JuliaPackaging/Yggdrasil

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

3 of your 16 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

https://github.com/JuliaPackaging/Yggdrasil · scanned 2026-06-05 13:15 UTC (5 days, 9 hours ago) · 10 languages

108 raw signals (16 security + 92 graph) 11/13 scanners ran System graph score 69 (lower by 13)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days, 9 hours ago · v2 · 36 actionable findings from 2 signal sources. 26 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

77.8% cov · 30 findings

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	40.0	0.15	6.00
`security_score`	100.0	0.25	25.00
`testing_score`	0.0	0.20	0.00
`documentation_score`	60.0	0.15	9.00
`practices_score`	57.0	0.15	8.55
`code_quality`	70.0	0.10	7.00
Overall		1.00	55.5

security_score may be inflated — optional security scanners were skipped on this fast scan

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 8 High 0 Medium 21 Low 1 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 6 System graph 30 Crowd 0 Layer: Quality 6 Api 1 Network 11 Frontend 1 Security 17

Exclude dismissed / FP Exclude test files

All 410 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`Q`	software	healthy	`Q`
`QhullMiniWrapper`	software	healthy	`Q/QhullMiniWrapper`
`Wrapper`	software	healthy	`Q/QhullMiniWrapper/Wrapper`
`.devcontainer`	software	healthy	`.devcontainer`
`S`	software	healthy	`S`
`satsuma`	software	healthy	`S/satsuma`
`bundled`	software	healthy	`S/satsuma/bundled`
`tsl`	software	healthy	`S/satsuma/bundled/tsl`
`Silo`	software	healthy	`S/Silo`
`bundled`	software	healthy	`S/Silo/bundled`
`files`	software	healthy	`S/Silo/bundled/files`
`SDPA`	software	healthy	`S/SDPA`
`bundled`	software	healthy	`S/SDPA/bundled`
`sdpawrap`	software	healthy	`S/SDPA/bundled/sdpawrap`
`scopehal`	software	healthy	`S/scopehal`
`bundled`	software	healthy	`S/scopehal/bundled`
`P`	software	healthy	`P`
`Pikchr`	software	healthy	`P/Pikchr`
`bundled`	software	healthy	`P/Pikchr/bundled`
`Perl`	software	healthy	`P/Perl`
`bundled`	software	healthy	`P/Perl/bundled`
`config`	software	healthy	`P/Perl/bundled/config`
`PATHlib`	software	healthy	`P/PATHlib`
`bundled`	software	healthy	`P/PATHlib/bundled`
`PicoSAT`	software	healthy	`P/PicoSAT`
`bundled`	software	healthy	`P/PicoSAT/bundled`
`H`	software	healthy	`H`
`HDF5`	software	healthy	`H/HDF5`
`bundled`	software	healthy	`H/HDF5/bundled`
`files`	software	healthy	`H/HDF5/bundled/files`
`debian-i386`	software	healthy	`H/HDF5/bundled/files/debian-i386`
`debian-arm32v7`	software	healthy	`H/HDF5/bundled/files/debian-arm32v7`
`debian-ppc64le`	software	healthy	`H/HDF5/bundled/files/debian-ppc64le`
`debian-arm64v8`	software	healthy	`H/HDF5/bundled/files/debian-arm64v8`
`debian-riscv64`	software	healthy	`H/HDF5/bundled/files/debian-riscv64`
`debian-amd64`	software	healthy	`H/HDF5/bundled/files/debian-amd64`
`headers`	software	healthy	`H/HDF5/bundled/headers`
`generate-H5Tinit`	software	healthy	`H/HDF5/generate-H5Tinit`
`debian-i386`	software	healthy	`H/HDF5/generate-H5Tinit/debian-i386`
`debian-arm32v7`	software	healthy	`H/HDF5/generate-H5Tinit/debian-arm32v7`
`debian-ppc64le`	software	healthy	`H/HDF5/generate-H5Tinit/debian-ppc64le`
`debian-arm64v8`	software	healthy	`H/HDF5/generate-H5Tinit/debian-arm64v8`
`debian-riscv64`	software	healthy	`H/HDF5/generate-H5Tinit/debian-riscv64`
`debian-amd64`	software	healthy	`H/HDF5/generate-H5Tinit/debian-amd64`
`HelloWorldMPIC`	software	healthy	`H/HelloWorldMPIC`
`bundled`	software	healthy	`H/HelloWorldMPIC/bundled`
`files`	software	healthy	`H/HelloWorldMPIC/bundled/files`
`G`	software	healthy	`G`
