Scan timing: clone 5.61s · analysis 16.21s · 25.2 MB · GitHub API rate-limit (preflight)
https://github.com/wso2/apim-apps
· scanned 2026-06-05 15:09 UTC (5 days, 1 hour ago)
· 10 languages
864 raw signals (96 security + 768 graph) 11/13 scanners ran 52nd percentile · Javascript · large (100-500K LoC) System graph score 71 (higher by 8)
Last scanned 5 days, 1 hour ago · v2 · 380 actionable findings from 2 signal sources. 99 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.
| Component | Sub-score | Weight | Contribution |
|---|---|---|---|
structure_score |
60.0 | 0.15 | 9.00 |
security_score |
100.0 | 0.25 | 25.00 |
testing_score |
84.0 | 0.20 | 16.80 |
documentation_score |
69.0 | 0.15 | 10.35 |
practices_score |
67.0 | 0.15 | 10.05 |
code_quality |
70.0 | 0.10 | 7.00 |
| Overall | 1.00 | 78.2 |
Showing 240 of 380 actionable findings. 479 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.
.github/workflows/ui-test.yml:30, 35, 39, 43, 74, 85, 91, 97 (14 hits).github/workflows/main.yml:21, 25, 29, 33 (7 hits)portals/devportal/src/main/webapp/source/src/app/components/Apis/Details/Documents/GenerateDocument.jsx:49portals/publisher/src/main/webapp/source/src/app/components/Apis/Create/CreateAPIWithAI/components/AlertDialog.tsx:172portals/publisher/src/main/webapp/source/src/app/components/Apis/Details/Documents/GenerateDocument.jsx:36portals/devportal/src/main/webapp/source/src/app/components/Apis/Details/Documents/View.jsx:190
portals/publisher/src/main/webapp/source/src/app/components/Apis/Details/APIDefinition/Linting/APILintingSummary.tsx:86
portals/devportal/src/main/webapp/site/public/locales/converter/i18nconverter.js:8
repo-level (4 hits)repo-level (2 hits)repo-level (8 hits)repo-level (6 hits)repo-level (2 hits)repo-level (2 hits)repo-level (4 hits)repo-level (3 hits)portals/devportal/src/main/webapp/source/src/app/components/Base/index.jsx:760
Dangerous innerhtml
portals/publisher/src/main/webapp/source/src/app/components/Apis/Details/Resources/components/operationComponents/asyncapi/SubscriptionConfig.jsx:92
Weak hash
portals/admin/src/main/webapp/source/src/app/components/KeyManagers/ListKeyManagers.jsx:34, 366, 573, 615 (4 hits)portals/admin/src/main/webapp/source/src/app/components/AiServiceProviders/ListAiServiceProviders.jsx:243, 273, 359 (3 hits)portals/admin/src/main/webapp/source/src/app/components/ApplicationSettings/UpgradeTokenType.jsx:24, 224 (2 hits)portals/admin/src/main/webapp/source/src/app/components/GatewayEnvironments/ListGatewayInstances.jsx:141, 143 (2 hits)portals/admin/src/main/webapp/source/src/app/components/Governance/ComplianceDashboard/PolicyAdherenceTable.jsx:93, 98 (2 hits)portals/admin/src/main/webapp/source/src/app/components/Governance/RulesetCatalog/ListRulesets.jsx:39, 167 (2 hits)portals/admin/src/main/webapp/source/src/app/components/KeyManagers/ListKeyManagerUsages.jsx:231, 237 (2 hits)portals/admin/src/main/webapp/source/src/app/components/AdminPages/Addons/ListBaseWithPagination.jsx:120
This page is publicly accessible at:
https://repobility.com/scan/9d03fbc2-272b-4044-be4f-8d6b70ce1b87/
To check status programmatically (no auth required):
curl -s https://repobility.com/api/v1/public/scan/9d03fbc2-272b-4044-be4f-8d6b70ce1b87/
Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.