tighten/onramp

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

18 of your 115 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 4.24s · analysis 16.85s · 1.8 MB · GitHub API rate-limit (preflight)

https://github.com/tighten/onramp · scanned 2026-06-05 13:59 UTC (5 days, 7 hours ago) · 10 languages

184 raw signals (112 security + 72 graph) 14th percentile · Php · small (2-20K LoC) System graph score 77 (lower by 18)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days, 7 hours ago · v2 · 95 actionable findings from 2 signal sources. 53 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

100.0% cov · 15 findings

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	85.0	0.15	12.75
`security_score`	32.0	0.25	8.00
`testing_score`	46.0	0.20	9.20
`documentation_score`	64.0	0.15	9.60
`practices_score`	82.0	0.15	12.30
`code_quality`	65.8	0.10	6.58
Overall		1.00	58.4

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 1 High 27 Medium 31 Low 22 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 80 System graph 15 Crowd 0 Layer: Quality 14 Security 15 Software 60 Cicd 3 Api 1 Frontend 2

Exclude dismissed / FP Exclude test files

All 480 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`server.php`	software	healthy	`server.php`
`vite.config.js`	software	warning	`vite.config.js`
`.prettierrc.json`	software	healthy	`.prettierrc.json`
`translation-guide.md`	software	healthy	`translation-guide.md`
`code_of_conduct.md`	software	healthy	`code_of_conduct.md`
`license.md`	software	healthy	`license.md`
`tailwind.config.js`	software	warning	`tailwind.config.js`
`package.json`	software	healthy	`package.json`
`vue-select.d.ts`	software	warning	`vue-select.d.ts`
`composer.json`	software	healthy	`composer.json`
`package-lock.json`	software	healthy	`package-lock.json`
`next-steps.md`	software	healthy	`next-steps.md`
`contributing.md`	software	healthy	`contributing.md`
`.env.example`	software	healthy	`.env.example`
`readme.md`	software	healthy	`readme.md`
`da.json`	software	healthy	`lang/da.json`
`pt_pt.json`	software	healthy	`lang/pt_pt.json`
`cs.json`	software	healthy	`lang/cs.json`
`id.json`	software	healthy	`lang/id.json`
`fr.json`	software	healthy	`lang/fr.json`
`de.json`	software	healthy	`lang/de.json`
`sv.json`	software	healthy	`lang/sv.json`
`pl.json`	software	healthy	`lang/pl.json`
`en.json`	software	healthy	`lang/en.json`
`es.json`	software	healthy	`lang/es.json`
`operatingsystems.php`	software	healthy	`lang/id/operatingsystems.php`
`auth.php`	software	healthy	`lang/id/auth.php`
`validation.php`	software	healthy	`lang/id/validation.php`
`pagination.php`	software	healthy	`lang/id/pagination.php`
`passwords.php`	software	healthy	`lang/id/passwords.php`
`operatingsystems.php`	software	healthy	`lang/es/operatingsystems.php`
`auth.php`	software	healthy	`lang/es/auth.php`
`validation.php`	software	healthy	`lang/es/validation.php`
`pagination.php`	software	healthy	`lang/es/pagination.php`
`passwords.php`	software	healthy	`lang/es/passwords.php`
`auth.php`	software	healthy	`lang/da/auth.php`
`validation.php`	software	healthy	`lang/da/validation.php`
`pagination.php`	software	healthy	`lang/da/pagination.php`
`passwords.php`	software	healthy	`lang/da/passwords.php`
`auth.php`	software	healthy	`lang/fr/auth.php`
`validation.php`	software	healthy	`lang/fr/validation.php`
`pagination.php`	software	healthy	`lang/fr/pagination.php`
`passwords.php`	software	healthy	`lang/fr/passwords.php`
`auth.php`	software	healthy	`lang/cs/auth.php`
`validation.php`	software	healthy	`lang/cs/validation.php`
`pagination.php`	software	healthy	`lang/cs/pagination.php`
`passwords.php`	software	healthy	`lang/cs/passwords.php`
`auth.php`	software	healthy	`lang/sv/auth.php`
`validation.php`	software	healthy	`lang/sv/validation.php`
`pagination.php`	software	healthy	`lang/sv/pagination.php`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`lang`	software	healthy	`lang`
`id`	software	healthy	`lang/id`
