Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

system-hfa/HFA

https://github.com/system-hfa/HFA · scanned 2026-06-16 00:28 UTC (2 months, 2 weeks ago)

365 raw signals (0 security + 365 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 2 weeks ago · v1 · 364 actionable findings from 1 signal source. 1 repeated signal grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
44.1
/100
Security checks
44
0 findings
System graph
44
100.0% cov · 364 findings
Critical
3
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: layer: api × excluding tests × Reset all
Severity: Critical 3 High 51 Medium 17 Low 276 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 364 Crowd 0 Layer: Frontend 246 Hardware 5 Security 8 Cicd 1 Quality 37 Api 67
Corpus Intelligence Cross-corpus context (cohort percentile, top patterns, fix plan) is shown only on repositories you own. Sign up and connect your repo to view it.
Scan summary Repository scanned at 44.1/100 with 100.0% coverage. It contains 4996 nodes across 30 cross-layer flows, written primarily in mixed languages. Engine surfaced 365 findings — concentrated in frontend (246), api (67), quality (38). Risk profile is high: 3 critical, 51 high, 17 medium. Recommended next step: open the frontend layer findings first — that's where the highest-impact wins live.

Showing 67 of 364 actionable findings. 365 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

high System graph api Wiring conf 1.00 Dangling fetch: DELETE /api/admin/packages/${item.id} (frontend/src/app/(dashboard)/admin/plans/page.tsx:143)
`frontend/src/app/(dashboard)/admin/plans/page.tsx:143` calls `DELETE /api/admin/packages/${item.id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/packages/<p>` If this points at an external API, prefix it w…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: DELETE /api/risk-profile/exclusions/${event.risk_profile_exclusion_id} (frontend/src/app/(dashboard)/events/page.tsx:291)
`frontend/src/app/(dashboard)/events/page.tsx:291` calls `DELETE /api/risk-profile/exclusions/${event.risk_profile_exclusion_id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/risk-profile/exclusions/<p>` If this p…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: DELETE /api/risk-profile/exclusions/${source.exclusionId} (frontend/src/app/(dashboard)/risk-profile/page.tsx:1602)
`frontend/src/app/(dashboard)/risk-profile/page.tsx:1602` calls `DELETE /api/risk-profile/exclusions/${source.exclusionId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/risk-profile/exclusions/<p>` If this points …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/actions (frontend/src/app/(dashboard)/actions/page.tsx:76)
`frontend/src/app/(dashboard)/actions/page.tsx:76` calls `GET /api/actions` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/actions` If this points at an external API, prefix it with `https://` so the matcher skips i…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/actions (frontend/src/app/(dashboard)/reports/executive/page.tsx:33)
`frontend/src/app/(dashboard)/reports/executive/page.tsx:33` calls `GET /api/actions` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/actions` If this points at an external API, prefix it with `https://` so the match…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/admin/packages (frontend/src/app/(dashboard)/admin/plans/page.tsx:49)
`frontend/src/app/(dashboard)/admin/plans/page.tsx:49` calls `GET /api/admin/packages` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/packages` If this points at an external API, prefix it with `https://` so t…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/admin/payments/transactions (frontend/src/app/(dashboard)/admin/payments/page.tsx:49)
`frontend/src/app/(dashboard)/admin/payments/page.tsx:49` calls `GET /api/admin/payments/transactions` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/payments/transactions` If this points at an external API, p…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/admin/sera-vnext/analyses?${params.toString()} (frontend/src/app/(dashboard)/admin/sera-vnext/analyses/page.tsx:47)
`frontend/src/app/(dashboard)/admin/sera-vnext/analyses/page.tsx:47` calls `GET /api/admin/sera-vnext/analyses?${params.toString()}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/sera-vnext/analyses` If this …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/admin/sera-vnext/status (frontend/src/app/(dashboard)/admin/sera-vnext/page.tsx:51)
`frontend/src/app/(dashboard)/admin/sera-vnext/page.tsx:51` calls `GET /api/admin/sera-vnext/status` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/sera-vnext/status` If this points at an external API, prefix …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/admin/settings (frontend/src/app/(dashboard)/admin/ai/page.tsx:90)
`frontend/src/app/(dashboard)/admin/ai/page.tsx:90` calls `GET /api/admin/settings` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/settings` If this points at an external API, prefix it with `https://` so the …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/admin/settings (frontend/src/app/(dashboard)/admin/payments/page.tsx:48)
`frontend/src/app/(dashboard)/admin/payments/page.tsx:48` calls `GET /api/admin/settings` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/settings` If this points at an external API, prefix it with `https://` s…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/admin/settings (frontend/src/app/(dashboard)/admin/plans/page.tsx:48)
