open-telemetry/opentelemetry-kotlin

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

5 of your 52 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 1.55s · analysis 8.89s · 2.3 MB · GitHub API rate-limit (preflight)

https://github.com/open-telemetry/opentelemetry-kotlin · scanned 2026-06-05 17:15 UTC (4 days, 22 hours ago) · 10 languages

64 raw signals (48 security + 16 graph) 71st percentile · Kotlin · medium (20-100K LoC) System graph score 85 (lower by 21)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 4 days, 22 hours ago · v2 · 16 actionable findings from 2 signal sources. 38 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

66.7% cov · 5 findings

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	40.0	0.15	6.00
`security_score`	98.7	0.25	24.68
`testing_score`	15.0	0.20	3.00
`documentation_score`	89.0	0.15	13.35
`practices_score`	72.0	0.15	10.80
`code_quality`	60.7	0.10	6.07
Overall		1.00	63.9

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 1 Medium 4 Low 2 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 11 System graph 5 Crowd 0 Layer: Software 3 Quality 7 Cicd 2 Api 1 Network 2 Frontend 1

Exclude dismissed / FP Exclude test files

All 1825 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`README.md`	software	healthy	`README.md`
`CLAUDE.md`	software	healthy	`CLAUDE.md`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`build.gradle.kts`	software	healthy	`build.gradle.kts`
`RELEASING.md`	software	healthy	`RELEASING.md`
`AGENTS.md`	software	healthy	`AGENTS.md`
`CHANGELOG.md`	software	healthy	`CHANGELOG.md`
`codecov.yml`	software	healthy	`codecov.yml`
`README.md`	software	healthy	`exporters-persistence/README.md`
`build.gradle.kts`	software	healthy	`exporters-persistence/build.gradle.kts`
`TelemetryFileSystemImplGzipTest.kt`	software	healthy	`exporters-persistence/src/jvmTest/kotlin/io/opentelemetry/k…`
`PersistingLogRecordProcessor.kt`	software	healthy	`exporters-persistence/src/commonMain/kotlin/io/opentelemetr…`
`PersistingLogRecordProcessorApi.kt`	software	healthy	`exporters-persistence/src/commonMain/kotlin/io/opentelemetr…`
`PersistingLogRecordExporter.kt`	software	healthy	`exporters-persistence/src/commonMain/kotlin/io/opentelemetr…`
`PersistingSpanExporter.kt`	software	healthy	`exporters-persistence/src/commonMain/kotlin/io/opentelemetr…`
`PersistingSpanProcessor.kt`	software	healthy	`exporters-persistence/src/commonMain/kotlin/io/opentelemetr…`
`PersistingSpanProcessorApi.kt`	software	healthy	`exporters-persistence/src/commonMain/kotlin/io/opentelemetr…`
`PersistedTelemetryRecord.kt`	software	healthy	`exporters-persistence/src/commonMain/kotlin/io/opentelemetr…`
`PersistedTelemetryConfig.kt`	software	healthy	`exporters-persistence/src/commonMain/kotlin/io/opentelemetr…`
`TelemetryFileSystemImpl.kt`	software	healthy	`exporters-persistence/src/commonMain/kotlin/io/opentelemetr…`
`TelemetryRepository.kt`	software	healthy	`exporters-persistence/src/commonMain/kotlin/io/opentelemetr…`
`TelemetryRepositoryImpl.kt`	software	healthy	`exporters-persistence/src/commonMain/kotlin/io/opentelemetr…`
`TelemetryFileSystem.kt`	software	healthy	`exporters-persistence/src/commonMain/kotlin/io/opentelemetr…`
`PersistedTelemetryType.kt`	software	healthy	`exporters-persistence/src/commonMain/kotlin/io/opentelemetr…`
`GzipCompression.kt`	software	healthy	`exporters-persistence/src/commonMain/kotlin/io/opentelemetr…`
`PersistingExporter.kt`	software	healthy	`exporters-persistence/src/commonMain/kotlin/io/opentelemetr…`
`PlatformTelemetryPath.kt`	software	healthy	`exporters-persistence/src/commonMain/kotlin/io/opentelemetr…`
`TimeoutTelemetryCloseable.kt`	software	healthy	`exporters-persistence/src/commonMain/kotlin/io/opentelemetr…`
