Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

Yevheni55/POS

https://github.com/Yevheni55/POS · scanned 2026-06-16 01:05 UTC (2 months, 1 week ago)

228 raw signals (0 security + 228 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 228 actionable findings from 1 signal source. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

100.0% cov · 228 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 2 Medium 73 Low 82 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 228 Crowd 0 Layer: Frontend 15 Network 1 Hardware 3 Security 55 Cicd 1 Quality 101 Api 52

Exclude dismissed / FP Exclude test files

All 2359 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`_shouldBlockOfflineQueue`	software	healthy	`api.js:_shouldBlockOfflineQueue`
`bratislavaDayIso`	software	healthy	`api.js:bratislavaDayIso`
`handler`	software	healthy	`api.js:handler`
`ctxAdmin`	software	healthy	`tests/e2e/menu-api.spec.mjs:ctxAdmin`
`openCombo`	software	healthy	`tests/e2e/combo-sauce-modal.spec.mjs:openCombo`
`openKuracie`	software	healthy	`tests/e2e/combo-sauce-modal.spec.mjs:openKuracie`
`sendOrderAndStorno`	software	healthy	`tests/e2e/storno-flow.spec.mjs:sendOrderAndStorno`
`login`	software	healthy	`tests/e2e/auth.spec.mjs:login`
`authedCtx`	software	healthy	`tests/e2e/shisha-counter.spec.mjs:authedCtx`
`resetTransientData`	software	healthy	`tests/e2e/_setup/helpers.mjs:resetTransientData`
`apiLogin`	software	healthy	`tests/e2e/_setup/helpers.mjs:apiLogin`
`loginAndOpenPos`	software	healthy	`tests/e2e/_setup/helpers.mjs:loginAndOpenPos`
`openPosWithToken`	software	healthy	`tests/e2e/_setup/helpers.mjs:openPosWithToken`
`clickProduct`	software	healthy	`tests/e2e/_setup/helpers.mjs:clickProduct`
`selectCategory`	software	healthy	`tests/e2e/_setup/helpers.mjs:selectCategory`
`typeInProductSearch`	software	healthy	`tests/e2e/_setup/helpers.mjs:typeInProductSearch`
`openTable`	software	healthy	`tests/e2e/_setup/helpers.mjs:openTable`
`waitForHealth`	software	healthy	`tests/e2e/_setup/global-setup.mjs:waitForHealth`
`dbExists`	software	healthy	`tests/e2e/_setup/global-setup.mjs:dbExists`
`ensureDbAndSchema`	software	healthy	`tests/e2e/_setup/global-setup.mjs:ensureDbAndSchema`
`truncateAll`	software	healthy	`tests/e2e/_setup/global-setup.mjs:truncateAll`
`seedMinimal`	software	healthy	`tests/e2e/_setup/global-setup.mjs:seedMinimal`
`startServer`	software	healthy	`tests/e2e/_setup/global-setup.mjs:startServer`
`globalSetup`	software	healthy	`tests/e2e/_setup/global-setup.mjs:globalSetup`
`globalTeardown`	software	healthy	`tests/e2e/_setup/global-teardown.mjs:globalTeardown`
`finish`	software	healthy	`tests/e2e/_setup/global-teardown.mjs:finish`
`getOrderTotal`	software	healthy	`js/pos-payments.js:getOrderTotal`
`readFiscalPayload`	software	healthy	`js/pos-payments.js:readFiscalPayload`
`readFiscalFromPaymentResponse`	software	healthy	`js/pos-payments.js:readFiscalFromPaymentResponse`
`normalizeFiscalOutcome`	software	healthy	`js/pos-payments.js:normalizeFiscalOutcome`
`fd`	software	healthy	`js/pos-payments.js:fd`
`message`	software	healthy	`js/pos-payments.js:message`
`setPaymentFeedback`	software	healthy	`js/pos-payments.js:setPaymentFeedback`
`finalizeSuccessfulPayment`	software	healthy	`js/pos-payments.js:finalizeSuccessfulPayment`
`getPendingSendItems`	software	healthy	`js/pos-payments.js:getPendingSendItems`
`getPrintContext`	software	healthy	`js/pos-payments.js:getPrintContext`
`printKitchenAndBarTickets`	software	healthy	`js/pos-payments.js:printKitchenAndBarTickets`
`printStornoKitchenAndBarTickets`	software	healthy	`js/pos-payments.js:printStornoKitchenAndBarTickets`
`flushPendingStornoTickets`	software	healthy	`js/pos-payments.js:flushPendingStornoTickets`
