Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

toddfishman/tures-demo

https://github.com/toddfishman/tures-demo · scanned 2026-06-16 00:38 UTC (2 months, 1 week ago)

131 raw signals (0 security + 131 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 128 actionable findings from 1 signal source. 3 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

100.0% cov · 128 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 1 High 2 Medium 87 Low 32 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 128 Crowd 0 Layer: Frontend 2 Hardware 3 Security 77 Cicd 1 Quality 17 Api 28

Exclude dismissed / FP Exclude test files

All 642 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`current`	software	healthy	`v6/assets/pageturn.js:current`
`enter`	software	healthy	`v6/assets/pageturn.js:enter`
`onEnd`	software	healthy	`v6/assets/pageturn.js:onEnd`
`exit`	software	healthy	`v6/assets/pageturn.js:exit`
`go`	software	healthy	`v6/assets/pageturn.js:go`
`isInternal`	software	healthy	`v6/assets/pageturn.js:isInternal`
`dir`	software	healthy	`v6/assets/pageturn.js:dir`
`blocked`	software	healthy	`v6/assets/pageturn.js:blocked`
`mount`	software	healthy	`v6/assets/pageturn.js:mount`
`init`	software	healthy	`v6/assets/menu.js:init`
`open`	software	healthy	`v6/assets/menu.js:open`
`close`	software	healthy	`v6/assets/menu.js:close`
`countUp`	software	healthy	`v6/assets/ui.js:countUp`
`fmt`	software	healthy	`v6/assets/ui.js:fmt`
`frame`	software	healthy	`v6/assets/ui.js:frame`
`reveal`	software	healthy	`v6/assets/ui.js:reveal`
`inView`	software	healthy	`v6/assets/ui.js:inView`
`io`	software	healthy	`v6/assets/ui.js:io`
`watch`	software	healthy	`v6/assets/ui.js:watch`
`openSheet`	software	healthy	`v6/assets/ui.js:openSheet`
`closeSheet`	software	healthy	`v6/assets/ui.js:closeSheet`
`move`	software	healthy	`v6/assets/ui.js:move`
`select`	software	healthy	`v6/assets/ui.js:select`
`reposition`	software	healthy	`v6/assets/ui.js:reposition`
`onScroll`	software	healthy	`v6/assets/ui.js:onScroll`
`acctId`	software	healthy	`v6/assets/engine.js:acctId`
`setSession`	software	healthy	`v6/assets/engine.js:setSession`
`api`	software	healthy	`v6/assets/engine.js:api`
`current`	software	healthy	`v8/assets/pageturn.js:current`
`enter`	software	healthy	`v8/assets/pageturn.js:enter`
`onEnd`	software	healthy	`v8/assets/pageturn.js:onEnd`
`exit`	software	healthy	`v8/assets/pageturn.js:exit`
`go`	software	healthy	`v8/assets/pageturn.js:go`
`isInternal`	software	healthy	`v8/assets/pageturn.js:isInternal`
`dir`	software	healthy	`v8/assets/pageturn.js:dir`
`blocked`	software	healthy	`v8/assets/pageturn.js:blocked`
`mount`	software	healthy	`v8/assets/pageturn.js:mount`
`isCover`	software	healthy	`v8/assets/menu.js:isCover`
`isWrite`	software	healthy	`v8/assets/menu.js:isWrite`
`el`	software	healthy	`v8/assets/menu.js:el`
`isHere`	software	healthy	`v8/assets/menu.js:isHere`
`pageNumber`	software	healthy	`v8/assets/menu.js:pageNumber`
`pageLink`	software	healthy	`v8/assets/menu.js:pageLink`
`buildMenu`	software	healthy	`v8/assets/menu.js:buildMenu`
`init`	software	healthy	`v8/assets/menu.js:init`
`close`	software	healthy	`v8/assets/menu.js:close`
`countUp`	software	healthy	`v8/assets/ui.js:countUp`
`fmt`	software	healthy	`v8/assets/ui.js:fmt`
`frame`	software	healthy	`v8/assets/ui.js:frame`
`reveal`	software	healthy	`v8/assets/ui.js:reveal`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`07-concierge-chat.html`	software	healthy	`07-concierge-chat.html`
`CLAUDE.md`	software	healthy	`CLAUDE.md`
`03-connections.html`	software	healthy	`03-connections.html`
`01-landing.html`	software	healthy	`01-landing.html`
`index.html`	software	healthy	`index.html`
`06-notifications.html`	software	healthy	`06-notifications.html`
`05-itinerary.html`	software	healthy	`05-itinerary.html`
`about.html`	software	healthy	`about.html`
