Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

erxes/erxes

https://github.com/erxes/erxes · scanned 2026-05-31 01:22 UTC (5 days, 14 hours ago) · 10 languages

1978 findings (93 legacy + 1885 scanner) 11/13 scanners ran 24th percentile · Typescript · medium (20-100K LoC) Scanner says 51 (higher by 9)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days, 14 hours ago · v2 · last Δ -0.2 (diff) · 1044 findings from 2 sources. Findings combine the legacy security pipeline AND the multi-layer engine (atlas, wiring, flows, ranked) AND verified AI agent contributions.

JSON
Combined
62.1
/100
Repobility
73
93 legacy
9-layer
51
100.0% cov · 951 gaps
Critical
30
click to filter
Agents
6
0 votes
Crowd
0
reported
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 60.0 0.15 9.00
security_score 100.0 0.25 25.00
testing_score 0.0 0.20 0.00
documentation_score 60.0 0.15 9.00
practices_score 61.0 0.15 9.15
code_quality 80.0 0.10 8.00
Overall 1.00 60.1
security_score may be inflated — optional security scanners were skipped on this fast scan
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 30 High 49 Medium 368 Low 347 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Legacy 93 9-layer 951 Crowd 0 Layer: Quality 351 Security 30 Software 103 Frontend 285 Network 1 Hardware 43 Cicd 169 Api 62
30 warning
GET /:id/health
warning
endpoint 3 gaps risk 0.45
GET /health
warning
endpoint 4 gaps risk 0.45
ALL /:executionId/:actionId/continue/*
warning
endpoint 3 gaps risk 0.05
auth
ALL /:id/*
warning
endpoint 3 gaps risk 0.05
auth
GET /debug-sentry
warning
endpoint 4 gaps risk 0.05
auth
GET /fblogin
warning
endpoint 5 gaps risk 0.05
auth
GET /get-post
warning
endpoint 5 gaps risk 0.05
auth
GET /get-status
warning
endpoint 5 gaps risk 0.05
auth
GET /locales/:lng/:file
warning
endpoint 3 gaps risk 0.05
auth
GET /me/accounts?limit=100
warning
endpoint 1 gap risk 0.05
auth
GET /receive
warning
endpoint 5 gaps risk 0.05
auth
GET /subscriptionPlugin.js
warning
endpoint 4 gaps risk 0.05
auth
GET /widget/*
warning
endpoint 4 gaps risk 0.05
auth
GET /widget/config.js
warning
endpoint 4 gaps risk 0.05
auth
POST /receive
warning
endpoint 5 gaps risk 0.05
auth
USE /
warning
endpoint 1 gap risk 0.05
auth
USE /afterProcess
warning
endpoint 1 gap risk 0.05
auth
USE /automation
warning
endpoint 1 gap risk 0.05
auth

Showing first 18 of 30 flows. The full set is available via the Findings tab — filter by tags=flow-* for flow-tagged gaps.

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/b925c108-67c6-44cc-b208-3b57b7f7314c/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/b925c108-67c6-44cc-b208-3b57b7f7314c/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.