Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

bdcdo/dataframeitGUI

https://github.com/bdcdo/dataframeitGUI · scanned 2026-06-17 01:38 UTC (1 month, 2 weeks ago)

87 raw signals (0 security + 87 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 month, 2 weeks ago · v2 · last Δ -28.1 (diff) · 87 actionable findings from 1 signal source. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
48.6
/100
Security checks
49
0 findings
System graph
49
100.0% cov · 87 findings
Critical
0
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: severity: info × excluding tests × Reset all
Severity: Critical 0 High 8 Medium 10 Low 16 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 87 Crowd 0 Layer: Software 1 Frontend 21 Hardware 3 Security 7 Cicd 3 Quality 46 Api 6
Scan summary Repository scanned at 48.6/100 with 100.0% coverage. It contains 1751 nodes across 30 cross-layer flows, written primarily in mixed languages. Engine surfaced 87 findings — concentrated in quality (46), frontend (21), security (7). Risk profile is high: 0 critical, 8 high, 10 medium. Recommended next step: open the quality layer findings first — that's where the highest-impact wins live.

Showing 53 of 87 actionable findings. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

info System graph frontend Frontend quality conf 1.00 `truncate` class without `title=` for hover reveal — frontend/src/components/arbitration/ArbitrationPage.tsx:253
A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it. Why: P2 in CHECKLIST.md — truncate without hover-reveal. Rule id: fq.truncate.no-title
Fq truncate no title
info System graph frontend Frontend quality conf 1.00 `truncate` class without `title=` for hover reveal — frontend/src/components/auto-review/AutoReviewFieldPanel.tsx:182
A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it. Why: P2 in CHECKLIST.md — truncate without hover-reveal. Rule id: fq.truncate.no-title
Fq truncate no title
info System graph frontend Frontend quality conf 1.00 `truncate` class without `title=` for hover reveal — frontend/src/components/auto-review/AutoReviewPage.tsx:318
A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it. Why: P2 in CHECKLIST.md — truncate without hover-reveal. Rule id: fq.truncate.no-title
Fq truncate no title
info System graph frontend Frontend quality conf 1.00 `truncate` class without `title=` for hover reveal — frontend/src/components/coding/CodingHeader.tsx:215
A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it. Why: P2 in CHECKLIST.md — truncate without hover-reveal. Rule id: fq.truncate.no-title
Fq truncate no title
info System graph frontend Frontend quality conf 1.00 `truncate` class without `title=` for hover reveal — frontend/src/components/coding/DocumentPicker.tsx:76
A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it. Why: P2 in CHECKLIST.md — truncate without hover-reveal. Rule id: fq.truncate.no-title
Fq truncate no title
info System graph frontend Frontend quality conf 1.00 `truncate` class without `title=` for hover reveal — frontend/src/components/coding/FullscreenNav.tsx:37
A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it. Why: P2 in CHECKLIST.md — truncate without hover-reveal. Rule id: fq.truncate.no-title
Fq truncate no title
info System graph frontend Frontend quality conf 1.00 `truncate` class without `title=` for hover reveal — frontend/src/components/compare/AgreementGroup.tsx:275
A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it. Why: P2 in CHECKLIST.md — truncate without hover-reveal. Rule id: fq.truncate.no-title
Fq truncate no title
info System graph frontend Frontend quality conf 1.00 `truncate` class without `title=` for hover reveal — frontend/src/components/compare/AnswerCard.tsx:184
A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it. Why: P2 in CHECKLIST.md — truncate without hover-reveal. Rule id: fq.truncate.no-title
Fq truncate no title
info System graph frontend Frontend quality conf 1.00 `truncate` class without `title=` for hover reveal — frontend/src/components/compare/CompareNav.tsx:52
A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it. Why: P2 in CHECKLIST.md — truncate without hover-reveal. Rule id: fq.truncate.no-title
Fq truncate no title
info System graph frontend Frontend quality conf 1.00 `truncate` class without `title=` for hover reveal — frontend/src/components/compare/ComparisonPanel.tsx:153
A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it. Why: P2 in CHECKLIST.md — truncate without hover-reveal. Rule id: fq.truncate.no-title
Fq truncate no title
info System graph frontend Frontend quality conf 1.00 `truncate` class without `title=` for hover reveal — frontend/src/components/config/RoundsConfig.tsx:212
A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it. Why: P2 in CHECKLIST.md — truncate without hover-reveal. Rule id: fq.truncate.no-title
Fq truncate no title
info System graph frontend Frontend quality conf 1.00 `truncate` class without `title=` for hover reveal — frontend/src/components/documents/DocumentUpload.tsx:356
A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it. Why: P2 in CHECKLIST.md — truncate without hover-reveal. Rule id: fq.truncate.no-title
Fq truncate no title
info System graph frontend Frontend quality conf 1.00 `truncate` class without `title=` for hover reveal — frontend/src/components/llm/DocumentSelector.tsx:149
A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it. Why: P2 in CHECKLIST.md — truncate without hover-reveal. Rule id: fq.truncate.no-title
Fq truncate no title
info System graph frontend Frontend quality conf 1.00 `truncate` class without `title=` for hover reveal — frontend/src/components/llm/LlmResponseRow.tsx:87
A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it. Why: P2 in CHECKLIST.md — truncate without hover-reveal. Rule id: fq.truncate.no-title