`es`	software	healthy	`lang/es`
`da`	software	healthy	`lang/da`
`fr`	software	healthy	`lang/fr`
`cs`	software	healthy	`lang/cs`
`sv`	software	healthy	`lang/sv`
`pl`	software	healthy	`lang/pl`
`en`	software	healthy	`lang/en`
`de`	software	healthy	`lang/de`
`pt_pt`	software	healthy	`lang/pt_pt`
`config`	software	healthy	`config`
`tests`	software	healthy	`tests`
`Unit`	software	healthy	`tests/Unit`
`Feature`	software	healthy	`tests/Feature`
`resources`	software	healthy	`resources`
`js`	software	healthy	`resources/js`
`directives`	software	healthy	`resources/js/directives`
`composables`	software	healthy	`resources/js/composables`
`components`	software	healthy	`resources/js/components`
`Tabs`	software	healthy	`resources/js/components/Tabs`
`Modules`	software	healthy	`resources/js/components/Modules`
`Completables`	software	healthy	`resources/js/components/Completables`
`mixins`	software	healthy	`resources/js/mixins`
`css`	software	healthy	`resources/css`
`views`	software	healthy	`resources/views`
`auth`	software	healthy	`resources/views/auth`
`passwords`	software	healthy	`resources/views/auth/passwords`
`partials`	software	healthy	`resources/views/partials`
`navigation`	software	healthy	`resources/views/partials/navigation`
`header`	software	healthy	`resources/views/partials/navigation/header`
`svg`	software	healthy	`resources/views/partials/svg`
`welcome-page`	software	healthy	`resources/views/partials/welcome-page`
`components`	software	healthy	`resources/views/components`
`form`	software	healthy	`resources/views/components/form`
`input`	software	healthy	`resources/views/components/input`
`button`	software	healthy	`resources/views/components/button`
`emails`	software	healthy	`resources/views/emails`
`modules`	software	healthy	`resources/views/modules`
`resources`	software	healthy	`resources/views/modules/resources`
`layouts`	software	healthy	`resources/views/layouts`
`bootstrap`	software	healthy	`bootstrap`
`app`	software	healthy	`app`
`Nova`	software	healthy	`app/Nova`
`Actions`	software	healthy	`app/Nova/Actions`
`Filters`	software	healthy	`app/Nova/Filters`
`Dashboards`	software	healthy	`app/Nova/Dashboards`
`Facades`	software	healthy	`app/Facades`
`Policies`	software	healthy	`app/Policies`
`Concerns`	software	healthy	`app/Concerns`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`password_literal::resources/js/translations.js`	security	healthy	`resources/js/translations.js`
`password_literal::resources/js/translations.js`	security	healthy	`resources/js/translations.js`
`password_literal::resources/js/translations.js`	security	healthy	`resources/js/translations.js`
`password_literal::resources/js/translations.js`	security	healthy	`resources/js/translations.js`
`password_literal::resources/js/translations.js`	security	healthy	`resources/js/translations.js`
`password_literal::resources/js/translations.js`	security	healthy	`resources/js/translations.js`
`password_literal::resources/js/translations.js`	security	healthy	`resources/js/translations.js`
`password_literal::resources/js/translations.js`	security	healthy	`resources/js/translations.js`
`password_literal::resources/js/translations.js`	security	healthy	`resources/js/translations.js`
`password_literal::resources/js/translations.js`	security	healthy	`resources/js/translations.js`
`password_literal::resources/js/translations.js`	security	healthy	`resources/js/translations.js`
`password_literal::resources/js/translations.js`	security	healthy	`resources/js/translations.js`
`password_literal::resources/js/translations.js`	security	healthy	`resources/js/translations.js`
`password_literal::resources/js/translations.js`	security	healthy	`resources/js/translations.js`
`password_literal::resources/js/translations.js`	security	healthy	`resources/js/translations.js`
`password_literal::resources/js/translations.js`	security	healthy	`resources/js/translations.js`
`password_literal::resources/js/translations.js`	security	healthy	`resources/js/translations.js`

