ultralytics/yolov5

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

82 of your 192 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 2.86s · analysis 7.21s · 2.0 MB · GitHub API rate-limit (preflight)

https://github.com/ultralytics/yolov5 · scanned 2026-06-05 09:57 UTC (5 days, 16 hours ago) · 10 languages

394 raw signals (174 security + 220 graph) 21st percentile · Python · small (2-20K LoC) System graph score 75 (lower by 22)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days, 16 hours ago · v2 · 183 actionable findings from 2 signal sources. 101 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

88.9% cov · 82 findings

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	75.0	0.15	11.25
`security_score`	30.7	0.25	7.67
`testing_score`	25.0	0.20	5.00
`documentation_score`	98.6	0.15	14.79
`practices_score`	76.0	0.15	11.40
`code_quality`	36.8	0.10	3.68
Overall		1.00	53.8

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 4 High 65 Medium 41 Low 47 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 101 System graph 82 Crowd 0 Layer: Software 82 Cicd 18 Quality 54 Security 21 Api 1 Hardware 6 Frontend 1

Exclude dismissed / FP Exclude test files

All 744 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`train`	software	healthy	`train.py:105`
`lf`	software	healthy	`train.py:257`
`parse_opt`	software	healthy	`train.py:546`
`main`	software	healthy	`train.py:620`
`generate_individual`	software	healthy	`train.py:889`
`run`	software	healthy	`train.py:919`
`run`	software	healthy	`benchmarks.py:52`
`test`	software	healthy	`benchmarks.py:148`
`parse_opt`	software	healthy	`benchmarks.py:217`
`main`	software	healthy	`benchmarks.py:255`
`save_one_txt`	software	healthy	`val.py:64`
`save_one_json`	software	healthy	`val.py:96`
`process_batch`	software	healthy	`val.py:142`
`run`	software	healthy	`val.py:184`
`parse_opt`	software	healthy	`val.py:466`
`main`	software	healthy	`val.py:544`
`_create`	software	healthy	`hubconf.py:16`
`custom`	software	dead	`hubconf.py:107`
`yolov5n`	software	dead	`hubconf.py:138`
`yolov5s`	software	dead	`hubconf.py:175`
`yolov5m`	software	dead	`hubconf.py:216`
`yolov5l`	software	dead	`hubconf.py:249`
`yolov5x`	software	dead	`hubconf.py:279`
`yolov5n6`	software	dead	`hubconf.py:309`
`yolov5s6`	software	dead	`hubconf.py:336`
`yolov5m6`	software	dead	`hubconf.py:373`
`yolov5l6`	software	dead	`hubconf.py:407`
`yolov5x6`	software	dead	`hubconf.py:439`
`__init__`	software	healthy	`export.py:96`
`forward`	software	healthy	`export.py:122`
`export_formats`	software	healthy	`export.py:143`
`try_export`	software	healthy	`export.py:182`
`outer_func`	software	dead	`export.py:209`
`export_torchscript`	software	healthy	`export.py:225`
`export_onnx`	software	healthy	`export.py:280`
`export_openvino`	software	healthy	`export.py:379`
`gen_dataloader`	software	healthy	`export.py:431`
`transform_fn`	software	dead	`export.py:440`
`export_paddle`	software	healthy	`export.py:467`
`export_coreml`	software	healthy	`export.py:515`
`export_engine`	software	healthy	`export.py:584`
`export_saved_model`	software	healthy	`export.py:693`
`export_pb`	software	healthy	`export.py:789`
`export_tflite`	software	healthy	`export.py:826`
`export_edgetpu`	software	healthy	`export.py:902`
`export_tfjs`	software	healthy	`export.py:963`
`add_tflite_metadata`	software	healthy	`export.py:1024`
`pipeline_coreml`	software	healthy	`export.py:1085`
`run`	software	healthy	`export.py:1258`
`parse_opt`	software	healthy	`export.py:1464`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`train.py`	software	healthy	`train.py`
`README.zh-CN.md`	software	healthy	`README.zh-CN.md`
`benchmarks.py`	software	healthy	`benchmarks.py`
`val.py`	software	healthy	`val.py`
`hubconf.py`	software	healthy	`hubconf.py`
`README.md`	software	healthy	`README.md`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`export.py`	software	healthy	`export.py`
`pyproject.toml`	software	healthy	`pyproject.toml`
`detect.py`	software	healthy	`detect.py`
`requirements.txt`	software	healthy	`requirements.txt`
`__init__.py`	software	healthy	`models/__init__.py`
`yolo.py`	software	healthy	`models/yolo.py`
`yolov5m.yaml`	software	healthy	`models/yolov5m.yaml`
`yolov5n.yaml`	software	healthy	`models/yolov5n.yaml`
`yolov5l.yaml`	software	healthy	`models/yolov5l.yaml`
`yolov5x.yaml`	software	healthy	`models/yolov5x.yaml`
`yolov5s.yaml`	software	healthy	`models/yolov5s.yaml`
`tf.py`	software	healthy	`models/tf.py`
`common.py`	software	healthy	`models/common.py`
`experimental.py`	software	healthy	`models/experimental.py`
`yolov5-p6.yaml`	software	healthy	`models/hub/yolov5-p6.yaml`
`yolov5-bifpn.yaml`	software	healthy	`models/hub/yolov5-bifpn.yaml`
`yolov5m6.yaml`	software	healthy	`models/hub/yolov5m6.yaml`
`yolov5s6.yaml`	software	healthy	`models/hub/yolov5s6.yaml`
`yolov5n6.yaml`	software	healthy	`models/hub/yolov5n6.yaml`
`yolov5-fpn.yaml`	software	healthy	`models/hub/yolov5-fpn.yaml`
