Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo
177 of your 267 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.
Upstream (GitHub) caused delay on this scan — not Repobility.
  • GitHub API rate-limited (HTTP 403) — preflight skipped, fell back to direct git clone.
  • Clone from GitHub took 72.95s for a 72.5 MB repo slow.
  • Repobility's analysis ran in 14.56s after the clone landed.

DashAISoftware/dashAI

https://github.com/DashAISoftware/dashAI · scanned 2026-06-05 17:15 UTC (4 days, 22 hours ago) · 10 languages

877 raw signals (253 security + 624 graph) 11/13 scanners ran 42nd percentile · Python · large (100-500K LoC)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 4 days, 22 hours ago · v2 · 354 actionable findings from 2 signal sources. 192 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
75.9
/100
Security checks
78
102 findings
System graph
74
100.0% cov · 252 findings
Critical
0
click to filter
Agents
6
0 votes
Crowd
0
reported
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 60.0 0.15 9.00
security_score 100.0 0.25 25.00
testing_score 51.0 0.20 10.20
documentation_score 70.0 0.15 10.50
practices_score 84.0 0.15 12.60
code_quality 58.0 0.10 5.80
Overall 1.00 73.1
security_score may be inflated — optional security scanners were skipped on this fast scan
Severity distribution — click a segment to filter
Active filters: layer: software × excluding tests × Reset all
Severity: Critical 0 High 103 Medium 15 Low 176 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 102 System graph 252 Crowd 0 Layer: Software 83 Quality 109 Security 93 Cicd 6 Frontend 9 Hardware 4 Api 50
Scan summary Quality grade B (73/100). Dimensions: security 100, maintainability 60. 253 findings (77 security). 156,056 lines analyzed.

Showing 80 of 354 actionable findings. 546 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