`02-paste-trip.html`	software	healthy	`02-paste-trip.html`
`04-execution-dashboard.html`	software	healthy	`04-execution-dashboard.html`
`07-concierge-chat.html`	software	healthy	`v2/07-concierge-chat.html`
`03-connections.html`	software	healthy	`v2/03-connections.html`
`01-landing.html`	software	healthy	`v2/01-landing.html`
`index.html`	software	healthy	`v2/index.html`
`06-notifications.html`	software	healthy	`v2/06-notifications.html`
`05-itinerary.html`	software	healthy	`v2/05-itinerary.html`
`about.html`	software	healthy	`v2/about.html`
`02-paste-trip.html`	software	healthy	`v2/02-paste-trip.html`
`04-execution-dashboard.html`	software	healthy	`v2/04-execution-dashboard.html`
`faq.html`	software	healthy	`v6/faq.html`
`signup.html`	software	healthy	`v6/signup.html`
`05-execution.html`	software	healthy	`v6/05-execution.html`
`01-landing.html`	software	healthy	`v6/01-landing.html`
`been.html`	software	healthy	`v6/been.html`
`06-hiccup-handler.html`	software	healthy	`v6/06-hiccup-handler.html`
`pricing.html`	software	healthy	`v6/pricing.html`
`billing.html`	software	healthy	`v6/billing.html`
`08-concierge.html`	software	healthy	`v6/08-concierge.html`
`index.html`	software	healthy	`v6/index.html`
`checkout.html`	software	healthy	`v6/checkout.html`
`04-connections.html`	software	healthy	`v6/04-connections.html`
`admin.html`	software	healthy	`v6/admin.html`
`07-itinerary.html`	software	healthy	`v6/07-itinerary.html`
`welcome.html`	software	healthy	`v6/welcome.html`
`about.html`	software	healthy	`v6/about.html`
`account.html`	software	healthy	`v6/account.html`
`03-paste-trip.html`	software	healthy	`v6/03-paste-trip.html`
`02-taste-engine.html`	software	healthy	`v6/02-taste-engine.html`
`terms.html`	software	healthy	`v6/legal/terms.html`
`index.html`	software	healthy	`v6/legal/index.html`
`privacy.html`	software	healthy	`v6/legal/privacy.html`
`signup.html`	software	healthy	`v6/auth/signup.html`
`login.html`	software	healthy	`v6/auth/login.html`
`pageturn.js`	software	healthy	`v6/assets/pageturn.js`
`menu.js`	software	healthy	`v6/assets/menu.js`
`ui.js`	software	healthy	`v6/assets/ui.js`
`tures.css`	software	healthy	`v6/assets/tures.css`
`engine.js`	software	healthy	`v6/assets/engine.js`
`faq.html`	software	healthy	`v8/faq.html`
`signup.html`	software	healthy	`v8/signup.html`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`v2`	software	healthy	`v2`
`v6`	software	healthy	`v6`
`legal`	software	healthy	`v6/legal`
`auth`	software	healthy	`v6/auth`
`assets`	software	healthy	`v6/assets`
`v8`	software	healthy	`v8`
`legal`	software	healthy	`v8/legal`
`auth`	software	healthy	`v8/auth`
`assets`	software	healthy	`v8/assets`
`v7`	software	healthy	`v7`
`legal`	software	healthy	`v7/legal`
`auth`	software	healthy	`v7/auth`
`assets`	software	healthy	`v7/assets`
`v5`	software	healthy	`v5`
`legal`	software	healthy	`v5/legal`
`auth`	software	healthy	`v5/auth`
`assets`	software	healthy	`v5/assets`
`v3`	software	healthy	`v3`
`engine`	software	healthy	`engine`
`test`	software	healthy	`engine/test`
`src`	software	healthy	`engine/src`
`hiccup`	software	healthy	`engine/src/hiccup`
`vault`	software	healthy	`engine/src/vault`
`auth`	software	healthy	`engine/src/auth`
`ops`	software	healthy	`engine/src/ops`
`events`	software	healthy	`engine/src/events`
`agent`	software	healthy	`engine/src/agent`
`wallet`	software	healthy	`engine/src/wallet`
`search`	software	healthy	`engine/src/search`
`booking`	software	healthy	`engine/src/booking`
`routes`	software	healthy	`engine/src/routes`
`billing`	software	healthy	`engine/src/billing`
`places`	software	healthy	`engine/src/places`
`suppliers`	software	healthy	`engine/src/suppliers`
`db`	software	healthy	`engine/src/db`
`profile`	software	healthy	`engine/src/profile`
`v4`	software	healthy	`v4`
`assets`	software	healthy	`v4/assets`

