whisper.js:establishStackSpace |
exitOnMainThread |
software | healthy | bindings/javascript/whisper.js:exitOnMainThread |
invokeEntryPoint |
software | healthy | bindings/javascript/whisper.js:invokeEntryPoint |
finish |
software | healthy | bindings/javascript/whisper.js:finish |
ExceptionInfo |
software | healthy | bindings/javascript/whisper.js:ExceptionInfo |
___cxa_throw |
software | healthy | bindings/javascript/whisper.js:___cxa_throw |
pthreadCreateProxied |
software | healthy | bindings/javascript/whisper.js:pthreadCreateProxied |
___syscall_fcntl64 |
software | healthy | bindings/javascript/whisper.js:___syscall_fcntl64 |
embind_init_charCodes |
software | healthy | bindings/javascript/whisper.js:embind_init_charCodes |
whenDependentTypesAreResolved |
software | healthy | bindings/javascript/whisper.js:whenDependentTypesAreResolved |
onComplete |
software | healthy | bindings/javascript/whisper.js:onComplete |
sharedRegisterType |
software | healthy | bindings/javascript/whisper.js:sharedRegisterType |
__embind_register_bool |
software | healthy | bindings/javascript/whisper.js:__embind_register_bool |
handleAllocatorInit |
software | healthy | bindings/javascript/whisper.js:handleAllocatorInit |
count_emval_handles |
software | healthy | bindings/javascript/whisper.js:count_emval_handles |
init_emval |
software | healthy | bindings/javascript/whisper.js:init_emval |
simpleReadValueFromPointer |
software | healthy | bindings/javascript/whisper.js:simpleReadValueFromPointer |
floatReadValueFromPointer |
software | healthy | bindings/javascript/whisper.js:floatReadValueFromPointer |
__embind_register_float |
software | healthy | bindings/javascript/whisper.js:__embind_register_float |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
bindings |
software | healthy | bindings |
ruby |
software | healthy | bindings/ruby |
ext |
software | healthy | bindings/ruby/ext |
test |
software | healthy | bindings/ruby/test |
jfk_reader |
software | healthy | bindings/ruby/test/jfk_reader |
lib |
software | healthy | bindings/ruby/lib |
whisper |
software | healthy | bindings/ruby/lib/whisper |
model |
software | healthy | bindings/ruby/lib/whisper/model |
javascript |
software | healthy | bindings/javascript |
java |
software | healthy | bindings/java |
src |
software | healthy | bindings/java/src |
test |
software | healthy | bindings/java/src/test |
java |
software | healthy | bindings/java/src/test/java |
io |
software | healthy | bindings/java/src/test/java/io |
github |
software | healthy | bindings/java/src/test/java/io/github |
ggerganov |
software | healthy | bindings/java/src/test/java/io/github/ggerganov |
whispercpp |
software | healthy | bindings/java/src/test/java/io/github/ggerganov/whispercpp |
main |
software | healthy | bindings/java/src/main |
java |
software | healthy | bindings/java/src/main/java |
io |
software | healthy | bindings/java/src/main/java/io |
github |
software | healthy | bindings/java/src/main/java/io/github |
ggerganov |
software | healthy | bindings/java/src/main/java/io/github/ggerganov |
whispercpp |
software | healthy | bindings/java/src/main/java/io/github/ggerganov/whispercpp |
params |
software | healthy | bindings/java/src/main/java/io/github/ggerganov/whispercpp/… |
bean |
software | healthy | bindings/java/src/main/java/io/github/ggerganov/whispercpp/… |
callbacks |
software | healthy | bindings/java/src/main/java/io/github/ggerganov/whispercpp/… |
ggml |
software | healthy | bindings/java/src/main/java/io/github/ggerganov/whispercpp/… |
model |
software | healthy | bindings/java/src/main/java/io/github/ggerganov/whispercpp/… |
go |
software | healthy | bindings/go |
examples |
software | healthy | bindings/go/examples |
go-model-download |
software | healthy | bindings/go/examples/go-model-download |
go-whisper |
software | healthy | bindings/go/examples/go-whisper |
pkg |
software | healthy | bindings/go/pkg |
whisper |
software | healthy | bindings/go/pkg/whisper |
models |
software | healthy | models |
tests |
software | healthy | tests |
earnings21 |
software | healthy | tests/earnings21 |
normalizers |
software | healthy | tests/earnings21/normalizers |
librispeech |
software | healthy | tests/librispeech |
