Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo
36 of your 73 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 1.96s · analysis 11.02s · 1.1 MB · GitHub API rate-limit (preflight)

Anonym0usWork1221/Free-Proxies

https://github.com/Anonym0usWork1221/Free-Proxies · scanned 2026-06-05 14:54 UTC (5 days, 3 hours ago) · 10 languages

84 raw signals (64 security + 20 graph) 19th percentile · Python · tiny (<2K LoC) System graph score 88 (lower by 38)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days, 3 hours ago · v2 · 40 actionable findings from 2 signal sources. 34 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
70.3
/100
Security checks
53
32 findings
System graph
88
66.7% cov · 8 findings
Critical
0
click to filter
Agents
6
0 votes
Crowd
0
reported
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 55.0 0.15 8.25
security_score 55.0 0.25 13.75
testing_score 0.0 0.20 0.00
documentation_score 60.0 0.15 9.00
practices_score 67.0 0.15 10.05
code_quality 80.0 0.10 8.00
Overall 1.00 49.0
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 0 High 11 Medium 9 Low 11 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 32 System graph 8 Crowd 0 Layer: Software 26 Quality 9 Cicd 2 Api 1 Frontend 1 Security 1
Scan summary Quality grade D+ (49/100). Dimensions: security 55, maintainability 55. 64 findings (18 security). 962 lines analyzed.

Showing 31 of 40 actionable findings. 74 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

