Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

WordPress/secure-custom-fields

https://github.com/WordPress/secure-custom-fields · scanned 2026-06-16 01:00 UTC (2 months, 1 week ago)

68 raw signals (0 security + 68 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 68 actionable findings from 1 signal source. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
55.4
/100
Security checks
55
0 findings
System graph
55
77.8% cov · 68 findings
Critical
0
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 0 High 1 Medium 30 Low 23 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 68 Crowd 0 Layer: Api 1 Frontend 23 Security 15 Cicd 1 Quality 28

All 1931 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
playwright.config.ts software healthy playwright.config.ts
.wp-env.json software healthy .wp-env.json
.markdownlint.json software healthy .markdownlint.json
jest.config.js software healthy jest.config.js
secure-custom-fields.php software healthy secure-custom-fields.php
README.md software healthy README.md
context7.json software healthy context7.json
CLAUDE.md software healthy CLAUDE.md
.prettierrc.js software healthy .prettierrc.js
package.json software healthy package.json
composer.json software healthy composer.json
package-lock.json software healthy package-lock.json
acf.php software healthy acf.php
webpack.config.js software healthy webpack.config.js
index.php software healthy index.php
SECURITY.md software healthy SECURITY.md
AGENTS.md software healthy AGENTS.md
secure-custom-fields-pt_PT.l10n.php software healthy lang/secure-custom-fields-pt_PT.l10n.php
secure-custom-fields-tr_TR.l10n.php software healthy lang/secure-custom-fields-tr_TR.l10n.php
secure-custom-fields-sk_SK.l10n.php software healthy lang/secure-custom-fields-sk_SK.l10n.php
secure-custom-fields-es_CR.l10n.php software healthy lang/secure-custom-fields-es_CR.l10n.php
secure-custom-fields-da_DK.l10n.php software healthy lang/secure-custom-fields-da_DK.l10n.php
secure-custom-fields-fa_IR.l10n.php software healthy lang/secure-custom-fields-fa_IR.l10n.php
secure-custom-fields-hr.l10n.php software healthy lang/secure-custom-fields-hr.l10n.php
secure-custom-fields-ro_RO.l10n.php software healthy lang/secure-custom-fields-ro_RO.l10n.php
secure-custom-fields-es_VE.l10n.php software healthy lang/secure-custom-fields-es_VE.l10n.php
secure-custom-fields-ca.l10n.php software healthy lang/secure-custom-fields-ca.l10n.php
secure-custom-fields-zh_TW.l10n.php software healthy lang/secure-custom-fields-zh_TW.l10n.php
secure-custom-fields-fr_FR.l10n.php software healthy lang/secure-custom-fields-fr_FR.l10n.php
secure-custom-fields-gu.l10n.php software healthy lang/secure-custom-fields-gu.l10n.php
secure-custom-fields-en_CA.l10n.php software healthy lang/secure-custom-fields-en_CA.l10n.php
secure-custom-fields-es_CO.l10n.php software healthy lang/secure-custom-fields-es_CO.l10n.php
secure-custom-fields-de_CH.l10n.php software healthy lang/secure-custom-fields-de_CH.l10n.php
secure-custom-fields-de_DE.l10n.php software healthy lang/secure-custom-fields-de_DE.l10n.php
secure-custom-fields-fi.l10n.php software healthy lang/secure-custom-fields-fi.l10n.php
secure-custom-fields-fr_CA.l10n.php software healthy lang/secure-custom-fields-fr_CA.l10n.php
secure-custom-fields-en_GB.l10n.php software healthy lang/secure-custom-fields-en_GB.l10n.php
secure-custom-fields-id_ID.l10n.php software healthy lang/secure-custom-fields-id_ID.l10n.php
secure-custom-fields-de_DE_formal.l10n.php software healthy lang/secure-custom-fields-de_DE_formal.l10n.php
secure-custom-fields-fa_AF.l10n.php software healthy lang/secure-custom-fields-fa_AF.l10n.php
secure-custom-fields-pt_AO.l10n.php software healthy lang/secure-custom-fields-pt_AO.l10n.php
secure-custom-fields-it_IT.l10n.php software healthy lang/secure-custom-fields-it_IT.l10n.php
secure-custom-fields-es_MX.l10n.php software healthy lang/secure-custom-fields-es_MX.l10n.php
secure-custom-fields-en_ZA.l10n.php software healthy lang/secure-custom-fields-en_ZA.l10n.php
secure-custom-fields-he_IL.l10n.php software healthy lang/secure-custom-fields-he_IL.l10n.php
secure-custom-fields-ja.l10n.php software healthy lang/secure-custom-fields-ja.l10n.php
secure-custom-fields-cs_CZ.l10n.php software healthy lang/secure-custom-fields-cs_CZ.l10n.php
secure-custom-fields-uk.l10n.php software healthy lang/secure-custom-fields-uk.l10n.php
secure-custom-fields-ar.l10n.php software healthy lang/secure-custom-fields-ar.l10n.php
index.php software healthy lang/index.php

