Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

vllm-project/vllm

https://github.com/vllm-project/vllm · scanned 2026-05-16 13:37 UTC (3 weeks, 3 days ago) · 10 languages

1310 raw signals (345 security + 965 graph) 8/10 scanners ran 6th percentile · Python · huge (>500K LoC) System graph score 82 (lower by 23)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 3 weeks, 5 days ago · v1 · 45 actionable findings from 1 signal source. 187 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
60.6
/100
Security checks
40
45 findings
System graph
82
100.0% cov · 0 findings
Critical
1
click to filter
Agents
6
0 votes
Crowd
0
reported
Score breakdown â 2026-05-17-v4 calibration-aware
Component Sub-score Weight Contribution
structure_score 60.0 0.15 9.00
security_score 0.0 0.25 0.00
testing_score 100.0 0.20 20.00
documentation_score 86.0 0.15 12.90
practices_score 65.0 0.15 9.75
code_quality 70.0 0.10 7.00
Overall 1.00 58.6
Calibrated penalty buckets (security_score): agent: 3.2 · docker: 86.6 · threat: 75.1
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 1 High 16 Medium 8 Low 10 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 45 System graph 0 Crowd 0 Layer: Cicd 16 Security 14 Software 7 Quality 8

All 40159 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
load_module_from_path software healthy setup.py:25
is_sccache_available software healthy setup.py:67
is_ccache_available software healthy setup.py:73
is_ninja_available software healthy setup.py:77
is_freethreaded software healthy setup.py:81
should_bundle_tcmalloc software healthy setup.py:85
find_tcmalloc software healthy setup.py:95
bundle_tcmalloc software healthy setup.py:128
__init__ software healthy setup.py:510
compute_num_jobs software healthy setup.py:158
configure software healthy setup.py:200
build_extensions software dead setup.py:403
target_name software healthy setup.py:298
run software healthy setup.py:400
fetch_metadata_for_variant software healthy setup.py:412
is_rocm_system software healthy setup.py:430
detect_system_cuda_variant software healthy setup.py:446
find_local_rocm_wheel software healthy setup.py:489
fetch_wheel_from_pypi_index software healthy setup.py:500
handle_starttag software dead setup.py:514
determine_wheel_url_rocm software healthy setup.py:537
determine_wheel_url software healthy setup.py:556
extract_precompiled_and_patch_package software healthy setup.py:655
get_base_commit_in_main_branch software healthy setup.py:755
_no_device software healthy setup.py:819
_is_cuda software healthy setup.py:823
_is_hip software healthy setup.py:828
_is_tpu software healthy setup.py:834
_is_cpu software healthy setup.py:838
_is_xpu software healthy setup.py:842
_build_custom_ops software healthy setup.py:846
get_rocm_version software healthy setup.py:850
get_nvcc_cuda_version software healthy setup.py:884
get_vllm_version software healthy setup.py:899
get_requirements software healthy setup.py:943
_read_requirements software healthy setup.py:947
main software healthy use_existing_torch.py:21
test_valueerror_converted_to_bypass software healthy tests/test_fxgraphcache_pickle_patch.py:20
dumps software healthy tests/test_fxgraphcache_pickle_patch.py:78
test_original_valueerror_chained software healthy tests/test_fxgraphcache_pickle_patch.py:30
test_non_valueerror_propagates software healthy tests/test_fxgraphcache_pickle_patch.py:44
test_normal_return_preserved software healthy tests/test_fxgraphcache_pickle_patch.py:54
test_idempotent software healthy tests/test_fxgraphcache_pickle_patch.py:65
test_sentinel_attribute_set software healthy tests/test_fxgraphcache_pickle_patch.py:76
test_patch_applied_in_current_environment software healthy tests/test_fxgraphcache_pickle_patch.py:90
test_seed_behavior software healthy tests/test_seed_behavior.py:11
sample_json_schema software healthy tests/conftest.py:83
_read_prompts software healthy tests/conftest.py:144
__init__ software healthy tests/conftest.py:1535
prompts software healthy tests/conftest.py:204