`frontend/src/app/(dashboard)/admin/plans/page.tsx:48` calls `GET /api/admin/settings` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/settings` If this points at an external API, prefix it with `https://` so t…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/admin/settings (frontend/src/app/(dashboard)/admin/settings/page.tsx:29)
`frontend/src/app/(dashboard)/admin/settings/page.tsx:29` calls `GET /api/admin/settings` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/settings` If this points at an external API, prefix it with `https://` s…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/admin/stats (frontend/src/app/(dashboard)/admin/page.tsx:28)
`frontend/src/app/(dashboard)/admin/page.tsx:28` calls `GET /api/admin/stats` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/stats` If this points at an external API, prefix it with `https://` so the matcher s…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/admin/tenants?q=${encodeURIComponent(query)} (frontend/src/app/(dashboard)/admin/tenants/page.tsx:57)
`frontend/src/app/(dashboard)/admin/tenants/page.tsx:57` calls `GET /api/admin/tenants?q=${encodeURIComponent(query)}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/tenants` If this points at an external API,…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/auth/me (frontend/src/hooks/useMe.ts:37)
`frontend/src/hooks/useMe.ts:37` calls `GET /api/auth/me` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/auth/me` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/credits (frontend/src/app/(dashboard)/credits/page.tsx:70)
`frontend/src/app/(dashboard)/credits/page.tsx:70` calls `GET /api/credits` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/credits` If this points at an external API, prefix it with `https://` so the matcher skips i…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/events/${event.id}/deletion-impact (frontend/src/app/(dashboard)/events/[id]/page.tsx:451)
`frontend/src/app/(dashboard)/events/[id]/page.tsx:451` calls `GET /api/events/${event.id}/deletion-impact` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/events/<p>/deletion-impact` If this points at an external AP…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/events/${event.id}/deletion-impact (frontend/src/app/(dashboard)/events/page.tsx:317)
`frontend/src/app/(dashboard)/events/page.tsx:317` calls `GET /api/events/${event.id}/deletion-impact` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/events/<p>/deletion-impact` If this points at an external API, pr…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/settings/ai (frontend/src/app/(dashboard)/settings/ai/page.tsx:61)
`frontend/src/app/(dashboard)/settings/ai/page.tsx:61` calls `GET /api/settings/ai` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/settings/ai` If this points at an external API, prefix it with `https://` so the mat…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/trial/status (frontend/src/components/product/TrialUsageCard.tsx:58)
`frontend/src/components/product/TrialUsageCard.tsx:58` calls `GET /api/trial/status` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/trial/status` If this points at an external API, prefix it with `https://` so the …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /events/${id}?scope=${scope} (frontend/src/app/(dashboard)/events/[id]/page.tsx:348)
`frontend/src/app/(dashboard)/events/[id]/page.tsx:348` calls `GET /events/${id}?scope=${scope}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:apiCall Normalized path used for matching: `/events/<p>` If this points at an external API, prefix it with …
Dangling fetchHelper:apicall
high System graph api Wiring conf 1.00 Dangling fetch: GET http://localhost/api/admin/sera-vnext/analyses/${analysis.id} (tests/sera-vnext/product-beta-api-trial-001.ts:177)
`tests/sera-vnext/product-beta-api-trial-001.ts:177` calls `GET http://localhost/api/admin/sera-vnext/analyses/${analysis.id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/http:/localhost/api/admin/sera-v…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET http://localhost/api/admin/sera-vnext/analyses/${analysis.id}/export (tests/sera-vnext/product-beta-api-trial-001.ts:199)
`tests/sera-vnext/product-beta-api-trial-001.ts:199` calls `GET http://localhost/api/admin/sera-vnext/analyses/${analysis.id}/export` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/http:/localhost/api/admin…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET http://localhost/api/admin/sera-vnext/analyses?page=1&pageSize=10 (tests/sera-vnext/product-beta-api-trial-001.ts:173)
`tests/sera-vnext/product-beta-api-trial-001.ts:173` calls `GET http://localhost/api/admin/sera-vnext/analyses?page=1&pageSize=10` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/http:/localhost/api/admin/se…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: PATCH /api/actions/${id} (frontend/src/app/(dashboard)/actions/page.tsx:97)
`frontend/src/app/(dashboard)/actions/page.tsx:97` calls `PATCH /api/actions/${id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/actions/<p>` If this points at an external API, prefix it with `https://` so the mat…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PATCH /api/admin/settings (frontend/src/app/(dashboard)/admin/ai/page.tsx:144)