normalizers |
software | healthy | tests/librispeech/normalizers |
scripts |
software | healthy | scripts |
apple |
software | healthy | scripts/apple |
examples |
software | healthy | examples |
wchess |
software | healthy | examples/wchess |
libwchess |
software | healthy | examples/wchess/libwchess |
wchess.wasm |
software | healthy | examples/wchess/wchess.wasm |
chessboardjs-1.0.0 |
software | healthy | examples/wchess/wchess.wasm/chessboardjs-1.0.0 |
js |
software | healthy | examples/wchess/wchess.wasm/chessboardjs-1.0.0/js |
chessboard-1.0.0 |
software | healthy | examples/wchess/wchess.wasm/chessboardjs-1.0.0/js/chessboar… |
css |
software | healthy | examples/wchess/wchess.wasm/chessboardjs-1.0.0/css |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
macOS-latest |
cicd | healthy | .github/workflows/build-macos.yml |
android |
cicd | healthy | .github/workflows/build-android.yml |
android_java |
cicd | healthy | .github/workflows/build-android.yml |
ubuntu-22 |
cicd | healthy | .github/workflows/bindings-go.yml |
gpu-cuda |
cicd | healthy | .github/workflows/build-self-hosted.yml |
gpu-vulkan-nvidia-cm |
cicd | healthy | .github/workflows/build-self-hosted.yml |
gpu-vulkan-nvidia-cm2 |
cicd | healthy | .github/workflows/build-self-hosted.yml |
gpu-metal |
cicd | healthy | .github/workflows/build-self-hosted.yml |
gpu-vulkan |
cicd | healthy | .github/workflows/build-self-hosted.yml |
coreml-base-en |
cicd | healthy | .github/workflows/build-coreml.yml |
ubuntu-22-gcc |
cicd | healthy | .github/workflows/build-gcc.yml |
ubuntu-22-gcc-arm64 |
cicd | healthy | .github/workflows/build-gcc.yml |
ubuntu-22-gcc-arm-v7 |
cicd | healthy | .github/workflows/build-gcc.yml |
vad |
cicd | healthy | .github/workflows/build-vad.yml |
deploy-wasm-github-pages |
cicd | healthy | .github/workflows/deploy-examples-wasm.yml |
ubuntu-22-gcc-sanitized |
cicd | healthy | .github/workflows/build-sanitize.yml |
push_to_registry |
cicd | healthy | .github/workflows/docker.yml |
ubuntu-22 |
cicd | healthy | .github/workflows/bindings-ruby.yml |
freeBSD-latest |
cicd | healthy | .github/workflows/build-freebsd.yml |
addon_node-ubuntu-22 |
cicd | healthy | .github/workflows/examples.yml |
determine-tag |
cicd | healthy | .github/workflows/release.yml |
ubuntu-cpu |
cicd | healthy | .github/workflows/release.yml |
windows |
cicd | healthy | .github/workflows/release.yml |
windows-blas |
cicd | healthy | .github/workflows/release.yml |
windows-cublas |
cicd | healthy | .github/workflows/release.yml |
ios-xcode-build |
cicd | healthy | .github/workflows/release.yml |
release |
cicd | healthy | .github/workflows/release.yml |
windows-msys2 |
cicd | healthy | .github/workflows/build-windows.yml |
ggml-ci-x64-cpu-low-perf |
cicd | healthy | .github/workflows/build-cpu.yml |
ggml-ci-arm64-cpu-low-perf |
cicd | healthy | .github/workflows/build-cpu.yml |
ggml-ci-x64-cpu-high-perf |
cicd | healthy | .github/workflows/build-cpu.yml |
ggml-ci-arm64-cpu-high-perf |
cicd | healthy | .github/workflows/build-cpu.yml |
ggml-ci-arm64-cpu-high-perf-sve |
cicd | healthy | .github/workflows/build-cpu.yml |
ubuntu-22-clang |
cicd | healthy | .github/workflows/build-clang.yml |
ubuntu-22-clang-arm64 |
cicd | healthy | .github/workflows/build-clang.yml |
quantize |
cicd | healthy | .github/workflows/build-quantize.yml |
emscripten |
cicd | healthy | .github/workflows/build-wasm.yml |
ubuntu-22-cmake-sycl |
cicd | healthy | .github/workflows/build-sycl.yml |
ubuntu-22-cmake-sycl-fp16 |
cicd | healthy | .github/workflows/build-sycl.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
gha::build-macos |
cicd | healthy | .github/workflows/build-macos.yml |
gha::build-android |
cicd | healthy | .github/workflows/build-android.yml |
gha::bindings-go |
cicd | healthy | .github/workflows/bindings-go.yml |
gha::build-self-hosted |
cicd | healthy | .github/workflows/build-self-hosted.yml |
gha::build-coreml |
cicd | healthy | .github/workflows/build-coreml.yml |
gha::build-gcc |
cicd | healthy | .github/workflows/build-gcc.yml |
gha::build-vad |
cicd | healthy | .github/workflows/build-vad.yml |
gha::deploy-examples-wasm |
cicd | healthy | .github/workflows/deploy-examples-wasm.yml |
gha::build-sanitize |
