Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

wayweltstoregmbh/specdrift

https://github.com/wayweltstoregmbh/specdrift · scanned 2026-06-16 00:55 UTC (2 months, 1 week ago)

100 raw signals (0 security + 100 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 62 actionable findings from 1 signal source. 38 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

66.7% cov · 62 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 5 High 0 Medium 35 Low 20 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 62 Crowd 0 Layer: Frontend 19 Security 38 Quality 5

Exclude dismissed / FP Exclude test files

All 2760 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`action.yml`	software	healthy	`action.yml`
`README.md`	software	healthy	`README.md`
`package.json`	software	healthy	`package.json`
`TESTPLAN.md`	software	healthy	`TESTPLAN.md`
`SPECDRIFT-MAP-CONCEPT.md`	software	healthy	`SPECDRIFT-MAP-CONCEPT.md`
`package-lock.json`	software	healthy	`package-lock.json`
`ROADMAP.md`	software	healthy	`ROADMAP.md`
`LICENSE`	software	healthy	`LICENSE`
`V0.2-PLAN.md`	software	healthy	`V0.2-PLAN.md`
`m1.test.js`	software	healthy	`tests/m1.test.js`
`v02-merge.test.js`	software	healthy	`tests/v02-merge.test.js`
`m0.test.js`	software	healthy	`tests/m0.test.js`
`m4.test.js`	software	healthy	`tests/m4.test.js`
`m3.test.js`	software	healthy	`tests/m3.test.js`
`m2.test.js`	software	healthy	`tests/m2.test.js`
`v02-update.test.js`	software	healthy	`tests/v02-update.test.js`
`usability.test.js`	software	healthy	`tests/usability.test.js`
`m5.test.js`	software	healthy	`tests/m5.test.js`
`v02-evidence.test.js`	software	healthy	`tests/v02-evidence.test.js`
`en-spec.md`	software	healthy	`tests/fixtures/en-spec.md`
`de-spec.md`	software	healthy	`tests/fixtures/de-spec.md`
`kiro-requirements.md`	software	healthy	`tests/fixtures/kiro-requirements.md`
`b-data.md`	software	healthy	`tests/fixtures/folder-spec/b-data.md`
`a-overview.md`	software	healthy	`tests/fixtures/folder-spec/a-overview.md`
`mcp-client.js`	software	healthy	`tests/helpers/mcp-client.js`
`benchmark.js`	software	healthy	`tests/helpers/benchmark.js`
`gen-corpus.js`	software	healthy	`tests/helpers/gen-corpus.js`
`server.js`	software	healthy	`mcp/server.js`
`lint.js`	software	healthy	`tooling/lint.js`
`test.js`	software	healthy	`tooling/test.js`
`merge-analyze.js`	software	healthy	`lib/merge-analyze.js`
`io.js`	software	healthy	`lib/io.js`
`merge-rebase.js`	software	healthy	`lib/merge-rebase.js`
`coverage.js`	software	healthy	`lib/coverage.js`
`judge-baseline.js`	software	healthy	`lib/judge-baseline.js`
`open-work.js`	software	healthy	`lib/open-work.js`
`extract.js`	software	healthy	`lib/extract.js`
`evidence.js`	software	healthy	`lib/evidence.js`
`verdicts.js`	software	healthy	`lib/verdicts.js`
`schema-validate.js`	software	healthy	`lib/schema-validate.js`
`commands.js`	software	healthy	`lib/commands.js`
`gate.js`	software	healthy	`lib/gate.js`
`merge-compose.js`	software	healthy	`lib/merge-compose.js`
`REAL-WORLD-REPORT.md`	software	healthy	`validation/REAL-WORLD-REPORT.md`
`run-validation.js`	software	healthy	`validation/run-validation.js`
`spec.md`	software	healthy	`validation/intake-shortcode/spec.md`
`comment-run-b.md`	software	healthy	`validation/intake-shortcode/comment-run-b.md`
`comment-run-a.md`	software	healthy	`validation/intake-shortcode/comment-run-a.md`
`specdrift.verdicts.json`	software	healthy	`validation/intake-shortcode/specdrift.verdicts.json`
`example-intake.php`	software	healthy	`validation/intake-shortcode/example-intake.php`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`tmpDir`	software	healthy	`tests/m1.test.js:tmpDir`
`run`	software	healthy	`tests/m1.test.js:run`
`extractTo`	software	healthy	`tests/m1.test.js:extractTo`
`readClaims`	software	healthy	`tests/m1.test.js:readClaims`
`run`	software	healthy	`tests/v02-merge.test.js:run`
`prepMergeFixture`	software	healthy	`tests/v02-merge.test.js:prepMergeFixture`
`removeClaimEverywhere`	software	healthy	`tests/v02-merge.test.js:removeClaimEverywhere`
`prepSparseMultiConflictFixture`	software	healthy	`tests/v02-merge.test.js:prepSparseMultiConflictFixture`
`run`	software	healthy	`tests/m0.test.js:run`
`prepDir`	software	healthy	`tests/m4.test.js:prepDir`
`withServer`	software	healthy	`tests/m4.test.js:withServer`
`removeClaimEverywhere`	software	healthy	`tests/m4.test.js:removeClaimEverywhere`
`prepareSparseMultiConflictMcpFixture`	software	healthy	`tests/m4.test.js:prepareSparseMultiConflictMcpFixture`
`run`	software	healthy	`tests/m3.test.js:run`
`prep`	software	healthy	`tests/m3.test.js:prep`
`recordAll`	software	healthy	`tests/m3.test.js:recordAll`
`reportJson`	software	healthy	`tests/m3.test.js:reportJson`
`run`	software	healthy	`tests/m2.test.js:run`
`prepProject`	software	healthy	`tests/m2.test.js:prepProject`
`readJson`	software	healthy	`tests/m2.test.js:readJson`
`snapshotDir`	software	healthy	`tests/m2.test.js:snapshotDir`
