Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo
73 of your 207 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 2.9s · analysis 9.38s · 10.1 MB · GitHub API rate-limit (preflight)

syncthing/syncthing

https://github.com/syncthing/syncthing · scanned 2026-06-05 07:18 UTC (6 days ago) · 10 languages

317 raw signals (191 security + 126 graph) 30th percentile · Go · large (100-500K LoC) System graph score 74 (lower by 5)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 6 days ago · v2 · 133 actionable findings from 2 signal sources. 121 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
66.1
/100
Security checks
58
91 findings
System graph
74
100.0% cov · 42 findings
Critical
4
click to filter
Agents
6
0 votes
Crowd
0
reported
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 85.0 0.15 12.75
security_score 21.6 0.25 5.40
testing_score 90.0 0.20 18.00
documentation_score 76.0 0.15 11.40
practices_score 100.0 0.15 15.00
code_quality 61.2 0.10 6.12
Overall 1.00 68.7
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 4 High 60 Medium 9 Low 37 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 91 System graph 42 Crowd 0 Layer: Quality 38 Software 73 Cicd 7 Security 7 Api 1 Frontend 4 Hardware 3

All 1134 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
compat.yaml software healthy compat.yaml
.golangci.yml software healthy .golangci.yml
CONDUCT.md software healthy CONDUCT.md
README.md software healthy README.md
buf.gen.yaml software healthy buf.gen.yaml
build.go software healthy build.go
GOALS.md software healthy GOALS.md
CONTRIBUTING.md software healthy CONTRIBUTING.md
Dockerfile software healthy Dockerfile
README-Docker.md software healthy README-Docker.md
.policy.yml software healthy .policy.yml
build.sh software healthy build.sh
buf.yaml software healthy buf.yaml
.deepsource.toml software healthy .deepsource.toml
go.mod software healthy go.mod
.codecov.yml software healthy .codecov.yml
refresh.sh software healthy man/refresh.sh
README.md software healthy man/README.md
index.html software healthy gui/default/index.html
modal.html software healthy gui/default/modal.html
app.js software healthy gui/default/syncthing/app.js
discardChangesConfirmation.html software healthy gui/default/syncthing/settings/discardChangesConfirmation.h…
settingsModalView.html software healthy gui/default/syncthing/settings/settingsModalView.html
advancedSettingsModalView.html software healthy gui/default/syncthing/settings/advancedSettingsModalView.ht…
usageReportPreviewModalView.html software healthy gui/default/syncthing/usagereport/usageReportPreviewModalVi…
usageReportModalView.html software healthy gui/default/syncthing/usagereport/usageReportModalView.html
restoreVersionsVersionSelector.html software healthy gui/default/syncthing/folder/restoreVersionsVersionSelector…
editFolderModalView.html software healthy gui/default/syncthing/folder/editFolderModalView.html
restoreVersionsModalView.html software healthy gui/default/syncthing/folder/restoreVersionsModalView.html
removeFolderDialogView.html software healthy gui/default/syncthing/folder/removeFolderDialogView.html
restoreVersionsConfirmation.html software healthy gui/default/syncthing/folder/restoreVersionsConfirmation.ht…
revertOverrideView.html software healthy gui/default/syncthing/folder/revertOverrideView.html
restoreVersionsMassActions.html software healthy gui/default/syncthing/folder/restoreVersionsMassActions.html
logbar.js software healthy gui/default/syncthing/development/logbar.js
logbar.html software healthy gui/default/syncthing/development/logbar.html
localChangedFilesModalView.html software healthy gui/default/syncthing/transfer/localChangedFilesModalView.h…
neededFilesModalView.html software healthy gui/default/syncthing/transfer/neededFilesModalView.html
failedFilesModalView.html software healthy gui/default/syncthing/transfer/failedFilesModalView.html
remoteNeededFilesModalView.html software healthy gui/default/syncthing/transfer/remoteNeededFilesModalView.h…
idqrModalView.html software healthy gui/default/syncthing/device/idqrModalView.html
shareDeviceIdDialogView.html software healthy gui/default/syncthing/device/shareDeviceIdDialogView.html
removeDeviceDialogView.html software healthy gui/default/syncthing/device/removeDeviceDialogView.html
globalChangesModalView.html software healthy gui/default/syncthing/device/globalChangesModalView.html
editDeviceModalView.html software healthy gui/default/syncthing/device/editDeviceModalView.html
upgradingDialogView.html software healthy gui/default/syncthing/core/upgradingDialogView.html
localeService.js software healthy gui/default/syncthing/core/localeService.js
metricFilter.js software warning gui/default/syncthing/core/metricFilter.js
binaryFilter.js software warning gui/default/syncthing/core/binaryFilter.js
identiconDirective.js software healthy gui/default/syncthing/core/identiconDirective.js
percentFilter.js software warning gui/default/syncthing/core/percentFilter.js

