Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

PrismML-Eng/Bonsai-demo

https://github.com/PrismML-Eng/Bonsai-demo · scanned 2026-07-23 19:41 UTC (4 days, 15 hours ago)

256 raw signals (0 security + 256 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 4 days, 15 hours ago · v3 · last Δ +0.5 (diff) · 254 actionable findings from 1 signal source. 2 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

80.0% cov · 254 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 2 High 42 Medium 190 Low 19 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 254 Crowd 0 Layer: Software 5 Security 100 Cicd 1 Quality 1 Dependencies 147

Exclude dismissed / FP Exclude test files

All 214 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`get_content_charset`	software	healthy	`tests/test_tool_web_fetch.py:15`
`__init__`	software	healthy	`tests/test_tool_web_fetch.py:35`
`read`	software	healthy	`tests/test_tool_web_fetch.py:24`
`__enter__`	software	healthy	`tests/test_tool_web_fetch.py:27`
`__exit__`	software	healthy	`tests/test_tool_web_fetch.py:30`
`open`	software	healthy	`tests/test_tool_web_fetch.py:38`
`setUp`	software	healthy	`tests/test_tool_web_fetch.py:43`
`_fetch_with_response`	software	healthy	`tests/test_tool_web_fetch.py:47`
`test_prefers_article_and_returns_source_metadata`	software	healthy	`tests/test_tool_web_fetch.py:60`
`test_navigation_only_page_is_rejected_and_does_not_consume_…`	software	healthy	`tests/test_tool_web_fetch.py:94`
`test_unreadable_page_releases_slot_for_a_retry`	software	healthy	`tests/test_tool_web_fetch.py:106`
`test_quota_reservations_include_parallel_inflight_calls`	software	healthy	`tests/test_tool_web_fetch.py:116`
`test_binary_content_is_rejected_without_consuming_quota`	software	healthy	`tests/test_tool_web_fetch.py:125`
`test_progress_only_stderr_is_clean_success`	software	healthy	`tests/test_tool_code_interpreter.py:15`
`test_traceback_without_result_is_compact_error`	software	healthy	`tests/test_tool_code_interpreter.py:24`
`test_traceback_with_image_is_partial_success`	software	healthy	`tests/test_tool_code_interpreter.py:42`
`test_tool_description_is_generic_and_allows_api_discovery`	software	healthy	`tests/test_tool_code_interpreter.py:53`
`test_generated_image_is_attached_with_native_compatible_fil…`	software	healthy	`tests/test_tool_code_interpreter.py:63`
`emitter`	software	healthy	`tests/test_tool_code_interpreter.py:66`
`test_generated_image_has_model_fallback_without_event_emitt…`	software	healthy	`tests/test_tool_code_interpreter.py:85`
`test_non_image_result_is_preserved`	software	healthy	`tests/test_tool_code_interpreter.py:99`
`test_unrelated_error_does_not_receive_yfinance_advice`	software	healthy	`tests/test_tool_code_interpreter.py:105`
`test_nonfatal_warning_is_preserved_without_marking_failure`	software	healthy	`tests/test_tool_code_interpreter.py:115`
`_load_seed_module`	software	healthy	`tests/test_seed_openwebui.py:12`
`__init__`	software	healthy	`tests/test_seed_openwebui.py:21`
`request`	software	healthy	`tests/test_seed_openwebui.py:24`
`test_model_disables_openwebui_citation_rewrite`	software	healthy	`tests/test_seed_openwebui.py:30`
`test_prompt_is_generic_bounded_and_date_aware`	software	healthy	`tests/test_seed_openwebui.py:49`
`test_repo_owned_code_tool_is_attached_when_jupyter_is_on`	software	healthy	`tests/test_seed_openwebui.py:72`
`test_27b_uses_precise_thinking_sampling`	software	healthy	`tests/test_seed_openwebui.py:79`
`test_description_names_dialect_and_common_date_trap`	software	healthy	`tests/test_tool_sql.py:17`
`setUp`	software	healthy	`tests/test_tool_sql.py:29`
`tearDown`	software	healthy	`tests/test_tool_sql.py:39`
`test_leading_line_and_block_comments_are_allowed`	software	healthy	`tests/test_tool_sql.py:43`
`test_large_detailed_results_are_withheld`	software	healthy	`tests/test_tool_sql.py:52`
`test_small_results_include_completeness_marker`	software	healthy	`tests/test_tool_sql.py:61`
`main`	software	healthy	`scripts/mlx_generate.py:50`
`_get`	software	healthy	`scripts/openwebui/tool_weather.py:11`
`get_weather`	software	dead	`scripts/openwebui/tool_weather.py:18`
`__init__`	software	healthy	`scripts/openwebui/tool_web_fetch.py:206`
`_break`	software	healthy	`scripts/openwebui/tool_web_fetch.py:75`
`handle_starttag`	software	healthy	`scripts/openwebui/tool_web_fetch.py:80`
`handle_endtag`	software	healthy	`scripts/openwebui/tool_web_fetch.py:112`
`handle_startendtag`	software	dead	`scripts/openwebui/tool_web_fetch.py:131`
`handle_data`	software	dead	`scripts/openwebui/tool_web_fetch.py:135`
`_normalize_text`	software	healthy	`scripts/openwebui/tool_web_fetch.py:156`
`_extract_readable_html`	software	healthy	`scripts/openwebui/tool_web_fetch.py:163`
`_reserve_fetch`	software	healthy	`scripts/openwebui/tool_web_fetch.py:183`
`_finish_fetch`	software	healthy	`scripts/openwebui/tool_web_fetch.py:194`
`redirect_request`	software	dead	`scripts/openwebui/tool_web_fetch.py:214`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`README.md`	software	healthy	`README.md`
`OPENWEBUI.md`	software	healthy	`OPENWEBUI.md`
`setup.sh`	software	healthy	`setup.sh`
