Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

tamiyame/chinup-fitness-system

https://github.com/tamiyame/chinup-fitness-system · scanned 2026-06-16 00:29 UTC (2 months, 2 weeks ago)

158 raw signals (0 security + 158 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 2 weeks ago · v1 · 158 actionable findings from 1 signal source. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
56.2
/100
Security checks
56
0 findings
System graph
56
100.0% cov · 158 findings
Critical
2
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 2 High 3 Medium 17 Low 128 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 158 Crowd 0 Layer: Frontend 71 Hardware 3 Security 12 Cicd 1 Quality 18 Api 53

All 911 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
reqRaw software healthy tests/my-schedule-routing.test.js:reqRaw
expect software healthy tests/my-schedule-routing.test.js:expect
expect software healthy tests/recurring-booking.test.js:expect
day software healthy tests/recurring-booking.test.js:day
req software healthy tests/public-api.test.js:req
expect software healthy tests/public-api.test.js:expect
reset software healthy tests/discount-group.test.js:reset
expect software healthy tests/discount-group.test.js:expect
dstr software healthy tests/discount-group.test.js:dstr
p software healthy tests/discount-group.test.js:p
adminId software healthy tests/discount-group.test.js:adminId
redemptionRow software healthy tests/discount-group.test.js:redemptionRow
expect software healthy tests/google-auth.test.js:expect
expect software healthy tests/booking-payment.test.js:expect
reset software healthy tests/my-schedule-service.test.js:reset
expect software healthy tests/my-schedule-service.test.js:expect
createMember software healthy tests/my-schedule-service.test.js:createMember
createCoachFor software healthy tests/my-schedule-service.test.js:createCoachFor
futureLocal software healthy tests/my-schedule-service.test.js:futureLocal
pad software healthy tests/my-schedule-service.test.js:pad
req software healthy tests/admin-backfill-api.test.js:req
expect software healthy tests/admin-backfill-api.test.js:expect
reset software healthy tests/course-price.test.js:reset
expect software healthy tests/course-price.test.js:expect
dstr software healthy tests/course-price.test.js:dstr
p software healthy tests/course-price.test.js:p
expect software healthy tests/lineClient.test.js:expect
expectAsync software healthy tests/lineClient.test.js:expectAsync
expect software healthy tests/migration.test.js:expect
expect software healthy tests/gcal-sync.test.js:expect
expectA software healthy tests/gcal-sync.test.js:expectA
expect software healthy tests/group-coach-notify.test.js:expect
dstr software healthy tests/group-coach-notify.test.js:dstr
p software healthy tests/group-coach-notify.test.js:p
reset software healthy tests/group-coach-notify.test.js:reset
coachNotif software healthy tests/group-coach-notify.test.js:coachNotif
req software healthy tests/discount-admin-api.test.js:req
expect software healthy tests/discount-admin-api.test.js:expect
cleanup software healthy tests/discount-admin-api.test.js:cleanup
expect software healthy tests/discount-migration.test.js:expect
expect software healthy tests/admin-backfill.test.js:expect
pad software healthy tests/admin-backfill.test.js:pad
fmtDate software healthy tests/admin-backfill.test.js:fmtDate
req software healthy tests/backup-api.test.js:req
loginAs software healthy tests/backup-api.test.js:loginAs
expect software healthy tests/backup-api.test.js:expect
expect software healthy tests/email-confirmation.test.js:expect
expectA software healthy tests/email-confirmation.test.js:expectA
reset software healthy tests/discount-service.test.js:reset
expect software healthy tests/discount-service.test.js:expect