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
man software healthy man
gui software healthy gui
default software healthy gui/default
syncthing software healthy gui/default/syncthing
settings software healthy gui/default/syncthing/settings
usagereport software healthy gui/default/syncthing/usagereport
folder software healthy gui/default/syncthing/folder
development software healthy gui/default/syncthing/development
transfer software healthy gui/default/syncthing/transfer
device software healthy gui/default/syncthing/device
core software healthy gui/default/syncthing/core
assets software healthy gui/default/assets
lang software healthy gui/default/assets/lang
css software healthy gui/default/assets/css
font software healthy gui/default/assets/font
dark software healthy gui/dark
assets software healthy gui/dark/assets
css software healthy gui/dark/assets/css
light software healthy gui/light
assets software healthy gui/light/assets
css software healthy gui/light/assets/css
black software healthy gui/black
assets software healthy gui/black/assets
css software healthy gui/black/assets/css
internal software healthy internal
timeutil software healthy internal/timeutil
slogutil software healthy internal/slogutil
gen software healthy internal/gen
discoproto software healthy internal/gen/discoproto
apiproto software healthy internal/gen/apiproto
dbproto software healthy internal/gen/dbproto
bep software healthy internal/gen/bep
discosrv software healthy internal/gen/discosrv
protoutil software healthy internal/protoutil
blob software healthy internal/blob
s3 software healthy internal/blob/s3
db software healthy internal/db
olddb software healthy internal/db/olddb
backend software healthy internal/db/olddb/backend
sqlite software healthy internal/db/sqlite
sql software healthy internal/db/sqlite/sql
schema software healthy internal/db/sqlite/sql/schema
folder software healthy internal/db/sqlite/sql/schema/folder
common software healthy internal/db/sqlite/sql/schema/common
main software healthy internal/db/sqlite/sql/schema/main
migrations software healthy internal/db/sqlite/sql/migrations
folder software healthy internal/db/sqlite/sql/migrations/folder
itererr software healthy internal/itererr
test software healthy test
cmd software healthy cmd

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
deviceCompare software healthy gui/default/syncthing/app.js:deviceCompare
folderCompare software healthy gui/default/syncthing/app.js:folderCompare
deviceMap software healthy gui/default/syncthing/app.js:deviceMap
deviceList software healthy gui/default/syncthing/app.js:deviceList
folderMap software healthy gui/default/syncthing/app.js:folderMap
folderList software healthy gui/default/syncthing/app.js:folderList
isEmptyObject software healthy gui/default/syncthing/app.js:isEmptyObject
debounce software healthy gui/default/syncthing/app.js:debounce
buildTree software healthy gui/default/syncthing/app.js:buildTree
unitPrefixed software healthy gui/default/syncthing/app.js:unitPrefixed
intercept software healthy gui/default/syncthing/development/logbar.js:intercept
handleConsoleCall software healthy gui/default/syncthing/development/logbar.js:handleConsoleCa…
detectLocalStorage software healthy gui/default/syncthing/core/localeService.js:detectLocalStor…
readBrowserLocales software healthy gui/default/syncthing/core/localeService.js:readBrowserLoca…
autoConfigLocale software healthy gui/default/syncthing/core/localeService.js:autoConfigLocale
useLocale software healthy gui/default/syncthing/core/localeService.js:useLocale
Identicon software healthy gui/default/syncthing/core/identiconDirective.js:Identicon
t software healthy gui/default/syncthing/core/durationFilter.js:t
checks software healthy gui/default/syncthing/core/pathIsSubDirDirective.js:checks
isSubDir software healthy gui/default/syncthing/core/pathIsSubDirDirective.js:isSubDir
successFn software healthy gui/default/syncthing/core/eventService.js:successFn
errorFn software healthy gui/default/syncthing/core/eventService.js:errorFn
initController software healthy gui/default/syncthing/core/syncthingController.js:initContr…
setVersionFromHeader software healthy gui/default/syncthing/core/syncthingController.js:setVersio…
clearRestartExpectation software healthy gui/default/syncthing/core/syncthingController.js:clearRest…
setRestartExpectation software healthy gui/default/syncthing/core/syncthingController.js:setRestar…
restartExpectedNow software healthy gui/default/syncthing/core/syncthingController.js:restartEx…
refreshFolder software healthy gui/default/syncthing/core/syncthingController.js:refreshFo…
updateLocalConfig software healthy gui/default/syncthing/core/syncthingController.js:updateLoc…
sortByKeyThenProperty software healthy gui/default/syncthing/core/syncthingController.js:sortByKey…
refreshSystem software healthy gui/default/syncthing/core/syncthingController.js:refreshSy…
should software healthy gui/default/syncthing/core/syncthingController.js:should
refreshNoAuthWarning software healthy gui/default/syncthing/core/syncthingController.js:refreshNo…
refreshCluster software healthy gui/default/syncthing/core/syncthingController.js:refreshCl…
refreshDiscoveryCache software healthy gui/default/syncthing/core/syncthingController.js:refreshDi…
recalcLocalStateTotal software healthy gui/default/syncthing/core/syncthingController.js:recalcLoc…
recalcCompletion software healthy gui/default/syncthing/core/syncthingController.js:recalcCom…
refreshCompletion software healthy gui/default/syncthing/core/syncthingController.js:refreshCo…
refreshConnectionStats software healthy gui/default/syncthing/core/syncthingController.js:refreshCo…
refreshErrors software healthy gui/default/syncthing/core/syncthingController.js:refreshEr…
refreshConfig software healthy gui/default/syncthing/core/syncthingController.js:refreshCo…
needAction software healthy gui/default/syncthing/core/syncthingController.js:needAction
parseNeeded software healthy gui/default/syncthing/core/syncthingController.js:parseNeed…
pathJoin software healthy gui/default/syncthing/core/syncthingController.js:pathJoin
shouldSetDefaultFolderPath software healthy gui/default/syncthing/core/syncthingController.js:shouldSet…
resetRemoteNeed software healthy gui/default/syncthing/core/syncthingController.js:resetRemo…
setDefaultTheme software healthy gui/default/syncthing/core/syncthingController.js:setDefaul…
saveIgnores software healthy gui/default/syncthing/core/syncthingController.js:saveIgnor…
initShareEditing software healthy gui/default/syncthing/core/syncthingController.js:initShare…
initShareEditingFolder software healthy gui/default/syncthing/core/syncthingController.js:initShare…