`frontend/src/app/(dashboard)/admin/ai/page.tsx:144` calls `PATCH /api/admin/settings` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/settings` If this points at an external API, prefix it with `https://` so t…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PATCH /api/admin/settings (frontend/src/app/(dashboard)/admin/payments/page.tsx:80)
`frontend/src/app/(dashboard)/admin/payments/page.tsx:80` calls `PATCH /api/admin/settings` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/settings` If this points at an external API, prefix it with `https://`…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PATCH /api/admin/settings (frontend/src/app/(dashboard)/admin/plans/page.tsx:83)
`frontend/src/app/(dashboard)/admin/plans/page.tsx:83` calls `PATCH /api/admin/settings` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/settings` If this points at an external API, prefix it with `https://` so…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PATCH /api/admin/settings (frontend/src/app/(dashboard)/admin/settings/page.tsx:66)
`frontend/src/app/(dashboard)/admin/settings/page.tsx:66` calls `PATCH /api/admin/settings` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/settings` If this points at an external API, prefix it with `https://`…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PATCH /api/admin/tenants/${editing.id} (frontend/src/app/(dashboard)/admin/tenants/page.tsx:108)
`frontend/src/app/(dashboard)/admin/tenants/page.tsx:108` calls `PATCH /api/admin/tenants/${editing.id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/tenants/<p>` If this points at an external API, prefix it…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/actions (frontend/src/app/(dashboard)/events/[id]/page.tsx:423)
`frontend/src/app/(dashboard)/events/[id]/page.tsx:423` calls `POST /api/actions` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/actions` If this points at an external API, prefix it with `https://` so the matcher s…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/admin/ai/test (frontend/src/app/(dashboard)/admin/ai/page.tsx:176)
`frontend/src/app/(dashboard)/admin/ai/page.tsx:176` calls `POST /api/admin/ai/test` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/ai/test` If this points at an external API, prefix it with `https://` so the …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/admin/sera-vnext/analyses (frontend/src/app/(dashboard)/admin/sera-vnext/analyses/new/page.tsx:31)
`frontend/src/app/(dashboard)/admin/sera-vnext/analyses/new/page.tsx:31` calls `POST /api/admin/sera-vnext/analyses` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/sera-vnext/analyses` If this points at an ext…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/admin/sera-vnext/analyses/${params.id}/reviews (frontend/src/app/(dashboard)/admin/sera-vnext/analyses/[id]/review/page.tsx:69)
`frontend/src/app/(dashboard)/admin/sera-vnext/analyses/[id]/review/page.tsx:69` calls `POST /api/admin/sera-vnext/analyses/${params.id}/reviews` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/sera-vnext/analy…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/admin/sera-vnext/candidate (frontend/src/app/(dashboard)/admin/sera-vnext/candidate/page.tsx:137)
`frontend/src/app/(dashboard)/admin/sera-vnext/candidate/page.tsx:137` calls `POST /api/admin/sera-vnext/candidate` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/sera-vnext/candidate` If this points at an ext…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/admin/settings/password-reset (frontend/src/app/(dashboard)/admin/settings/page.tsx:89)
`frontend/src/app/(dashboard)/admin/settings/page.tsx:89` calls `POST /api/admin/settings/password-reset` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/admin/settings/password-reset` If this points at an external A…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/events/${deleteTarget.id}/delete-request (frontend/src/app/(dashboard)/events/page.tsx:340)
`frontend/src/app/(dashboard)/events/page.tsx:340` calls `POST /api/events/${deleteTarget.id}/delete-request` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/events/<p>/delete-request` If this points at an external A…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/events/${event.id}/delete-request (frontend/src/app/(dashboard)/events/[id]/page.tsx:469)
`frontend/src/app/(dashboard)/events/[id]/page.tsx:469` calls `POST /api/events/${event.id}/delete-request` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/events/<p>/delete-request` If this points at an external API…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/events/${event.id}/restore (frontend/src/app/(dashboard)/events/[id]/page.tsx:489)
`frontend/src/app/(dashboard)/events/[id]/page.tsx:489` calls `POST /api/events/${event.id}/restore` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/events/<p>/restore` If this points at an external API, prefix it wi…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/events/${id}/restore (frontend/src/app/(dashboard)/events/deleted/page.tsx:59)
`frontend/src/app/(dashboard)/events/deleted/page.tsx:59` calls `POST /api/events/${id}/restore` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/events/<p>/restore` If this points at an external API, prefix it with `…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/extract-document (frontend/src/components/sera/DocumentUpload.tsx:49)
`frontend/src/components/sera/DocumentUpload.tsx:49` calls `POST /api/extract-document` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/extract-document` If this points at an external API, prefix it with `https://` s…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/org/ai-insight (frontend/src/components/sera/AiInsightPanel.tsx:51)
