Open-source intelligence for the global theater. Track everything from the corporate/private jets of the wealthy, and spy satellites, to seismic events in one unified interface. Hook an AI agent up to have it parse through data and find previously unseen correlations. The knowledge is available to all but rarely aggregated in the open, until now.
This report presents the forensic synthetic code analysis of BigBodyCobain/Shadowbroker, a Python project with 9,730 GitHub stars. SynthScan v2.0 examined 364,184 lines of code across 1045 source files, recording 8029 pattern matches distributed across 19 syntactic categories. The overall adjusted score of 30.6 places this repository in the Strong AI signal band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 8029 distinct pattern matches across 19 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .gitlab-ci.yml | 66 | # ── Backend image ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .gitlab-ci.yml | 87 | # ── Frontend image ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .gitlab-ci.yml | 108 | # ── Reverse mirror to GitHub ───────────────────────────────────────────── | COMMENT |
| MEDIUM | start.sh | 67 | # ── Zombie cleanup ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | start.sh | 97 | # ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | kill_wormhole.sh | 2 | # ============================================================ | COMMENT |
| MEDIUM | kill_wormhole.sh | 5 | # ============================================================ | COMMENT |
| MEDIUM⚡ | frontend/src/mesh/infonetEconomyClient.ts | 501 | // ─── Additional payload builders (write-action wiring phase) ───────────── | COMMENT |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 38 | // ─── Status ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 71 | // ─── Petitions ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 116 | // ─── Event payload validation ──────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 132 | // ─── Upgrades ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 157 | // ─── Markets ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 218 | // ─── Gates ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 262 | // ─── Reputation ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 285 | // ─── Bootstrap ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 309 | // ─── Signed write: append an Infonet economy event ─────────────────────── | COMMENT |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 445 | // ─── End-to-end sign + append helper ──────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 738 | // ─── Upgrade-hash governance — propose / signal-ready ────────────────── | COMMENT |
| MEDIUM | frontend/src/mesh/meshIdentity.ts | 971 | // ─── DH Key Exchange (X25519 / ECDH P-256 fallback) ───────────────────── | COMMENT |
| MEDIUM | frontend/src/mesh/meshIdentity.ts | 1328 | // ─── Contact Management (storage) ────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 1 | // ─── ShadowBroker Dashboard Data Types ───────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 5 | // ─── FLIGHTS ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 87 | // ─── SHIPS / MARITIME ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 145 | // ─── SATELLITES ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 211 | // ─── EARTHQUAKES ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 222 | // ─── GPS JAMMING ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 233 | // ─── FIRE HOTSPOTS (NASA FIRMS) ───────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 246 | // ─── TRAINS ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 265 | // ─── CCTV CAMERAS ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 277 | // ─── KIWISDR RECEIVERS ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 291 | // ─── PSK REPORTER SPOTS ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 304 | // ─── SATNOGS GROUND STATIONS ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 334 | // ─── TINYGS LORA SATELLITES ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 350 | // ─── POLICE SCANNERS (OpenMHZ) ────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 363 | // ─── SIGINT (APRS / Meshtastic / JS8Call) ─────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 402 | // ─── INTERNET OUTAGES (IODA) ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 416 | // ─── DATA CENTERS ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 500 | // ─── UAP SIGHTINGS ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 518 | // ─── WASTEWATER SCAN ────────────────────────────────��───────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 560 | // ─── CORRELATION ALERTS ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 562 | // ─── CROWDTHREAT ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 615 | // ─── NEWS / GLOBAL INCIDENTS ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 651 | // ─── UKRAINE FRONTLINE ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 668 | // ─── GDELT INCIDENTS ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 696 | // ─── LIVEUAMAP ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 713 | // ─── STOCKS & COMMODITIES ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 724 | // ─── SPACE WEATHER ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 739 | // ─── WEATHER (RAINVIEWER) ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 746 | // ─── AIRPORTS ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 757 | // ─── RADIO FEEDS ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 768 | // ─── ROUTE ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 777 | // ─── REGION DOSSIER ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 789 | // ─── FRESHNESS METADATA ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 793 | // ─── FIMI DISINFORMATION ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 819 | // ─── ROOT DATA OBJECT ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 1191 | // ─── SAR ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 1248 | // ─── COMPONENT PROPS ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/components/PredictionsPanel.tsx | 29 | // ─── Types ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/components/PredictionsPanel.tsx | 103 | // ─── Helpers ───────────────────────────────────────────────────────────────── | COMMENT |