`GeographicLibWrapper`	software	healthy	`G/GeographicLibWrapper`
`src`	software	healthy	`G/GeographicLibWrapper/src`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`.mcp.json`	software	healthy	`.mcp.json`
`README.md`	software	healthy	`README.md`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`RootFS.md`	software	healthy	`RootFS.md`
`clean_products.sh`	software	healthy	`clean_products.sh`
`AGENTS.md`	software	healthy	`AGENTS.md`
`clean_builds.sh`	software	healthy	`clean_builds.sh`
`qhullwrapper.c`	software	healthy	`Q/QhullMiniWrapper/Wrapper/qhullwrapper.c`
`qhullwrapper.h`	software	healthy	`Q/QhullMiniWrapper/Wrapper/qhullwrapper.h`
`devcontainer.json`	software	healthy	`.devcontainer/devcontainer.json`
`robin_hash.h`	software	healthy	`S/satsuma/bundled/tsl/robin_hash.h`
`robin_growth_policy.h`	software	healthy	`S/satsuma/bundled/tsl/robin_growth_policy.h`
`robin_map.h`	software	healthy	`S/satsuma/bundled/tsl/robin_map.h`
`robin_set.h`	software	healthy	`S/satsuma/bundled/tsl/robin_set.h`
`pdform-le32.h`	software	healthy	`S/Silo/bundled/files/pdform-le32.h`
`pdform-le64.h`	software	healthy	`S/Silo/bundled/files/pdform-le64.h`
`sdpawrap.cpp`	software	healthy	`S/SDPA/bundled/sdpawrap/sdpawrap.cpp`
`scopehalwrapper.cpp`	software	healthy	`S/scopehal/bundled/scopehalwrapper.cpp`
`pikchr.c`	software	healthy	`P/Pikchr/bundled/pikchr.c`
`config-arm-linux-musleabihf.sh`	software	healthy	`P/Perl/bundled/config/config-arm-linux-musleabihf.sh`
`config-powerpc64le-linux-gnu.sh`	software	healthy	`P/Perl/bundled/config/config-powerpc64le-linux-gnu.sh`
`config-aarch64-linux-musl.sh`	software	healthy	`P/Perl/bundled/config/config-aarch64-linux-musl.sh`
`config-arm-linux-gnueabihf.sh`	software	healthy	`P/Perl/bundled/config/config-arm-linux-gnueabihf.sh`
`config-x86_64-unknown-freebsd.sh`	software	healthy	`P/Perl/bundled/config/config-x86_64-unknown-freebsd.sh`
`config-x86_64-apple-darwin.sh`	software	healthy	`P/Perl/bundled/config/config-x86_64-apple-darwin.sh`
`config-aarch64-apple-darwin.sh`	software	healthy	`P/Perl/bundled/config/config-aarch64-apple-darwin.sh`
`config-aarch64-linux-gnu.sh`	software	healthy	`P/Perl/bundled/config/config-aarch64-linux-gnu.sh`
`pathjulia.c`	software	healthy	`P/PATHlib/bundled/pathjulia.c`
`config.h`	software	healthy	`P/PicoSAT/bundled/config.h`
`Makefile`	software	healthy	`P/PicoSAT/bundled/Makefile`
`H5f90i_gen.h`	software	healthy	`H/HDF5/bundled/files/debian-i386/H5f90i_gen.h`
`H5f90i_gen.h`	software	healthy	`H/HDF5/bundled/files/debian-arm32v7/H5f90i_gen.h`
`H5f90i_gen.h`	software	healthy	`H/HDF5/bundled/files/debian-ppc64le/H5f90i_gen.h`
`H5f90i_gen.h`	software	healthy	`H/HDF5/bundled/files/debian-arm64v8/H5f90i_gen.h`
`H5f90i_gen.h`	software	healthy	`H/HDF5/bundled/files/debian-riscv64/H5f90i_gen.h`
`H5f90i_gen.h`	software	healthy	`H/HDF5/bundled/files/debian-amd64/H5f90i_gen.h`
`pthread_time.h`	software	healthy	`H/HDF5/bundled/headers/pthread_time.h`
`README.md`	software	healthy	`H/HDF5/generate-H5Tinit/README.md`
`generate-h5tinit.dockerfile`	software	healthy	`H/HDF5/generate-H5Tinit/generate-h5tinit.dockerfile`
`generate-h5tinit.sh`	software	healthy	`H/HDF5/generate-H5Tinit/generate-h5tinit.sh`
`H5f90i_gen.h`	software	healthy	`H/HDF5/generate-H5Tinit/debian-i386/H5f90i_gen.h`
`H5f90i_gen.h`	software	healthy	`H/HDF5/generate-H5Tinit/debian-arm32v7/H5f90i_gen.h`
`H5f90i_gen.h`	software	healthy	`H/HDF5/generate-H5Tinit/debian-ppc64le/H5f90i_gen.h`
`H5f90i_gen.h`	software	healthy	`H/HDF5/generate-H5Tinit/debian-arm64v8/H5f90i_gen.h`
`H5f90i_gen.h`	software	healthy	`H/HDF5/generate-H5Tinit/debian-riscv64/H5f90i_gen.h`