`frontend/src/components/sera/AiInsightPanel.tsx:51` calls `POST /api/org/ai-insight` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/org/ai-insight` If this points at an external API, prefix it with `https://` so th…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/risk-profile/exclusions (frontend/src/app/(dashboard)/events/page.tsx:261)
`frontend/src/app/(dashboard)/events/page.tsx:261` calls `POST /api/risk-profile/exclusions` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/risk-profile/exclusions` If this points at an external API, prefix it with …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/risk-profile/exclusions (frontend/src/app/(dashboard)/risk-profile/page.tsx:1569)
`frontend/src/app/(dashboard)/risk-profile/page.tsx:1569` calls `POST /api/risk-profile/exclusions` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/risk-profile/exclusions` If this points at an external API, prefix i…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/settings/ai (frontend/src/app/(dashboard)/settings/ai/page.tsx:104)
`frontend/src/app/(dashboard)/settings/ai/page.tsx:104` calls `POST /api/settings/ai` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/settings/ai` If this points at an external API, prefix it with `https://` so the m…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/settings/ai/test (frontend/src/app/(dashboard)/settings/ai/page.tsx:135)
`frontend/src/app/(dashboard)/settings/ai/page.tsx:135` calls `POST /api/settings/ai/test` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/settings/ai/test` If this points at an external API, prefix it with `https://…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /auth/register (frontend/src/app/(auth)/register/page.tsx:27)
`frontend/src/app/(auth)/register/page.tsx:27` calls `POST /auth/register` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:apiCall Normalized path used for matching: `/auth/register` If this points at an external API, prefix it with `https://` so the m…
Dangling fetchHelper:apicall
high System graph api Wiring conf 1.00 Dangling fetch: POST /events/ (frontend/src/app/(dashboard)/events/page.tsx:241)
`frontend/src/app/(dashboard)/events/page.tsx:241` calls `POST /events/` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:apiCall Normalized path used for matching: `/events` If this points at an external API, prefix it with `https://` so the matcher sk…
Dangling fetchHelper:apicall
high System graph api Wiring conf 1.00 Dangling fetch: POST /events/?scope=deleted (frontend/src/app/(dashboard)/events/deleted/page.tsx:41)
`frontend/src/app/(dashboard)/events/deleted/page.tsx:41` calls `POST /events/?scope=deleted` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:apiCall Normalized path used for matching: `/events` If this points at an external API, prefix it with `https:…
Dangling fetchHelper:apicall
low System graph api Wiring conf 1.00 Unused endpoint: DELETE /{analysis_id}/edits/{edit_id}
`backend/app/api/routes/analyses.py` declares `DELETE /{analysis_id}/edits/{edit_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consu…
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /
`backend/app/api/routes/events.py` declares `GET /` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /ai/providers
`backend/app/api/routes/credits.py` declares `GET /ai/providers` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /balance
`backend/app/api/routes/credits.py` declares `GET /balance` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /me
`backend/app/api/routes/auth.py` declares `GET /me` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /packages
`backend/app/api/routes/credits.py` declares `GET /packages` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /{analysis_id}
`backend/app/api/routes/analyses.py` declares `GET /{analysis_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /{analysis_id}/edits
`backend/app/api/routes/analyses.py` declares `GET /{analysis_id}/edits` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /{analysis_id}/flows
`backend/app/api/routes/analyses.py` declares `GET /{analysis_id}/flows` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /{analysis_id}/pdf
`backend/app/api/routes/analyses.py` declares `GET /{analysis_id}/pdf` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /{event_id}
`backend/app/api/routes/events.py` declares `GET /{event_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: PATCH /{action_id}
`backend/app/api/routes/actions.py` declares `PATCH /{action_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /
`backend/app/api/routes/events.py` declares `POST /` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /login
`backend/app/api/routes/auth.py` declares `POST /login` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /oauth/bootstrap
`backend/app/api/routes/auth.py` declares `POST /oauth/bootstrap` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /register
`backend/app/api/routes/auth.py` declares `POST /register` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /{analysis_id}/recalculate
`backend/app/api/routes/analyses.py` declares `POST /{analysis_id}/recalculate` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/92044b13-66df-4b8d-86e9-746d0c1213fb/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/92044b13-66df-4b8d-86e9-746d0c1213fb/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.