`SPECULATIVE.md`	software	healthy	`SPECULATIVE.md`
`KV-CACHE.md`	software	healthy	`KV-CACHE.md`
`TOOLS.md`	software	healthy	`TOOLS.md`
`pyproject.toml`	software	healthy	`pyproject.toml`
`LICENSE`	software	healthy	`LICENSE`
`VISION.md`	software	healthy	`VISION.md`
`AGENTS.md`	software	healthy	`AGENTS.md`
`test_tool_web_fetch.py`	software	healthy	`tests/test_tool_web_fetch.py`
`test_tool_code_interpreter.py`	software	healthy	`tests/test_tool_code_interpreter.py`
`test_seed_openwebui.py`	software	healthy	`tests/test_seed_openwebui.py`
`test_tool_sql.py`	software	healthy	`tests/test_tool_sql.py`
`build_mac.sh`	software	healthy	`scripts/build_mac.sh`
`download_binaries.sh`	software	healthy	`scripts/download_binaries.sh`
`run_mlx.sh`	software	healthy	`scripts/run_mlx.sh`
`start_openwebui.sh`	software	healthy	`scripts/start_openwebui.sh`
`webui-config.json`	software	healthy	`scripts/webui-config.json`
`start_llama_server.sh`	software	healthy	`scripts/start_llama_server.sh`
`download_models.sh`	software	healthy	`scripts/download_models.sh`
`make_kv_bias.sh`	software	healthy	`scripts/make_kv_bias.sh`
`common.sh`	software	healthy	`scripts/common.sh`
`start_mlx_server.sh`	software	healthy	`scripts/start_mlx_server.sh`
`build_cpu_linux.sh`	software	healthy	`scripts/build_cpu_linux.sh`
`build_cuda_linux.sh`	software	healthy	`scripts/build_cuda_linux.sh`
`mlx_generate.py`	software	healthy	`scripts/mlx_generate.py`
`run_llama.sh`	software	healthy	`scripts/run_llama.sh`
`tool_weather.py`	software	healthy	`scripts/openwebui/tool_weather.py`
`tool_web_fetch.py`	software	healthy	`scripts/openwebui/tool_web_fetch.py`
`seed_openwebui.py`	software	healthy	`scripts/openwebui/seed_openwebui.py`
`filter_mlx_stream.py`	software	healthy	`scripts/openwebui/filter_mlx_stream.py`
`tool_sql.py`	software	healthy	`scripts/openwebui/tool_sql.py`
`tool_code_interpreter.py`	software	healthy	`scripts/openwebui/tool_code_interpreter.py`
`make_demo_db.py`	software	healthy	`scripts/openwebui/make_demo_db.py`
`README.md`	software	healthy	`community-benchmarks/README.md`
`cuda-rtx5060ti-linux.md`	software	healthy	`community-benchmarks/ternary-bonsai/cuda-rtx5060ti-linux.md`
`TERNARY-TEMPLATE-mlx.md`	software	healthy	`community-benchmarks/ternary-bonsai/TERNARY-TEMPLATE-mlx.md`
`README.md`	software	healthy	`community-benchmarks/ternary-bonsai/README.md`
`TERNARY-TEMPLATE-llama-cpp.md`	software	healthy	`community-benchmarks/ternary-bonsai/TERNARY-TEMPLATE-llama-…`
`metal-m3-pro-macos.md`	software	healthy	`community-benchmarks/ternary-bonsai/metal-m3-pro-macos.md`
`cuda-rtx4070tisuper-windows.md`	software	healthy	`community-benchmarks/ternary-bonsai/cuda-rtx4070tisuper-win…`
`mlx-m5-pro-macos.md`	software	healthy	`community-benchmarks/ternary-bonsai/mlx-m5-pro-macos.md`
`cuda-rtxa5000-ubuntu.md`	software	healthy	`community-benchmarks/ternary-bonsai/cuda-rtxa5000-ubuntu.md`
`cuda-l40s-linux.md`	software	healthy	`community-benchmarks/ternary-bonsai/cuda-l40s-linux.md`
`vulkan-strix-halo-128gb-archlinux.md`	software	healthy	`community-benchmarks/bonsai/vulkan-strix-halo-128gb-archlin…`
`cuda-l40s-27b-linux.md`	software	healthy	`community-benchmarks/bonsai/cuda-l40s-27b-linux.md`
`cuda-rtxa2000-debian.md`	software	healthy	`community-benchmarks/bonsai/cuda-rtxa2000-debian.md`
`README.md`	software	healthy	`community-benchmarks/bonsai/README.md`
`rocm-hip-strix-halo-128gb-archlinux.md`	software	healthy	`community-benchmarks/bonsai/rocm-hip-strix-halo-128gb-archl…`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`syntax-and-env-vars`	cicd	healthy	`.github/workflows/check-env-vars.yml`
`download-model`	cicd	healthy	`.github/workflows/manual-platform-smoke.yml`
`linux-x86-cpu`	cicd	healthy	`.github/workflows/manual-platform-smoke.yml`
`windows-x86-cpu`	cicd	healthy	`.github/workflows/manual-platform-smoke.yml`
`macos-metal`	cicd	healthy	`.github/workflows/manual-platform-smoke.yml`
`macos-intel-cpu`	cicd	healthy	`.github/workflows/manual-platform-smoke.yml`
`linux-arm-cpu`	cicd	healthy	`.github/workflows/manual-platform-smoke.yml`
`linux-x86-vulkan`	cicd	healthy	`.github/workflows/manual-platform-smoke.yml`
`windows-arm-cpu`	cicd	healthy	`.github/workflows/manual-platform-smoke.yml`
`linux-cuda`	cicd	healthy	`.github/workflows/manual-platform-smoke.yml`
`windows-cuda`	cicd	healthy	`.github/workflows/manual-platform-smoke.yml`
`linux-amd`	cicd	healthy	`.github/workflows/manual-platform-smoke.yml`
`windows-amd`	cicd	healthy	`.github/workflows/manual-platform-smoke.yml`
`linux-vulkan`	cicd	healthy	`.github/workflows/manual-platform-smoke.yml`
`windows-vulkan`	cicd	healthy	`.github/workflows/manual-platform-smoke.yml`
`download-model`	cicd	healthy	`.github/workflows/build-from-source-smoke.yml`
`linux-cpu`	cicd	healthy	`.github/workflows/build-from-source-smoke.yml`
`linux-arm-cpu`	cicd	healthy	`.github/workflows/build-from-source-smoke.yml`
`macos-metal`	cicd	healthy	`.github/workflows/build-from-source-smoke.yml`
`macos-intel`	cicd	healthy	`.github/workflows/build-from-source-smoke.yml`
`check-no-em-dashes`	cicd	healthy	`.github/workflows/check-no-em-dashes.yml`