`yolov5x6.yaml`	software	healthy	`models/hub/yolov5x6.yaml`
`yolov5s-LeakyReLU.yaml`	software	healthy	`models/hub/yolov5s-LeakyReLU.yaml`
`yolov3-spp.yaml`	software	healthy	`models/hub/yolov3-spp.yaml`
`yolov5-p2.yaml`	software	healthy	`models/hub/yolov5-p2.yaml`
`yolov5-panet.yaml`	software	healthy	`models/hub/yolov5-panet.yaml`
`yolov5s-ghost.yaml`	software	healthy	`models/hub/yolov5s-ghost.yaml`
`yolov5s-transformer.yaml`	software	healthy	`models/hub/yolov5s-transformer.yaml`
`yolov3.yaml`	software	healthy	`models/hub/yolov3.yaml`
`yolov5-p34.yaml`	software	healthy	`models/hub/yolov5-p34.yaml`
`yolov5l6.yaml`	software	healthy	`models/hub/yolov5l6.yaml`
`anchors.yaml`	software	healthy	`models/hub/anchors.yaml`
`yolov3-tiny.yaml`	software	healthy	`models/hub/yolov3-tiny.yaml`
`yolov5-p7.yaml`	software	healthy	`models/hub/yolov5-p7.yaml`
`yolov5s-seg.yaml`	software	healthy	`models/segment/yolov5s-seg.yaml`
`yolov5l-seg.yaml`	software	healthy	`models/segment/yolov5l-seg.yaml`
`yolov5m-seg.yaml`	software	healthy	`models/segment/yolov5m-seg.yaml`
`yolov5x-seg.yaml`	software	healthy	`models/segment/yolov5x-seg.yaml`
`yolov5n-seg.yaml`	software	healthy	`models/segment/yolov5n-seg.yaml`
`test_flask_rest_api.py`	software	healthy	`tests/test_flask_rest_api.py`
`train.py`	software	healthy	`classify/train.py`
`val.py`	software	healthy	`classify/val.py`
`predict.py`	software	healthy	`classify/predict.py`
`callbacks.py`	software	healthy	`utils/callbacks.py`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`iOSModel`	software	healthy	`export.py:93`
`Detect`	software	healthy	`models/yolo.py:72`
`Segment`	software	healthy	`models/yolo.py:130`
`BaseModel`	software	healthy	`models/yolo.py:152`
`DetectionModel`	software	healthy	`models/yolo.py:218`
`SegmentationModel`	software	healthy	`models/yolo.py:336`
`ClassificationModel`	software	healthy	`models/yolo.py:346`
`TFBN`	software	healthy	`models/tf.py:51`
`TFPad`	software	healthy	`models/tf.py:70`
`TFConv`	software	healthy	`models/tf.py:90`
`TFDWConv`	software	healthy	`models/tf.py:121`
`TFDWConvTranspose2d`	software	healthy	`models/tf.py:150`
`TFFocus`	software	healthy	`models/tf.py:182`
`TFBottleneck`	software	healthy	`models/tf.py:203`
`TFCrossConv`	software	healthy	`models/tf.py:225`
`TFConv2d`	software	healthy	`models/tf.py:241`
`TFBottleneckCSP`	software	healthy	`models/tf.py:265`
`TFC3`	software	healthy	`models/tf.py:293`
`TFC3x`	software	healthy	`models/tf.py:316`
`TFSPP`	software	healthy	`models/tf.py:338`
`TFSPPF`	software	healthy	`models/tf.py:355`
`TFDetect`	software	healthy	`models/tf.py:376`
`TFSegment`	software	healthy	`models/tf.py:431`
`TFProto`	software	healthy	`models/tf.py:455`
`TFUpsample`	software	healthy	`models/tf.py:471`
`TFConcat`	software	healthy	`models/tf.py:493`
`TFModel`	software	healthy	`models/tf.py:587`
`AgnosticNMS`	software	healthy	`models/tf.py:656`
`Conv`	software	healthy	`models/common.py:72`
`DWConv`	software	healthy	`models/common.py:93`
`DWConvTranspose2d`	software	healthy	`models/common.py:103`
`TransformerLayer`	software	healthy	`models/common.py:113`
`TransformerBlock`	software	healthy	`models/common.py:136`
`Bottleneck`	software	healthy	`models/common.py:162`
`BottleneckCSP`	software	healthy	`models/common.py:182`
`CrossConv`	software	healthy	`models/common.py:208`
`C3`	software	healthy	`models/common.py:228`
`C3x`	software	healthy	`models/common.py:247`
`C3TR`	software	healthy	`models/common.py:259`
`C3SPP`	software	healthy	`models/common.py:271`
`C3Ghost`	software	healthy	`models/common.py:283`
`SPP`	software	healthy	`models/common.py:293`
`SPPF`	software	healthy	`models/common.py:316`
`Focus`	software	healthy	`models/common.py:341`
`GhostConv`	software	healthy	`models/common.py:358`
`GhostBottleneck`	software	healthy	`models/common.py:376`
`Contract`	software	healthy	`models/common.py:399`
`Expand`	software	healthy	`models/common.py:420`
`Concat`	software	healthy	`models/common.py:441`
`DetectMultiBackend`	software	healthy	`models/common.py:454`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`models`	software	healthy	`models`
`hub`	software	healthy	`models/hub`
`segment`	software	healthy	`models/segment`
`tests`	software	healthy	`tests`
`classify`	software	healthy	`classify`
`utils`	software	healthy	`utils`
`docker`	software	healthy	`utils/docker`
`google_app_engine`	software	healthy	`utils/google_app_engine`
`loggers`	software	healthy	`utils/loggers`
`wandb`	software	healthy	`utils/loggers/wandb`
`clearml`	software	healthy	`utils/loggers/clearml`
`comet`	software	healthy	`utils/loggers/comet`
`aws`	software	healthy	`utils/aws`
`segment`	software	healthy	`utils/segment`
`flask_rest_api`	software	healthy	`utils/flask_rest_api`
`segment`	software	healthy	`segment`
`.github`	software	healthy	`.github`
`ISSUE_TEMPLATE`	software	healthy	`.github/ISSUE_TEMPLATE`
`workflows`	software	healthy	`.github/workflows`