cicd | healthy | .github/workflows/build-sanitize.yml |
gha::docker |
cicd | healthy | .github/workflows/docker.yml |
gha::bindings-ruby |
cicd | healthy | .github/workflows/bindings-ruby.yml |
gha::build-freebsd |
cicd | healthy | .github/workflows/build-freebsd.yml |
gha::examples |
cicd | healthy | .github/workflows/examples.yml |
gha::release |
cicd | healthy | .github/workflows/release.yml |
gha::build-windows |
cicd | healthy | .github/workflows/build-windows.yml |
gha::build-cpu |
cicd | healthy | .github/workflows/build-cpu.yml |
gha::build-clang |
cicd | healthy | .github/workflows/build-clang.yml |
gha::build-quantize |
cicd | healthy | .github/workflows/build-quantize.yml |
gha::build-wasm |
cicd | healthy | .github/workflows/build-wasm.yml |
gha::build-sycl |
cicd | healthy | .github/workflows/build-sycl.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
LayerNormANE |
software | healthy | models/convert-whisper-to-coreml.py:44 |
MultiHeadAttentionANE |
software | healthy | models/convert-whisper-to-coreml.py:51 |
ResidualAttentionBlockANE |
software | healthy | models/convert-whisper-to-coreml.py:112 |
AudioEncoderANE |
software | healthy | models/convert-whisper-to-coreml.py:129 |
TextDecoderANE |
software | healthy | models/convert-whisper-to-coreml.py:159 |
WhisperANE |
software | healthy | models/convert-whisper-to-coreml.py:205 |
BasicTextNormalizer |
software | healthy | tests/earnings21/normalizers/basic.py:60 |
EnglishNumberNormalizer |
software | healthy | tests/earnings21/normalizers/english.py:12 |
EnglishSpellingNormalizer |
software | healthy | tests/earnings21/normalizers/english.py:450 |
EnglishTextNormalizer |
software | healthy | tests/earnings21/normalizers/english.py:465 |
BasicTextNormalizer |
software | healthy | tests/librispeech/normalizers/basic.py:60 |
EnglishNumberNormalizer |
software | healthy | tests/librispeech/normalizers/english.py:12 |
EnglishSpellingNormalizer |
software | healthy | tests/librispeech/normalizers/english.py:450 |
EnglishTextNormalizer |
software | healthy | tests/librispeech/normalizers/english.py:465 |
ListAction |
software | healthy | scripts/bench.py:11 |
CustomHTTPRequestHandler |
software | healthy | examples/server.py:15 |
CustomServer |
software | healthy | examples/server.py:105 |
names |
software | healthy | examples/wchess/wchess.wasm/chessboardjs-1.0.0/js/chessboar… |
RemotingCodebaseGenerator |
software | healthy | ggml/src/ggml-virtgpu/regenerate_remoting.py:31 |
| Label | Layer | Status | Path |
|---|---|---|---|
GITHUB_TOKEN |
cicd | healthy | — |
COMMIT_SHA |
cicd | healthy | — |
BRANCH_NAME |
cicd | healthy | — |
MODEL_NAME |
cicd | healthy | — |
HF_TOKEN |
cicd | healthy | — |
| Label | Layer | Status | Path |
|---|---|---|---|
password_literal::scripts/apple/validate-tvos.sh |
security | healthy | scripts/apple/validate-tvos.sh |
password_literal::scripts/apple/validate-macos.sh |
security | healthy | scripts/apple/validate-macos.sh |
password_literal::scripts/apple/validate-ios.sh |
security | healthy | scripts/apple/validate-ios.sh |
password_literal::scripts/apple/validate-visionos.sh |
security | healthy | scripts/apple/validate-visionos.sh |
| Label | Layer | Status | Path |
|---|---|---|---|
127.0.0.1 |
network | healthy | examples/server/bench.js |
11.8.1.74 |
network | healthy | .github/workflows/release.yml |
12.4.5.8 |
network | healthy | .github/workflows/release.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
mysql |
data | healthy | .github/workflows/docker.yml |
postgresql |
data | healthy | .github/workflows/docker.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
repobility-clone-ld5bltn1 |
software | healthy | /tmp/repobility-clone-ld5bltn1 |
| Label | Layer | Status | Path |
|---|---|---|---|
port:8000 |
network | healthy | examples/server.py |
| Label | Layer | Status | Path |
|---|---|---|---|
gpu (detected) |
hardware | healthy | scripts/bench-all.sh |
This page is publicly accessible at:
https://repobility.com/scan/8f067e77-350d-49ba-b080-7ee2e84cb4e7/
To check status programmatically (no auth required):
curl -s https://repobility.com/api/v1/public/scan/8f067e77-350d-49ba-b080-7ee2e84cb4e7/
Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.