Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo
72 of your 142 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 6.97s · analysis 16.7s · 10.2 MB · GitHub API rate-limit (preflight)

spkenv/spk

https://github.com/spkenv/spk · scanned 2026-06-05 23:52 UTC (4 days, 4 hours ago) · 10 languages

222 raw signals (130 security + 92 graph) 8th percentile · Rust · large (100-500K LoC) System graph score 84 (lower by 31)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 4 days, 4 hours ago · v2 · 82 actionable findings from 2 signal sources. 94 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
68.4
/100
Security checks
53
54 findings
System graph
84
88.9% cov · 28 findings
Critical
1
click to filter
Agents
6
0 votes
Crowd
0
reported
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 60.0 0.15 9.00
security_score 47.1 0.25 11.78
testing_score 12.0 0.20 2.40
documentation_score 89.0 0.15 13.35
practices_score 75.0 0.15 11.25
code_quality 49.6 0.10 4.96
Overall 1.00 52.7
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 1 High 24 Medium 7 Low 29 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 54 System graph 28 Crowd 0 Layer: Cicd 5 Quality 36 Security 5 Software 30 Frontend 3 Hardware 3

All 1487 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
rust-toolchain.toml software healthy rust-toolchain.toml
Cross.toml software healthy Cross.toml
THIRD_PARTY.md software healthy THIRD_PARTY.md
Cargo.toml software healthy Cargo.toml
cspell.json software healthy cspell.json
.rustfmt.toml software healthy .rustfmt.toml
.taplo.toml software healthy .taplo.toml
README.md software healthy README.md
rpmbuild.Dockerfile software healthy rpmbuild.Dockerfile
CONTRIBUTING.md software healthy CONTRIBUTING.md
workspace.spk.yml software healthy workspace.spk.yml
workspace.spk.yaml software healthy workspace.spk.yaml
.clippy.toml software healthy .clippy.toml
Makefile software healthy Makefile
SECURITY.md software healthy SECURITY.md
codecov.yml software healthy codecov.yml
my-tool.spk.yaml software healthy docs-packages/my-tool.spk.yaml
README.md software healthy docs-packages/README.md
gcc-6.spk.yaml software healthy docs-packages/gcc-6.spk.yaml
maya2020.spk.yaml software healthy docs-packages/maya2020.spk.yaml
gcc-4.spk.yaml software healthy docs-packages/gcc-4.spk.yaml
maya2019.spk.yaml software healthy docs-packages/maya2019.spk.yaml
qt.spk.yaml software healthy docs-packages/qt.spk.yaml
my-plugin.spk.yaml software healthy docs-packages/my-plugin.spk.yaml
_index.md software healthy docs/_index.md
README.md software healthy docs/README.md
_index.md software healthy docs/develop/_index.md
structure.md software healthy docs/develop/structure.md
design.md software healthy docs/develop/design.md
solver.md software healthy docs/develop/solver.md
_index.md software healthy docs/error_codes/_index.md
_index.md software healthy docs/admin/_index.md
install.md software healthy docs/admin/install.md
bootstrap.md software healthy docs/admin/bootstrap.md
config.md software healthy docs/admin/config.md
_index.md software healthy docs/spfs/_index.md
usage.md software healthy docs/spfs/usage.md
startup.md software healthy docs/spfs/startup.md
_index.md software healthy docs/spfs/develop/_index.md
migrations.md software healthy docs/spfs/develop/migrations.md
runtime.md software healthy docs/spfs/develop/runtime.md
design.md software healthy docs/spfs/develop/design.md
indexes.md software healthy docs/ref/indexes.md
_index.md software healthy docs/ref/_index.md
logging.md software healthy docs/ref/logging.md
messaging.md software healthy docs/ref/messaging.md
platform.md software healthy docs/ref/api/v1/platform.md
_index.md software healthy docs/ref/api/v1/_index.md
platform.md software healthy docs/ref/api/v0/platform.md
_index.md software healthy docs/ref/api/v0/_index.md

