Scan timing: clone 3.85s · analysis 8.78s · 39.2 MB · GitHub API rate-limit (preflight)
https://github.com/webpack/webpack
· scanned 2026-06-05 08:57 UTC (5 days, 19 hours ago)
· 10 languages
1079 raw signals (87 security + 992 graph) 11/13 scanners ran 100th percentile · Javascript · huge (>500K LoC) System graph score 64 (higher by 29)
Last scanned 5 days, 19 hours ago · v2 · 514 actionable findings from 2 signal sources. 69 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.
| Component | Sub-score | Weight | Contribution |
|---|---|---|---|
structure_score |
85.0 | 0.15 | 12.75 |
security_score |
100.0 | 0.25 | 25.00 |
testing_score |
100.0 | 0.20 | 20.00 |
documentation_score |
89.0 | 0.15 | 13.35 |
practices_score |
94.0 | 0.15 | 14.10 |
code_quality |
80.0 | 0.10 | 8.00 |
| Overall | 1.00 | 93.2 |
All 17501 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.
| Label | Layer | Status | Path |
|---|---|---|---|
tsconfig.types.benchmark.json |
software | healthy | tsconfig.types.benchmark.json |
cspell.json |
software | healthy | cspell.json |
jest.config.js |
software | warning | jest.config.js |
README.md |
software | healthy | README.md |
_SETUP.md |
software | healthy | _SETUP.md |
open-bot.yaml |
software | healthy | open-bot.yaml |
.prettierrc.js |
software | warning | .prettierrc.js |
package.json |
software | healthy | package.json |
TESTING_DOCS.md |
software | healthy | TESTING_DOCS.md |
CONTRIBUTING.md |
software | healthy | CONTRIBUTING.md |
tsconfig.validation.json |
software | healthy | tsconfig.validation.json |
GOVERNANCE.md |
software | healthy | GOVERNANCE.md |
.istanbul.yml |
software | healthy | .istanbul.yml |
types.d.ts |
software | healthy | types.d.ts |
generate-types-config.js |
software | warning | generate-types-config.js |
WORKING_GROUP.md |
software | healthy | WORKING_GROUP.md |
module.d.ts |
software | warning | module.d.ts |
declarations.test.d.ts |
software | warning | declarations.test.d.ts |
declarations.d.ts |
software | healthy | declarations.d.ts |
tsconfig.json |
software | healthy | tsconfig.json |
tsconfig.hot.json |
software | healthy | tsconfig.hot.json |
AGENTS.md |
software | healthy | AGENTS.md |
tsconfig.module.test.json |
software | healthy | tsconfig.module.test.json |
tsconfig.types.test.json |
software | healthy | tsconfig.types.test.json |
CHANGELOG.md |
software | healthy | CHANGELOG.md |
tsconfig.types.json |
software | healthy | tsconfig.types.json |
codecov.yml |
software | healthy | codecov.yml |
tsconfig.json |
software | healthy | assembly/tsconfig.json |
xxhash64.asm.ts |
software | healthy | assembly/hash/xxhash64.asm.ts |
md4.asm.ts |
software | healthy | assembly/hash/md4.asm.ts |
identifier.unittest.js |
software | warning | test/identifier.unittest.js |
ConfigTestCases.template.js |
software | healthy | test/ConfigTestCases.template.js |
mimeTypes.unittest.js |
software | warning | test/mimeTypes.unittest.js |
LocalModulesHelpers.unittest.js |
software | warning | test/LocalModulesHelpers.unittest.js |
ConfigTestCases.basictest.js |
software | warning | test/ConfigTestCases.basictest.js |
HotModuleReplacementPlugin.test.js |
software | healthy | test/HotModuleReplacementPlugin.test.js |
LazySet.unittest.js |
software | warning | test/LazySet.unittest.js |
TestCasesDevtoolEvalNamedModules.test.js |
software | warning | test/TestCasesDevtoolEvalNamedModules.test.js |
createMappings.unittest.js |
software | warning | test/createMappings.unittest.js |
setupTestFramework.js |
software | healthy | test/setupTestFramework.js |
TestCasesMinimizedSourceMap.longtest.js |
software | warning | test/TestCasesMinimizedSourceMap.longtest.js |
ProfilingPlugin.unittest.js |
software | warning | test/ProfilingPlugin.unittest.js |
MultiItemCache.unittest.js |
software | healthy | test/MultiItemCache.unittest.js |
ProgressPlugin.test.js |
software | healthy | test/ProgressPlugin.test.js |
HotTestCases.template.js |
software | healthy | test/HotTestCases.template.js |
Errors.test.js |
software | healthy | test/Errors.test.js |
HotTestCasesWebWorker.test.js |
software | warning | test/HotTestCasesWebWorker.test.js |