Label	Layer	Status	Path
`auth::engine/test/smoke.ts`	security	healthy	`engine/test/smoke.ts`
`auth::v6/welcome.html`	security	healthy	`v6/welcome.html`
`auth::engine/src/routes/profile.ts`	security	healthy	`engine/src/routes/profile.ts`
`auth::v8/04-connections.html`	security	healthy	`v8/04-connections.html`
`auth::engine/src/vault/secretstore.ts`	security	healthy	`engine/src/vault/secretstore.ts`
`auth::engine/src/config.ts`	security	healthy	`engine/src/config.ts`
`auth::v3/03-connections.html`	security	healthy	`v3/03-connections.html`
`auth::v5/04-connections.html`	security	healthy	`v5/04-connections.html`
`auth::v8/account.html`	security	healthy	`v8/account.html`
`auth::v5/faq.html`	security	healthy	`v5/faq.html`
`auth::v5/account.html`	security	healthy	`v5/account.html`
`auth::v7/faq.html`	security	healthy	`v7/faq.html`
`auth::engine/.env.example`	security	healthy	`engine/.env.example`
`auth::engine/src/auth/index.ts`	security	healthy	`engine/src/auth/index.ts`
`auth::engine/src/vault/types.ts`	security	healthy	`engine/src/vault/types.ts`
`auth::v7/04-connections.html`	security	healthy	`v7/04-connections.html`
`auth::v5/welcome.html`	security	healthy	`v5/welcome.html`
`auth::engine/src/routes/health.ts`	security	healthy	`engine/src/routes/health.ts`
`auth::engine/src/profile/index.ts`	security	healthy	`engine/src/profile/index.ts`
`auth::v6/account.html`	security	healthy	`v6/account.html`
`auth::v6/04-connections.html`	security	healthy	`v6/04-connections.html`
`auth::v7/account.html`	security	healthy	`v7/account.html`
`auth::03-connections.html`	security	healthy	`03-connections.html`
`auth::v6/faq.html`	security	healthy	`v6/faq.html`
`auth::engine/src/profile/prefs.ts`	security	healthy	`engine/src/profile/prefs.ts`
`auth::engine/README.md`	security	healthy	`engine/README.md`
`auth::v2/03-connections.html`	security	healthy	`v2/03-connections.html`
`auth::v7/welcome.html`	security	healthy	`v7/welcome.html`
`auth::v8/faq.html`	security	healthy	`v8/faq.html`
`auth::engine/src/vault/index.ts`	security	healthy	`engine/src/vault/index.ts`
`auth::engine/src/ops/index.ts`	security	healthy	`engine/src/ops/index.ts`
`auth::v8/welcome.html`	security	healthy	`v8/welcome.html`