`GzipCompression.apple.kt`	software	healthy	`exporters-persistence/src/appleMain/kotlin/io/opentelemetry…`
`PlatformTelemetryPath.apple.kt`	software	healthy	`exporters-persistence/src/appleMain/kotlin/io/opentelemetry…`
`GzipCompression.jvm.kt`	software	healthy	`exporters-persistence/src/jvmAndAndroidMain/kotlin/io/opent…`
`TelemetryFileSystemImplGzipTest.kt`	software	healthy	`exporters-persistence/src/appleTest/kotlin/io/opentelemetry…`
`PersistingLogRecordExporterTest.kt`	software	healthy	`exporters-persistence/src/commonTest/kotlin/io/opentelemetr…`
`PersistingLogRecordProcessorTest.kt`	software	healthy	`exporters-persistence/src/commonTest/kotlin/io/opentelemetr…`
`PersistingSpanProcessorTest.kt`	software	healthy	`exporters-persistence/src/commonTest/kotlin/io/opentelemetr…`
`PersistingSpanExporterTest.kt`	software	healthy	`exporters-persistence/src/commonTest/kotlin/io/opentelemetr…`
`TelemetryRepositoryImplTest.kt`	software	healthy	`exporters-persistence/src/commonTest/kotlin/io/opentelemetr…`
`TelemetryFileSystemImplTest.kt`	software	healthy	`exporters-persistence/src/commonTest/kotlin/io/opentelemetr…`
`FakeTelemetryRepository.kt`	software	healthy	`exporters-persistence/src/commonTest/kotlin/io/opentelemetr…`
`FakeTelemetryFileSystem.kt`	software	healthy	`exporters-persistence/src/commonTest/kotlin/io/opentelemetr…`
`PersistedTelemetryConfigTest.kt`	software	healthy	`exporters-persistence/src/commonTest/kotlin/io/opentelemetr…`
`PersistedTelemetryRecordTest.kt`	software	healthy	`exporters-persistence/src/commonTest/kotlin/io/opentelemetr…`
`PlatformTelemetryPath.jvm.kt`	software	healthy	`exporters-persistence/src/jvmMain/kotlin/io/opentelemetry/k…`
`PlatformTelemetryPath.js.kt`	software	healthy	`exporters-persistence/src/jsMain/kotlin/io/opentelemetry/ko…`
`GzipCompression.js.kt`	software	healthy	`exporters-persistence/src/jsMain/kotlin/io/opentelemetry/ko…`
`PlatformTelemetryPath.android.kt`	software	healthy	`exporters-persistence/src/androidMain/kotlin/io/opentelemet…`
`README.md`	software	healthy	`benchmark-fixtures/README.md`
`build.gradle.kts`	software	healthy	`benchmark-fixtures/build.gradle.kts`
`BenchmarkFixture.kt`	software	healthy	`benchmark-fixtures/src/commonMain/kotlin/io/opentelemetry/k…`
`ComplexLoggingFixture.kt`	software	healthy	`benchmark-fixtures/src/commonMain/kotlin/io/opentelemetry/k…`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`exporters-persistence`	software	healthy	`exporters-persistence`
`src`	software	healthy	`exporters-persistence/src`
`jvmTest`	software	healthy	`exporters-persistence/src/jvmTest`
`kotlin`	software	healthy	`exporters-persistence/src/jvmTest/kotlin`
`io`	software	healthy	`exporters-persistence/src/jvmTest/kotlin/io`
`opentelemetry`	software	healthy	`exporters-persistence/src/jvmTest/kotlin/io/opentelemetry`
`kotlin`	software	healthy	`exporters-persistence/src/jvmTest/kotlin/io/opentelemetry/k…`
`export`	software	healthy	`exporters-persistence/src/jvmTest/kotlin/io/opentelemetry/k…`
`commonMain`	software	healthy	`exporters-persistence/src/commonMain`
`kotlin`	software	healthy	`exporters-persistence/src/commonMain/kotlin`
`io`	software	healthy	`exporters-persistence/src/commonMain/kotlin/io`
`opentelemetry`	software	healthy	`exporters-persistence/src/commonMain/kotlin/io/opentelemetry`
`kotlin`	software	healthy	`exporters-persistence/src/commonMain/kotlin/io/opentelemetr…`
`logging`	software	healthy	`exporters-persistence/src/commonMain/kotlin/io/opentelemetr…`
`export`	software	healthy	`exporters-persistence/src/commonMain/kotlin/io/opentelemetr…`
`tracing`	software	healthy	`exporters-persistence/src/commonMain/kotlin/io/opentelemetr…`
