Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

Chaulin7/fitscore-backend

https://github.com/Chaulin7/fitscore-backend · scanned 2026-06-17 01:22 UTC (1 month, 2 weeks ago)

53 raw signals (0 security + 53 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 month, 2 weeks ago · v2 · last Δ +9.0 (diff) · 53 actionable findings from 1 signal source. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
85.7
/100
Security checks
86
0 findings
System graph
86
100.0% cov · 53 findings
Critical
0
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 0 High 1 Medium 6 Low 42 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 53 Crowd 0 Layer: Frontend 1 Security 4 Cicd 1 Quality 8 Api 39

All 256 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
allowedOriginsRaw software healthy src/index.js:allowedOriginsRaw
isAllowedOrigin software healthy src/index.js:isAllowedOrigin
runRetentionPurge software healthy src/index.js:runRetentionPurge
unauthorized software healthy src/middleware/auth.js:unauthorized
extractBearerToken software healthy src/middleware/auth.js:extractBearerToken
requireSession software healthy src/middleware/auth.js:requireSession
requireSessionOrDownloadToken software healthy src/middleware/auth.js:requireSessionOrDownloadToken
extractText software healthy src/services/parser.js:extractText
extractFromPdf software healthy src/services/parser.js:extractFromPdf
text software healthy src/services/parser.js:text
extractFromDocx software healthy src/services/parser.js:extractFromDocx
getStripe software healthy src/services/billing.js:getStripe
isBillingConfigured software healthy src/services/billing.js:isBillingConfigured
priceIdForPlan software healthy src/services/billing.js:priceIdForPlan
planForPriceId software healthy src/services/billing.js:planForPriceId
isUnlimited software healthy src/services/billing.js:isUnlimited
limitFor software healthy src/services/billing.js:limitFor
checkQuota software healthy src/services/billing.js:checkQuota
sha256hex software healthy src/services/authService.js:sha256hex
normalizeEmail software healthy src/services/authService.js:normalizeEmail
isValidEmail software healthy src/services/authService.js:isValidEmail
validatePassword software healthy src/services/authService.js:validatePassword
hashPassword software healthy src/services/authService.js:hashPassword
verifyPassword software healthy src/services/authService.js:verifyPassword
createOrganization software healthy src/services/authService.js:createOrganization
getOrganizationById software healthy src/services/authService.js:getOrganizationById
setOrganizationRetention software healthy src/services/authService.js:setOrganizationRetention
findUserByEmail software healthy src/services/authService.js:findUserByEmail
findUserById software healthy src/services/authService.js:findUserById
createUser software healthy src/services/authService.js:createUser
isLocked software healthy src/services/authService.js:isLocked
recordLoginFailure software healthy src/services/authService.js:recordLoginFailure
failed software healthy src/services/authService.js:failed
recordLoginSuccess software healthy src/services/authService.js:recordLoginSuccess
setUserPassword software healthy src/services/authService.js:setUserPassword
createSession software healthy src/services/authService.js:createSession
findSessionByToken software healthy src/services/authService.js:findSessionByToken
deleteSession software healthy src/services/authService.js:deleteSession
deleteSessionsForUser software healthy src/services/authService.js:deleteSessionsForUser
createPasswordReset software healthy src/services/authService.js:createPasswordReset
findValidPasswordReset software healthy src/services/authService.js:findValidPasswordReset
markPasswordResetUsed software healthy src/services/authService.js:markPasswordResetUsed
createDownloadToken software healthy src/services/authService.js:createDownloadToken
consumeDownloadToken software healthy src/services/authService.js:consumeDownloadToken
getLegacyOrg software healthy src/services/authService.js:getLegacyOrg
migrateLegacyData software healthy src/services/authService.js:migrateLegacyData
mean software healthy src/services/biasAudit.js:mean
median software healthy src/services/biasAudit.js:median
stdDev software healthy src/services/biasAudit.js:stdDev
welchTTest software healthy src/services/biasAudit.js:welchTTest