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
README.md software healthy README.md
package.json software healthy package.json
Dockerfile software healthy Dockerfile
package-lock.json software healthy package-lock.json
.env.example software healthy .env.example
railway.json software healthy railway.json
my-schedule-routing.test.js software healthy tests/my-schedule-routing.test.js
recurring-booking.test.js software healthy tests/recurring-booking.test.js
public-api.test.js software healthy tests/public-api.test.js
discount-group.test.js software healthy tests/discount-group.test.js
google-auth.test.js software healthy tests/google-auth.test.js
booking-payment.test.js software healthy tests/booking-payment.test.js
my-schedule-service.test.js software healthy tests/my-schedule-service.test.js
admin-backfill-api.test.js software healthy tests/admin-backfill-api.test.js
course-price.test.js software healthy tests/course-price.test.js
lineClient.test.js software healthy tests/lineClient.test.js
migration.test.js software healthy tests/migration.test.js
gcal-sync.test.js software healthy tests/gcal-sync.test.js
group-coach-notify.test.js software healthy tests/group-coach-notify.test.js
discount-admin-api.test.js software healthy tests/discount-admin-api.test.js
discount-migration.test.js software healthy tests/discount-migration.test.js
admin-backfill.test.js software healthy tests/admin-backfill.test.js
backup-api.test.js software healthy tests/backup-api.test.js
email-confirmation.test.js software healthy tests/email-confirmation.test.js
discount-service.test.js software healthy tests/discount-service.test.js
staff-line-bind-api.test.js software healthy tests/staff-line-bind-api.test.js
booking-anon.test.js software healthy tests/booking-anon.test.js
course-coach.test.js software healthy tests/course-coach.test.js
group-leave.test.js software healthy tests/group-leave.test.js
availability-leave.test.js software healthy tests/availability-leave.test.js
auth-lock.test.js software healthy tests/auth-lock.test.js
booking-staff-phone-idor.test.js software healthy tests/booking-staff-phone-idor.test.js
refund.test.js software healthy tests/refund.test.js
notifications-flow.test.js software healthy tests/notifications-flow.test.js
booking-validate-api.test.js software healthy tests/booking-validate-api.test.js
booking-admin-cancel.test.js software healthy tests/booking-admin-cancel.test.js
payment-flow-base.test.js software healthy tests/payment-flow-base.test.js
group-order-service.test.js software healthy tests/group-order-service.test.js
refund-api.test.js software healthy tests/refund-api.test.js
lineBindingService.test.js software healthy tests/lineBindingService.test.js
settings-gcal-api.test.js software healthy tests/settings-gcal-api.test.js
recurring-booking-api.test.js software healthy tests/recurring-booking-api.test.js
rate-limit.test.js software healthy tests/rate-limit.test.js
member-admin-api.test.js software healthy tests/member-admin-api.test.js
booking-flow.test.js software healthy tests/booking-flow.test.js
admin-session-counts.test.js software healthy tests/admin-session-counts.test.js
admin-reset-line-bindings.test.js software healthy tests/admin-reset-line-bindings.test.js
booking-payment-api.test.js software healthy tests/booking-payment-api.test.js
admin-group-orders.test.js software healthy tests/admin-group-orders.test.js
gcal-migration.test.js software healthy tests/gcal-migration.test.js

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
GET /my.html api healthy src/server.js
GET /my-bookings.html api healthy src/server.js
GET /line.html api healthy src/server.js
GET /my-schedule api healthy src/server.js
USE /avatars api healthy src/server.js
GET /api/health api healthy src/server.js
POST /api/auth/login api healthy src/server.js
POST /api/auth/logout api healthy src/server.js
POST /api/auth/change-password api healthy src/server.js
GET /api/auth/me api healthy src/server.js
GET /api/my/line api healthy src/server.js
POST /api/my/line/bind-code api healthy src/server.js
DELETE /api/my/line api healthy src/server.js
GET /api/auth/google api healthy src/server.js
GET /api/auth/google/callback api healthy src/server.js
POST /api/admin/gmail-auth/start api healthy src/server.js
GET /api/admin/gmail-auth/callback api healthy src/server.js
GET /api/sessions api healthy src/server.js
GET /api/admin/templates api healthy src/server.js
GET /api/admin/templates/:id api healthy src/server.js
POST /api/admin/templates api healthy src/server.js
PATCH /api/admin/templates/:id api healthy src/server.js
DELETE /api/admin/templates/:id api healthy src/server.js
GET /api/admin/sessions/:id/registrations api healthy src/server.js
PATCH /api/admin/sessions/:id api healthy src/server.js
GET /api/admin/categories api healthy src/server.js
POST /api/admin/categories api healthy src/server.js
PATCH /api/admin/categories/:id api healthy src/server.js
DELETE /api/admin/categories/:id api healthy src/server.js
GET /api/admin/users api healthy src/server.js
POST /api/admin/line/reset-all api healthy src/server.js
PATCH /api/admin/users/:id/role api healthy src/server.js
PATCH /api/admin/users/:id api healthy src/server.js
POST /api/admin/users/:id/archive api healthy src/server.js
POST /api/admin/users/:id/restore api healthy src/server.js
POST /api/admin/coaches/account api healthy src/server.js
GET /api/admin/coaches api healthy src/server.js
PATCH /api/admin/coaches/:id api healthy src/server.js
DELETE /api/admin/coaches/:id api healthy src/server.js
GET /api/coach/me api healthy src/server.js
PATCH /api/coach/me/profile api healthy src/server.js
GET /api/coach/me/rules api healthy src/server.js
POST /api/coach/me/rules api healthy src/server.js
DELETE /api/coach/me/rules/:id api healthy src/server.js
GET /api/coach/me/exceptions api healthy src/server.js
POST /api/coach/me/exceptions api healthy src/server.js
DELETE /api/coach/me/exceptions/:id api healthy src/server.js
GET /api/coach/me/bookings api healthy src/server.js
GET /api/coach/me/availability-preview api healthy src/server.js
POST /api/coach/me/avatar api healthy src/server.js

