Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo
23 of your 83 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 1.48s · analysis 7.1s · 7.8 MB · GitHub API rate-limit (preflight)

charmbracelet/crush

https://github.com/charmbracelet/crush · scanned 2026-06-05 22:09 UTC (1 week, 2 days ago) · 10 languages

102 raw signals (74 security + 28 graph) 59th percentile · Go · large (100-500K LoC) System graph score 89 (lower by 12)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 week, 2 days ago · v2 · 37 actionable findings from 2 signal sources. 50 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
84.1
/100
Security checks
79
26 findings
System graph
89
100.0% cov · 11 findings
Critical
1
click to filter
Agents
6
0 votes
Crowd
0
reported
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 85.0 0.15 12.75
security_score 76.4 0.25 19.10
testing_score 80.0 0.20 16.00
documentation_score 63.6 0.15 9.54
practices_score 93.0 0.15 13.95
code_quality 52.6 0.10 5.26
Overall 1.00 76.6
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 1 High 7 Medium 2 Low 10 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 26 System graph 11 Crowd 0 Layer: Quality 18 Software 10 Security 3 Cicd 4 Api 1 Frontend 1

All 709 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
crush.json software healthy crush.json
.golangci.yml software healthy .golangci.yml
README.md software healthy README.md
CLA.md software healthy CLA.md
main.go software healthy main.go
schema.json software healthy schema.json
.goreleaser.yml software healthy .goreleaser.yml
LICENSE.md software healthy LICENSE.md
Taskfile.yaml software healthy Taskfile.yaml
sqlc.yaml software healthy sqlc.yaml
go.mod software healthy go.mod
AGENTS.md software healthy AGENTS.md
dial_windows.go software healthy internal/client/dial_windows.go
config_test.go software healthy internal/client/config_test.go
proto_test.go software healthy internal/client/proto_test.go
client.go software healthy internal/client/client.go
config.go software healthy internal/client/config.go
proto.go software healthy internal/client/proto.go
dial_other.go software healthy internal/client/dial_other.go
provider_test.go software healthy internal/config/provider_test.go
agent_id_test.go software healthy internal/config/agent_id_test.go
init.go software healthy internal/config/init.go
hyper_test.go software healthy internal/config/hyper_test.go
store_test.go software healthy internal/config/store_test.go
atomicwrite_test.go software healthy internal/config/atomicwrite_test.go
recent_models_test.go software healthy internal/config/recent_models_test.go
docker_mcp_test.go software healthy internal/config/docker_mcp_test.go
atomicwrite.go software healthy internal/config/atomicwrite.go
catwalk_test.go software healthy internal/config/catwalk_test.go
provider_empty_test.go software healthy internal/config/provider_empty_test.go
load_test.go software healthy internal/config/load_test.go
provider.go software healthy internal/config/provider.go
reload_hooks_test.go software healthy internal/config/reload_hooks_test.go
copilot.go software healthy internal/config/copilot.go
store.go software healthy internal/config/store.go
docker_mcp.go software healthy internal/config/docker_mcp.go
resolve_test.go software healthy internal/config/resolve_test.go
hyper.go software healthy internal/config/hyper.go
load_bench_test.go software healthy internal/config/load_bench_test.go
config.go software healthy internal/config/config.go
scope.go software healthy internal/config/scope.go
load.go software healthy internal/config/load.go
resolve_real_test.go software healthy internal/config/resolve_real_test.go
catwalk.go software healthy internal/config/catwalk.go
attribution_migration_test.go software healthy internal/config/attribution_migration_test.go
resolve.go software healthy internal/config/resolve.go
mcp_resolved_url_test.go software healthy internal/config/mcp_resolved_url_test.go
lsp_defaults_test.go software healthy internal/config/lsp_defaults_test.go
swagger.json software healthy internal/swagger/swagger.json
docs.go software healthy internal/swagger/docs.go