high Security checks software dependencies conf 0.90 ✓ Repobility 2 occurrences [MINED118] Dockerfile FROM `node:22-alpine` not pinned by digest: `FROM node:22-alpine` resolves the tag at build time. The registry CAN re-push a different image for the same tag, so every build is potentially different. Production images should pin to `image@sha256:...` for reproducibility + supply-chain integrity.
Replace with: `FROM node:22-alpine@sha256:<digest>`. Get the digest from `docker manifest inspect`. Re-pin via a scheduled bot (Renovate, Dependabot).
lines 2, 8
Dockerfile:2, 8 (2 hits)
high Security checks software dependencies conf 0.90 ✓ Repobility 3 occurrences [MINED131] pre-commit hook `https://github.com/pre-commit/pre-commit-hooks` pinned to mutable rev `v6.0.0`: `.pre-commit-config.yaml` references `https://github.com/pre-commit/pre-commit-hooks` at `rev: v6.0.0`. If `{rev}` is a branch or version tag, the repo owner can push new code there and `pre-commit install --install-hooks` will fetch it on every developer's machine.
Pin to a commit SHA: `rev: <40-char-sha>` and bump it through `pre-commit autoupdate` (which writes to PRs that are reviewed).
lines 2, 14, 22
.pre-commit-config.yaml:2, 14, 22 (3 hits)
medium Security checks software dependencies conf 0.90 ✓ Repobility 25 occurrences [MINED124] requirements.txt: `fastapi[all]` has no version pin: Unpinned pip requirement means every fresh install may resolve a different version. Newer releases can introduce malicious code (typosquats, account compromises). Reproducible installs need exact pins.
Replace `fastapi[all]` with `fastapi[all]==<version>` and manage upgrades through PRs / Dependabot.
2 files, 25 locations
requirements-cpu.txt:9, 10, 11, 12, 13, 16, 17, 18, +9 more (17 hits)
requirements-dev.txt:1, 2, 3, 4, 5, 6, 7, 8 (8 hits)
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/eslint.config.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/i18next.config.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/api/api.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/components/HomeButton.test.jsx
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/components/predictions/inputFieldConstants.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/components/ResponsiveAppBar.test.jsx
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/components/shared/FormSchemaRangeInput.jsx
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/components/shared/FromSchemaFixedInput.jsx
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/constants/flags.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/constants/schema.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/constants/timestamp.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/constants/tours/datasetsTour.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/constants/tours/datasetViewTour.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/constants/tours/experimentsTour.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/constants/tours/generativeTour.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/constants/tours/homeTour.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/constants/tours/modelsSessionTour.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/constants/tours/modelsTour.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/constants/tours/notebookTour.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/index.jsx
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/setupTests.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/types/component.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/types/configurableObject.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/types/converter.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/types/dataloader.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/types/dataset.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/types/explainer.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/types/exploration.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/types/explorer.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/types/generativeTask.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/types/modelSession.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/types/notebook.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/types/pipeline.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/types/plugin.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/types/predict.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/types/process.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/types/run.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/types/session.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/types/task.ts
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/utils/metadataRecommendation.test.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/front/src/utils/typesLists.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: DashAI/webview.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: docs/babel.config.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: docs/docusaurus.config.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: docs/sidebars.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: hooks/hook-imblearn.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: hooks/hook-llama-cpp-cpu.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: hooks/hook-py4j.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: hooks/hook-transformers.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: scripts/ci_alembic_check.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code conf 1.00 Possibly dead Python function: as_normal
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/back/types/inf/ptype/Schema.py:70
low System graph software Dead code conf 1.00 Possibly dead Python function: chop_microseconds
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/back/types/inf/ptype/utils.py:32
low System graph software Dead code conf 1.00 Possibly dead Python function: convert_to_bold
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/back/types/inf/ptype/utils.py:36
low System graph software Dead code conf 1.00 Possibly dead Python function: convert_to_bold_for_latex
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/back/types/inf/ptype/utils.py:40
low System graph software Dead code conf 1.00 Possibly dead Python function: copy_columns_between_dicts
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/back/types/inf/ptype/utils.py:203
low System graph software Dead code conf 1.00 Possibly dead Python function: create_folders
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/back/types/inf/ptype/utils.py:145
low System graph software Dead code conf 1.00 Possibly dead Python function: is_image_path
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/back/types/utils.py:313
low System graph software Dead code conf 1.00 Possibly dead Python function: llhoods_with_precision
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/back/types/inf/ptype/utils.py:62
low System graph software Dead code conf 1.00 Possibly dead Python function: load_logic
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/__main__.py:213
low System graph software Dead code conf 1.00 Possibly dead Python function: logdot
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/back/types/inf/ptype/utils.py:110
low System graph software Dead code conf 1.00 Possibly dead Python function: ma_multidot
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/back/types/inf/ptype/utils.py:118
low System graph software Dead code conf 1.00 Possibly dead Python function: multi_logdot
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/back/types/inf/ptype/utils.py:122
low System graph software Dead code conf 1.00 Possibly dead Python function: open_browser
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/__main__.py:67
low System graph software Dead code conf 1.00 Possibly dead Python function: plot_matrix
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/back/types/inf/ptype/utils.py:212
low System graph software Dead code conf 1.00 Possibly dead Python function: print_to_file
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/back/types/inf/ptype/utils.py:140
low System graph software Dead code conf 1.00 Possibly dead Python function: project_root
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/back/types/inf/ptype/utils.py:27
low System graph software Dead code conf 1.00 Possibly dead Python function: pyarrow_date_conversion
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/back/types/utils.py:248
low System graph software Dead code conf 1.00 Possibly dead Python function: pyarrow_time_conversion
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/back/types/utils.py:280
low System graph software Dead code conf 1.00 Possibly dead Python function: remove_digits
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/back/types/inf/ptype/utils.py:44
low System graph software Dead code conf 1.00 Possibly dead Python function: remove_whitespaces_head_and_tail
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/back/types/inf/ptype/utils.py:48
low System graph software Dead code conf 1.00 Possibly dead Python function: save_file
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/__main__.py:140
low System graph software Dead code conf 1.00 Possibly dead Python function: set_additional_an_values
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/back/types/inf/ptype/Ptype.py:99
low System graph software Dead code conf 1.00 Possibly dead Python function: set_na_values
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/back/types/inf/ptype/Ptype.py:93
low System graph software Dead code conf 1.00 Possibly dead Python function: set_string_alphabet
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/back/types/inf/ptype/Ptype.py:109
low System graph software Dead code conf 1.00 Possibly dead Python function: show_ratios
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/back/types/inf/ptype/Schema.py:53
low System graph software Dead code conf 1.00 Possibly dead Python function: validate_categorical_suitability
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/back/types/type_validation.py:331
low System graph software Dead code conf 1.00 Possibly dead Python function: write_data
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
DashAI/back/types/inf/ptype/utils.py:134
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/c45b5ec7-418d-40b0-b823-e292303fb389/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/c45b5ec7-418d-40b0-b823-e292303fb389/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.