Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

richard-devbot/SDLC-rstack

https://github.com/richard-devbot/SDLC-rstack · scanned 2026-06-15 23:51 UTC (2 months, 3 weeks ago)

257 raw signals (0 security + 257 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 3 weeks ago · v1 · 215 actionable findings from 1 signal source. 42 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
45.4
/100
Security checks
45
0 findings
System graph
45
100.0% cov · 215 findings
Critical
6
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: severity: low × excluding tests × Reset all
Severity: Critical 6 High 49 Medium 96 Low 58 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 215 Crowd 0 Layer: Software 29 Frontend 10 Network 2 Security 80 Cicd 4 Quality 80 Api 10
Corpus Intelligence Cross-corpus context (cohort percentile, top patterns, fix plan) is shown only on repositories you own. Sign up and connect your repo to view it.
Scan summary Repository scanned at 45.4/100 with 100.0% coverage. It contains 4207 nodes across 7 cross-layer flows, written primarily in mixed languages. Engine surfaced 257 findings — concentrated in quality (98), security (91), software (29). Risk profile is high: 17 critical, 49 high, 97 medium. Recommended next step: open the quality layer findings first — that's where the highest-impact wins live.

Showing 58 of 215 actionable findings. 257 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

low System graph quality Debug conf 1.00 Debug logging residue appears in source files
Found 717 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup.
CleanupRepo hardeningGenerated repo pattern
low System graph cicd CI/CD security conf 1.00 13 occurrences GitHub Action is tag-pinned rather than SHA-pinned
actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA.
4 files, 13 locations
.github/workflows/release-observer.yml:49, 52, 69, 85, 88 (5 hits)
.github/workflows/ci.yml:19, 22, 44, 49 (4 hits)
.github/workflows/publish.yml:17, 20 (2 hits)
.github/workflows/validate-agents.yml:31, 34 (2 hits)
CI/CD securitySupply chainGithub actions
low System graph frontend Frontend quality conf 1.00 Icon-only button without accessible name — src/observability/dashboard/ui/studio3d.js:103
A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label
Fq button no label
low System graph security security conf 1.00 Insecure pattern 'document_write' in skills/architecture-design/best-practices/SKILL.md:131
Found a known-risky pattern (document_write). Review and replace if possible.
skills/architecture-design/best-practices/SKILL.md:131 Document write
low System graph quality Tests conf 1.00 Low test-to-source ratio
40 tests / 167 src (ratio 0.24).
low System graph quality Integrity conf 1.00 14 occurrences Near-duplicate function bodies in 2 places
Functions with the same first-5-line body hash: skills/architecture-design/api-design-principles/assets/rest-api-template.py:http_exception_handler, plugins/backend-development/skills/api-design-principles/assets/rest-api-template.py:http_exception_handler This is *the* AI-coder failure mode (4× m…
14 occurrences
repo-level (14 hits)
duplicatesduplication
low System graph quality Integrity conf 1.00 6 occurrences Near-duplicate function bodies in 3 places
Functions with the same first-5-line body hash: skills/security-compliance/auditing-access-control/scripts/access_control_audit.py:analyze_directory, skills/testing-qa/analyzing-test-coverage/scripts/analyze_coverage.py:analyze_directory, skills/architecture-design/analyzing-database-indexes/script…
6 occurrences
repo-level (6 hits)
duplicatesduplication
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `hoursOld` in src/memory/index.js:202
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `xml_copy` in skills/docx/scripts/office/validators/base.py:705
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `xml_copy` in skills/pptx/scripts/office/validators/base.py:705
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `xml_copy` in skills/xlsx/scripts/office/validators/base.py:705
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph software Dead code conf 1.00 Possibly dead Python function: add_frames
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/slack-gif-creator/core/gif_builder.py:54
low System graph software Dead code conf 1.00 Possibly dead Python function: analyze_and_optimize
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/devops-deployment/aws-solution-architect/scripts/cost_optimizer.py:24
low System graph software Dead code conf 1.00 Possibly dead Python function: apply_squash_stretch
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/slack-gif-creator/core/easing.py:163
low System graph software Dead code conf 1.00 Possibly dead Python function: calculate_arc_motion
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/slack-gif-creator/core/easing.py:195
low System graph software Dead code conf 1.00 Possibly dead Python function: clear
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/slack-gif-creator/core/gif_builder.py:267
low System graph software Dead code conf 1.00 Possibly dead Python function: create_blank_frame
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/slack-gif-creator/core/frame_composer.py:15
low System graph software Dead code conf 1.00 Possibly dead Python function: create_gradient_background
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/slack-gif-creator/core/frame_composer.py:99
low System graph software Dead code conf 1.00 Possibly dead Python function: draw_circle
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/slack-gif-creator/core/frame_composer.py:32
low System graph software Dead code conf 1.00 Possibly dead Python function: draw_star
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/slack-gif-creator/core/frame_composer.py:137
low System graph software Dead code conf 1.00 Possibly dead Python function: draw_text
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/slack-gif-creator/core/frame_composer.py:61
low System graph software Dead code conf 1.00 Possibly dead Python function: ease_back_in
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/slack-gif-creator/core/easing.py:140
low System graph software Dead code conf 1.00 Possibly dead Python function: ease_back_in_out