Label	Layer	Status	Path
`_Headers`	software	healthy	`tests/test_tool_web_fetch.py:14`
`_Response`	software	healthy	`tests/test_tool_web_fetch.py:19`
`_Opener`	software	healthy	`tests/test_tool_web_fetch.py:34`
`WebFetchTests`	software	healthy	`tests/test_tool_web_fetch.py:42`
`CodeInterpreterResultTests`	software	healthy	`tests/test_tool_code_interpreter.py:14`
`_ApiRecorder`	software	healthy	`tests/test_seed_openwebui.py:20`
`SeedOpenWebUITests`	software	healthy	`tests/test_seed_openwebui.py:29`
`SqlToolDescriptionTests`	software	healthy	`tests/test_tool_sql.py:16`
`SqlToolBehaviorTests`	software	healthy	`tests/test_tool_sql.py:28`
`Tools`	software	healthy	`scripts/openwebui/tool_weather.py:17`
`_ReadableHTMLParser`	software	healthy	`scripts/openwebui/tool_web_fetch.py:51`
`_Redirect`	software	healthy	`scripts/openwebui/tool_web_fetch.py:205`
`_NoRedirect`	software	healthy	`scripts/openwebui/tool_web_fetch.py:210`
`Tools`	software	healthy	`scripts/openwebui/tool_web_fetch.py:278`
`Api`	software	healthy	`scripts/openwebui/seed_openwebui.py:103`
`Filter`	software	healthy	`scripts/openwebui/filter_mlx_stream.py:8`
`Tools`	software	healthy	`scripts/openwebui/tool_sql.py:38`
`Tools`	software	healthy	`scripts/openwebui/tool_code_interpreter.py:149`