Label	Layer	Status	Path
`Links`	cicd	healthy	`.github/workflows/links.yml`
`docker`	cicd	healthy	`.github/workflows/docker.yml`
`CLA`	cicd	healthy	`.github/workflows/cla.yml`
`actions`	cicd	healthy	`.github/workflows/format.yml`
`stale`	cicd	healthy	`.github/workflows/stale.yml`
`Merge`	cicd	healthy	`.github/workflows/merge-main-into-prs.yml`
`Benchmarks`	cicd	healthy	`.github/workflows/ci-testing.yml`
`Tests`	cicd	healthy	`.github/workflows/ci-testing.yml`
`Summary`	cicd	healthy	`.github/workflows/ci-testing.yml`

Label	Layer	Status	Path
`gha::links`	cicd	healthy	`.github/workflows/links.yml`
`gha::docker`	cicd	healthy	`.github/workflows/docker.yml`
`gha::cla`	cicd	healthy	`.github/workflows/cla.yml`
`gha::format`	cicd	healthy	`.github/workflows/format.yml`
`gha::stale`	cicd	healthy	`.github/workflows/stale.yml`
`gha::merge-main-into-prs`	cicd	healthy	`.github/workflows/merge-main-into-prs.yml`
`gha::ci-testing`	cicd	healthy	`.github/workflows/ci-testing.yml`

Label	Layer	Status	Path
`DOCKERHUB_USERNAME`	cicd	healthy	`—`
`OPENAI_API_KEY`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`
`DOCKERHUB_TOKEN`	cicd	healthy	`—`
`SLACK_WEBHOOK_URL_YOLO`	cicd	healthy	`—`
`_GITHUB_TOKEN`	cicd	healthy	`—`
`BRAVE_API_KEY`	cicd	healthy	`—`

Label	Layer	Status	Path
`vps::gcp`	hardware	healthy	`utils/general.py`
`vps::aws`	hardware	healthy	`utils/general.py`
`vps::ec2`	hardware	healthy	`utils/aws/userdata.sh`

Label	Layer	Status	Path
`1.1.1.1`	network	healthy	`utils/general.py`
`127.0.0.1`	network	healthy	`utils/flask_rest_api/restapi.py`

Label	Layer	Status	Path
`image::utils/docker/Dockerfile`	hardware	healthy	`utils/docker/Dockerfile`
`image::utils/google_app_engine/Dockerfile`	hardware	healthy	`utils/google_app_engine/Dockerfile`

Label	Layer	Status	Path
`repobility-clone-gedzz7_o`	software	healthy	`/tmp/repobility-clone-gedzz7_o`

Label	Layer	Status	Path
`port:04`	network	healthy	`.github/dependabot.yml`

Label	Layer	Status	Path
`gpu (detected)`	hardware	healthy	`train.py`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/bed6286b-1a4f-46b9-a1ce-2f60cf0cf858/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/bed6286b-1a4f-46b9-a1ce-2f60cf0cf858/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

ultralytics/yolov5

Complete repo analysis

function 50+

file 50+

class 50+

directory 19

job 9

pipeline 7

env_var 7

vps 3

service 2

container 2

repo 1

port 1

gpu 1