`H5f90i_gen.h`	software	healthy	`H/HDF5/generate-H5Tinit/debian-amd64/H5f90i_gen.h`
`hello_world.c`	software	healthy	`H/HelloWorldMPIC/bundled/files/hello_world.c`
`GeographicLibWrapper.cpp`	software	healthy	`G/GeographicLibWrapper/src/GeographicLibWrapper.cpp`
`pthread_time.h`	software	healthy	`G/GStreamer/bundled/headers/pthread_time.h`
`Makefile`	software	healthy	`G/GNUMake/bundled/Makefile`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`password_literal::P/Perl/bundled/config/config-arm-linux-mu…`	security	healthy	`P/Perl/bundled/config/config-arm-linux-musleabihf.sh`
`password_literal::P/Perl/bundled/config/config-arm-linux-mu…`	security	healthy	`P/Perl/bundled/config/config-arm-linux-musleabihf.sh`
`password_literal::P/Perl/bundled/config/config-arm-linux-mu…`	security	healthy	`P/Perl/bundled/config/config-arm-linux-musleabihf.sh`
`password_literal::P/Perl/bundled/config/config-powerpc64le-…`	security	healthy	`P/Perl/bundled/config/config-powerpc64le-linux-gnu.sh`
`password_literal::P/Perl/bundled/config/config-powerpc64le-…`	security	healthy	`P/Perl/bundled/config/config-powerpc64le-linux-gnu.sh`
`password_literal::P/Perl/bundled/config/config-powerpc64le-…`	security	healthy	`P/Perl/bundled/config/config-powerpc64le-linux-gnu.sh`
`password_literal::P/Perl/bundled/config/config-aarch64-linu…`	security	healthy	`P/Perl/bundled/config/config-aarch64-linux-musl.sh`
`password_literal::P/Perl/bundled/config/config-aarch64-linu…`	security	healthy	`P/Perl/bundled/config/config-aarch64-linux-musl.sh`
`password_literal::P/Perl/bundled/config/config-aarch64-linu…`	security	healthy	`P/Perl/bundled/config/config-aarch64-linux-musl.sh`
`password_literal::P/Perl/bundled/config/config-arm-linux-gn…`	security	healthy	`P/Perl/bundled/config/config-arm-linux-gnueabihf.sh`
`password_literal::P/Perl/bundled/config/config-arm-linux-gn…`	security	healthy	`P/Perl/bundled/config/config-arm-linux-gnueabihf.sh`
`password_literal::P/Perl/bundled/config/config-arm-linux-gn…`	security	healthy	`P/Perl/bundled/config/config-arm-linux-gnueabihf.sh`
`password_literal::P/Perl/bundled/config/config-x86_64-unkno…`	security	healthy	`P/Perl/bundled/config/config-x86_64-unknown-freebsd.sh`
`password_literal::P/Perl/bundled/config/config-x86_64-unkno…`	security	healthy	`P/Perl/bundled/config/config-x86_64-unknown-freebsd.sh`
`password_literal::P/Perl/bundled/config/config-x86_64-unkno…`	security	healthy	`P/Perl/bundled/config/config-x86_64-unknown-freebsd.sh`
`password_literal::P/Perl/bundled/config/config-x86_64-apple…`	security	healthy	`P/Perl/bundled/config/config-x86_64-apple-darwin.sh`
`password_literal::P/Perl/bundled/config/config-x86_64-apple…`	security	healthy	`P/Perl/bundled/config/config-x86_64-apple-darwin.sh`
`password_literal::P/Perl/bundled/config/config-x86_64-apple…`	security	healthy	`P/Perl/bundled/config/config-x86_64-apple-darwin.sh`
`password_literal::P/Perl/bundled/config/config-aarch64-appl…`	security	healthy	`P/Perl/bundled/config/config-aarch64-apple-darwin.sh`
`password_literal::P/Perl/bundled/config/config-aarch64-appl…`	security	healthy	`P/Perl/bundled/config/config-aarch64-apple-darwin.sh`
`password_literal::P/Perl/bundled/config/config-aarch64-appl…`	security	healthy	`P/Perl/bundled/config/config-aarch64-apple-darwin.sh`
`password_literal::P/Perl/bundled/config/config-aarch64-linu…`	security	healthy	`P/Perl/bundled/config/config-aarch64-linux-gnu.sh`
`password_literal::P/Perl/bundled/config/config-aarch64-linu…`	security	healthy	`P/Perl/bundled/config/config-aarch64-linux-gnu.sh`
`password_literal::P/Perl/bundled/config/config-aarch64-linu…`	security	healthy	`P/Perl/bundled/config/config-aarch64-linux-gnu.sh`