`_doSendAndPrintPost`	software	healthy	`js/pos-payments.js:_doSendAndPrintPost`
`token`	software	healthy	`js/pos-payments.js:token`
`_sendWithLimitOverride`	software	healthy	`js/pos-payments.js:_sendWithLimitOverride`
`autoSendPendingItemsBeforePayment`	software	healthy	`js/pos-payments.js:autoSendPendingItemsBeforePayment`
`initiatePayment`	software	healthy	`js/pos-payments.js:initiatePayment`
`_renderReceiptPreview`	software	healthy	`js/pos-payments.js:_renderReceiptPreview`
`timeStr`	software	healthy	`js/pos-payments.js:timeStr`
`safeName`	software	healthy	`js/pos-payments.js:safeName`
`_setupCashHelper`	software	healthy	`js/pos-payments.js:_setupCashHelper`
`_onNumpadKey`	software	healthy	`js/pos-payments.js:_onNumpadKey`
`_updateCashChange`	software	healthy	`js/pos-payments.js:_updateCashChange`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`PROJECT_NOTES.md`	software	healthy	`PROJECT_NOTES.md`
`manifest.json`	software	healthy	`manifest.json`
`README.md`	software	healthy	`README.md`
`CLAUDE.md`	software	healthy	`CLAUDE.md`
`a11y.css`	software	healthy	`a11y.css`
`tokens.css`	software	healthy	`tokens.css`
`sw.js`	software	healthy	`sw.js`
`package.json`	software	healthy	`package.json`
`login.html`	software	healthy	`login.html`
`pos-enterprise.html`	software	healthy	`pos-enterprise.html`
`pos-design-demo.html`	software	healthy	`pos-design-demo.html`
`Dockerfile`	software	healthy	`Dockerfile`
`deploy.sh`	software	healthy	`deploy.sh`
`api.js`	software	healthy	`api.js`
`kitchen.html`	software	healthy	`kitchen.html`
`dochadzka.html`	software	healthy	`dochadzka.html`
`DESIGN-CODE.md`	software	healthy	`DESIGN-CODE.md`
`PORTOS_ROLLOUT.md`	software	healthy	`PORTOS_ROLLOUT.md`
`docker-compose.yml`	software	healthy	`docker-compose.yml`
`surfspirit-menu.json`	software	healthy	`surfspirit-menu.json`
`menu-api.spec.mjs`	software	healthy	`tests/e2e/menu-api.spec.mjs`
`order-payment-flow.spec.mjs`	software	healthy	`tests/e2e/order-payment-flow.spec.mjs`
`local-draft-survives-poll.spec.mjs`	software	healthy	`tests/e2e/local-draft-survives-poll.spec.mjs`
`README.md`	software	healthy	`tests/e2e/README.md`
`auto-delete-empty-order.spec.mjs`	software	healthy	`tests/e2e/auto-delete-empty-order.spec.mjs`
`combo-sauce-modal.spec.mjs`	software	healthy	`tests/e2e/combo-sauce-modal.spec.mjs`
`storno-flow.spec.mjs`	software	healthy	`tests/e2e/storno-flow.spec.mjs`
`order-add-no-duplicates.spec.mjs`	software	healthy	`tests/e2e/order-add-no-duplicates.spec.mjs`
`playwright.config.mjs`	software	healthy	`tests/e2e/playwright.config.mjs`
`auth.spec.mjs`	software	healthy	`tests/e2e/auth.spec.mjs`
`shisha-counter.spec.mjs`	software	healthy	`tests/e2e/shisha-counter.spec.mjs`
`companion-zaloha.spec.mjs`	software	healthy	`tests/e2e/companion-zaloha.spec.mjs`
`helpers.mjs`	software	healthy	`tests/e2e/_setup/helpers.mjs`
`global-setup.mjs`	software	healthy	`tests/e2e/_setup/global-setup.mjs`
`global-teardown.mjs`	software	healthy	`tests/e2e/_setup/global-teardown.mjs`
`pos-payments.js`	software	healthy	`js/pos-payments.js`
`pos-init.js`	software	healthy	`js/pos-init.js`
`pos-state.js`	software	healthy	`js/pos-state.js`
`pos-ui.js`	software	healthy	`js/pos-ui.js`
`pos-render.js`	software	healthy	`js/pos-render.js`
`dochadzka.js`	software	healthy	`js/dochadzka.js`
`pos-escape.js`	software	healthy	`js/pos-escape.js`
`pos-orders.js`	software	healthy	`js/pos-orders.js`
`kitchen.js`	software	healthy	`js/kitchen.js`
`pos-product-icons.js`	software	healthy	`js/pos-product-icons.js`
`pos-mobile.js`	software	healthy	`js/pos-mobile.js`
`AGENT_METHODOLOGY_KASA.md`	software	healthy	`docs/AGENT_METHODOLOGY_KASA.md`