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
global software healthy tests/js/field.test.js:global
utilities software healthy tests/js/acf-utilities.test.js:utilities
args software healthy tests/js/acf-utilities.test.js:args
a software healthy tests/js/acf-utilities.test.js:a
filter software healthy tests/js/acf-utilities.test.js:filter
removed software healthy tests/js/hooks.test.js:removed
kept software healthy tests/js/hooks.test.js:kept
global software healthy tests/js/model.test.js:global
aliases software healthy tests/js/compatibility.test.js:aliases
createFormStub software healthy tests/js/acf-serialization.test.js:createFormStub
createInput software healthy tests/js/acf-serialization.test.js:createInput
createSelect software healthy tests/js/acf-serialization.test.js:createSelect
createChainableMock software healthy tests/js/fields.test.js:createChainableMock
select software healthy tests/js/bindings/hooks.test.js:select
callback software healthy tests/js/bindings/block-editor.test.js:callback
when software healthy tests/js/bindings/block-editor.test.js:when
MockBlockEdit software healthy tests/js/bindings/block-editor.test.js:MockBlockEdit
BlockEdit1 software healthy tests/js/bindings/block-editor.test.js:BlockEdit1
BlockEdit2 software healthy tests/js/bindings/block-editor.test.js:BlockEdit2
createJQueryStub software healthy tests/js/mocks/acf-jquery.js:createJQueryStub
createWrapper software healthy tests/js/mocks/acf-jquery.js:createWrapper
jQuery software healthy tests/js/mocks/jquery.js:jQuery
returning software healthy tests/js/fuzz/acf-fuzz.test.js:returning
mulberry32 software healthy tests/js/fuzz/acf-fuzz.test.js:mulberry32
iterations software healthy tests/js/fuzz/acf-fuzz.test.js:iterations
randomString software healthy tests/js/fuzz/acf-fuzz.test.js:randomString
randomScalar software healthy tests/js/fuzz/acf-fuzz.test.js:randomScalar
randomData software healthy tests/js/fuzz/acf-fuzz.test.js:randomData
nestedValue software healthy tests/js/fuzz/acf-fuzz.test.js:nestedValue
createFormStub software healthy tests/js/fuzz/acf-fuzz.test.js:createFormStub
createModelClass software healthy tests/js/conditions/conditions-manager.test.js:createModelC…
with software healthy tests/js/conditions/validation.test.js:with
createModelClass software healthy tests/js/conditions/validation.test.js:createModelClass
rather software healthy tests/js/conditions/validation.test.js:rather
exists software healthy tests/js/conditions/validation.test.js:exists
createMockField software healthy tests/js/conditions/condition-types.test.js:createMockField
createMockRule software healthy tests/js/conditions/condition-types.test.js:createMockRule
createExtend software healthy tests/js/conditions/condition-types.test.js:createExtend
NestedComponent software healthy tests/js/blocks-v3/block-preview.test.js:NestedComponent
component software healthy tests/js/blocks-v3/jsx-parser.test.js:component
ThrowError software healthy tests/js/blocks-v3/block-edit-error-boundary.test.js:ThrowE…
was software healthy tests/js/blocks-v3/block-edit-error-boundary.test.js:was
InvalidHTMLComponent software healthy tests/js/blocks-v3/block-edit-error-boundary.test.js:Invali…
MaliciousHTMLComponent software healthy tests/js/blocks-v3/block-edit-error-boundary.test.js:Malici…
ValidHTMLComponent software healthy tests/js/blocks-v3/block-edit-error-boundary.test.js:ValidH…
to software healthy tests/e2e/conditional-logic.spec.ts:to
createConditionalFieldGroup software healthy tests/e2e/conditional-logic.spec.ts:createConditionalFieldG…
enableConditionalLogic software healthy tests/e2e/conditional-logic.spec.ts:enableConditionalLogic
isOn software healthy tests/e2e/conditional-logic.spec.ts:isOn
enableMultipleConditions software healthy tests/e2e/conditional-logic.spec.ts:enableMultipleConditions