HotTestCasesNode.test.js |
software | warning | test/HotTestCasesNode.test.js |
deterministicGrouping.unittest.js |
software | healthy | test/deterministicGrouping.unittest.js |
TestCasesDevtoolEval.test.js |
software | warning | test/TestCasesDevtoolEval.test.js |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
that |
software | healthy | types.d.ts:that |
allows |
software | healthy | types.d.ts:allows |
with |
software | healthy | types.d.ts:with |
to |
software | healthy | types.d.ts:to |
for |
software | healthy | types.d.ts:for |
and |
software | healthy | types.d.ts:and |
declaration |
software | healthy | types.d.ts:declaration |
expression |
software | healthy | types.d.ts:expression |
names |
software | healthy | types.d.ts:names |
in |
software | healthy | types.d.ts:in |
if |
software | healthy | types.d.ts:if |
can |
software | healthy | types.d.ts:can |
which |
software | healthy | types.d.ts:which |
code |
software | healthy | types.d.ts:code |
content |
software | healthy | types.d.ts:content |
or |
software | healthy | types.d.ts:or |
a |
software | healthy | types.d.ts:a |
b |
software | healthy | types.d.ts:b |
c |
software | healthy | types.d.ts:c |
exports |
software | healthy | types.d.ts:exports |
compileBooleanMatcher |
software | healthy | types.d.ts:compileBooleanMatcher |
traverse |
software | healthy | declarations.d.ts:traverse |
indexLiteral |
software | healthy | declarations.d.ts:indexLiteral |
numberLiteralFromRaw |
software | healthy | declarations.d.ts:numberLiteralFromRaw |
floatLiteral |
software | healthy | declarations.d.ts:floatLiteral |
global |
software | healthy | declarations.d.ts:global |
identifier |
software | healthy | declarations.d.ts:identifier |
funcParam |
software | healthy | declarations.d.ts:funcParam |
instruction |
software | healthy | declarations.d.ts:instruction |
callInstruction |
software | healthy | declarations.d.ts:callInstruction |
objectInstruction |
software | healthy | declarations.d.ts:objectInstruction |
signature |
software | healthy | declarations.d.ts:signature |
func |
software | healthy | declarations.d.ts:func |
typeInstruction |
software | healthy | declarations.d.ts:typeInstruction |
indexInFuncSection |
software | healthy | declarations.d.ts:indexInFuncSection |
moduleExport |
software | healthy | declarations.d.ts:moduleExport |
moduleExportDescr |
software | healthy | declarations.d.ts:moduleExportDescr |
getSectionMetadata |
software | healthy | declarations.d.ts:getSectionMetadata |
moduleContextFromModuleAST |
software | healthy | declarations.d.ts:moduleContextFromModuleAST |
isGlobalType |
software | healthy | declarations.d.ts:isGlobalType |
isTable |
software | healthy | declarations.d.ts:isTable |
isMemory |
software | healthy | declarations.d.ts:isMemory |
isFuncImportDescr |
software | healthy | declarations.d.ts:isFuncImportDescr |
decode |
software | healthy | declarations.d.ts:decode |
addWithAST |
software | healthy | declarations.d.ts:addWithAST |
editWithAST |
software | healthy | declarations.d.ts:editWithAST |
getContext |
software | healthy | declarations.d.ts:getContext |
runLoaders |
software | healthy | declarations.d.ts:runLoaders |
processSingle |
software | healthy | assembly/hash/xxhash64.asm.ts:processSingle |
init |
software | healthy | assembly/hash/xxhash64.asm.ts:init |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
assembly |
software | healthy | assembly |
hash |
software | healthy | assembly/hash |
test |
software | healthy | test |
cases |
software | healthy | test/cases |
entry-inline |
software | healthy | test/cases/entry-inline |
no-var-leak-strict |
software | healthy | test/cases/entry-inline/no-var-leak-strict |
no-var-leak |
software | healthy | test/cases/entry-inline/no-var-leak |
code-generation |
software | healthy | test/cases/code-generation |
issue-12232 |
software | healthy | test/cases/code-generation/issue-12232 |
compile |
software | healthy | test/cases/compile |
deduplication |
software | healthy | test/cases/compile/deduplication |
dedupe1 |
software | healthy | test/cases/compile/deduplication/dedupe1 |