`BAR_ROUTER_ACCESS_POINT_SETUP.md`	software	healthy	`docs/BAR_ROUTER_ACCESS_POINT_SETUP.md`
`agent-pos-kasa-access.md`	software	healthy	`docs/agent-pos-kasa-access.md`
`PORTOS_AFTER_CHDU.md`	software	healthy	`docs/PORTOS_AFTER_CHDU.md`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`GET /menu`	api	healthy	`api.js`
`GET /integrations/portos/status`	api	healthy	`api.js`
`GET /company-profile`	api	healthy	`api.js`
`PUT /company-profile`	api	healthy	`api.js`
`GET /company-profile/portos-compare`	api	healthy	`api.js`
`POST /company-profile/sync-from-portos`	api	healthy	`api.js`
`GET /fiscal-documents/search?`	api	healthy	`api.js`
`GET /fiscal-documents/`	api	healthy	`api.js`
`POST /fiscal-documents/`	api	healthy	`api.js`
`GET /payments/history`	api	healthy	`api.js`
`POST /payments/`	api	healthy	`api.js`
`GET /payments/`	api	healthy	`api.js`
`POST /print/kitchen`	api	healthy	`js/pos-payments.js`
`POST /orders/`	api	healthy	`js/pos-payments.js`
`POST /paragons`	api	healthy	`js/pos-payments.js`
`POST /print/paragon`	api	healthy	`js/pos-payments.js`
`POST /payments`	api	healthy	`js/pos-payments.js`
`POST /print/pre-bill`	api	healthy	`js/pos-payments.js`
`POST /ttlock/passcode`	api	healthy	`js/pos-init.js`
`POST /print/lockcode`	api	healthy	`js/pos-init.js`
`GET /tables`	api	healthy	`js/pos-init.js`
`GET /shifts/current`	api	healthy	`js/pos-init.js`
`POST /shifts/open`	api	healthy	`js/pos-init.js`
`GET /shifts/current/summary`	api	healthy	`js/pos-init.js`
`POST /shifts/close`	api	healthy	`js/pos-init.js`
`GET /reports/z-report?date=`	api	healthy	`js/pos-init.js`
`GET /storno-basket`	api	healthy	`js/pos-state.js`
`GET /menu/top`	api	healthy	`js/pos-state.js`
`GET /zones`	api	healthy	`js/pos-state.js`
`GET /orders`	api	healthy	`js/pos-state.js`
`GET /orders/table/`	api	healthy	`js/pos-state.js`
`PUT /tables/`	api	healthy	`js/pos-state.js`
`POST /orders`	api	healthy	`js/pos-ui.js`
`PUT /orders/`	api	healthy	`js/pos-ui.js`
`POST /storno-basket/`	api	healthy	`js/pos-render.js`
`GET /discounts`	api	healthy	`js/pos-render.js`
`POST /storno-basket`	api	healthy	`js/pos-orders.js`
`GET /cashflow/summary?`	api	healthy	`admin/pages/cashflow.js`
`GET /cashflow?`	api	healthy	`admin/pages/cashflow.js`
`PATCH /cashflow/`	api	healthy	`admin/pages/cashflow.js`
`POST /cashflow`	api	healthy	`admin/pages/cashflow.js`
`GET /inventory/suppliers`	api	healthy	`admin/pages/cashflow.js`
`GET /printers`	api	healthy	`admin/pages/settings.js`
`PUT /printers/`	api	healthy	`admin/pages/settings.js`
`POST /printers`	api	healthy	`admin/pages/settings.js`
`POST /printers/`	api	healthy	`admin/pages/settings.js`
`GET /discounts/all`	api	healthy	`admin/pages/settings.js`
`POST /discounts`	api	healthy	`admin/pages/settings.js`
`PUT /discounts/`	api	healthy	`admin/pages/settings.js`
`GET /reports/weekly?from=`	api	healthy	`admin/pages/weekly.js`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`tests`	software	healthy	`tests`
`e2e`	software	healthy	`tests/e2e`
`_setup`	software	healthy	`tests/e2e/_setup`
`js`	software	healthy	`js`
`docs`	software	healthy	`docs`
`superpowers`	software	healthy	`docs/superpowers`
`plans`	software	healthy	`docs/superpowers/plans`
`specs`	software	healthy	`docs/superpowers/specs`
`plans`	software	healthy	`docs/plans`
`scripts`	software	healthy	`scripts`
`migrations`	software	healthy	`scripts/migrations`
`components`	software	healthy	`components`
`css`	software	healthy	`css`
`android-tablet`	software	healthy	`android-tablet`
`app`	software	healthy	`android-tablet/app`
`src`	software	healthy	`android-tablet/app/src`
`main`	software	healthy	`android-tablet/app/src/main`
`java`	software	healthy	`android-tablet/app/src/main/java`
`sk`	software	healthy	`android-tablet/app/src/main/java/sk`
