Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

38 of your 120 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 2.61s · analysis 26.0s · 8.0 MB · GitHub API rate-limit (preflight)

noelrim/asset_management

https://github.com/noelrim/asset_management · scanned 2026-06-18 20:35 UTC (1 month, 1 week ago) · 10 languages

212 raw signals (112 security + 100 graph) 18th percentile · Typescript · medium (20-100K LoC)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 month, 1 week ago · v1 · 190 actionable findings from 2 signal sources. 22 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

88.9% cov · 91 findings

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	60.0	0.15	9.00
`security_score`	55.0	0.25	13.75
`testing_score`	100.0	0.20	20.00
`documentation_score`	58.0	0.15	8.70
`practices_score`	42.0	0.15	6.30
`code_quality`	68.1	0.10	6.81
Overall		1.00	64.6

Severity distribution — click a segment to filter

Active filters: severity: critical × excluding tests × Reset all

Severity: Critical 2 High 59 Medium 48 Low 67 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 99 System graph 91 Crowd 0 Layer: Software 59 Security 9 Quality 63 Frontend 15 Network 2 Api 42

Exclude dismissed / FP Exclude test files

Scan summary Repository scanned at 54.2/100 with 88.9% coverage. It contains 1189 nodes across 30 cross-layer flows, written primarily in mixed languages. Engine surfaced 100 findings — concentrated in api (42), quality (35), frontend (15). Risk profile is high: 0 critical, 3 high, 36 medium. Recommended next step: open the api layer findings first — that's where the highest-impact wins live.

Showing 2 of 190 actionable findings. 212 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

critical Security checks security secrets conf 0.95 Detected a Generic API Key, potentially exposing access to various services and sensitive operations.

Gitleaks detected a committed secret or credential pattern.

inputs/CIF_Aggregator_Product_Brief.md:374

critical Security checks software dependencies conf 0.88 vitest: GHSA-5xrq-8626-4rwp

When Vitest UI server is listening, arbitrary file can be read and executed

package-lock.json

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/c9d16ec1-0723-4648-a288-c1842764523c/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/c9d16ec1-0723-4648-a288-c1842764523c/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.