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
r software healthy website/static/js/perfect-scrollbar.min.js:r
s software healthy website/static/js/perfect-scrollbar.min.js:s
function software healthy website/static/js/learn.js:function
setMenuHeight software healthy website/static/js/learn.js:setMenuHeight
fallbackMessage software healthy website/static/js/learn.js:fallbackMessage
actionKey software healthy website/static/js/learn.js:actionKey
switchTab software healthy website/static/js/learn.js:switchTab
restoreTabSelections software healthy website/static/js/learn.js:restoreTabSelections
from software healthy website/static/js/learn.js:from
debounced software healthy website/static/js/learn.js:debounced
delayed software healthy website/static/js/learn.js:delayed
touchsupport software healthy website/static/js/learn.js:touchsupport
r software healthy website/static/js/perfect-scrollbar.jquery.min.js:r
s software healthy website/static/js/perfect-scrollbar.jquery.min.js:s
unstick software healthy website/static/js/jquery.sticky.js:unstick
n software healthy website/static/js/lunr.min.js:n
endsWith software healthy website/static/js/search.js:endsWith
initLunr software healthy website/static/js/search.js:initLunr
search software healthy website/static/js/search.js:search
getUrlParameter software healthy website/static/js/hugo-learn.js:getUrlParameter
z software healthy website/static/js/modernizr.custom-3.6.0.js:z
j software healthy website/static/js/modernizr.custom-3.6.0.js:j
r software healthy website/static/js/clipboard.min.js:r
o software healthy website/static/js/clipboard.min.js:o
s software healthy website/static/js/clipboard.min.js:s
i software healthy website/static/js/clipboard.min.js:i
c software healthy website/static/js/featherlight.min.js:c
e software healthy website/static/js/highlight.pack.js:e
l software healthy website/static/js/highlight.pack.js:l
R software healthy website/static/js/highlight.pack.js:R
h software healthy website/static/js/highlight.pack.js:h
b software healthy website/static/js/highlight.pack.js:b
r software healthy website/static/js/highlight.pack.js:r
M software healthy website/static/js/highlight.pack.js:M
do software healthy website/static/js/highlight.pack.js:do
general software healthy website/static/js/highlight.pack.js:general
m software healthy website/static/js/jquery-3.3.1.min.js:m
C software healthy website/static/js/jquery-3.3.1.min.js:C
t software healthy website/static/js/jquery-3.3.1.min.js:t
ye software healthy website/static/js/jquery-3.3.1.min.js:ye
ve software healthy website/static/js/jquery-3.3.1.min.js:ve
N software healthy website/static/js/jquery-3.3.1.min.js:N
j software healthy website/static/js/jquery-3.3.1.min.js:j
P software healthy website/static/js/jquery-3.3.1.min.js:P
R software healthy website/static/js/jquery-3.3.1.min.js:R
I software healthy website/static/js/jquery-3.3.1.min.js:I
a software healthy website/static/js/jquery-3.3.1.min.js:a
_ software healthy website/static/js/jquery-3.3.1.min.js:_
V software healthy website/static/js/jquery-3.3.1.min.js:V
Q software healthy website/static/js/jquery-3.3.1.min.js:Q

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
docs-packages software healthy docs-packages
docs software healthy docs
develop software healthy docs/develop
error_codes software healthy docs/error_codes
admin software healthy docs/admin
spfs software healthy docs/spfs
develop software healthy docs/spfs/develop
ref software healthy docs/ref
api software healthy docs/ref/api
v1 software healthy docs/ref/api/v1
v0 software healthy docs/ref/api/v0
use software healthy docs/use
create software healthy docs/use/create
website software healthy website
static software healthy website/static
js software healthy website/static/js
css software healthy website/static/css
mermaid software healthy website/static/mermaid
archetypes software healthy website/archetypes
layouts software healthy website/layouts
partials software healthy website/layouts/partials
shortcodes software healthy website/layouts/shortcodes
_markup software healthy website/layouts/_markup
_default software healthy website/layouts/_default
crates software healthy crates
is_default_derive_macro software healthy crates/is_default_derive_macro
src software healthy crates/is_default_derive_macro/src
spfs-cli software healthy crates/spfs-cli
cmd-clean software healthy crates/spfs-cli/cmd-clean
src software healthy crates/spfs-cli/cmd-clean/src
common software healthy crates/spfs-cli/common
src software healthy crates/spfs-cli/common/src
cmd-render software healthy crates/spfs-cli/cmd-render
src software healthy crates/spfs-cli/cmd-render/src
cmd-winfsp software healthy crates/spfs-cli/cmd-winfsp
src software healthy crates/spfs-cli/cmd-winfsp/src
cmd-monitor software healthy crates/spfs-cli/cmd-monitor
src software healthy crates/spfs-cli/cmd-monitor/src
main software healthy crates/spfs-cli/main
src software healthy crates/spfs-cli/main/src
cmd-join software healthy crates/spfs-cli/cmd-join
src software healthy crates/spfs-cli/cmd-join/src
cmd-enter software healthy crates/spfs-cli/cmd-enter
src software healthy crates/spfs-cli/cmd-enter/src
cmd-fuse software healthy crates/spfs-cli/cmd-fuse
src software healthy crates/spfs-cli/cmd-fuse/src
spk-proto software healthy crates/spk-proto
src software healthy crates/spk-proto/src
spk-config software healthy crates/spk-config
src software healthy crates/spk-config/src