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
CMakeExtension software healthy setup.py:145
cmake_build_ext software healthy setup.py:151
precompiled_build_ext software healthy setup.py:397
precompiled_wheel_utils software healthy setup.py:408
WheelLinkParser software healthy setup.py:509
_BypassStub software healthy tests/test_fxgraphcache_pickle_patch.py:15
TestApplyFxgraphcachePicklePatch software healthy tests/test_fxgraphcache_pickle_patch.py:19
Pickler software healthy tests/test_fxgraphcache_pickle_patch.py:77
ImageAssetPrompts software healthy tests/conftest.py:150
ImageTestAssets software healthy tests/conftest.py:155
VideoAssetPrompts software healthy tests/conftest.py:174
VideoTestAssets software healthy tests/conftest.py:178
AudioAssetPrompts software healthy tests/conftest.py:190
AudioTestAssets software healthy tests/conftest.py:195
DecoderPromptType software healthy tests/conftest.py:309
HfRunner software healthy tests/conftest.py:341
VllmRunner software healthy tests/conftest.py:857
LogHolder software healthy tests/conftest.py:1317
AssetHandler software healthy tests/conftest.py:1487
LocalAssetServer software healthy tests/conftest.py:1529
TestEnvWithChoices software healthy tests/test_envs.py:106
TestEnvListWithChoices software healthy tests/test_envs.py:202
TestEnvSetWithChoices software healthy tests/test_envs.py:309
TestVllmConfigureLogging software healthy tests/test_envs.py:416
TestVllmMaxNSequences software healthy tests/test_envs.py:467
TestUvicornAccessLogFilter software healthy tests/test_access_log_filter.py:15
TestCreateUvicornLogConfig software healthy tests/test_access_log_filter.py:199
TestIntegration software healthy tests/test_access_log_filter.py:254
TrackingHandler software healthy tests/test_access_log_filter.py:269
_TestConfigFields software healthy tests/test_config.py:144
_TestNestedConfig software healthy tests/test_config.py:163
MockConfig software healthy tests/test_config.py:544
TestDefaultPropagation software healthy tests/test_ray_env_utils.py:16
TestExclusion software healthy tests/test_ray_env_utils.py:40
CustomEnum software healthy tests/test_logger.py:257
CustomClass software healthy tests/test_logger.py:265
TestActivateBasic software healthy tests/test_jit_monitor.py:44
TestAutotuningPrint software healthy tests/test_jit_monitor.py:69
TestJitHook software healthy tests/test_jit_monitor.py:95
TestNoTritonFallback software healthy tests/test_jit_monitor.py:165
TestTritonJitHookIntegration software healthy tests/test_jit_monitor.py:220
MockModelConfig software healthy tests/test_pooling_params.py:26
RemoteVLLMServer software healthy tests/utils.py:145
RemoteOpenAIServer software healthy tests/utils.py:679
RemoteLaunchRenderServer software healthy tests/utils.py:708
RemoteOpenAIServerCustom software healthy tests/utils.py:750
TestFP8Layer software healthy tests/utils.py:2041
CustomAttentionImpl software healthy tests/test_attention_backend_registry.py:14
CustomAttentionBackend software healthy tests/test_attention_backend_registry.py:25
CustomMambaAttentionImpl software healthy tests/test_attention_backend_registry.py:47