`export`	software	healthy	`exporters-persistence/src/commonMain/kotlin/io/opentelemetr…`
`export`	software	healthy	`exporters-persistence/src/commonMain/kotlin/io/opentelemetr…`
`appleMain`	software	healthy	`exporters-persistence/src/appleMain`
`kotlin`	software	healthy	`exporters-persistence/src/appleMain/kotlin`
`io`	software	healthy	`exporters-persistence/src/appleMain/kotlin/io`
`opentelemetry`	software	healthy	`exporters-persistence/src/appleMain/kotlin/io/opentelemetry`
`kotlin`	software	healthy	`exporters-persistence/src/appleMain/kotlin/io/opentelemetry…`
`export`	software	healthy	`exporters-persistence/src/appleMain/kotlin/io/opentelemetry…`
`jvmAndAndroidMain`	software	healthy	`exporters-persistence/src/jvmAndAndroidMain`
`kotlin`	software	healthy	`exporters-persistence/src/jvmAndAndroidMain/kotlin`
`io`	software	healthy	`exporters-persistence/src/jvmAndAndroidMain/kotlin/io`
`opentelemetry`	software	healthy	`exporters-persistence/src/jvmAndAndroidMain/kotlin/io/opent…`
`kotlin`	software	healthy	`exporters-persistence/src/jvmAndAndroidMain/kotlin/io/opent…`
`export`	software	healthy	`exporters-persistence/src/jvmAndAndroidMain/kotlin/io/opent…`
`appleTest`	software	healthy	`exporters-persistence/src/appleTest`
`kotlin`	software	healthy	`exporters-persistence/src/appleTest/kotlin`
`io`	software	healthy	`exporters-persistence/src/appleTest/kotlin/io`
`opentelemetry`	software	healthy	`exporters-persistence/src/appleTest/kotlin/io/opentelemetry`
`kotlin`	software	healthy	`exporters-persistence/src/appleTest/kotlin/io/opentelemetry…`
`export`	software	healthy	`exporters-persistence/src/appleTest/kotlin/io/opentelemetry…`
`commonTest`	software	healthy	`exporters-persistence/src/commonTest`
`kotlin`	software	healthy	`exporters-persistence/src/commonTest/kotlin`
`io`	software	healthy	`exporters-persistence/src/commonTest/kotlin/io`
`opentelemetry`	software	healthy	`exporters-persistence/src/commonTest/kotlin/io/opentelemetry`
`kotlin`	software	healthy	`exporters-persistence/src/commonTest/kotlin/io/opentelemetr…`
`logging`	software	healthy	`exporters-persistence/src/commonTest/kotlin/io/opentelemetr…`
`export`	software	healthy	`exporters-persistence/src/commonTest/kotlin/io/opentelemetr…`
`tracing`	software	healthy	`exporters-persistence/src/commonTest/kotlin/io/opentelemetr…`
`export`	software	healthy	`exporters-persistence/src/commonTest/kotlin/io/opentelemetr…`
`export`	software	healthy	`exporters-persistence/src/commonTest/kotlin/io/opentelemetr…`
`jvmMain`	software	healthy	`exporters-persistence/src/jvmMain`
`kotlin`	software	healthy	`exporters-persistence/src/jvmMain/kotlin`
`io`	software	healthy	`exporters-persistence/src/jvmMain/kotlin/io`
`opentelemetry`	software	healthy	`exporters-persistence/src/jvmMain/kotlin/io/opentelemetry`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`gradle-test`	cicd	healthy	`.github/workflows/ci-build.yml`
`required-status-check`	cicd	healthy	`.github/workflows/ci-build.yml`
`issue_comment`	cicd	healthy	`.github/workflows/remove-needs-author-feedback.yaml`
`gradle-wrapper-validation`	cicd	healthy	`.github/workflows/gradle-wrapper-validation.yml`
`create_draft`	cicd	healthy	`.github/workflows/draft-change-log-entries.yaml`
`update-semconv`	cicd	healthy	`.github/workflows/update-semconv.yml`
`analysis`	cicd	healthy	`.github/workflows/scorecard.yml`
`release`	cicd	healthy	`.github/workflows/release.yml`
`stale`	cicd	healthy	`.github/workflows/add-stale-label.yaml`
`prereqs`	cicd	healthy	`.github/workflows/prepare-release-branch.yml`
`create-pull-request-against-release-branch`	cicd	healthy	`.github/workflows/prepare-release-branch.yml`
`create-pull-request-against-main`	cicd	healthy	`.github/workflows/prepare-release-branch.yml`