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
lang software healthy lang
pro software healthy pro
fields software healthy pro/fields
post-types software healthy pro/post-types
locations software healthy pro/locations
admin software healthy pro/admin
post-types software healthy pro/admin/post-types
views software healthy pro/admin/views
acf-ui-options-page software healthy pro/admin/views/acf-ui-options-page
tests software healthy tests
php software healthy tests/php
post-types software healthy tests/php/post-types
fixtures software healthy tests/php/fixtures
schemas software healthy tests/php/fixtures/schemas
post-types software healthy tests/php/fixtures/schemas/post-types
valid software healthy tests/php/fixtures/schemas/post-types/valid
invalid software healthy tests/php/fixtures/schemas/post-types/invalid
taxonomies software healthy tests/php/fixtures/schemas/taxonomies
valid software healthy tests/php/fixtures/schemas/taxonomies/valid
invalid software healthy tests/php/fixtures/schemas/taxonomies/invalid
ui-options-pages software healthy tests/php/fixtures/schemas/ui-options-pages
valid software healthy tests/php/fixtures/schemas/ui-options-pages/valid
invalid software healthy tests/php/fixtures/schemas/ui-options-pages/invalid
field-groups software healthy tests/php/fixtures/schemas/field-groups
valid software healthy tests/php/fixtures/schemas/field-groups/valid
invalid software healthy tests/php/fixtures/schemas/field-groups/invalid
includes software healthy tests/php/includes
fields software healthy tests/php/includes/fields
functions software healthy tests/php/includes/functions
abilities software healthy tests/php/includes/abilities
api software healthy tests/php/includes/api
rest-api software healthy tests/php/includes/rest-api
fuzz software healthy tests/php/includes/fuzz
meta software healthy tests/php/includes/meta
locations software healthy tests/php/includes/locations
ajax software healthy tests/php/includes/ajax
blocks software healthy tests/php/includes/blocks
forms software healthy tests/php/includes/forms
schemas software healthy tests/php/schemas
js software healthy tests/js
bindings software healthy tests/js/bindings
fields software healthy tests/js/fields
mocks software healthy tests/js/mocks
fuzz software healthy tests/js/fuzz
conditions software healthy tests/js/conditions
blocks-v3 software healthy tests/js/blocks-v3
e2e software healthy tests/e2e
mu-plugins software healthy tests/e2e/mu-plugins
plugins software healthy tests/e2e/plugins
blocks software healthy tests/e2e/plugins/blocks

