Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

UmbertoMott/aiactcomply

https://github.com/UmbertoMott/aiactcomply · scanned 2026-06-16 02:48 UTC (2 months, 1 week ago)

232 raw signals (0 security + 232 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v3 · 116 actionable findings from 1 signal source. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
70.8
/100
Security checks
71
0 findings
System graph
71
100.0% cov · 116 findings
Critical
0
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: severity: low × excluding tests × Reset all
Severity: Critical 0 High 1 Medium 22 Low 61 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 116 Crowd 0 Layer: Software 13 Api 1 Frontend 37 Hardware 1 Security 6 Cicd 1 Quality 57
Corpus Intelligence Cross-corpus context (cohort percentile, top patterns, fix plan) is shown only on repositories you own. Sign up and connect your repo to view it.
Scan summary Repository scanned at 70.8/100 with 100.0% coverage. It contains 2478 nodes across 30 cross-layer flows, written primarily in mixed languages. Engine surfaced 116 findings — concentrated in quality (57), frontend (37), software (13). Risk profile is high: 0 critical, 1 high, 22 medium. Recommended next step: open the quality layer findings first — that's where the highest-impact wins live.

Showing 61 of 116 actionable findings. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

low System graph hardware Coverage conf 1.00 Containers defined but no K8s/orchestration manifest found
Repo has Dockerfiles/compose but no Kubernetes/Nomad manifests. If the target deployment is K8s, the manifests may live in a separate ops repo.
Deployment
low System graph quality Debug conf 1.00 Debug logging residue appears in source files
Found 83 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup.
CleanupRepo hardeningGenerated repo pattern
low System graph cicd CI/CD security conf 1.00 GitHub Action is tag-pinned rather than SHA-pinned
actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA.
.github/workflows/aicomply-scan.yml:28 CI/CD securitySupply chainGithub actions
low System graph frontend Frontend quality conf 1.00 Icon-only button without accessible name — src/app/dashboard/tools/inventory/page.tsx:93
A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label
Fq button no label
low System graph frontend Frontend quality conf 1.00 Icon-only button without accessible name — src/app/dashboard/tools/risk-manager/page.tsx:210
A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label
Fq button no label
low System graph quality Agent instructions conf 1.00 Multiple root agent instruction files without precedence
The repo has multiple top-level AI-coder instruction files. Without precedence rules, different agents may follow different policies.
Governance
low System graph quality Integrity conf 1.00 Near-duplicate function bodies in 2 places
Functions with the same first-5-line body hash: sdk/python/aicomply_llamaindex.py:on_event_start, sdk/python/aicomply_llamaindex.py:on_event_end This is *the* AI-coder failure mode (4× more duplication in vibe-coded repos — see https://jw.hn/ai-code-hygiene). Consolidate or document why they're se…
duplicatesduplication
low System graph quality Integrity conf 1.00 Near-duplicate function bodies in 3 places
Functions with the same first-5-line body hash: rag/chunkers/generic.py:char_to_page, rag/chunkers/guidelines.py:char_to_page, rag/chunkers/iso.py:char_to_page This is *the* AI-coder failure mode (4× more duplication in vibe-coded repos — see https://jw.hn/ai-code-hygiene). Consolidate or document…
duplicatesduplication
low System graph quality License conf 1.00 No license file detected
No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake.
Repo hardeningGenerated repo pattern
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `aicomply_art50_record_v1` in src/lib/art50/art50-types.ts:98
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `aicomply_art5_emotion_biometric_v1` in src/lib/art5/art5-emotion-biometric-types.ts:41
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `aicomply_auth_rep_draft_v2` in src/lib/authorized-rep/authorized-rep-types.ts:4
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `aicomply_data_audit_v1` in src/lib/data-audit/data-audit-types.ts:71
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `aicomply_deadline_banner_dismissed_v2` in src/app/dashboard/page.tsx:250
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `aicomply_deadline_banner_dismissed_v2` in src/components/notifications/DeadlineBanner.tsx:12
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `aicomply_deployer_dashboard_v1` in src/lib/deployer/deployer-types.ts:60
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `aicomply_eudb_draft_v2` in src/lib/deadlines/deadline-aggregator.ts:21
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `aicomply_eudb_draft_v2` in src/lib/eudb/eudb-prefill.ts:57
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `aicomply_logvault_record_v1` in src/lib/incidents/incident-actions.ts:59
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `aicomply_logvault_record_v1` in src/lib/logvault/logvault-types.ts:57
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `aicomply_oversight_record_v1` in src/app/dashboard/tools/logvault/page.tsx:421
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `aicomply_oversight_record_v1` in src/lib/oversight/oversight-types.ts:56