high Security checks quality Quality conf 1.00 ✓ Repobility 25 occurrences `self._create_files` used but never assigned in __init__
Method `proxies_scraper` of class `Proxies` reads `self._create_files`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance.
4 files, 25 locations
utils/proxy_scraper.py:52, 55, 64, 66, 68, 70, 72, 74, +14 more (22 hits)
proxies.py:106
utils/proxy_handlers.py:18
utils/response_handlers.py:14
high Security checks software dependencies conf 0.88 certifi: PYSEC-2023-135
Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store. These are in the process of being removed from Mozilla's trust store. e-Tugra's root certificates are being removed pursuant to an investigation prompted by reporting of security issues in their systems.
requirements.txt
high Security checks software dependencies conf 0.88 certifi: PYSEC-2024-230
Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.05.30 and prior to 2024.07.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.07.04 removes root certificates …
requirements.txt
medium Security checks cicd CI/CD security conf 0.90 ✓ Repobility 2 occurrences GitHub Action is tag-pinned rather than SHA-pinned
Action `ad-m/github-push-action` pinned to mutable ref `@v0.6.0` uses a mutable tag or branch. Pin external actions to a reviewed full commit SHA when the workflow is security-sensitive.
lines 38
.github/workflows/actions.yml:38 (2 hits)
CI/CD securitySupply chainGitHub Actions
high Security checks software dependencies conf 0.88 idna: PYSEC-2024-60
A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This vulne…
requirements.txt
high Security checks software dependencies conf 0.88 lxml: PYSEC-2026-87
lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default configuration (with resolve_entities=True) allows untrusted XML input to read local files. Setting the resolve_entities option explicitly to resolve_entities='interna…
requirements.txt
high Security checks software dependencies conf 0.88 urllib3: GHSA-2xpw-w6gg-jr37
urllib3 streaming API improperly handles highly compressed data
requirements.txt
high Security checks software dependencies conf 0.88 urllib3: GHSA-38jv-5279-wg99
Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)
requirements.txt
high Security checks software dependencies conf 0.88 urllib3: GHSA-gm62-xv2j-4w53
urllib3 allows an unbounded number of links in the decompression chain
requirements.txt
high Security checks software dependencies conf 0.88 urllib3: PYSEC-2023-192
urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the `Cookie` HTTP header special or provide any helpers for managing cookies over HTTP, that is the responsibility of the user. However, it is possible for a user to specify a `Cookie` header and unknowingly leak infor…
requirements.txt
high Security checks software dependencies conf 0.88 urllib3: PYSEC-2023-212
urllib3 is a user-friendly HTTP client library for Python. urllib3 previously wouldn't remove the HTTP request body when an HTTP redirect response using status 301, 302, or 303 after the request had its method changed from one that could accept a request body (like `POST`) to `GET` as is required b…
requirements.txt
high Security checks software dependencies conf 0.88 urllib3: PYSEC-2026-141
urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.
requirements.txt
low Security checks quality Error handling conf 0.55 ✓ Repobility 7 occurrences Broad exception handler needs review
This handler catches Exception/BaseException. It is actionable when it swallows errors without logging, re-raising, or returning a structured error. Handlers that intentionally convert exceptions into typed error results should not be treated as high risk.
2 files, 7 locations
utils/proxy_scraper.py:58, 110, 149, 172 (4 hits)
utils/response_handlers.py:18, 27, 36 (3 hits)
Error handlingquality
medium Security checks software dependencies conf 0.90 Python package `certifi` is 3 major version(s) behind (2023.5.7 -> 2026.5.20)
`certifi==2023.5.7` is 3 major version(s) behind the latest stable release on PyPI (2026.5.20). Pinned-but-stale Python dependencies drift away from upstream security and bugfix releases. This is the version-currency signal Dependabot raises.
requirements.txt:3
medium Security checks software dependencies conf 0.88 requests: GHSA-9hjg-9r4m-mvj7
Requests vulnerable to .netrc credentials leak via malicious URLs
requirements.txt
medium Security checks software dependencies conf 0.88 requests: GHSA-9wx4-h78v-vm56
Requests `Session` object does not verify requests after making first request with verify=False
requirements.txt
medium Security checks software dependencies conf 0.88 requests: GHSA-gc5v-m9x4-r6x2
Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function
requirements.txt
medium Security checks software dependencies conf 0.88 urllib3: GHSA-34jh-p97f-mpxf
urllib3's Proxy-Authorization request header isn't stripped during cross-origin redirects
requirements.txt
medium Security checks software dependencies conf 0.88 urllib3: GHSA-pq67-6m6q-mj2v
urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation
requirements.txt
medium System graph security Coverage conf 1.00 No auth library detected
The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). Either auth lives in custom code, in a separate service, or is missing.
auth
medium System graph quality Tests conf 1.00 Very low test-to-source ratio
0 test file(s) for 5 source file(s) (ratio 0.00). Consider adding integration or unit tests for critical paths.
Coverage
low Security checks software dependencies conf 0.90 Python package `beautifulsoup4` is minor version(s) behind (4.12.2 -> 4.14.3)
`beautifulsoup4==4.12.2` is minor version(s) behind the latest stable release on PyPI (4.14.3). Pinned-but-stale Python dependencies drift away from upstream security and bugfix releases. This is the version-currency signal Dependabot raises.
requirements.txt:1
low Security checks software dependencies conf 0.90 Python package `charset-normalizer` is minor version(s) behind (3.1.0 -> 3.4.7)
`charset-normalizer==3.1.0` is minor version(s) behind the latest stable release on PyPI (3.4.7). Pinned-but-stale Python dependencies drift away from upstream security and bugfix releases. This is the version-currency signal Dependabot raises.
requirements.txt:4
low Security checks software dependencies conf 0.90 Python package `idna` is minor version(s) behind (3.4 -> 3.18)
`idna==3.4` is minor version(s) behind the latest stable release on PyPI (3.18). Pinned-but-stale Python dependencies drift away from upstream security and bugfix releases. This is the version-currency signal Dependabot raises.
requirements.txt:6
low Security checks software dependencies conf 0.90 Python package `pyparsing` is minor version(s) behind (3.0.9 -> 3.3.2)
`pyparsing==3.0.9` is minor version(s) behind the latest stable release on PyPI (3.3.2). Pinned-but-stale Python dependencies drift away from upstream security and bugfix releases. This is the version-currency signal Dependabot raises.
requirements.txt:8
low Security checks software dependencies conf 0.90 Python package `requests` is minor version(s) behind (2.31.0 -> 2.34.2)
`requests==2.31.0` is minor version(s) behind the latest stable release on PyPI (2.34.2). Pinned-but-stale Python dependencies drift away from upstream security and bugfix releases. This is the version-currency signal Dependabot raises.
requirements.txt:9
low Security checks software dependencies conf 0.90 Python package `soupsieve` is minor version(s) behind (2.4.1 -> 2.8.4)
`soupsieve==2.4.1` is minor version(s) behind the latest stable release on PyPI (2.8.4). Pinned-but-stale Python dependencies drift away from upstream security and bugfix releases. This is the version-currency signal Dependabot raises.
requirements.txt:11
low Security checks software dependencies conf 0.90 Python package `urllib3` is minor version(s) behind (2.0.3 -> 2.7.0)
`urllib3==2.0.3` is minor version(s) behind the latest stable release on PyPI (2.7.0). Pinned-but-stale Python dependencies drift away from upstream security and bugfix releases. This is the version-currency signal Dependabot raises.
requirements.txt:12
low System graph software Dead code candidate conf 1.00 File has no detected symbols: utils/randomuser.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph cicd CI/CD security conf 1.00 3 occurrences GitHub Action is tag-pinned rather than SHA-pinned
actions/checkout@v2 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA.
lines 13, 16
.github/workflows/actions.yml:13, 16 (3 hits)
CI/CD securitySupply chainGitHub Actions
low System graph software Dead code conf 1.00 Possibly dead Python function: check_proxy_validation
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
utils/proxy_handlers.py:17
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/dadfdb65-8da2-47e0-8a97-8cf0b2d8ec8c/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/dadfdb65-8da2-47e0-8a97-8cf0b2d8ec8c/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.