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
127.0.0.1 network healthy Dockerfile
192.0.2.42 network healthy gui/default/syncthing/core/syncthingController.js
1.2.3.4 network healthy cmd/stdiscosrv/apisrv_test.go
224.0.0.1 network healthy cmd/stdiscosrv/apisrv_test.go
127.1.2.3 network healthy cmd/stdiscosrv/apisrv_test.go
123.123.123.123 network healthy cmd/stdiscosrv/apisrv_test.go
44.44.44.44 network healthy cmd/stdiscosrv/apisrv_test.go
10.10.10.10 network healthy cmd/stdiscosrv/apisrv_test.go
6.7.8.9 network healthy cmd/stdiscosrv/database_test.go
10.20.30.40 network healthy lib/relay/client/dynamic.go
192.0.2.1 network healthy lib/config/config_test.go
192.0.2.2 network healthy lib/config/config_test.go
192.0.2.3 network healthy lib/config/config_test.go
192.0.2.4 network healthy lib/config/config_test.go
127.0.0.2 network healthy lib/config/config_test.go
192.168.243.1 network healthy lib/upnp/upnp_test.go
239.255.255.250 network healthy lib/upnp/upnp.go
8.8.8.8 network healthy lib/geoip/geoip_test.go
255.255.255.255 network healthy lib/beacon/broadcast.go
172.16.32.33 network healthy lib/beacon/broadcast_test.go
172.16.32.127 network healthy lib/beacon/broadcast_test.go
172.16.32.129 network healthy lib/beacon/broadcast_test.go
172.16.32.255 network healthy lib/beacon/broadcast_test.go
172.16.35.255 network healthy lib/beacon/broadcast_test.go
127.23.45.56 network healthy lib/api/api_test.go
192.0.2.10 network healthy lib/api/api_test.go
10.0.0.1 network healthy lib/nat/structs_test.go
192.168.0.1 network healthy lib/nat/structs_test.go
192.168.0.12 network healthy lib/nat/structs.go
192.0.2.44 network healthy lib/discover/cache_test.go
192.0.2.43 network healthy lib/discover/cache_test.go
224.1.2.3 network healthy lib/discover/local_test.go
192.0.2.45 network healthy lib/discover/doc.go
192.0.2.99 network healthy lib/discover/doc.go
10.20.30.0 network healthy lib/connections/lan_test.go
192.168.0.0 network healthy lib/connections/connections_test.go
192.168.1.0 network healthy lib/connections/connections_test.go
10.0.0.0 network healthy lib/connections/connections_test.go
192.168.1.1 network healthy lib/connections/registry/registry_test.go
172.1.1.1 network healthy lib/connections/registry/registry_test.go
10.1.1.1 network healthy lib/connections/registry/registry_test.go
192.168.178.1 network healthy lib/osutil/osutil_test.go
1.1.1.1 network healthy lib/osutil/osutil_test.go
192.0.2.22 network healthy lib/fs/basicfs_windows_test.go