Fq truncate no title
info System graph frontend Frontend quality conf 1.00 `truncate` class without `title=` for hover reveal — frontend/src/components/llm/LlmRunsPane.tsx:132
A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it. Why: P2 in CHECKLIST.md — truncate without hover-reveal. Rule id: fq.truncate.no-title
Fq truncate no title
info System graph frontend Frontend quality conf 1.00 `truncate` class without `title=` for hover reveal — frontend/src/components/reviews/ConfusionMatrix.tsx:211
A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it. Why: P2 in CHECKLIST.md — truncate without hover-reveal. Rule id: fq.truncate.no-title
Fq truncate no title
info System graph frontend Frontend quality conf 1.00 `truncate` class without `title=` for hover reveal — frontend/src/components/reviews/MyVerdictsView.tsx:362
A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it. Why: P2 in CHECKLIST.md — truncate without hover-reveal. Rule id: fq.truncate.no-title
Fq truncate no title
info System graph frontend Frontend quality conf 1.00 `truncate` class without `title=` for hover reveal — frontend/src/components/schema/FieldCard.tsx:157
A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it. Why: P2 in CHECKLIST.md — truncate without hover-reveal. Rule id: fq.truncate.no-title
Fq truncate no title
info System graph frontend Frontend quality conf 1.00 `truncate` class without `title=` for hover reveal — frontend/src/components/shared/AddNoteButton.tsx:111
A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it. Why: P2 in CHECKLIST.md — truncate without hover-reveal. Rule id: fq.truncate.no-title
Fq truncate no title
info System graph quality Integrity conf 1.00 Commented-code block (12 lines) in frontend/src/components/coding/FieldRenderer.tsx:58
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (5 lines) in frontend/scripts/backfill-rounds-from-batches-2026-05-07.mjs:127
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (5 lines) in frontend/src/actions/__tests__/responses.test.ts:189
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (5 lines) in frontend/src/actions/__tests__/schema.test.ts:10
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (5 lines) in frontend/src/actions/equivalences.ts:94
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (5 lines) in frontend/src/actions/members.ts:371
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (5 lines) in frontend/src/actions/reviews.ts:53
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (5 lines) in frontend/src/actions/schema.ts:34
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (5 lines) in frontend/src/app/(app)/projects/[id]/analyze/compare/page.tsx:285
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (5 lines) in frontend/src/app/api/autosave/route.ts:4
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (5 lines) in frontend/src/components/assignments/LotteryDialog.tsx:171
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (5 lines) in frontend/src/components/compare/AgreementGroup.tsx:144
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (5 lines) in frontend/src/components/compare/ComparePage.tsx:118
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (5 lines) in frontend/src/components/shell/ProjectTabs.tsx:56
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (5 lines) in frontend/src/components/stats/LlmInsightsView.tsx:131
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (5 lines) in frontend/src/lib/__tests__/clerk-sync.test.ts:3
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (5 lines) in frontend/src/lib/__tests__/compare-divergence.test.ts:201
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (5 lines) in frontend/src/lib/auth.ts:99
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (5 lines) in frontend/src/lib/auto-review-decided.ts:13
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (5 lines) in frontend/src/lib/equivalence.ts:6
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (5 lines) in frontend/src/lib/schema-utils.ts:120
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (6 lines) in backend/main.py:62
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (6 lines) in backend/services/llm_runner.py:140
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (6 lines) in frontend/e2e/config-guard.smoke.spec.ts:4
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (6 lines) in frontend/src/actions/__tests__/members.test.ts:3
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (6 lines) in frontend/src/actions/__tests__/supabase-mock.ts:5
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (6 lines) in frontend/src/components/coding/CodingPage.tsx:296
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (6 lines) in frontend/src/lib/compare-divergence.ts:19
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (6 lines) in frontend/src/lib/supabase/rls-guard.ts:3
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (6 lines) in frontend/src/lib/utils.ts:8
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (7 lines) in frontend/src/actions/field-reviews.ts:33
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (7 lines) in frontend/src/lib/types.ts:143
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (8 lines) in frontend/src/actions/responses.ts:91
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
info System graph quality Integrity conf 1.00 Commented-code block (9 lines) in frontend/e2e/lottery.smoke.spec.ts:4
A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest.
commented codeDead code
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/967899d9-8838-4e64-a1c3-1f36f1852448/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/967899d9-8838-4e64-a1c3-1f36f1852448/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.