`surfspirit`	software	healthy	`android-tablet/app/src/main/java/sk/surfspirit`
`pos`	software	healthy	`android-tablet/app/src/main/java/sk/surfspirit/pos`
`ui`	software	healthy	`android-tablet/app/src/main/java/sk/surfspirit/pos/ui`
`components`	software	healthy	`android-tablet/app/src/main/java/sk/surfspirit/pos/ui/compo…`
`theme`	software	healthy	`android-tablet/app/src/main/java/sk/surfspirit/pos/ui/theme`
`admin`	software	healthy	`android-tablet/app/src/main/java/sk/surfspirit/pos/ui/admin`
`pages`	software	healthy	`android-tablet/app/src/main/java/sk/surfspirit/pos/ui/admin…`
`update`	software	healthy	`android-tablet/app/src/main/java/sk/surfspirit/pos/ui/update`
`core`	software	healthy	`android-tablet/app/src/main/java/sk/surfspirit/pos/core`
`net`	software	healthy	`android-tablet/app/src/main/java/sk/surfspirit/pos/net`
`admin`	software	healthy	`admin`
`components`	software	healthy	`admin/components`
`pages`	software	healthy	`admin/pages`
`web`	software	healthy	`web`
`.claude`	software	healthy	`.claude`
`examples`	software	healthy	`examples`
`server`	software	healthy	`server`
`middleware`	software	healthy	`server/middleware`
`test`	software	healthy	`server/test`
`middleware`	software	healthy	`server/test/middleware`
`ui`	software	healthy	`server/test/ui`
`lib`	software	healthy	`server/test/lib`
`routes`	software	healthy	`server/test/routes`
`helpers`	software	healthy	`server/test/helpers`
`schemas`	software	healthy	`server/test/schemas`
`e2e`	software	healthy	`server/test/e2e`
`scripts`	software	healthy	`server/scripts`
`lib`	software	healthy	`server/lib`
`print`	software	healthy	`server/lib/print`
`forecast`	software	healthy	`server/lib/forecast`
`payments`	software	healthy	`server/lib/payments`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`/cashflow`	frontend	healthy	`admin/pages/cashflow.js`
`/settings`	frontend	healthy	`admin/pages/settings.js`
`/weekly`	frontend	healthy	`admin/pages/weekly.js`
`/suppliers`	frontend	healthy	`admin/pages/suppliers.js`
`/inventory-dashboard`	frontend	healthy	`admin/pages/inventory-dashboard.js`
`/zam-spotreba`	frontend	healthy	`admin/pages/zam-spotreba.js`
`/purchase-orders`	frontend	healthy	`admin/pages/purchase-orders.js`
`/stock-movements`	frontend	healthy	`admin/pages/stock-movements.js`
`/ingredients`	frontend	healthy	`admin/pages/ingredients.js`
`/staff`	frontend	healthy	`admin/pages/staff.js`
`/recipes`	frontend	healthy	`admin/pages/recipes.js`
`/write-offs`	frontend	healthy	`admin/pages/write-offs.js`
`/season`	frontend	healthy	`admin/pages/season.js`
`/tables`	frontend	healthy	`admin/pages/tables.js`
`/reporty`	frontend	healthy	`admin/pages/reporty.js`
`/menu`	frontend	healthy	`admin/pages/menu.js`
`/historia`	frontend	healthy	`admin/pages/historia.js`
`/forecasts`	frontend	healthy	`admin/pages/forecasts.js`
`/dashboard`	frontend	healthy	`admin/pages/dashboard.js`
`/supplies`	frontend	healthy	`admin/pages/supplies.js`
`/sklad-materialy`	frontend	healthy	`admin/pages/sklad-materialy.js`
`/fiscal-documents`	frontend	healthy	`admin/pages/fiscal-documents.js`
`/reports`	frontend	healthy	`admin/pages/reports.js`
`/dochadzka`	frontend	healthy	`admin/pages/dochadzka.js`
`/inventory-audit`	frontend	healthy	`admin/pages/inventory-audit.js`
`/storno`	frontend	healthy	`admin/pages/storno.js`
`/ludia`	frontend	healthy	`admin/pages/ludia.js`
`/shisha`	frontend	healthy	`admin/pages/shisha.js`
`/sklad-pohyby`	frontend	healthy	`admin/pages/sklad-pohyby.js`
`/audit`	frontend	healthy	`admin/pages/audit.js`
`/payments`	frontend	healthy	`admin/pages/payments.js`
`/assets`	frontend	healthy	`admin/pages/assets.js`
`/storno-basket`	frontend	healthy	`js/pos-orders.js`

