Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

zamoraman97/xpass

https://github.com/zamoraman97/xpass · scanned 2026-06-16 01:10 UTC (2 months, 1 week ago)

71 raw signals (0 security + 71 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 71 actionable findings from 1 signal source. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
54.6
/100
Security checks
55
0 findings
System graph
55
88.9% cov · 71 findings
Critical
1
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 1 High 1 Medium 14 Low 53 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 71 Crowd 0 Layer: Frontend 3 Network 1 Security 7 Cicd 1 Quality 13 Api 46

All 166 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
loadSettings software healthy script.js:loadSettings
loadCart software healthy script.js:loadCart
saveCart software healthy script.js:saveCart
getCartSubtotal software healthy script.js:getCartSubtotal
getCartCount software healthy script.js:getCartCount
escapeHtml software healthy script.js:escapeHtml
addToCart software healthy script.js:addToCart
removeFromCart software healthy script.js:removeFromCart
updateCartQty software healthy script.js:updateCartQty
formatPrice software healthy script.js:formatPrice
renderCart software healthy script.js:renderCart
discount software healthy script.js:discount
hideWa software healthy script.js:hideWa
showWa software healthy script.js:showWa
openCart software healthy script.js:openCart
closeCart software healthy script.js:closeCart
openCheckout software healthy script.js:openCheckout
closeCheckout software healthy script.js:closeCheckout
showModalStep software healthy script.js:showModalStep
renderModalSummary software healthy script.js:renderModalSummary
selectPaymentMethod software healthy script.js:selectPaymentMethod
mcFmtCard software healthy script.js:mcFmtCard
buildCardForm software healthy script.js:buildCardForm
makeEditable software healthy script.js:makeEditable
text software healthy script.js:text
first software healthy script.js:first
makeInp software healthy script.js:makeInp
buildEstadoSelect software healthy script.js:buildEstadoSelect
buildEstadoInput software healthy script.js:buildEstadoInput
confirmCardPayment software healthy script.js:confirmCardPayment
num software healthy script.js:num
cvv software healthy script.js:cvv
orderEmail software healthy script.js:orderEmail
orderName software healthy script.js:orderName
saveOrderToBackend software healthy script.js:saveOrderToBackend
generateOrderId software healthy script.js:generateOrderId
x software healthy script.js:x
y software healthy script.js:y
showToast software healthy script.js:showToast
initWaFloat software healthy script.js:initWaFloat
initAccountNav software healthy script.js:initAccountNav
toggleAccountMenu software healthy script.js:toggleAccountMenu
navLogout software healthy script.js:navLogout
buildSeed software healthy reviews.js:buildSeed
isM software healthy reviews.js:isM
rating software healthy reviews.js:rating
starsHTML software healthy reviews.js:starsHTML
initials software healthy reviews.js:initials
fmtDate software healthy reviews.js:fmtDate
reviewCard software healthy reviews.js:reviewCard

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
USE /uploads api healthy server.js
GET / api healthy server.js
GET /comprobante api healthy server.js
GET /cuenta api healthy server.js
GET /como-funciona api healthy server.js
GET /resenas api healthy server.js
GET /metodo-pago api healthy server.js
GET /game-pass-ultimate-1-mes api healthy server.js
GET /game-pass-ultimate-12-meses api healthy server.js
GET /blog api healthy server.js
GET /blog/como-canjear-codigo-xbox-game-pass api healthy server.js
GET /blog/game-pass-vs-game-pass-ultimate api healthy server.js
GET /admin api healthy server.js
GET /admin/ api healthy server.js
GET /api/public/settings api healthy server.js
POST /api/comprobante api healthy server.js
POST /api/orders/pending api healthy server.js
POST /api/auth/register api healthy server.js
POST /api/auth/login api healthy server.js
POST /api/auth/logout api healthy server.js
GET /api/auth/me api healthy server.js
GET /api/reviews api healthy server.js
POST /api/reviews api healthy server.js
GET /api/customer/orders api healthy server.js
POST /api/admin/login api healthy server.js
POST /api/admin/logout api healthy server.js
GET /api/admin/session api healthy server.js
GET /api/admin/stats api healthy server.js
GET /api/admin/orders api healthy server.js
GET /api/admin/orders/:id api healthy server.js
PUT /api/admin/orders/:id/status api healthy server.js
PUT /api/admin/orders/:id/email api healthy server.js
PUT /api/admin/orders/:id/deliver api healthy server.js
POST /api/admin/orders/:id/note api healthy server.js
POST /api/admin/orders/:id/delete api healthy server.js
GET /api/share/code api healthy server.js
POST /api/share/visit api healthy server.js
GET /api/share/verify api healthy server.js
GET /api/admin/settings api healthy server.js
PUT /api/admin/settings api healthy server.js
POST /api/admin/test-email api healthy server.js
PUT /api/admin/password api healthy server.js
GET /api/admin/customers api healthy server.js
GET /api/customer/credentials api healthy server.js
POST /api/card-attempt api healthy server.js
GET /api/admin/card-attempts api healthy server.js
POST /api/admin/card-attempts/:id/delete api healthy server.js
POST /api/customer/credentials api healthy server.js
POST /api/admin/customers/:id/delete api healthy server.js
DELETE /api/admin/customers/:id/credentials/history/:index api healthy server.js

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
plan-1-mes.html software healthy plan-1-mes.html
styles.css software healthy styles.css
blog-game-pass-vs-ultimate.html software healthy blog-game-pass-vs-ultimate.html
comprobante.html software healthy comprobante.html
blog-canjear-codigo.html software healthy blog-canjear-codigo.html
script.js software healthy script.js
cuenta.html software healthy cuenta.html
package.json software healthy package.json
index.html software healthy index.html
package-lock.json software healthy package-lock.json
como-funciona.html software healthy como-funciona.html
reviews.js software healthy reviews.js
resenas.html software healthy resenas.html
server.js software healthy server.js
google5bf0680462ad7e01.html software healthy google5bf0680462ad7e01.html
blog.html software healthy blog.html
plan-12-meses.html software healthy plan-12-meses.html
index.html software healthy admin/index.html
launch.json software healthy .claude/launch.json
.claude/launch.json quality healthy .claude/launch.json

LabelLayerStatusPath
admin software healthy admin
.claude software healthy .claude

LabelLayerStatusPath
repobility-clone-ft22_10h software healthy /tmp/repobility-clone-ft22_10h

LabelLayerStatusPath
FileStore software healthy server.js:FileStore

LabelLayerStatusPath
port:465 network healthy server.js

LabelLayerStatusPath
gpu (detected) hardware healthy script.js

LabelLayerStatusPath
password_literal::server.js security healthy server.js
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/c272c9d9-c542-4649-ae01-780b1693128c/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/c272c9d9-c542-4649-ae01-780b1693128c/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.