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
password_literal::tests/admin-backfill-api.test.js security healthy tests/admin-backfill-api.test.js
password_literal::tests/admin-backfill-api.test.js security healthy tests/admin-backfill-api.test.js
password_literal::tests/discount-admin-api.test.js security healthy tests/discount-admin-api.test.js
password_literal::tests/staff-line-bind-api.test.js security healthy tests/staff-line-bind-api.test.js
password_literal::tests/auth-lock.test.js security healthy tests/auth-lock.test.js
password_literal::tests/auth-lock.test.js security healthy tests/auth-lock.test.js
password_literal::tests/refund-api.test.js security healthy tests/refund-api.test.js
password_literal::tests/settings-gcal-api.test.js security healthy tests/settings-gcal-api.test.js
password_literal::tests/recurring-booking-api.test.js security healthy tests/recurring-booking-api.test.js
password_literal::tests/member-admin-api.test.js security healthy tests/member-admin-api.test.js
password_literal::tests/member-admin-api.test.js security healthy tests/member-admin-api.test.js
password_literal::tests/member-admin-api.test.js security healthy tests/member-admin-api.test.js
password_literal::tests/booking-payment-api.test.js security healthy tests/booking-payment-api.test.js
password_literal::tests/admin-group-orders.test.js security healthy tests/admin-group-orders.test.js
password_literal::tests/booking-admin-cancel-api.test.js security healthy tests/booking-admin-cancel-api.test.js
password_literal::tests/gmail-auth-api.test.js security healthy tests/gmail-auth-api.test.js
password_literal::tests/discount-api.test.js security healthy tests/discount-api.test.js
password_literal::tests/change-password-api.test.js security healthy tests/change-password-api.test.js
password_literal::tests/change-password-api.test.js security healthy tests/change-password-api.test.js
password_literal::tests/change-password-api.test.js security healthy tests/change-password-api.test.js
password_literal::tests/change-password-api.test.js security healthy tests/change-password-api.test.js
password_literal::tests/change-password-api.test.js security healthy tests/change-password-api.test.js
password_literal::tests/change-password-api.test.js security healthy tests/change-password-api.test.js
password_literal::tests/change-password-api.test.js security healthy tests/change-password-api.test.js
password_literal::tests/change-password-api.test.js security healthy tests/change-password-api.test.js
password_literal::public/login.html security healthy public/login.html
password_literal::src/services/auth.js security healthy src/services/auth.js

LabelLayerStatusPath
tests software healthy tests
docs software healthy docs
superpowers software healthy docs/superpowers
plans software healthy docs/superpowers/plans
specs software healthy docs/superpowers/specs
ig software healthy docs/ig
design-system software healthy design-system
ui_kits software healthy design-system/ui_kits
web software healthy design-system/ui_kits/web
preview software healthy design-system/preview
public software healthy public
src software healthy src
middleware software healthy src/middleware
services software healthy src/services
db software healthy src/db

LabelLayerStatusPath
auth::src/services/auth.js security healthy src/services/auth.js
auth::public/app.js security healthy public/app.js
auth::public/login.html security healthy public/login.html
auth::src/server.js security healthy src/server.js
auth::design-system/README.md security healthy design-system/README.md
auth::src/services/googleAuth.js security healthy src/services/googleAuth.js
auth::docs/product-showcase.html security healthy docs/product-showcase.html
auth::README.md security healthy README.md
auth::tests/google-auth.test.js security healthy tests/google-auth.test.js

LabelLayerStatusPath
for software healthy public/my-schedule.js:for
const software healthy public/app.js:const
ApiError software healthy src/services/registration.js:ApiError

LabelLayerStatusPath
migration.test.js data healthy tests/migration.test.js
discount-migration.test.js data healthy tests/discount-migration.test.js
gcal-migration.test.js data healthy tests/gcal-migration.test.js

LabelLayerStatusPath
port:3100 network healthy README.md
port:3000 network healthy Dockerfile

LabelLayerStatusPath
10.99.0.1 network healthy tests/rate-limit.test.js
10.99.0.99 network healthy tests/rate-limit.test.js

LabelLayerStatusPath
vps::gcp hardware healthy README.md
vps::ec2 hardware healthy tests/member-admin-api.test.js

LabelLayerStatusPath
repobility-clone-1radiywb software healthy /tmp/repobility-clone-1radiywb

LabelLayerStatusPath
sqlite data healthy README.md

LabelLayerStatusPath
image::Dockerfile hardware healthy Dockerfile
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/f567f3ba-3a01-42be-9e6f-c78e9ce559f4/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/f567f3ba-3a01-42be-9e6f-c78e9ce559f4/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.