Scan timing: clone 14.92s · analysis 5.83s · 42.6 MB · GitHub API rate-limit (preflight)
https://github.com/affaan-m/ECC
· scanned 2026-06-04 04:10 UTC (1 day, 6 hours ago)
· 10 languages
681 findings (115 legacy + 566 scanner) 11/13 scanners ran 92nd percentile · Javascript · large (100-500K LoC) Scanner says 69 (higher by 21)
Last scanned 1 day, 6 hours ago · v2 · 398 findings from 2 sources. Findings combine the legacy security pipeline AND the multi-layer engine (atlas, wiring, flows, ranked) AND verified AI agent contributions.
| Component | Sub-score | Weight | Contribution |
|---|---|---|---|
structure_score |
85.0 | 0.15 | 12.75 |
security_score |
100.0 | 0.25 | 25.00 |
testing_score |
100.0 | 0.20 | 20.00 |
documentation_score |
100.0 | 0.15 | 15.00 |
practices_score |
81.0 | 0.15 | 12.15 |
code_quality |
55.0 | 0.10 | 5.50 |
| Overall | 1.00 | 90.4 |
Showing 332 of 398 findings. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.
.opencode/tools/security-audit.ts:233
qualitylegacy
package.json:1
dependencylegacy
skills/videodb/scripts/ws_listener.py:73
qualitylegacy
scripts/hooks/stop-format-typecheck.js:43
qualitylegacy
scripts/hooks/post-edit-accumulator.js:27
qualitylegacy
ecc_dashboard.py:397
qualitylegacy
ecc_dashboard.py:392
qualitylegacy
ecc_dashboard.py:409
qualitylegacy
ecc_dashboard.py:363
qualitylegacy
ecc_dashboard.py:365
qualitylegacy
ecc_dashboard.py:366
qualitylegacy
ecc_dashboard.py:367
qualitylegacy
ecc_dashboard.py:364
qualitylegacy
ecc_dashboard.py:334
qualitylegacy
ecc_dashboard.py:349
qualitylegacy
ecc_dashboard.py:348
qualitylegacy
ecc_dashboard.py:347
qualitylegacy
ecc_dashboard.py:360
qualitylegacy
ecc_dashboard.py:359
qualitylegacy
ecc_dashboard.py:376
qualitylegacy
ecc_dashboard.py:373
qualitylegacy
ecc_dashboard.py:354
qualitylegacy
ecc_dashboard.py:353
qualitylegacy
ecc_dashboard.py:329
qualitylegacy
ecc_dashboard.py:356
qualitylegacy
ecc_dashboard.py:355
qualitylegacy
ecc_dashboard.py:331
qualitylegacy
ecc_dashboard.py:333
qualitylegacy
ecc_dashboard.py:332
qualitylegacy
ecc_dashboard.py:330
qualitylegacy
scripts/codemaps/generate.ts:247
xsslegacy
.opencode/tools/check-coverage.ts:95
xsslegacy
.opencode/tools/changed-files.ts:60
xsslegacy
scripts/hooks/session-end.js:260
qualitylegacy
scripts/ci/check-unicode-safety.js:63
qualitylegacy
scripts/codex/merge-codex-config.js:70
qualitylegacy
scripts/ci/validate-no-personal-paths.js:60
qualitylegacy
.opencode/tools/git-summary.ts:52
qualitylegacy
scripts/sync-ecc-to-codex.sh:383
owaspeval_used
scripts/lib/state-store/index.js:47
owaspexec_used
src/llm/tools/executor.py:54
qualitylegacy
skills/continuous-learning-v2/scripts/instinct-cli.py:762
qualitylegacy
skills/continuous-learning-v2/scripts/instinct-cli.py:494
qualitylegacy
ecc_dashboard.py:816
qualitylegacy
src/llm/core/interface.py:29
qualitylegacy
scripts/preview-pack-smoke.js:169
qualitylegacy
.github/workflows/reusable-release.yml
supply-chaingithub-actionsleast-privilege
.github/workflows/release.yml
supply-chaingithub-actionsleast-privilege
scripts/sync-ecc-to-codex.sh:383
owaspdangerous_innerhtml
skills/continuous-learning-v2/agents/session-guardian.sh
securityports
.cursor/hooks/after-shell-execution.js:16
qualitylegacy
scripts/release-approval-gate.js:101
qualitylegacy
scripts/preview-pack-smoke.js:129
qualitylegacy
scripts/preview-pack-smoke.js:116
qualitylegacy
scripts/platform-audit.js:228
qualitylegacy
scripts/platform-audit.js:188
qualitylegacy
scripts/platform-audit.js:41
qualitylegacy
scripts/observability-readiness.js:30
qualitylegacy
scripts/list-installed.js:8
qualitylegacy
scripts/lib/skill-evolution/versioning.js:105
qualitylegacy
scripts/lib/install/request.js:41
qualitylegacy
scripts/lib/install/apply.js:6
qualitylegacy
scripts/lib/install-targets/zed-project.js:21
qualitylegacy
scripts/lib/install-targets/zed-project.js:14
qualitylegacy
scripts/lib/install-targets/joycode-project.js:21
qualitylegacy
scripts/lib/install-targets/joycode-project.js:14
qualitylegacy
scripts/lib/install-targets/cursor-project.js:18
qualitylegacy
scripts/lib/install-targets/codebuddy-project.js:14
qualitylegacy
scripts/lib/install-targets/claude-project.js:1
qualitylegacy
scripts/install-plan.js:103
qualitylegacy
scripts/hooks/session-end-marker.js:39
qualitylegacy
scripts/hooks/run-with-flags.js:13
qualitylegacy
scripts/hooks/run-with-flags.js:12
qualitylegacy
scripts/hooks/pre-bash-tmux-reminder.js:19
qualitylegacy
scripts/hooks/pre-bash-tmux-reminder.js:18
qualitylegacy
scripts/hooks/pre-bash-git-push-reminder.js:15
qualitylegacy
scripts/hooks/post-edit-accumulator.js:28
qualitylegacy
scripts/hooks/post-bash-pr-created.js:24
qualitylegacy
scripts/hooks/plugin-hook-bootstrap.js:26
qualitylegacy
scripts/hooks/mcp-health-check.js:75
qualitylegacy
.codebuddy/uninstall.js:71
qualitylegacy
.github/copilot-instructions.md:1
qualitylegacy
scripts/auto-update.js:1
qualitylegacy
package.json
supply-chainnpminstall-scripts
ecc_dashboard.py:803
dead-code
skills/manim-video/assets/network_graph_scene.py:5
dead-code
ecc_dashboard.py:447
dead-code
ecc_dashboard.py:714
dead-code
ecc_dashboard.py:564
dead-code
src/llm/__init__.py:30
dead-code
src/llm/providers/openai.py:118
dead-code
src/llm/providers/astraflow.py:123
dead-code
src/llm/providers/ollama.py:105
dead-code
src/llm/providers/claude.py:110
dead-code
ecc_dashboard.py:835
dead-code
ecc_dashboard.py:831
dead-code
ecc_dashboard.py:811
dead-code
ecc_dashboard.py:839
dead-code
Showing first 300 of 332. Refine filters or use the legacy findings page for deep search.
This page is publicly accessible at:
https://repobility.com/scan/cee07bfa-32f3-4702-be86-74f070e7d41b/
To check status programmatically (no auth required):
curl -s https://repobility.com/api/v1/public/scan/cee07bfa-32f3-4702-be86-74f070e7d41b/
Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.