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
mkdocs.yaml software healthy mkdocs.yaml
RELEASE.md software healthy RELEASE.md
README.md software healthy README.md
CLAUDE.md software healthy CLAUDE.md
CONTRIBUTING.md software healthy CONTRIBUTING.md
.markdownlint.yaml software healthy .markdownlint.yaml
.pre-commit-config.yaml software healthy .pre-commit-config.yaml
setup.py software healthy setup.py
.readthedocs.yaml software healthy .readthedocs.yaml
pyproject.toml software healthy pyproject.toml
CODE_OF_CONDUCT.md software healthy CODE_OF_CONDUCT.md
SECURITY.md software healthy SECURITY.md
AGENTS.md software healthy AGENTS.md
codecov.yml software healthy codecov.yml
use_existing_torch.py software healthy use_existing_torch.py
versions.json software healthy docker/versions.json
Dockerfile software healthy docker/Dockerfile
test_fxgraphcache_pickle_patch.py software healthy tests/test_fxgraphcache_pickle_patch.py
test_seed_behavior.py software healthy tests/test_seed_behavior.py
__init__.py software healthy tests/__init__.py
conftest.py software healthy tests/conftest.py
ci_envs.py software healthy tests/ci_envs.py
test_envs.py software healthy tests/test_envs.py
test_outputs.py software healthy tests/test_outputs.py
test_version.py software healthy tests/test_version.py
test_access_log_filter.py software healthy tests/test_access_log_filter.py
test_scalartype.py software healthy tests/test_scalartype.py
test_config.py software healthy tests/test_config.py
test_embedded_commit.py software healthy tests/test_embedded_commit.py
test_ray_env_utils.py software healthy tests/test_ray_env_utils.py
test_logger.py software healthy tests/test_logger.py
test_jit_monitor.py software healthy tests/test_jit_monitor.py
test_logprobs.py software healthy tests/test_logprobs.py
test_regression.py software healthy tests/test_regression.py
test_pooling_params.py software healthy tests/test_pooling_params.py
test_zen_cpu_platform_detection.py software healthy tests/test_zen_cpu_platform_detection.py
test_triton_utils.py software healthy tests/test_triton_utils.py
utils.py software healthy tests/utils.py
test_vllm_port.py software healthy tests/test_vllm_port.py
test_attention_backend_registry.py software healthy tests/test_attention_backend_registry.py
test_sequence.py software healthy tests/test_sequence.py
test_ray_env.py software healthy tests/test_ray_env.py
test_inputs.py software healthy tests/test_inputs.py
test_aot_compile.py software healthy tests/compile/test_aot_compile.py
test_codegen.py software healthy tests/compile/test_codegen.py
test_sequence_parallelism_threshold.py software healthy tests/compile/test_sequence_parallelism_threshold.py
__init__.py software healthy tests/compile/__init__.py
test_structured_logging.py software healthy tests/compile/test_structured_logging.py
conftest.py software healthy tests/compile/conftest.py
test_rotary_embedding_compile.py software healthy tests/compile/test_rotary_embedding_compile.py