dedupe2 |
software | healthy | test/cases/compile/deduplication/dedupe2 |
deduplication-bundle-loader |
software | healthy | test/cases/compile/deduplication-bundle-loader |
b |
software | healthy | test/cases/compile/deduplication-bundle-loader/b |
a |
software | healthy | test/cases/compile/deduplication-bundle-loader/a |
issue2221 |
software | healthy | test/cases/compile/issue2221 |
error-hide-stack |
software | healthy | test/cases/compile/error-hide-stack |
long-module-chain |
software | healthy | test/cases/compile/long-module-chain |
async-modules |
software | healthy | test/cases/async-modules |
top-level-await-without-export |
software | healthy | test/cases/async-modules/top-level-await-without-export |
double-import |
software | healthy | test/cases/async-modules/double-import |
runtime-performance |
software | healthy | test/cases/async-modules/runtime-performance |
micro-ticks-parents |
software | healthy | test/cases/async-modules/micro-ticks-parents |
case-a |
software | healthy | test/cases/async-modules/micro-ticks-parents/case-a |
case-e |
software | healthy | test/cases/async-modules/micro-ticks-parents/case-e |
case-c |
software | healthy | test/cases/async-modules/micro-ticks-parents/case-c |
case-d |
software | healthy | test/cases/async-modules/micro-ticks-parents/case-d |
case-b |
software | healthy | test/cases/async-modules/micro-ticks-parents/case-b |
top-level-error |
software | healthy | test/cases/async-modules/top-level-error |
top-level-await |
software | healthy | test/cases/async-modules/top-level-await |
issue-16097 |
software | healthy | test/cases/async-modules/issue-16097 |
reexport-unknown |
software | healthy | test/cases/async-modules/reexport-unknown |
scope-hoisting |
software | healthy | test/cases/scope-hoisting |
chained-reexport |
software | healthy | test/cases/scope-hoisting/chained-reexport |
import-order |
software | healthy | test/cases/scope-hoisting/import-order |
export-namespace |
software | healthy | test/cases/scope-hoisting/export-namespace |
circular-namespace-object |
software | healthy | test/cases/scope-hoisting/circular-namespace-object |
reexport-exposed-cjs |
software | healthy | test/cases/scope-hoisting/reexport-exposed-cjs |
issue-5314 |
software | healthy | test/cases/scope-hoisting/issue-5314 |
delete-issue-10831 |
software | healthy | test/cases/scope-hoisting/delete-issue-10831 |
intra-references |
software | healthy | test/cases/scope-hoisting/intra-references |
simple |
software | healthy | test/cases/scope-hoisting/simple |
issue-5020-minimal |
software | healthy | test/cases/scope-hoisting/issue-5020-minimal |
src |
software | healthy | test/cases/scope-hoisting/issue-5020-minimal/src |
icon |
software | healthy | test/cases/scope-hoisting/issue-5020-minimal/src/icon |
svg |
software | healthy | test/cases/scope-hoisting/issue-5020-minimal/src/icon/svg |
side-effects-9159 |
software | healthy | test/cases/scope-hoisting/side-effects-9159 |
package |
software | healthy | test/cases/scope-hoisting/side-effects-9159/package |
circular-root-export |
software | healthy | test/cases/scope-hoisting/circular-root-export |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
AbstractLibraryPlugin |
software | healthy | types.d.ts:AbstractLibraryPlugin |
AggressiveMergingPlugin |
software | healthy | types.d.ts:AggressiveMergingPlugin |
AggressiveSplittingPlugin |
software | healthy | types.d.ts:AggressiveSplittingPlugin |
AppendOnlyStackedSet |
software | healthy | types.d.ts:AppendOnlyStackedSet |
AssetBytesGenerator |
software | healthy | types.d.ts:AssetBytesGenerator |
AssetBytesParser |
software | healthy | types.d.ts:AssetBytesParser |
AssetGenerator |
software | healthy | types.d.ts:AssetGenerator |
AssetParser |
software | healthy | types.d.ts:AssetParser |
AssetSourceGenerator |
software | healthy | types.d.ts:AssetSourceGenerator |
AssetSourceParser |
software | healthy | types.d.ts:AssetSourceParser |
AsyncDependenciesBlock |
software | healthy | types.d.ts:AsyncDependenciesBlock |
AsyncQueue |
software | healthy | types.d.ts:AsyncQueue |