Label	Layer	Status	Path
`tests`	software	healthy	`tests`
`scripts`	software	healthy	`scripts`
`openwebui`	software	healthy	`scripts/openwebui`
`community-benchmarks`	software	healthy	`community-benchmarks`
`ternary-bonsai`	software	healthy	`community-benchmarks/ternary-bonsai`
`bonsai`	software	healthy	`community-benchmarks/bonsai`
`.github`	software	healthy	`.github`
`workflows`	software	healthy	`.github/workflows`

Label	Layer	Status	Path
`customers`	data	healthy	`scripts/openwebui/make_demo_db.py`
`products`	data	healthy	`scripts/openwebui/make_demo_db.py`
`orders`	data	healthy	`scripts/openwebui/make_demo_db.py`
`order_items`	data	healthy	`scripts/openwebui/make_demo_db.py`
`support_tickets`	data	healthy	`scripts/openwebui/make_demo_db.py`

Label	Layer	Status	Path
`[email protected]`	dependencies	healthy	`pyproject.toml`
`cmake@`	dependencies	healthy	`pyproject.toml`
`ninja@`	dependencies	healthy	`pyproject.toml`
`setuptools@`	dependencies	healthy	`pyproject.toml`
`[email protected]`	dependencies	healthy	`pyproject.toml`

Label	Layer	Status	Path
`gha::check-env-vars`	cicd	healthy	`.github/workflows/check-env-vars.yml`
`gha::manual-platform-smoke`	cicd	healthy	`.github/workflows/manual-platform-smoke.yml`
`gha::build-from-source-smoke`	cicd	healthy	`.github/workflows/build-from-source-smoke.yml`
`gha::check-no-em-dashes`	cicd	healthy	`.github/workflows/check-no-em-dashes.yml`

Label	Layer	Status	Path
`port:9090`	network	healthy	`scripts/start_openwebui.sh`
`port:8080`	network	healthy	`scripts/start_llama_server.sh`
`port:8081`	network	healthy	`scripts/start_mlx_server.sh`

Label	Layer	Status	Path
`repobility-clone-6_q3zaxs`	software	healthy	`/tmp/repobility-clone-6_q3zaxs`

Label	Layer	Status	Path
`sqlite`	data	healthy	`tests/test_tool_sql.py`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`AGENTS.md`

Label	Layer	Status	Path
`gpu (detected)`	hardware	healthy	`README.md`

Label	Layer	Status	Path
`BONSAI_MODEL`	cicd	healthy	`—`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/9cd6981e-5ccf-49ce-a07a-6fec118684e2/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/9cd6981e-5ccf-49ce-a07a-6fec118684e2/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

PrismML-Eng/Bonsai-demo

Complete repo analysis

function 50+

file 50+

job 21

class 18

directory 8

table 5

dependency 5

pipeline 4

port 3

repo 1

database 1

service 1

gpu 1

env_var 1