Security: Codexproapi
1
Vulnerabilities
8
Credential Leaks
FAIL
Quality Gate
C
OWASP Grade
15.1h
Tech Debt (C)
Elite
DORA Rating
⚡
View AI Prompts
AI Fix Prompts
Auto-generated prompts to fix every issue — copy into Claude, GPT, or any AI coder
Powered by Repobility — scan your code at https://repobility.com
Quality Gate: Default Gate
| Metric | Condition | |
|---|---|---|
| ✗ | overall_score | 0.0 >= 50 |
| ✗ | security_score | 0.0 >= 40 |
| ✓ | critical_vulnerabilities | 0.0 <= 0 |
| ✗ | critical_credentials | 2.0 <= 0 |
| ✓ | duplication_pct | 5.6 <= 20 |
DORA Metrics
| Deploy Frequency | weekly (0.7/week) |
| Lead Time | 18.6 hours |
| MTTR | 0.0 hours |
| Change Failure Rate | 0.0% |
| Total Commits | 14 |
| Overall Rating | ELITE |
Vulnerabilities (1)
| Severity | ID | Package | Version | Summary |
|---|---|---|---|---|
| high | GHSA-37ch-88jc-xwx2 | path-to-regexp | 0.1.12 |
Credential Findings (8)
| Severity | Pattern | File | Line |
|---|---|---|---|
| critical | [sast:aljefra/taint-deserialization] Insecure Deserialization of Tainted Data | src/auth.js | 32 |
| critical | [sast:aljefra/taint-deserialization] Insecure Deserialization of Tainted Data | src/usageTracker.js | 20 |
| high | [sast:aljefra/ssrf-http-client] SSRF via HTTP Client with Dynamic URL | src/index.js | 282 |
| high | ElasticSearch URL | public/index.html | 11 |
| high | [sast:aljefra/ssrf-http-client] SSRF via HTTP Client with Dynamic URL | src/oauth.js | 85 |
| high | [sast:aljefra/ssrf-http-client] SSRF via HTTP Client with Dynamic URL | src/proxy.js | 265 |
| high | [sast:aljefra/ssrf-http-client] SSRF via HTTP Client with Dynamic URL | src/index.js | 316 |
| high | [sast:aljefra/ssrf-http-client] SSRF via HTTP Client with Dynamic URL | src/index.js | 59 |