`run`	software	healthy	`tests/v02-update.test.js:run`
`tmpProject`	software	healthy	`tests/v02-update.test.js:tmpProject`
`writeSpec`	software	healthy	`tests/v02-update.test.js:writeSpec`
`readJson`	software	healthy	`tests/v02-update.test.js:readJson`
`run`	software	healthy	`tests/usability.test.js:run`
`prep`	software	healthy	`tests/usability.test.js:prep`
`run`	software	healthy	`tests/m5.test.js:run`
`prep`	software	healthy	`tests/m5.test.js:prep`
`gate`	software	healthy	`tests/m5.test.js:gate`
`run`	software	healthy	`tests/v02-evidence.test.js:run`
`prep`	software	healthy	`tests/v02-evidence.test.js:prep`
`createVendorRequest`	software	healthy	`tests/v02-evidence.test.js:createVendorRequest`
`startServer`	software	healthy	`tests/helpers/mcp-client.js:startServer`
`request`	software	healthy	`tests/helpers/mcp-client.js:request`
`init`	software	healthy	`tests/helpers/mcp-client.js:init`
`callTool`	software	healthy	`tests/helpers/mcp-client.js:callTool`
`dataOf`	software	healthy	`tests/helpers/mcp-client.js:dataOf`
`textOf`	software	healthy	`tests/helpers/mcp-client.js:textOf`
`makeRng`	software	healthy	`tests/helpers/benchmark.js:makeRng`
`generateScenario`	software	healthy	`tests/helpers/benchmark.js:generateScenario`
`generateBenchmark`	software	healthy	`tests/helpers/benchmark.js:generateBenchmark`
`makeRng`	software	healthy	`tests/helpers/gen-corpus.js:makeRng`
`randomLine`	software	healthy	`tests/helpers/gen-corpus.js:randomLine`
`generateCorpus`	software	healthy	`tests/helpers/gen-corpus.js:generateCorpus`
`relInRoot`	software	healthy	`mcp/server.js:relInRoot`
`loadStoreOrThrow`	software	healthy	`mcp/server.js:loadStoreOrThrow`
`send`	software	healthy	`mcp/server.js:send`
`handleToolCall`	software	healthy	`mcp/server.js:handleToolCall`
`args`	software	healthy	`mcp/server.js:args`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`tests`	software	healthy	`tests`
`fixtures`	software	healthy	`tests/fixtures`
`folder-spec`	software	healthy	`tests/fixtures/folder-spec`
`helpers`	software	healthy	`tests/helpers`
`mcp`	software	healthy	`mcp`
`tooling`	software	healthy	`tooling`
`lib`	software	healthy	`lib`
`validation`	software	healthy	`validation`
`intake-shortcode`	software	healthy	`validation/intake-shortcode`
`mcp-experiments`	software	healthy	`validation/mcp-experiments`
`agent-core-probe`	software	healthy	`validation/mcp-experiments/agent-core-probe`
`boundary-conflict`	software	healthy	`validation/mcp-experiments/agent-core-probe/boundary-confli…`
`crud-defaults`	software	healthy	`validation/mcp-experiments/agent-core-probe/crud-defaults`
`staleness-and-evidence`	software	healthy	`validation/mcp-experiments/agent-core-probe/staleness-and-e…`
`ab-tests`	software	healthy	`validation/ab-tests`
`test-02-profile-validation`	software	healthy	`validation/ab-tests/test-02-profile-validation`
`spec`	software	healthy	`validation/ab-tests/test-02-profile-validation/spec`
`grader`	software	healthy	`validation/ab-tests/test-02-profile-validation/grader`
`spec`	software	healthy	`validation/ab-tests/test-02-profile-validation/grader/spec`
`arm-control`	software	healthy	`validation/ab-tests/test-02-profile-validation/arm-control`
`spec`	software	healthy	`validation/ab-tests/test-02-profile-validation/arm-control/…`
`arm-treatment`	software	healthy	`validation/ab-tests/test-02-profile-validation/arm-treatment`
`spec`	software	healthy	`validation/ab-tests/test-02-profile-validation/arm-treatmen…`
`test-03-handoff`	software	healthy	`validation/ab-tests/test-03-handoff`
`grader`	software	healthy	`validation/ab-tests/test-03-handoff/grader`
`arm-control`	software	healthy	`validation/ab-tests/test-03-handoff/arm-control`
`arm-treatment`	software	healthy	`validation/ab-tests/test-03-handoff/arm-treatment`
`test-01-pricing-engine`	software	healthy	`validation/ab-tests/test-01-pricing-engine`
`grader`	software	healthy	`validation/ab-tests/test-01-pricing-engine/grader`
`arm-control`	software	healthy	`validation/ab-tests/test-01-pricing-engine/arm-control`
`arm-treatment`	software	healthy	`validation/ab-tests/test-01-pricing-engine/arm-treatment`
`enterprise-evaluation`	software	healthy	`validation/enterprise-evaluation`
`runs`	software	healthy	`validation/enterprise-evaluation/runs`
`run-001-secure-vendor-access`	software	healthy	`validation/enterprise-evaluation/runs/run-001-secure-vendor…`
`mcp-raw`	software	healthy	`validation/enterprise-evaluation/runs/run-001-secure-vendor…`
`stage-2`	software	healthy	`validation/enterprise-evaluation/runs/run-001-secure-vendor…`
`stage-3`	software	healthy	`validation/enterprise-evaluation/runs/run-001-secure-vendor…`
`stage-4`	software	healthy	`validation/enterprise-evaluation/runs/run-001-secure-vendor…`
`prompts`	software	healthy	`validation/enterprise-evaluation/runs/run-001-secure-vendor…`
`stage-1`	software	healthy	`validation/enterprise-evaluation/runs/run-001-secure-vendor…`