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
POST /api/billing/webhook api healthy src/index.js
USE /api/auth api healthy src/index.js
USE /api/org api healthy src/index.js
USE /api/billing api healthy src/index.js
GET /api/meta api healthy src/index.js
USE /api/analyze api healthy src/index.js
USE /api/audit api healthy src/index.js
USE /api/stats api healthy src/index.js
USE /api/templates api healthy src/index.js
GET /health api healthy src/index.js
GET /overview api healthy src/routes/stats.js
GET /score-distribution api healthy src/routes/stats.js
POST / api healthy src/routes/audit.js
GET / api healthy src/routes/audit.js
GET /roles api healthy src/routes/audit.js
GET /roles/:role/history api healthy src/routes/audit.js
GET /export/csv api healthy src/routes/audit.js
GET /bias-report api healthy src/routes/audit.js
GET /bias-report/pdf api healthy src/routes/audit.js
GET /:id/changes api healthy src/routes/audit.js
PATCH /:id api healthy src/routes/audit.js
GET /report/:id api healthy src/routes/audit.js
DELETE /:id api healthy src/routes/audit.js
POST /batch api healthy src/routes/analyze.js
GET /usage api healthy src/routes/billing.js
POST /checkout api healthy src/routes/billing.js
POST /portal api healthy src/routes/billing.js
PATCH / api healthy src/routes/org.js
GET /export api healthy src/routes/org.js
DELETE /audit-data api healthy src/routes/org.js
GET /:id api healthy src/routes/templates.js
POST /signup api healthy src/routes/auth.js
POST /login api healthy src/routes/auth.js
POST /logout api healthy src/routes/auth.js
GET /me api healthy src/routes/auth.js
POST /change-password api healthy src/routes/auth.js
POST /request-reset api healthy src/routes/auth.js
POST /reset-password api healthy src/routes/auth.js
POST /download-token api healthy src/routes/auth.js

LabelLayerStatusPath
.env.example software healthy .env.example
package-lock.json software healthy package-lock.json
README.md software healthy README.md
package.json software healthy package.json
ci.yml software healthy .github/workflows/ci.yml
index.js software healthy src/index.js
auth.js software healthy src/middleware/auth.js
parser.js software healthy src/services/parser.js
billing.js software healthy src/services/billing.js
authService.js software healthy src/services/authService.js
biasAudit.js software healthy src/services/biasAudit.js
scorer.js software healthy src/services/scorer.js
db.js software healthy src/services/db.js
biasAudit.test.js software healthy src/services/biasAudit.test.js
stats.js software healthy src/routes/stats.js
audit.js software healthy src/routes/audit.js
analyze.js software healthy src/routes/analyze.js
billing.js software healthy src/routes/billing.js
org.js software healthy src/routes/org.js
templates.js software healthy src/routes/templates.js
auth.js software healthy src/routes/auth.js
PHASE_2A_FRONTEND.md software healthy docs/PHASE_2A_FRONTEND.md
README.md software healthy docs/billing/README.md
instructions-for-use.md software healthy docs/compliance/instructions-for-use.md
compliance-pack-cover.md software healthy docs/compliance/compliance-pack-cover.md
technical-documentation-outline.md software healthy docs/compliance/technical-documentation-outline.md
candidate-notice.md software healthy docs/compliance/candidate-notice.md
risk-management-log.md software healthy docs/compliance/risk-management-log.md
retention-policy.md software healthy docs/privacy/retention-policy.md
records-of-processing.md software healthy docs/privacy/records-of-processing.md
dpa-template.md software healthy docs/privacy/dpa-template.md
compliance.html software healthy public/compliance.html
privacy.html software healthy public/privacy.html
index.html software healthy public/index.html
landing.html software healthy public/landing.html
bias-report.html software healthy public/bias-report.html

LabelLayerStatusPath
.github software healthy .github
workflows software healthy .github/workflows
src software healthy src
middleware software healthy src/middleware
services software healthy src/services
routes software healthy src/routes
docs software healthy docs
billing software healthy docs/billing
compliance software healthy docs/compliance
privacy software healthy docs/privacy
public software healthy public

LabelLayerStatusPath
sqlite data healthy .env.example
postgres data healthy README.md

LabelLayerStatusPath
Chaulin7__fitscore-backend software healthy /data/fable5_failed_archive/Chaulin7__fitscore-backend

LabelLayerStatusPath
port:3000 network healthy .env.example

LabelLayerStatusPath
vps::aws hardware healthy README.md

LabelLayerStatusPath
gha::ci cicd healthy .github/workflows/ci.yml

LabelLayerStatusPath
test cicd healthy .github/workflows/ci.yml
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/abfb0477-c529-477b-81ba-d7e8a562c5b4/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/abfb0477-c529-477b-81ba-d7e8a562c5b4/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.