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
docker software healthy docker
tests software healthy tests
compile software healthy tests/compile
correctness_e2e software healthy tests/compile/correctness_e2e
passes software healthy tests/compile/passes
distributed software healthy tests/compile/passes/distributed
ir software healthy tests/compile/passes/ir
fusions_e2e software healthy tests/compile/fusions_e2e
fullgraph software healthy tests/compile/fullgraph
h100 software healthy tests/compile/h100
transformers_utils software healthy tests/transformers_utils
models software healthy tests/models
language software healthy tests/models/language
pooling_mteb_test software healthy tests/models/language/pooling_mteb_test
pooling software healthy tests/models/language/pooling
generation software healthy tests/models/language/generation
generation_ppl_test software healthy tests/models/language/generation_ppl_test
fixtures software healthy tests/models/fixtures
audioflamingo3 software healthy tests/models/fixtures/audioflamingo3
musicflamingo software healthy tests/models/fixtures/musicflamingo
quantization software healthy tests/models/quantization
multimodal software healthy tests/models/multimodal
processing software healthy tests/models/multimodal/processing
pooling software healthy tests/models/multimodal/pooling
generation software healthy tests/models/multimodal/generation
vlm_utils software healthy tests/models/multimodal/generation/vlm_utils
basic_correctness software healthy tests/basic_correctness
weight_loading software healthy tests/weight_loading
config software healthy tests/config
v1 software healthy tests/v1
simple_kv_offload software healthy tests/v1/simple_kv_offload
kv_connector software healthy tests/v1/kv_connector
extract_hidden_states_integration software healthy tests/v1/kv_connector/extract_hidden_states_integration
unit software healthy tests/v1/kv_connector/unit
offloading_connector software healthy tests/v1/kv_connector/unit/offloading_connector
nixl_integration software healthy tests/v1/kv_connector/nixl_integration
shutdown software healthy tests/v1/shutdown
attention software healthy tests/v1/attention
kv_offload software healthy tests/v1/kv_offload
cpu software healthy tests/v1/kv_offload/cpu
streaming_input software healthy tests/v1/streaming_input
worker software healthy tests/v1/worker
distributed software healthy tests/v1/distributed
ec_connector software healthy tests/v1/ec_connector
integration software healthy tests/v1/ec_connector/integration
unit software healthy tests/v1/ec_connector/unit
structured_output software healthy tests/v1/structured_output
determinism software healthy tests/v1/determinism
engine software healthy tests/v1/engine
core software healthy tests/v1/core

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
ANY /v1/completions api healthy benchmarks/disagg_benchmarks/disagg_prefill_proxy_server.py
GET /health api healthy vllm/entrypoints/api_server.py
POST /generate api healthy vllm/entrypoints/api_server.py
GET /v1/models api healthy vllm/entrypoints/openai/models/api_router.py
POST /v1/responses api healthy vllm/entrypoints/openai/responses/api_router.py
GET /v1/responses/{response_id} api healthy vllm/entrypoints/openai/responses/api_router.py
POST /v1/responses/{response_id}/cancel api healthy vllm/entrypoints/openai/responses/api_router.py
POST /v1/chat/completions api healthy vllm/entrypoints/openai/chat_completion/api_router.py
POST /v1/chat/completions/batch api healthy vllm/entrypoints/openai/chat_completion/api_router.py
POST /generative_scoring api healthy vllm/entrypoints/openai/generative_scoring/api_router.py
POST /v1/completions api healthy vllm/entrypoints/openai/completion/api_router.py
POST /ping api healthy vllm/entrypoints/sagemaker/api_router.py
GET /ping api healthy vllm/entrypoints/sagemaker/api_router.py
POST /invocations api healthy vllm/entrypoints/sagemaker/api_router.py
GET /load api healthy vllm/entrypoints/serve/instrumentator/basic.py
GET /version api healthy vllm/entrypoints/serve/instrumentator/basic.py
GET /docs api healthy vllm/entrypoints/serve/instrumentator/offline_docs.py
GET /server_info api healthy vllm/entrypoints/serve/instrumentator/server_info.py
POST /pause api healthy vllm/entrypoints/serve/rlhf/api_router.py
POST /resume api healthy vllm/entrypoints/serve/rlhf/api_router.py
GET /is_paused api healthy vllm/entrypoints/serve/rlhf/api_router.py
POST /init_weight_transfer_engine api healthy vllm/entrypoints/serve/rlhf/api_router.py
POST /start_weight_update api healthy vllm/entrypoints/serve/rlhf/api_router.py
POST /update_weights api healthy vllm/entrypoints/serve/rlhf/api_router.py
POST /finish_weight_update api healthy vllm/entrypoints/serve/rlhf/api_router.py
GET /get_world_size api healthy vllm/entrypoints/serve/rlhf/api_router.py
POST /v1/load_lora_adapter api healthy vllm/entrypoints/serve/lora/api_router.py
POST /v1/unload_lora_adapter api healthy vllm/entrypoints/serve/lora/api_router.py
POST /sleep api healthy vllm/entrypoints/serve/sleep/api_router.py
POST /wake_up api healthy vllm/entrypoints/serve/sleep/api_router.py
GET /is_sleeping api healthy vllm/entrypoints/serve/sleep/api_router.py
POST /reset_prefix_cache api healthy vllm/entrypoints/serve/cache/api_router.py
POST /reset_mm_cache api healthy vllm/entrypoints/serve/cache/api_router.py
POST /reset_encoder_cache api healthy vllm/entrypoints/serve/cache/api_router.py
POST /inference/v1/generate api healthy vllm/entrypoints/serve/disagg/api_router.py
POST /abort_requests api healthy vllm/entrypoints/serve/disagg/api_router.py
POST /scale_elastic_ep api healthy vllm/entrypoints/serve/elastic_ep/api_router.py
POST /is_scaling_elastic_ep api healthy vllm/entrypoints/serve/elastic_ep/api_router.py
POST /collective_rpc api healthy vllm/entrypoints/serve/rpc/api_router.py
POST /tokenize api healthy vllm/entrypoints/serve/tokenize/api_router.py
POST /detokenize api healthy vllm/entrypoints/serve/tokenize/api_router.py
GET /tokenizer_info api healthy vllm/entrypoints/serve/tokenize/api_router.py
POST /start_profile api healthy vllm/entrypoints/serve/profile/api_router.py
POST /stop_profile api healthy vllm/entrypoints/serve/profile/api_router.py
POST /v1/chat/completions/render api healthy vllm/entrypoints/serve/render/api_router.py
POST /v1/completions/render api healthy vllm/entrypoints/serve/render/api_router.py
POST /classify api healthy vllm/entrypoints/pooling/classify/api_router.py
POST /v1/embeddings api healthy vllm/entrypoints/pooling/embed/api_router.py
POST /v2/embed api healthy vllm/entrypoints/pooling/embed/api_router.py
POST /pooling api healthy vllm/entrypoints/pooling/pooling/api_router.py