LabelLayerStatusPath
S3_REGION cicd healthy —
APPSTORECONNECT_API_KEY cicd healthy —
DOCKER_TAGS cicd healthy —
ACTIONS_GITHUB_TOKEN cicd healthy —
GO_VERSION cicd healthy —
TAGS cicd healthy —
LOKI_PASSWORD cicd healthy —
AZURE_TRUSTED_SIGNING_TENANT_ID cicd healthy —
DEVELOPER_ID_CERTIFICATE_BASE64 cicd healthy —
WEBLATE_TOKEN cicd healthy —
APPSTORECONNECT_API_KEY_ID cicd healthy —
APPSTORECONNECT_API_KEY_ISSUER cicd healthy —
NIGHTLY_BASE_URL cicd healthy —
GOM_ALSO_REPOS cicd healthy —
AZURE_TRUSTED_SIGNING_CLIENT_SECRET cicd healthy —
AZURE_TRUSTED_SIGNING_CLIENT_ID cicd healthy —
DOCKERHUB_TOKEN cicd healthy —
AZURE_TRUSTED_SIGNING_PROFILE cicd healthy —
STSIGTOOL_PRIVATE_KEY cicd healthy —
LOKI_URL cicd healthy —
GOM_IGNORE_USERS cicd healthy —
DOCKERHUB_USERNAME cicd healthy —
GOM_GITHUB_TOKEN cicd healthy —
S3_SECRET_ACCESS_KEY cicd healthy —
VERSION cicd healthy —
APT_GPG_KEYRING_BASE64 cicd healthy —
S3_ACCESS_KEY_ID cicd healthy —
NEXT cicd healthy —
LOKI_USER cicd healthy —
AZURE_TRUSTED_SIGNING_ACCOUNT cicd healthy —
TAGS_LINUX cicd healthy —
GITHUB_TOKEN cicd healthy —
DEVELOPER_ID_CERTIFICATE_PASSWORD cicd healthy —
CODEBERG_PUSH_KEY cicd healthy —
S3_PROVIDER cicd healthy —
CODESIGN_IDENTITY cicd healthy —
AZURE_TRUSTED_SIGNING_ENDPOINT cicd healthy —
S3_ENDPOINT cicd healthy —

LabelLayerStatusPath
create-release-tag cicd healthy .github/workflows/release-syncthing.yaml
trigger-nightly cicd healthy .github/workflows/trigger-nightly.yaml
docker-syncthing cicd healthy .github/workflows/build-infra-dockers.yaml
run-recommendation cicd healthy .github/workflows/org-members.yaml
facts cicd healthy .github/workflows/build-syncthing.yaml
build-test cicd healthy .github/workflows/build-syncthing.yaml
basics cicd healthy .github/workflows/build-syncthing.yaml
package-windows cicd healthy .github/workflows/build-syncthing.yaml
codesign-windows cicd healthy .github/workflows/build-syncthing.yaml
package-linux cicd healthy .github/workflows/build-syncthing.yaml
package-illumos cicd healthy .github/workflows/build-syncthing.yaml
package-macos cicd healthy .github/workflows/build-syncthing.yaml
notarize-macos cicd healthy .github/workflows/build-syncthing.yaml
package-cross cicd healthy .github/workflows/build-syncthing.yaml
package-source cicd healthy .github/workflows/build-syncthing.yaml
sign-for-upgrade cicd healthy .github/workflows/build-syncthing.yaml
package-debian cicd healthy .github/workflows/build-syncthing.yaml
publish-nightly cicd healthy .github/workflows/build-syncthing.yaml
publish-release-files cicd healthy .github/workflows/build-syncthing.yaml
publish-apt cicd healthy .github/workflows/build-syncthing.yaml
docker-ghcr cicd healthy .github/workflows/build-syncthing.yaml
docker-hub cicd healthy .github/workflows/build-syncthing.yaml
govulncheck cicd healthy .github/workflows/build-syncthing.yaml
golangci cicd healthy .github/workflows/build-syncthing.yaml
meta cicd healthy .github/workflows/build-syncthing.yaml
codeberg cicd healthy .github/workflows/mirrors.yaml
update_transifex_docs cicd healthy .github/workflows/update-docs-translations.yaml
labels cicd healthy .github/workflows/pr-metadata.yaml