AsyncWebAssemblyModulesPlugin |
software | healthy | types.d.ts:AsyncWebAssemblyModulesPlugin |
AsyncWebAssemblyParser |
software | healthy | types.d.ts:AsyncWebAssemblyParser |
AutomaticPrefetchPlugin |
software | healthy | types.d.ts:AutomaticPrefetchPlugin |
BannerPlugin |
software | healthy | types.d.ts:BannerPlugin |
BasicEvaluatedExpression |
software | healthy | types.d.ts:BasicEvaluatedExpression |
ByTypeGenerator |
software | healthy | types.d.ts:ByTypeGenerator |
CacheClass |
software | healthy | types.d.ts:CacheClass |
CacheFacade |
software | healthy | types.d.ts:CacheFacade |
CachedSource |
software | healthy | types.d.ts:CachedSource |
Chunk |
software | healthy | types.d.ts:Chunk |
ChunkGraph |
software | healthy | types.d.ts:ChunkGraph |
ChunkGroup |
software | healthy | types.d.ts:ChunkGroup |
ChunkModuleIdRangePlugin |
software | healthy | types.d.ts:ChunkModuleIdRangePlugin |
ChunkPrefetchPreloadPlugin |
software | healthy | types.d.ts:ChunkPrefetchPreloadPlugin |
ChunkTemplate |
software | healthy | types.d.ts:ChunkTemplate |
CleanPlugin |
software | healthy | types.d.ts:CleanPlugin |
CodeGenerationResults |
software | healthy | types.d.ts:CodeGenerationResults |
CompatSource |
software | healthy | types.d.ts:CompatSource |
Compilation |
software | healthy | types.d.ts:Compilation |
Compiler |
software | healthy | types.d.ts:Compiler |
ConcatSource |
software | healthy | types.d.ts:ConcatSource |
ConcatenationScope |
software | healthy | types.d.ts:ConcatenationScope |
ConstDependency |
software | healthy | types.d.ts:ConstDependency |
ConstDependencyTemplate |
software | healthy | types.d.ts:ConstDependencyTemplate |
ConsumeSharedPlugin |
software | healthy | types.d.ts:ConsumeSharedPlugin |
ContainerPlugin |
software | healthy | types.d.ts:ContainerPlugin |
ContainerReferencePlugin |
software | healthy | types.d.ts:ContainerReferencePlugin |
ContextDependency |
software | healthy | types.d.ts:ContextDependency |
ContextElementDependency |
software | healthy | types.d.ts:ContextElementDependency |
ContextExclusionPlugin |
software | healthy | types.d.ts:ContextExclusionPlugin |
ContextModuleFactory |
software | healthy | types.d.ts:ContextModuleFactory |
ContextReplacementPlugin |
software | healthy | types.d.ts:ContextReplacementPlugin |
or |
software | healthy | types.d.ts:or |
CssGenerator |
software | healthy | types.d.ts:CssGenerator |
CssLoadingRuntimeModule |
software | healthy | types.d.ts:CssLoadingRuntimeModule |
CssModule |
software | healthy | types.d.ts:CssModule |
CssModulesPlugin |
software | healthy | types.d.ts:CssModulesPlugin |
CssParser |
software | healthy | types.d.ts:CssParser |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
dependency-review |
cicd | healthy | .github/workflows/dependency-review.yml |
lint |
cicd | healthy | .github/workflows/test.yml |
types-coverage |
cicd | healthy | .github/workflows/test.yml |
validate-legacy-node |
cicd | healthy | .github/workflows/test.yml |
basic |
cicd | healthy | .github/workflows/test.yml |
unit |
cicd | healthy | .github/workflows/test.yml |
test262 |
cicd | healthy | .github/workflows/test.yml |
integration |
cicd | healthy | .github/workflows/test.yml |
publish |
cicd | healthy | .github/workflows/publish-to-pkg-pr-new.yml |
benchmark |
cicd | healthy | .github/workflows/benchmarks.yml |
benchmark-memory |
cicd | healthy | .github/workflows/benchmarks.yml |
examples |
cicd | healthy | .github/workflows/examples.yml |
release |
cicd | healthy | .github/workflows/release.yml |
trigger-logic |
cicd | healthy | .github/workflows/release.yml |
trigger-webpack-doc-kit |
cicd | healthy | .github/workflows/release.yml |
github-releases-to-discord |
cicd | healthy | .github/workflows/release-announcement.yml |
anti-slop |
cicd | healthy | .github/workflows/pr-quality.yml |
dependabot-auto-merge |
cicd | healthy | .github/workflows/dependabot.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
/home |
frontend | healthy | test/statsCases/dynamic-import/src/pages/home.js |
/b |
frontend | healthy | examples/many-pages/pages/b.js |
/c |