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
internal software healthy internal
client software healthy internal/client
config software healthy internal/config
swagger software healthy internal/swagger
projects software healthy internal/projects
filetracker software healthy internal/filetracker
commands software healthy internal/commands
message software healthy internal/message
ui software healthy internal/ui
notification software healthy internal/ui/notification
dialog software healthy internal/ui/dialog
util software healthy internal/ui/util
anim software healthy internal/ui/anim
common software healthy internal/ui/common
image software healthy internal/ui/image
list software healthy internal/ui/list
chat software healthy internal/ui/chat
completions software healthy internal/ui/completions
xchroma software healthy internal/ui/xchroma
logo software healthy internal/ui/logo
example software healthy internal/ui/logo/example
model software healthy internal/ui/model
styles software healthy internal/ui/styles
diffview software healthy internal/ui/diffview
attachments software healthy internal/ui/attachments
agent software healthy internal/agent
prompt software healthy internal/agent/prompt
testdata software healthy internal/agent/testdata
TestCoderAgent software healthy internal/agent/testdata/TestCoderAgent
glm-5.1 software healthy internal/agent/testdata/TestCoderAgent/glm-5.1
agenttest software healthy internal/agent/agenttest
notify software healthy internal/agent/notify
templates software healthy internal/agent/templates
tools software healthy internal/agent/tools
mcp software healthy internal/agent/tools/mcp
hyper software healthy internal/agent/hyper
cmd software healthy internal/cmd
clientserverrace software healthy internal/cmd/clientserverrace
stats software healthy internal/cmd/stats
workspace software healthy internal/workspace
fsext software healthy internal/fsext
app software healthy internal/app
oauth software healthy internal/oauth
hyper software healthy internal/oauth/hyper
copilot software healthy internal/oauth/copilot
filepathext software healthy internal/filepathext
home software healthy internal/home
ansiext software healthy internal/ansiext
csync software healthy internal/csync
proto software healthy internal/proto

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
auth::internal/cmd/login.go security healthy internal/cmd/login.go
auth::internal/swagger/docs.go security healthy internal/swagger/docs.go
auth::internal/client/config.go security healthy internal/client/config.go
auth::internal/swagger/swagger.json security healthy internal/swagger/swagger.json
auth::internal/ui/dialog/oauth_copilot.go security healthy internal/ui/dialog/oauth_copilot.go
auth::internal/workspace/workspace.go security healthy internal/workspace/workspace.go
auth::internal/swagger/swagger.yaml security healthy internal/swagger/swagger.yaml
auth::internal/oauth/hyper/device.go security healthy internal/oauth/hyper/device.go
auth::internal/client/config_test.go security healthy internal/client/config_test.go
auth::internal/proto/requests_test.go security healthy internal/proto/requests_test.go
auth::internal/oauth/token.go security healthy internal/oauth/token.go
auth::internal/ui/styles/styles.go security healthy internal/ui/styles/styles.go
auth::internal/backend/config.go security healthy internal/backend/config.go
auth::schema.json security healthy schema.json
auth::internal/config/store.go security healthy internal/config/store.go
auth::internal/ui/model/ui.go security healthy internal/ui/model/ui.go
auth::internal/config/config.go security healthy internal/config/config.go
auth::internal/server/server.go security healthy internal/server/server.go
auth::internal/ui/styles/quickstyle.go security healthy internal/ui/styles/quickstyle.go
auth::internal/oauth/copilot/oauth.go security healthy internal/oauth/copilot/oauth.go
auth::internal/cmd/logout.go security healthy internal/cmd/logout.go
auth::internal/backend/config_test.go security healthy internal/backend/config_test.go
auth::internal/ui/dialog/oauth_hyper.go security healthy internal/ui/dialog/oauth_hyper.go
auth::internal/ui/dialog/actions.go security healthy internal/ui/dialog/actions.go
auth::internal/ui/dialog/oauth.go security healthy internal/ui/dialog/oauth.go
auth::internal/agent/coordinator.go security healthy internal/agent/coordinator.go
auth::internal/workspace/client_workspace.go security healthy internal/workspace/client_workspace.go
auth::internal/proto/requests.go security healthy internal/proto/requests.go
auth::internal/config/store_test.go security healthy internal/config/store_test.go
auth::internal/server/config.go security healthy internal/server/config.go
auth::internal/workspace/app_workspace.go security healthy internal/workspace/app_workspace.go

LabelLayerStatusPath
lint cicd healthy .github/workflows/lint.yml
CLAAssistant cicd healthy .github/workflows/cla.yml
update-schema cicd healthy .github/workflows/schema-update.yml
triage cicd healthy .github/workflows/labeler.yml
snapshot cicd healthy .github/workflows/snapshot.yml
lint cicd healthy .github/workflows/lint-sync.yml
check cicd healthy .github/workflows/nightly.yml
nightly cicd healthy .github/workflows/nightly.yml
goreleaser cicd healthy .github/workflows/release.yml
codeql cicd healthy .github/workflows/security.yml
grype cicd healthy .github/workflows/security.yml
govulncheck cicd healthy .github/workflows/security.yml
dependency-review cicd healthy .github/workflows/security.yml
build cicd healthy .github/workflows/build.yml