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
which software healthy tests/js/field.test.js:which
which software healthy tests/js/model.test.js:which
modelDefinition software healthy tests/js/model.test.js:modelDefinition
and software healthy tests/js/acf-serialization.test.js:and
to software healthy tests/js/fields/true-false.test.js:to
from software healthy tests/js/fields/true-false.test.js:from
from software healthy tests/js/fields/select.test.js:from
when software healthy tests/js/fields/url.test.js:when
from software healthy tests/js/fields/radio.test.js:from
to software healthy tests/js/fields/radio.test.js:to
and software healthy tests/js/fields/button-group.test.js:and
as software healthy tests/js/conditions/conditions-manager.test.js:as
change software healthy tests/js/conditions/validation.test.js:change
and software healthy tests/js/conditions/validation.test.js:and
and software healthy tests/js/conditions/condition-base.test.js:and
on software healthy tests/js/conditions/condition-base.test.js:on
to software healthy tests/js/blocks-v3/jsx-parser.test.js:to
component software healthy tests/js/blocks-v3/jsx-parser.test.js:component
name software healthy tests/js/blocks-v3/popover-wrapper.test.js:name
names software healthy tests/js/blocks-v3/popover-wrapper.test.js:names
name software healthy tests/js/blocks-v3/block-toolbar-fields.test.js:name
const software healthy tests/e2e/validation.spec.ts:const
after software healthy tests/e2e/validation.spec.ts:after
instead software healthy tests/e2e/field-group-duplication.spec.ts:instead
layout software healthy tests/e2e/field-type-flexible-content.spec.ts:layout
const software healthy tests/e2e/field-type-time-picker.spec.ts:const
name software healthy scripts/merge-php-coverage.js:name
this software healthy assets/src/js/_acf-field-tab.js:this
on software healthy assets/src/js/_field-group-settings.js:on
when software healthy assets/src/js/_acf-validation.js:when
this software healthy assets/src/js/_acf-tooltip.js:this
to software healthy assets/src/js/_acf-helpers.js:to
$item software healthy assets/src/js/_acf-helpers.js:$item
change software healthy assets/src/js/_acf-helpers.js:change
when software healthy assets/src/js/_acf-helpers.js:when
$container software healthy assets/src/js/_acf-select2.js:$container
this software healthy assets/src/js/_acf-notice.js:this
$label software healthy assets/src/js/_acf-field-taxonomy.js:$label
var software healthy assets/src/js/_acf-field-wysiwyg.js:var
for software healthy assets/src/js/_acf-field-color-picker.js:for
$div software healthy assets/src/js/_acf-field-link.js:$div
if software healthy assets/src/js/_acf-field-link.js:if
if software healthy assets/src/js/_acf-field-url.js:if
for software healthy assets/src/js/_acf-model.js:for
used software healthy assets/src/js/_acf-model.js:used
$label software healthy assets/src/js/_acf-field-radio.js:$label
if software healthy assets/src/js/_acf-field-oembed.js:if
used software healthy assets/src/js/_field-group-field.js:used
to software healthy assets/src/js/_field-group-field.js:to
from software healthy assets/src/js/_field-group-field.js:from

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
test cicd healthy .github/workflows/phpunit.yml
phpcs cicd healthy .github/workflows/phpcs.yml
phpstan cicd healthy .github/workflows/phpstan.yml
props-bot cicd healthy .github/workflows/props-bot.yml
test cicd healthy .github/workflows/e2e.yml
merge-artifacts cicd healthy .github/workflows/e2e.yml
unit-js cicd healthy .github/workflows/unit-tests.yml
check-docs-manifest cicd healthy .github/workflows/docs-manifest.yml
verify-schema cicd healthy .github/workflows/verify-field-schema.yml

LabelLayerStatusPath
gha::phpunit cicd healthy .github/workflows/phpunit.yml
gha::phpcs cicd healthy .github/workflows/phpcs.yml
gha::phpstan cicd healthy .github/workflows/phpstan.yml
gha::props-bot cicd healthy .github/workflows/props-bot.yml
gha::e2e cicd healthy .github/workflows/e2e.yml
gha::unit-tests cicd healthy .github/workflows/unit-tests.yml
gha::docs-manifest cicd healthy .github/workflows/docs-manifest.yml
gha::verify-field-schema cicd healthy .github/workflows/verify-field-schema.yml

LabelLayerStatusPath
/wp/v2/types/product?context=edit frontend healthy tests/js/bindings/hooks.test.js
/wp/v2/types/book?context=edit frontend healthy tests/js/bindings/hooks.test.js
/wp/v2/users/me frontend healthy tests/e2e/user-profile-fields.spec.ts
/wp-abilities/v1 frontend healthy tests/e2e/abilities-internal-post-types.spec.ts
/wp/v2/types frontend healthy tests/e2e/rest-api-types-endpoint.spec.ts
/wp/v2/types/post frontend healthy tests/e2e/rest-api-types-endpoint.spec.ts
/scf-test/v1/purge-internal-posts frontend healthy tests/e2e/field-helpers.js

LabelLayerStatusPath
repobility-clone-jtqub7ya software healthy /tmp/repobility-clone-jtqub7ya

LabelLayerStatusPath
6.7.0.2 network healthy assets/src/js/pro/blocks-v3/components/jsx-parser.js

LabelLayerStatusPath
password_literal::tests/e2e/user-profile-fields.spec.ts security healthy tests/e2e/user-profile-fields.spec.ts
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/a573080e-4dbe-48fc-b18f-7a5a6c70c0c5/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/a573080e-4dbe-48fc-b18f-7a5a6c70c0c5/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.