Label	Layer	Status	Path
`POST /auth/signup`	api	healthy	`engine/src/routes/auth.ts`
`POST /auth/login`	api	healthy	`engine/src/routes/auth.ts`
`GET /auth/me`	api	healthy	`engine/src/routes/auth.ts`
`GET /health`	api	healthy	`engine/src/routes/health.ts`
`POST /billing/checkout`	api	healthy	`engine/src/routes/billing.ts`
`POST /billing/setup-intent`	api	healthy	`engine/src/routes/billing.ts`
`POST /billing/save-card`	api	healthy	`engine/src/routes/billing.ts`
`POST /billing/webhook`	api	healthy	`engine/src/routes/billing.ts`
`POST /waitlist`	api	healthy	`engine/src/routes/waitlist.ts`
`GET /waitlist/count`	api	healthy	`engine/src/routes/waitlist.ts`
`POST /travelers`	api	healthy	`engine/src/routes/travelers.ts`
`GET /travelers`	api	healthy	`engine/src/routes/travelers.ts`
`POST /profile`	api	healthy	`engine/src/routes/profile.ts`
`POST /places`	api	healthy	`engine/src/routes/places.ts`
`GET /places`	api	healthy	`engine/src/routes/places.ts`
`POST /search`	api	healthy	`engine/src/routes/search.ts`
`POST /disruptions`	api	healthy	`engine/src/routes/disruptions.ts`
`POST /connections`	api	healthy	`engine/src/routes/connections.ts`
`POST /prefs`	api	healthy	`engine/src/routes/prefs.ts`
`POST /parse`	api	healthy	`engine/src/routes/parse.ts`
`POST /plan`	api	healthy	`engine/src/routes/plan.ts`
`GET /wallet/catalog`	api	healthy	`engine/src/routes/wallet.ts`
`GET /metrics`	api	healthy	`engine/src/routes/metrics.ts`
`POST /book`	api	healthy	`engine/src/routes/book.ts`
`POST /converse`	api	healthy	`engine/src/routes/converse.ts`
`POST /voice/transcribe`	api	healthy	`engine/src/routes/voice.ts`
`POST /voice/speak`	api	healthy	`engine/src/routes/voice.ts`
`POST /air/offer_requests?return_offers=true&supplier_timeou…`	api	healthy	`engine/src/suppliers/duffel.ts`

Label	Layer	Status	Path
`LocalSecretStore`	software	healthy	`engine/src/vault/secretstore.ts:LocalSecretStore`
`VgsSecretStore`	software	healthy	`engine/src/vault/secretstore.ts:VgsSecretStore`
`EventBus`	software	healthy	`engine/src/events/bus.ts:EventBus`
`BookingStore`	software	healthy	`engine/src/booking/store.ts:BookingStore`
`MockPayments`	software	healthy	`engine/src/booking/payments.ts:MockPayments`
`StripePayments`	software	healthy	`engine/src/booking/payments.ts:StripePayments`
`DuffelSupplier`	software	healthy	`engine/src/suppliers/duffel.ts:DuffelSupplier`
`MockSupplier`	software	healthy	`engine/src/suppliers/mock.ts:MockSupplier`
`Collection`	software	healthy	`engine/src/db/persist.ts:Collection`

Label	Layer	Status	Path
`password_literal::engine/test/smoke.ts`	security	healthy	`engine/test/smoke.ts`
`password_literal::engine/test/smoke.ts`	security	healthy	`engine/test/smoke.ts`
`password_literal::engine/test/smoke.ts`	security	healthy	`engine/test/smoke.ts`
`password_literal::engine/test/smoke.ts`	security	healthy	`engine/test/smoke.ts`

Label	Layer	Status	Path
`postgres`	data	healthy	`engine/.env.example`
`redis`	data	healthy	`engine/src/events/bus.ts`

Label	Layer	Status	Path
`repobility-clone-cruekg0q`	software	healthy	`/tmp/repobility-clone-cruekg0q`

Label	Layer	Status	Path
`port:8787`	network	healthy	`engine/Dockerfile`

Label	Layer	Status	Path
`image::engine/Dockerfile`	hardware	healthy	`engine/Dockerfile`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/de5e2c0b-d602-44d7-99fa-aba6623ec360/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/de5e2c0b-d602-44d7-99fa-aba6623ec360/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

toddfishman/tures-demo

Complete repo analysis

function 50+

file 50+

directory 38

auth 32

endpoint 28

class 9

secret 4

database 2

repo 1

port 1

container 1