Label	Layer	Status	Path
`192.168.0.107`	network	healthy	`README.md`
`100.95.64.38`	network	healthy	`README.md`
`127.0.0.1`	network	healthy	`tests/e2e/playwright.config.mjs`
`37.9.175.197`	network	healthy	`scripts/deploy-surfspirit-html.sh`
`192.168.1.235`	network	healthy	`android-tablet/README.md`
`3.3.8.8`	network	healthy	`admin/pages/suppliers.js`
`192.168.0.15`	network	healthy	`server/.env.example`
`192.168.1.10`	network	healthy	`server/test/lib/cors-origin.test.js`
`10.0.0.5`	network	healthy	`server/test/lib/cors-origin.test.js`
`8.8.8.8`	network	healthy	`server/test/lib/cors-origin.test.js`
`172.15.1.1`	network	healthy	`server/test/lib/cors-origin.test.js`
`172.20.1.1`	network	healthy	`server/test/lib/cors-origin.test.js`
`192.168.0.10`	network	healthy	`server/lib/cors-origin.js`
`192.168.0.106`	network	healthy	`server/lib/print/format.js`

Label	Layer	Status	Path
`auth::server/app.js`	security	healthy	`server/app.js`
`auth::README.md`	security	healthy	`README.md`
`auth::server/middleware/auth.js`	security	healthy	`server/middleware/auth.js`
`auth::server/routes/attendance.js`	security	healthy	`server/routes/attendance.js`
`auth::server/routes/auth.js`	security	healthy	`server/routes/auth.js`
`auth::android-tablet/README.md`	security	healthy	`android-tablet/README.md`
`auth::server/server.js`	security	healthy	`server/server.js`
`auth::js/dochadzka.js`	security	healthy	`js/dochadzka.js`
`auth::tests/e2e/auth.spec.mjs`	security	healthy	`tests/e2e/auth.spec.mjs`
`auth::server/test/routes/auth.test.js`	security	healthy	`server/test/routes/auth.test.js`
`auth::server/routes/ttlock.js`	security	healthy	`server/routes/ttlock.js`
`auth::server/test/routes/auth-me.test.js`	security	healthy	`server/test/routes/auth-me.test.js`
`auth::server/test/helpers/auth.js`	security	healthy	`server/test/helpers/auth.js`