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/slack-gif-creator/core/easing.py:154
low System graph software Dead code conf 1.00 Possibly dead Python function: ease_back_out
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/slack-gif-creator/core/easing.py:147
low System graph software Dead code conf 1.00 Possibly dead Python function: ease_in_cubic
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/slack-gif-creator/core/easing.py:34
low System graph software Dead code conf 1.00 Possibly dead Python function: ease_in_elastic
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/slack-gif-creator/core/easing.py:78
low System graph software Dead code conf 1.00 Possibly dead Python function: ease_in_out_bounce
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/slack-gif-creator/core/easing.py:71
low System graph software Dead code conf 1.00 Possibly dead Python function: ease_in_out_cubic
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/slack-gif-creator/core/easing.py:44
low System graph software Dead code conf 1.00 Possibly dead Python function: ease_in_out_elastic
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/slack-gif-creator/core/easing.py:92
low System graph software Dead code conf 1.00 Possibly dead Python function: ease_in_out_quad
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/slack-gif-creator/core/easing.py:27
low System graph software Dead code conf 1.00 Possibly dead Python function: ease_in_quad
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/slack-gif-creator/core/easing.py:17
low System graph software Dead code conf 1.00 Possibly dead Python function: ease_out_cubic
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/slack-gif-creator/core/easing.py:39
low System graph software Dead code conf 1.00 Possibly dead Python function: ease_out_elastic
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/slack-gif-creator/core/easing.py:85
low System graph software Dead code conf 1.00 Possibly dead Python function: ease_out_quad
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/slack-gif-creator/core/easing.py:22
low System graph software Dead code conf 1.00 Possibly dead Python function: generate_cdk_stack
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/devops-deployment/aws-solution-architect/scripts/serverless_stack.py:234
low System graph software Dead code conf 1.00 Possibly dead Python function: generate_cloudformation_template
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/devops-deployment/aws-solution-architect/scripts/serverless_stack.py:24
low System graph software Dead code conf 1.00 Possibly dead Python function: generate_optimization_checklist
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/devops-deployment/aws-solution-architect/scripts/cost_optimizer.py:307
low System graph software Dead code conf 1.00 Possibly dead Python function: generate_service_checklist
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/devops-deployment/aws-solution-architect/scripts/architecture_designer.py:744
low System graph software Dead code conf 1.00 Possibly dead Python function: generate_terraform_configuration
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/devops-deployment/aws-solution-architect/scripts/serverless_stack.py:372
low System graph software Dead code conf 1.00 Possibly dead Python function: interpolate
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
skills/slack-gif-creator/core/easing.py:122
low System graph quality Provenance conf 1.00 Shallow git history limits provenance confidence
The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence.
Git historyGenerated repo pattern
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — src/commands/list.js:108
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — src/commands/validate.js:133
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — src/hooks/auto-launch.js:28
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — src/integrations/pi/rstack-sdlc.ts:2189
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — src/notifications/index.js:33
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — src/observability/collectors/legacy.js:372
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — src/observability/dashboard/server.js:438
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — src/utils/logger.js:11
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — tests/harness-checkpoints-signatures.test.js:48
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph api Wiring conf 1.00 Unused endpoint: DELETE /api/users/{user_id}
`skills/architecture-design/api-design-principles/assets/rest-api-template.py` declares `DELETE /api/users/{user_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider r…
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /api/users
`skills/architecture-design/api-design-principles/assets/rest-api-template.py` declares `GET /api/users` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or do…
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /api/users/{user_id}
`skills/architecture-design/api-design-principles/assets/rest-api-template.py` declares `GET /api/users/{user_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider remo…
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: PATCH /api/users/{user_id}
`skills/architecture-design/api-design-principles/assets/rest-api-template.py` declares `PATCH /api/users/{user_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider re…
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /api/users
`skills/architecture-design/api-design-principles/assets/rest-api-template.py` declares `POST /api/users` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or d…
Unused endpoint
low System graph quality Complexity conf 1.00 Very large file: skills/architecture-design/api-design-reviewer/scripts/api_scorecard.py (1660 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: src/integrations/pi/rstack-sdlc.ts (2203 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: src/observability/dashboard/ui/client.js (1960 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/d9450dd9-b61b-4762-bd96-cdbf5684d4b9/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/d9450dd9-b61b-4762-bd96-cdbf5684d4b9/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.