Label	Layer	Status	Path
`port:15`	network	healthy	`P/Perl/bundled/config/config-arm-linux-musleabihf.sh`
`port:05`	network	healthy	`P/Perl/bundled/config/config-arm-linux-musleabihf.sh`
`port:49`	network	healthy	`P/Perl/bundled/config/config-arm-linux-musleabihf.sh`
`port:18`	network	healthy	`P/Perl/bundled/config/config-powerpc64le-linux-gnu.sh`
`port:01`	network	healthy	`P/Perl/bundled/config/config-aarch64-linux-musl.sh`
`port:14`	network	healthy	`P/Perl/bundled/config/config-arm-linux-gnueabihf.sh`
`port:36`	network	healthy	`P/Perl/bundled/config/config-arm-linux-gnueabihf.sh`
`port:11`	network	healthy	`P/Perl/bundled/config/config-x86_64-unknown-freebsd.sh`
`port:42`	network	healthy	`P/Perl/bundled/config/config-x86_64-unknown-freebsd.sh`
`port:23`	network	healthy	`P/Perl/bundled/config/config-x86_64-apple-darwin.sh`
`port:58`	network	healthy	`P/Perl/bundled/config/config-x86_64-apple-darwin.sh`
`port:22`	network	healthy	`P/Perl/bundled/config/config-x86_64-apple-darwin.sh`
`port:27`	network	healthy	`P/Perl/bundled/config/config-aarch64-apple-darwin.sh`
`port:13`	network	healthy	`P/Perl/bundled/config/config-aarch64-linux-gnu.sh`
`port:64`	network	healthy	`H/HDF5/generate-H5Tinit/generate-h5tinit.sh`
`port:386`	network	healthy	`H/HDF5/generate-H5Tinit/generate-h5tinit.sh`

Label	Layer	Status	Path
`gha::update_manifest`	cicd	healthy	`.github/workflows/update_manifest.yml`
`gha::component_owners`	cicd	healthy	`.github/workflows/component_owners.yml`

Label	Layer	Status	Path
`update_manifest`	cicd	healthy	`.github/workflows/update_manifest.yml`
`run_self`	cicd	healthy	`.github/workflows/component_owners.yml`

Label	Layer	Status	Path
`repobility-clone-n1h21s8r`	software	healthy	`/tmp/repobility-clone-n1h21s8r`

Label	Layer	Status	Path
`gpu (detected)`	hardware	healthy	`.devcontainer/devcontainer.json`

Label	Layer	Status	Path
`GITHUB_TOKEN`	cicd	healthy	`—`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/f9ee5fc7-9daf-4d0d-bc65-db7443e60139/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/f9ee5fc7-9daf-4d0d-bc65-db7443e60139/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

JuliaPackaging/Yggdrasil

Complete repo analysis

directory 50+

file 50+

secret 24

port 16

pipeline 2

job 2

repo 1

gpu 1

env_var 1