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
127.0.0.1 network healthy crates/spfs-cli/cmd-winfsp/src/cmd_winfsp.rs
1.0.0.0 network healthy crates/spk-cli/group2/src/cmd_publish_test.rs
1.2.3.4 network healthy crates/spk-solve/crates/package-iterator/src/build_key_test…
1.2.3.1 network healthy crates/spk-solve/crates/package-iterator/src/build_key_test…
2.3.4.1 network healthy crates/spk-solve/crates/package-iterator/src/build_key_test…
2.0.0.1 network healthy crates/spk-schema/crates/foundation/src/ident/ident_any_tes…
1.2.3.0 network healthy crates/spk-schema/crates/foundation/src/ident/pinned_reques…
1.2.0.0 network healthy crates/spk-schema/crates/foundation/src/version/mod.rs
1.2.5.7 network healthy crates/spk-schema/crates/foundation/src/version/version_tes…
5.12.2.1 network healthy crates/spk-schema/src/version_range_test.rs
1.2.0.1 network healthy crates/spk-schema/src/version_range_test.rs
2.3.7.2 network healthy packages/openimageio/openimageio.spk.yaml
1.11.15.0 network healthy packages/osl/osl.spk.yaml
2.3.5.0 network healthy packages/opencolorio/opencolorio-apps.spk.yaml

LabelLayerStatusPath
as software healthy website/static/js/clipboard.min.js:as
o software healthy website/static/js/highlight.pack.js:o
case software healthy website/static/js/highlight.pack.js:case
cleanup software healthy website/static/js/highlight.pack.js:cleanup
continue software healthy website/static/js/highlight.pack.js:continue
extension software healthy website/static/js/highlight.pack.js:extension
clone software healthy website/static/js/highlight.pack.js:clone
assert software healthy website/static/js/highlight.pack.js:assert
instancetype software healthy website/static/js/highlight.pack.js:instancetype
public software healthy website/static/js/highlight.pack.js:public
object software healthy website/static/js/highlight.pack.js:object
diagrams software healthy website/static/mermaid/mermaid.js:diagrams
as software healthy website/static/mermaid/mermaid.js:as

LabelLayerStatusPath
spellcheck cicd healthy .github/workflows/cspell.yml
codecov cicd healthy .github/workflows/coverage.yml
rpms cicd healthy .github/workflows/rpm.yml
packages cicd healthy .github/workflows/rpm.yml
build-windows cicd healthy .github/workflows/rust.yml
build-and-test cicd healthy .github/workflows/rust.yml
matrix-build cicd healthy .github/workflows/rust.yml
check cicd healthy .github/workflows/hugo-link-check.yml
check-copyrights cicd healthy .github/workflows/housekeeping.yml

LabelLayerStatusPath
gha::cspell cicd healthy .github/workflows/cspell.yml
gha::coverage cicd healthy .github/workflows/coverage.yml
gha::rpm cicd healthy .github/workflows/rpm.yml
gha::rust cicd healthy .github/workflows/rust.yml
gha::hugo-link-check cicd healthy .github/workflows/hugo-link-check.yml
gha::housekeeping cicd healthy .github/workflows/housekeeping.yml
gitlab-ci cicd healthy examples/python/.gitlab-ci.yml

LabelLayerStatusPath
grpc::VfsService api healthy crates/spfs-vfs/src/proto/defs/vfs.proto
grpc::PayloadService api healthy crates/spfs/src/proto/defs/payload.proto
grpc::DatabaseService api healthy crates/spfs/src/proto/defs/database.proto
grpc::Repository api healthy crates/spfs/src/proto/defs/repository.proto
grpc::TagService api healthy crates/spfs/src/proto/defs/tag.proto

LabelLayerStatusPath
repobility-clone-a2ku4jn4 software healthy /tmp/repobility-clone-a2ku4jn4

LabelLayerStatusPath
nginx network healthy website/static/js/highlight.pack.js

LabelLayerStatusPath
image::packages/Dockerfile hardware healthy packages/Dockerfile

LabelLayerStatusPath
gpu (detected) hardware healthy cspell.json

LabelLayerStatusPath
CODECOV_TOKEN cicd healthy —
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/994cdc6d-c00a-437d-97ae-0a0df1f7ac9e/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/994cdc6d-c00a-437d-97ae-0a0df1f7ac9e/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.