Label	Layer	Status	Path
`of`	software	healthy	`tests/e2e/local-draft-survives-poll.spec.mjs:of`
`niekde`	software	healthy	`admin/router.js:niekde`
`to`	software	healthy	`admin/pages/season.js:to`
`once`	software	healthy	`admin/pages/dashboard.js:once`
`PortosTransportError`	software	healthy	`server/lib/portos.js:PortosTransportError`
`VersionConflictError`	software	healthy	`server/routes/orders.js:VersionConflictError`

Label	Layer	Status	Path
`port:3080`	network	healthy	`README.md`
`port:04`	network	healthy	`Dockerfile`
`port:5432`	network	healthy	`docker-compose.yml`
`port:80`	network	healthy	`docker-compose.yml`
`port:443`	network	healthy	`docker-compose.yml`
`port:3443`	network	healthy	`docker-compose.yml`

Label	Layer	Status	Path
`postgresql`	data	healthy	`README.md`
`postgres`	data	healthy	`README.md`
`sqlite`	data	healthy	`server/package-lock.json`

Label	Layer	Status	Path
`image::Dockerfile`	hardware	healthy	`Dockerfile`
`db`	hardware	healthy	`docker-compose.yml`
`app`	hardware	healthy	`docker-compose.yml`

Label	Layer	Status	Path
`repobility-clone-mm2dm9_4`	software	healthy	`/tmp/repobility-clone-mm2dm9_4`

Label	Layer	Status	Path
`2026-05-28-staff-pin-visible-and-menu-dest-override.sql`	data	healthy	`scripts/migrations/2026-05-28-staff-pin-visible-and-menu-de…`

Label	Layer	Status	Path
`nginx`	network	healthy	`server/app.js`

Label	Layer	Status	Path
`vps::aws`	hardware	healthy	`CLAUDE.md`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/bb68053d-15c9-481c-a8b3-db0f38ff31b3/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/bb68053d-15c9-481c-a8b3-db0f38ff31b3/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

Yevheni55/POS

Complete repo analysis

function 50+

file 50+

endpoint 50+

directory 50+

route 33

service 14

auth 13

class 6

port 6

database 3

container 3

repo 1

migration 1

load_balancer 1

vps 1