frontend | healthy | examples/many-pages/pages/c.js |
/f |
frontend | healthy | examples/many-pages/pages/f.js |
/g |
frontend | healthy | examples/many-pages/pages/g.js |
/d |
frontend | healthy | examples/many-pages/pages/d.js |
/a |
frontend | healthy | examples/many-pages/pages/a.js |
/e |
frontend | healthy | examples/many-pages/pages/e.js |
/Login |
frontend | healthy | examples/reexport-components/pages/Login.js |
/Dashboard |
frontend | healthy | examples/reexport-components/pages/Dashboard.js |
/abc/loader1.js |
frontend | healthy | types.d.ts |
/abc/node_modules/loader2/index.js |
frontend | healthy | types.d.ts |
/directory |
frontend | healthy | test/WatchDetection.test.js |
/what |
frontend | healthy | test/Compiler.test.js |
/ |
frontend | healthy | test/MultiCompiler.test.js |
/somepath/!test |
frontend | healthy | test/Validation.test.js |
| Label | Layer | Status | Path |
|---|---|---|---|
gha::dependency-review |
cicd | healthy | .github/workflows/dependency-review.yml |
gha::test |
cicd | healthy | .github/workflows/test.yml |
gha::publish-to-pkg-pr-new |
cicd | healthy | .github/workflows/publish-to-pkg-pr-new.yml |
gha::benchmarks |
cicd | healthy | .github/workflows/benchmarks.yml |
gha::examples |
cicd | healthy | .github/workflows/examples.yml |
gha::release |
cicd | healthy | .github/workflows/release.yml |
gha::release-announcement |
cicd | healthy | .github/workflows/release-announcement.yml |
gha::pr-quality |
cicd | healthy | .github/workflows/pr-quality.yml |
gha::dependabot |
cicd | healthy | .github/workflows/dependabot.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
.env in repo |
security | healthy | test/configCases/module/import-meta-env/.env |
.env in repo |
security | healthy | test/configCases/plugins/dotenv-plugin/.env |
.env in repo |
security | healthy | test/configCases/plugins/dotenv-plugin/prefixes-env/.env |
.env in repo |
security | healthy | test/configCases/plugins/dotenv-plugin/envs/.env |
.env in repo |
security | healthy | test/watchCases/plugins/dotenv-plugin/0/.env |
.env in repo |
security | healthy | test/watchCases/plugins/dotenv-plugin/2/.env |
.env in repo |
security | healthy | test/watchCases/plugins/dotenv-plugin/1/.env |
.env in repo |
security | healthy | examples/dotenv/.env |
| Label | Layer | Status | Path |
|---|---|---|---|
DISPATCH_TOKEN |
cicd | healthy | — |
CODSPEED_TOKEN |
cicd | healthy | — |
BOT_APP_ID |
cicd | healthy | — |
GITHUB_TOKEN |
cicd | healthy | — |
BOT_PRIVATE_KEY |
cicd | healthy | — |
CODECOV_TOKEN |
cicd | healthy | — |
DISCORD_WEBHOOK |
cicd | healthy | — |
| Label | Layer | Status | Path |
|---|---|---|---|
1.2.3.4 |
network | healthy | test/SemVer.unittest.js |
1.2.3.1 |
network | healthy | test/SemVer.unittest.js |
2.3.4.5 |
network | healthy | test/SemVer.unittest.js |
127.0.0.1 |
network | healthy | test/configCases/asset-modules/http-url/index.security.js |
10.10.10.10 |
network | healthy | test/configCases/plugins/source-map-dev-tool-plugin/webpack… |
| Label | Layer | Status | Path |
|---|---|---|---|
port:8080 |
network | healthy | test/identifier.unittest.js |
port:07 |
network | healthy | examples/custom-json-modules/data.yaml |
port:32 |
network | healthy | examples/custom-json-modules/data.yaml |
| Label | Layer | Status | Path |
|---|---|---|---|
auth::.github/workflows/benchmarks.yml |
security | healthy | .github/workflows/benchmarks.yml |
auth::.github/workflows/release.yml |
security | healthy | .github/workflows/release.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
repobility-clone-ru6kabw3 |
software | healthy | /tmp/repobility-clone-ru6kabw3 |
| Label | Layer | Status | Path |
|---|---|---|---|
postgresql |
data | healthy | examples/dotenv/.env |
| Label | Layer | Status | Path |
|---|---|---|---|
nginx |
network | healthy | lib/util/mimeTypes.js |
This page is publicly accessible at:
https://repobility.com/scan/aca40d56-d526-49b3-b7c4-a68c7a21b443/
To check status programmatically (no auth required):
curl -s https://repobility.com/api/v1/public/scan/aca40d56-d526-49b3-b7c4-a68c7a21b443/Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.