Label	Layer	Status	Path
`listener`	software	healthy	`resources/js/directives/ClickOutside.js:listener`
`useModules`	software	healthy	`resources/js/composables/useModules.js:useModules`
`capitalize`	software	healthy	`resources/js/composables/useModules.js:capitalize`
`toggleShowAllModules`	software	healthy	`resources/js/composables/useModules.js:toggleShowAllModules`
`filterStandardModules`	software	healthy	`resources/js/composables/useModules.js:filterStandardModules`
`filterByUser`	software	healthy	`resources/js/composables/useModules.js:filterByUser`
`getModuleCompletedResources`	software	healthy	`resources/js/composables/useModules.js:getModuleCompletedRe…`
`getModuleIsCompleted`	software	healthy	`resources/js/composables/useModules.js:getModuleIsCompleted`
`moduleHasNewResources`	software	healthy	`resources/js/composables/useModules.js:moduleHasNewResources`
`useToggle`	software	healthy	`resources/js/mixins/toggle.js:useToggle`
`handleEscape`	software	healthy	`resources/js/mixins/toggle.js:handleEscape`
`open`	software	healthy	`resources/js/mixins/toggle.js:open`
`close`	software	healthy	`resources/js/mixins/toggle.js:close`
`toggle`	software	healthy	`resources/js/mixins/toggle.js:toggle`
`⚙ Notifications`	software	healthy	`resources/js/app.js`

Label	Layer	Status	Path
`ShowMoreLess`	software	healthy	`resources/js/scripts.js:ShowMoreLess`
`NovaExtension`	software	healthy	`nova-components/SuggestedResourcesShortcuts/nova.mix.js:Nov…`

Label	Layer	Status	Path
`mysql`	data	healthy	`.env.example`
`redis`	data	healthy	`database/json/terms.json`

Label	Layer	Status	Path
`vps::digitalocean`	hardware	healthy	`database/json/resources.json`
`vps::aws`	hardware	healthy	`database/json/terms.json`

Label	Layer	Status	Path
`gha::duster-lint`	cicd	healthy	`.github/workflows/duster-lint.yml`
`gha::tests`	cicd	healthy	`.github/workflows/tests.yml`

Label	Layer	Status	Path
`duster`	cicd	healthy	`.github/workflows/duster-lint.yml`
`test`	cicd	healthy	`.github/workflows/tests.yml`

Label	Layer	Status	Path
`NOVA_PASSWORD`	cicd	healthy	`—`
`NOVA_USERNAME`	cicd	healthy	`—`

Label	Layer	Status	Path
`repobility-clone-t8v3q_wm`	software	healthy	`/tmp/repobility-clone-t8v3q_wm`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`.env.example`

Label	Layer	Status	Path
`envoy`	network	healthy	`resources/js/translations.js`

Label	Layer	Status	Path
`auth::database/json/terms.json`	security	healthy	`database/json/terms.json`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/b1ed6fde-5e8a-4ef8-b30b-4cd6bb0c26a7/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/b1ed6fde-5e8a-4ef8-b30b-4cd6bb0c26a7/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

tighten/onramp

Complete repo analysis

file 50+

directory 50+

secret 17

function 15

class 2

database 2

vps 2

pipeline 2

job 2

env_var 2

repo 1

service 1

load_balancer 1

auth 1