LabelLayerStatusPath
GITHUB_TOKEN cicd healthy —
MACOS_SIGN_PASSWORD cicd healthy —
DOCKERHUB_TOKEN cicd healthy —
MACOS_NOTARY_KEY_ID cicd healthy —
NFPM_PASSPHRASE cicd healthy —
MACOS_SIGN_P12 cicd healthy —
AUR_KEY cicd healthy —
GORELEASER_KEY cicd healthy —
MACOS_NOTARY_KEY cicd healthy —
PERSONAL_ACCESS_TOKEN cicd healthy —
MACOS_NOTARY_ISSUER_ID cicd healthy —
NFPM_GPG_KEY cicd healthy —
DOCKERHUB_USERNAME cicd healthy —
FURY_TOKEN cicd healthy —

LabelLayerStatusPath
gha::lint cicd healthy .github/workflows/lint.yml
gha::cla cicd healthy .github/workflows/cla.yml
gha::schema-update cicd healthy .github/workflows/schema-update.yml
gha::labeler cicd healthy .github/workflows/labeler.yml
gha::snapshot cicd healthy .github/workflows/snapshot.yml
gha::lint-sync cicd healthy .github/workflows/lint-sync.yml
gha::nightly cicd healthy .github/workflows/nightly.yml
gha::release cicd healthy .github/workflows/release.yml
gha::security cicd healthy .github/workflows/security.yml
gha::build cicd healthy .github/workflows/build.yml

LabelLayerStatusPath
20260127000000_add_read_files_table.sql data healthy internal/db/migrations/20260127000000_add_read_files_table.…
20250627000000_add_provider_to_messages.sql data healthy internal/db/migrations/20250627000000_add_provider_to_messa…
20250812000000_add_todos_to_sessions.sql data healthy internal/db/migrations/20250812000000_add_todos_to_sessions…
20250515105448_add_summary_message_id.sql data healthy internal/db/migrations/20250515105448_add_summary_message_i…
20250810000000_add_is_summary_message.sql data healthy internal/db/migrations/20250810000000_add_is_summary_messag…
20250624000000_add_created_at_indexes.sql data healthy internal/db/migrations/20250624000000_add_created_at_indexe…
20250424200609_initial.sql data healthy internal/db/migrations/20250424200609_initial.sql

LabelLayerStatusPath
127.0.0.1 network healthy internal/agent/agenttest/coordinator.go
131.0.0.0 network healthy internal/agent/tools/search.go
130.0.0.0 network healthy internal/agent/tools/search.go
129.0.0.0 network healthy internal/agent/tools/search.go
120.0.0.0 network healthy internal/agent/tools/fetch_helpers.go
8.8.8.8 network healthy internal/dns/android.go
1.1.1.1 network healthy internal/dns/android.go

LabelLayerStatusPath
formatNumber software healthy internal/cmd/stats/index.js:formatNumber
formatCompact software healthy internal/cmd/stats/index.js:formatCompact
formatCost software healthy internal/cmd/stats/index.js:formatCost
formatTime software healthy internal/cmd/stats/index.js:formatTime
interpolateColor software healthy internal/cmd/stats/index.js:interpolateColor
getTopItemsWithOthers software healthy internal/cmd/stats/index.js:getTopItemsWithOthers

LabelLayerStatusPath
read_files data healthy internal/db/migrations/20260127000000_add_read_files_table.…
sessions data healthy internal/db/migrations/20250424200609_initial.sql
files data healthy internal/db/migrations/20250424200609_initial.sql
messages data healthy internal/db/migrations/20250424200609_initial.sql

LabelLayerStatusPath
vps::azure hardware healthy schema.json
vps::aws hardware healthy go.mod
vps::ec2 hardware healthy go.mod

LabelLayerStatusPath
repobility-clone-8h3578fq software healthy /tmp/repobility-clone-8h3578fq

LabelLayerStatusPath
sqlite data healthy sqlc.yaml

LabelLayerStatusPath
port:05 network healthy .github/dependabot.yml

LabelLayerStatusPath
generic_api_key::internal/agent/tools/crush_info_test.go security healthy internal/agent/tools/crush_info_test.go
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/f1ea3e2b-21a1-42fd-a8fc-2b9cc16cee43/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/f1ea3e2b-21a1-42fd-a8fc-2b9cc16cee43/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.