Label	Layer	Status	Path
`GPG_PRIVATE_KEY`	cicd	healthy	`—`
`CODECOV_TOKEN`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`
`ORG_GRADLE_PROJECT_MAVENCENTRALPASSWORD`	cicd	healthy	`—`
`OTELBOT_PRIVATE_KEY`	cicd	healthy	`—`
`ORG_GRADLE_PROJECT_SIGNINGINMEMORYKEY`	cicd	healthy	`—`
`ORG_GRADLE_PROJECT_MAVENCENTRALUSERNAME`	cicd	healthy	`—`
`GPG_PASSWORD`	cicd	healthy	`—`
`SONATYPE_KEY`	cicd	healthy	`—`
`SONATYPE_USER`	cicd	healthy	`—`
`ORG_GRADLE_PROJECT_SIGNINGINMEMORYKEYPASSWORD`	cicd	healthy	`—`
`ORG_GRADLE_PROJECT_SIGNINGINMEMORYKEYID`	cicd	healthy	`—`

Label	Layer	Status	Path
`gha::ci-build`	cicd	healthy	`.github/workflows/ci-build.yml`
`gha::remove-needs-author-feedback`	cicd	healthy	`.github/workflows/remove-needs-author-feedback.yaml`
`gha::gradle-wrapper-validation`	cicd	healthy	`.github/workflows/gradle-wrapper-validation.yml`
`gha::draft-change-log-entries`	cicd	healthy	`.github/workflows/draft-change-log-entries.yaml`
`gha::update-semconv`	cicd	healthy	`.github/workflows/update-semconv.yml`
`gha::scorecard`	cicd	healthy	`.github/workflows/scorecard.yml`
`gha::release`	cicd	healthy	`.github/workflows/release.yml`
`gha::add-stale-label`	cicd	healthy	`.github/workflows/add-stale-label.yaml`
`gha::prepare-release-branch`	cicd	healthy	`.github/workflows/prepare-release-branch.yml`

Label	Layer	Status	Path
`port:10`	network	healthy	`.github/workflows/scorecard.yml`
`port:55`	network	healthy	`.github/workflows/scorecard.yml`

Label	Layer	Status	Path
`repobility-clone-p2bp84i4`	software	healthy	`/tmp/repobility-clone-p2bp84i4`

Label	Layer	Status	Path
`auth::.github/workflows/scorecard.yml`	security	healthy	`.github/workflows/scorecard.yml`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/de553085-6ba4-4e2b-b556-6744ee469b1b/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/de553085-6ba4-4e2b-b556-6744ee469b1b/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

open-telemetry/opentelemetry-kotlin

Complete repo analysis

file 50+

directory 50+

job 12

env_var 12

pipeline 9

port 2

repo 1

auth 1