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `aicomply_pmm_plan_v1` in src/lib/post-market/post-market-types.ts:60
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `aicomply_pmm_plan_v1` in src/lib/provider-transition/provider-transition-types.ts:217
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `aicomply_risk_register_v1` in src/app/dashboard/post-market/page.tsx:1992
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `aicomply_trust_center_v1` in src/app/dashboard/layout.tsx:168
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `aicomply_trust_center_v1` in src/lib/trust-center/trust-center-types.ts:124
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph software Dead code conf 1.00 Possibly dead Python function: answer_with_rag
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
rag/rag_answer.py:95
low System graph software Dead code conf 1.00 Possibly dead Python function: decorator
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
sdk/python/aicomply_logvault.py:318
low System graph software Dead code conf 1.00 Possibly dead Python function: detect_normative_conflict
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
rag/auto_update.py:386
low System graph software Dead code conf 1.00 Possibly dead Python function: end_trace
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
sdk/python/aicomply_llamaindex.py:176
low System graph software Dead code conf 1.00 Possibly dead Python function: langchain_callback
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
sdk/python/aicomply_logvault.py:223
low System graph software Dead code conf 1.00 Possibly dead Python function: log_ai_call
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
sdk/python/aicomply_logvault.py:309
low System graph software Dead code conf 1.00 Possibly dead Python function: log_alert
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
sdk/python/aicomply_logvault.py:125
low System graph software Dead code conf 1.00 Possibly dead Python function: log_drift
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
sdk/python/aicomply_logvault.py:148
low System graph software Dead code conf 1.00 Possibly dead Python function: mark_superseded
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
rag/auto_update.py:303
low System graph software Dead code conf 1.00 Possibly dead Python function: patch_openai
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
sdk/python/aicomply_logvault.py:183
low System graph software Dead code conf 1.00 Possibly dead Python function: patched_create
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
sdk/python/aicomply_logvault.py:195
low System graph software Dead code conf 1.00 Possibly dead Python function: start_trace
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
sdk/python/aicomply_llamaindex.py:173
low System graph software Dead code conf 1.00 Possibly dead Python function: wrapper
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
sdk/python/aicomply_logvault.py:319
low System graph quality Provenance conf 1.00 Shallow git history limits provenance confidence
The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence.
Git historyGenerated repo pattern
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — sdk/js/aicomply-logvault.ts:215
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — src/lib/auth/email.ts:25
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — src/lib/compliance/gateway.ts:43
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph quality Integrity conf 1.00 Stub function `start_trace` (body is just `pass`/`return`) — sdk/python/aicomply_llamaindex.py:173
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Complexity conf 1.00 Very large file: src/app/dashboard/compliance-nexus/page.tsx (1412 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: src/app/dashboard/connectors/page.tsx (1237 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: src/app/dashboard/discovery/page.tsx (2076 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: src/app/dashboard/modules/gpai/page.tsx (1113 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: src/app/dashboard/modules/guardian-agent/page.tsx (963 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: src/app/dashboard/modules/trust-labeler/page.tsx (1335 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: src/app/dashboard/post-market/page.tsx (2477 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: src/app/dashboard/tools/art50-kit/page.tsx (839 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: src/app/dashboard/tools/classifier/page.tsx (1579 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: src/app/dashboard/tools/docugen/page.tsx (1269 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: src/app/dashboard/tools/dpia/page.tsx (1854 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: src/app/dashboard/tools/fria/page.tsx (1322 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: src/app/dashboard/tools/gpai/page.tsx (1167 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: src/app/dashboard/tools/logvault/page.tsx (937 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: src/app/dashboard/triage/page.tsx (1255 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: src/components/ui/ChatAssistant.tsx (1195 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/e77bdab0-5b41-45a2-bd28-668ad01c6ecb/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/e77bdab0-5b41-45a2-bd28-668ad01c6ecb/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.