`project`	software	healthy	`validation/enterprise-evaluation/runs/run-001-secure-vendor…`
`tests`	software	healthy	`validation/enterprise-evaluation/runs/run-001-secure-vendor…`
`stage-2`	software	healthy	`validation/enterprise-evaluation/runs/run-001-secure-vendor…`
`stage-3`	software	healthy	`validation/enterprise-evaluation/runs/run-001-secure-vendor…`
`stage-1`	software	healthy	`validation/enterprise-evaluation/runs/run-001-secure-vendor…`
`src`	software	healthy	`validation/enterprise-evaluation/runs/run-001-secure-vendor…`
`run-011-subagent-multistep-claim-identity`	software	healthy	`validation/enterprise-evaluation/runs/run-011-subagent-mult…`
`mcp-raw`	software	healthy	`validation/enterprise-evaluation/runs/run-011-subagent-mult…`
`artifacts`	software	healthy	`validation/enterprise-evaluation/runs/run-011-subagent-mult…`
`project`	software	healthy	`validation/enterprise-evaluation/runs/run-011-subagent-mult…`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/grader/run2.…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/grader/run2.…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/grader/run2.…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/grader/run2.…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/grader/run2.…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/grader/run2.…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/grader/run2.…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/grader/run2.…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/grader/run2.…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/grader/run2.…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/grader/run2.…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/grader/run2.…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/grader/run2.…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/grader/run2.…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/grader/run3.…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/grader/run3.…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/grader/run.js`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/grader/run.js`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/grader/run.js`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/grader/run.js`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/grader/run.js`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/grader/run.js`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/grader/run.js`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/arm-control/…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/arm-control/…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/arm-control/…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/arm-control/…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/arm-control/…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/arm-control/…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/arm-control/…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/arm-control/…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/arm-control/…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/arm-control/…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/arm-treatmen…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/arm-treatmen…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/arm-treatmen…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/arm-treatmen…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/arm-treatmen…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/arm-treatmen…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/arm-treatmen…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/arm-treatmen…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/arm-treatmen…`
`password_literal::validation/ab-tests/test-02-profile-valid…`	security	healthy	`validation/ab-tests/test-02-profile-validation/arm-treatmen…`

Label	Layer	Status	Path
`checks`	software	healthy	`validation/ab-tests/test-02-profile-validation/arm-control/…`
`checks`	software	healthy	`validation/ab-tests/test-02-profile-validation/arm-treatmen…`

Label	Layer	Status	Path
`repobility-clone-y_a36cfp`	software	healthy	`/tmp/repobility-clone-y_a36cfp`

Label	Layer	Status	Path
`port:38109`	network	healthy	`validation/enterprise-evaluation/runs/run-009-ui-api-screen…`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`validation/enterprise-evaluation/runs/run-009-ui-api-screen…`

Label	Layer	Status	Path
`gha::ci`	cicd	healthy	`.github/workflows/ci.yml`

Label	Layer	Status	Path
`test`	cicd	healthy	`.github/workflows/ci.yml`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/ef338be1-1bab-47fa-a371-5e1fedfc6132/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/ef338be1-1bab-47fa-a371-5e1fedfc6132/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

wayweltstoregmbh/specdrift

Complete repo analysis

file 50+

function 50+

directory 50+

secret 43

class 2

repo 1

port 1

service 1

pipeline 1

job 1