LabelLayerStatusPath
devices data healthy internal/db/sqlite/sql/schema/folder/00-devices.sql
files data healthy internal/db/sqlite/sql/schema/folder/20-files.sql
file_names data healthy internal/db/sqlite/sql/schema/folder/20-files.sql
file_versions data healthy internal/db/sqlite/sql/schema/folder/20-files.sql
fileinfos data healthy internal/db/sqlite/sql/schema/folder/20-files.sql
counts data healthy internal/db/sqlite/sql/schema/folder/40-counts.sql
mtimes data healthy internal/db/sqlite/sql/schema/folder/50-mtimes.sql
indexids data healthy internal/db/sqlite/sql/schema/folder/30-indexids.sql
blocklists data healthy internal/db/sqlite/sql/schema/folder/50-blocks.sql
blocks data healthy internal/db/sqlite/sql/schema/folder/50-blocks.sql
schemamigrations data healthy internal/db/sqlite/sql/schema/common/10-schema.sql
kv data healthy internal/db/sqlite/sql/schema/common/70-kv.sql
folders data healthy internal/db/sqlite/sql/schema/main/00-folders.sql
blocks_v4 data healthy internal/db/sqlite/sql/migrations/folder/04-alter-blocks-ta…
blocklists_v4 data healthy internal/db/sqlite/sql/migrations/folder/04-alter-blocks-ta…
files_v5 data healthy internal/db/sqlite/sql/migrations/folder/05-normalize-files…

LabelLayerStatusPath
password_literal::lib/api/api_test.go security healthy lib/api/api_test.go
password_literal::lib/api/api_test.go security healthy lib/api/api_test.go
password_literal::lib/api/api_auth.go security healthy lib/api/api_auth.go
password_literal::lib/api/support_bundle.go security healthy lib/api/support_bundle.go
password_literal::lib/api/support_bundle.go security healthy lib/api/support_bundle.go
generic_api_key::lib/rc/rc.go security healthy lib/rc/rc.go
password_literal::lib/model/model_test.go security healthy lib/model/model_test.go
password_literal::lib/model/model_test.go security healthy lib/model/model_test.go
password_literal::lib/model/model_test.go security healthy lib/model/model_test.go
password_literal::lib/model/model_test.go security healthy lib/model/model_test.go

LabelLayerStatusPath
gha::release-syncthing cicd healthy .github/workflows/release-syncthing.yaml
gha::trigger-nightly cicd healthy .github/workflows/trigger-nightly.yaml
gha::build-infra-dockers cicd healthy .github/workflows/build-infra-dockers.yaml
gha::org-members cicd healthy .github/workflows/org-members.yaml
gha::build-syncthing cicd healthy .github/workflows/build-syncthing.yaml
gha::mirrors cicd healthy .github/workflows/mirrors.yaml
gha::update-docs-translations cicd healthy .github/workflows/update-docs-translations.yaml
gha::pr-metadata cicd healthy .github/workflows/pr-metadata.yaml

LabelLayerStatusPath
04-alter-blocks-tables.sql data healthy internal/db/sqlite/sql/migrations/folder/04-alter-blocks-ta…
02-remove-invalid.sql data healthy internal/db/sqlite/sql/migrations/folder/02-remove-invalid.…
03-drop-bad-invalid.sql data healthy internal/db/sqlite/sql/migrations/folder/03-drop-bad-invali…
05-normalize-files.sql data healthy internal/db/sqlite/sql/migrations/folder/05-normalize-files…

LabelLayerStatusPath
port:8384 network healthy Dockerfile
port:8081 network healthy test/override_test.go
port:8082 network healthy test/override_test.go
port:01 network healthy .github/workflows/trigger-nightly.yaml

LabelLayerStatusPath
nginx network healthy cmd/stdiscosrv/apisrv.go
caddy network healthy cmd/stdiscosrv/apisrv.go
traefik network healthy cmd/stdiscosrv/apisrv.go

LabelLayerStatusPath
vps::aws hardware healthy go.mod
vps::azure hardware healthy go.mod

LabelLayerStatusPath
repobility-clone-ubhq1m7f software healthy /tmp/repobility-clone-ubhq1m7f

LabelLayerStatusPath
sqlite data healthy .golangci.yml

LabelLayerStatusPath
rabbitmq data healthy go.mod

LabelLayerStatusPath
image::Dockerfile hardware healthy Dockerfile
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/e2d7c0f7-b692-4ec4-b108-3322fb43d091/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/e2d7c0f7-b692-4ec4-b108-3322fb43d091/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.