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
127.0.0.1 network healthy tests/conftest.py
1.1.1.1 network healthy tests/test_envs.py
10.0.0.15 network healthy tests/test_envs.py
2.2.2.2 network healthy tests/test_envs.py
3.3.3.3 network healthy tests/test_envs.py
10.0.0.1 network healthy tests/test_ray_env.py
198.51.100.1 network healthy tests/distributed/test_mq_connect_ip.py
169.254.169.254 network healthy tests/entrypoints/openai/test_run_batch.py
192.168.1.1 network healthy tests/entrypoints/openai/test_run_batch.py
10.0.0.2 network healthy tests/utils_/test_ray_utils.py
10.0.0.3 network healthy tests/utils_/test_ray_utils.py
9.10.2.21 network healthy vllm/v1/attention/ops/vit_attn_wrappers.py
2.6.0.1 network healthy vllm/utils/torch_utils.py
8.8.8.8 network healthy vllm/utils/network_utils.py
10.99.48.128 network healthy examples/features/data_parallel/data_parallel_offline.py

LabelLayerStatusPath
port:12312 network healthy tests/config/test_config.yaml
port:1234 network healthy tests/v1/kv_connector/unit/test_bidirectional_kv_transfer.py
port:8000 network healthy tests/entrypoints/openai/test_cli_args.py
port:8001 network healthy tests/utils_/test_argparse_utils.py
port:80 network healthy benchmarks/disagg_benchmarks/disagg_prefill_proxy_server.py
port:12323 network healthy vllm/utils/argparse_utils.py
port:6379 network healthy examples/ray_serving/run_cluster.sh
port:8006 network healthy examples/ray_serving/elastic_ep/bench.sh
port:9090 network healthy examples/observability/prometheus_grafana/docker-compose.ya…
port:3000 network healthy examples/observability/prometheus_grafana/docker-compose.ya…
port:8100 network healthy examples/disaggregated/lmcache/disagg_prefill_lmcache_v0.py
port:10001 network healthy examples/disaggregated/p2p_nccl_xpyd/disagg_proxy_p2p_nccl_…
port:13345 network healthy examples/features/data_parallel/data_parallel_offline.py

LabelLayerStatusPath
image::docker/Dockerfile hardware healthy docker/Dockerfile
prometheus hardware healthy examples/observability/prometheus_grafana/docker-compose.ya…
grafana hardware healthy examples/observability/prometheus_grafana/docker-compose.ya…
k8s::PersesDashboard::examples/observability/dashboards/per… hardware healthy examples/observability/dashboards/perses/performance_statis…
k8s::PersesDashboard::examples/observability/dashboards/per… hardware healthy examples/observability/dashboards/perses/query_statistics.y…
k8s::ConfigMap::examples/deployment/chart-helm/templates/co… hardware healthy examples/deployment/chart-helm/templates/configmap.yaml
k8s::HorizontalPodAutoscaler::examples/deployment/chart-hel… hardware healthy examples/deployment/chart-helm/templates/hpa.yaml
k8s::PersistentVolumeClaim::examples/deployment/chart-helm/… hardware healthy examples/deployment/chart-helm/templates/pvc.yaml
k8s::PodDisruptionBudget::examples/deployment/chart-helm/te… hardware healthy examples/deployment/chart-helm/templates/poddisruptionbudge…
k8s::Secret::examples/deployment/chart-helm/templates/secre… hardware healthy examples/deployment/chart-helm/templates/secrets.yaml

LabelLayerStatusPath
update-description cicd healthy .github/workflows/new_pr_bot.yml
reminder-comment cicd healthy .github/workflows/new_pr_bot.yml
add-labels cicd healthy .github/workflows/issue_autolabel.yml
macos-m1-smoke-test cicd healthy .github/workflows/macos-smoke-test.yml
close-issues-and-pull-requests cicd healthy .github/workflows/stale.yml
pre-run-check cicd healthy .github/workflows/pre-commit.yml
pre-commit cicd healthy .github/workflows/pre-commit.yml
add-label-on-auto-merge cicd healthy .github/workflows/add_label_automerge.yml

LabelLayerStatusPath
gha::new_pr_bot cicd healthy .github/workflows/new_pr_bot.yml
gha::issue_autolabel cicd healthy .github/workflows/issue_autolabel.yml
gha::macos-smoke-test cicd healthy .github/workflows/macos-smoke-test.yml
gha::stale cicd healthy .github/workflows/stale.yml
gha::pre-commit cicd healthy .github/workflows/pre-commit.yml
gha::add_label_automerge cicd healthy .github/workflows/add_label_automerge.yml

LabelLayerStatusPath
vps::azure hardware healthy setup.py
vps::aws hardware healthy docker/Dockerfile
vps::gcp hardware healthy tests/model_executor/model_loader/runai_streamer_loader/tes…
vps::ec2 hardware healthy examples/deployment/chart-helm/values.yaml

LabelLayerStatusPath
k8s::Job::examples/deployment/chart-helm/templates/job.yaml hardware healthy examples/deployment/chart-helm/templates/job.yaml
k8s::Deployment::examples/deployment/chart-helm/templates/d… hardware healthy examples/deployment/chart-helm/templates/deployment.yaml

LabelLayerStatusPath
repobility-clone-9276iw5p software healthy /tmp/repobility-clone-9276iw5p

LabelLayerStatusPath
table_name_74 data healthy examples/features/lora/multilora_offline.py

LabelLayerStatusPath
loadbalancer network healthy tests/v1/distributed/test_internal_lb_dp.py

LabelLayerStatusPath
gpu (detected) hardware healthy .pre-commit-config.yaml

LabelLayerStatusPath
GITHUB_TOKEN cicd healthy —
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/cea585c0-944b-4614-9116-8abca2930bfe/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/cea585c0-944b-4614-9116-8abca2930bfe/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.