| 1284 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | frontend/src/mesh/infonetEconomyClient.ts | 503 | export function buildChallengeVotePayload( | CODE |
| LOW⚡ | frontend/src/mesh/infonetEconomyClient.ts | 513 | export function buildResolutionStakePayload( | CODE |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 305 | export function fetchBootstrapMarketState(marketId: string): Promise<BootstrapMarketState> { | CODE |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 407 | export function buildChallengeFilePayload( | CODE |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 417 | export function buildGateSuspendFilePayload( | CODE |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 434 | export function buildBootstrapResolutionVotePayload( | CODE |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 548 | export function buildGateShutdownFilePayload( | CODE |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 565 | export function buildGateShutdownAppealFilePayload( | CODE |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 694 | export async function buildEvidenceSubmitPayload(args: { | CODE |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 740 | export function buildUpgradeProposePayload(args: { | CODE |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 761 | export function buildUpgradeSignalReadyPayload( | CODE |
| LOW | frontend/src/mesh/gateCompatTelemetry.ts | 74 | function compatTelemetryStorageSelection(): { | CODE |
| LOW | frontend/src/mesh/gateCompatTelemetry.ts | 123 | export function normalizeGateCompatReason(reason: string): string { | CODE |
| LOW | frontend/src/mesh/gateCompatTelemetry.ts | 210 | export function getGateCompatTelemetryEventName(): string { | CODE |
| LOW | frontend/src/mesh/gateCompatTelemetry.ts | 223 | export function getGateCompatTelemetrySnapshot(): GateCompatTelemetrySnapshot { | CODE |
| LOW | frontend/src/mesh/gateCompatTelemetry.ts | 289 | export function summarizeGateCompatTelemetry( | CODE |
| LOW | frontend/src/mesh/gateCompatTelemetry.ts | 310 | export function recordGateCompatTelemetry(input: { | CODE |
| LOW⚡ | frontend/src/mesh/controlPlaneStatusClient.ts | 185 | export function invalidatePrivacyProfileCache(): void { | CODE |
| LOW⚡ | frontend/src/mesh/controlPlaneStatusClient.ts | 193 | export function invalidateInfonetNodeStatusCache(): void { | CODE |
| LOW⚡ | frontend/src/mesh/controlPlaneStatusClient.ts | 197 | export async function fetchPrivacyProfileSnapshot( | CODE |
| LOW | frontend/src/mesh/controlPlaneStatusClient.ts | 221 | export async function fetchInfonetNodeStatusSnapshot( | CODE |
| LOW | frontend/src/mesh/controlPlaneStatusClient.ts | 234 | export async function fetchNodeSettingsSnapshot(): Promise<NodeSettingsSnapshot> { | CODE |
| LOW | frontend/src/mesh/controlPlaneStatusClient.ts | 292 | export async function ensureInfonetParticipantNodeReady(): Promise<void> { | CODE |
| LOW | frontend/src/mesh/meshGateLocalRuntime.ts | 270 | export async function isInlineGateCryptoSupported(): Promise<boolean> { | CODE |
| LOW | frontend/src/mesh/meshGateLocalRuntime.ts | 275 | export async function probeInlineGateCryptoSupport(): Promise<InlineGateCryptoSupport> { | CODE |
| LOW | frontend/src/mesh/meshGateLocalRuntime.ts | 333 | export async function decryptInlineGateMessages( | CODE |
| LOW | frontend/src/mesh/contactTrustSummary.ts | 25 | function normalizeExistingTrustSummary( | CODE |
| LOW | frontend/src/mesh/contactTrustSummary.ts | 120 | function deriveRootWitnessProvenanceState(args: { | CODE |
| LOW | frontend/src/mesh/contactTrustSummary.ts | 159 | export function rootWitnessContinuityLabel( | CODE |
| LOW⚡ | frontend/src/mesh/gateAccessProof.ts | 28 | function gateAccessProofExtendedMaxAgeMs(): number { | CODE |
| LOW⚡ | frontend/src/mesh/gateAccessProof.ts | 34 | function gateAccessHeaderReusableUntilMs(entry: { | CODE |
| LOW⚡ | frontend/src/mesh/gateAccessProof.ts | 44 | export function pruneExpiredGateAccessHeaders(now: number = Date.now()): void { | CODE |
| LOW⚡ | frontend/src/mesh/gateAccessProof.ts | 52 | export function invalidateGateAccessHeaders(gateId?: string): void { | CODE |
| LOW | frontend/src/mesh/gateCatalogSnapshot.ts | 54 | export function invalidateGateCatalogSnapshot(): void { | CODE |
| LOW | frontend/src/mesh/gateCatalogSnapshot.ts | 58 | export function invalidateGateDetailSnapshot(gateId?: string): void { | CODE |
| LOW | frontend/src/mesh/wormholeClient.ts | 151 | export function invalidateWormholeRuntimeCache(): void { | CODE |
| LOW | frontend/src/mesh/wormholeClient.ts | 232 | export async function updatePrivateDeliveryAction( | CODE |
| LOW | frontend/src/mesh/meshDmRatchet.ts | 139 | async function getOrCreateWrapKey(): Promise<CryptoKey> { | CODE |
| LOW | frontend/src/mesh/meshDmRatchet.ts | 188 | async function readPersistedRatchetState(): Promise<string | null> { | CODE |
| LOW | frontend/src/mesh/meshDmRatchet.ts | 203 | async function writePersistedRatchetState(value: string): Promise<void> { | CODE |
| LOW | frontend/src/mesh/meshDeadDrop.ts | 63 | export async function deadDropTokensForContacts( | CODE |
| LOW⚡ | frontend/src/mesh/wormholeIdentityClient.ts | 541 | function gateKeyStatusActiveRoomTtlMs(): number { | CODE |
| LOW⚡ | frontend/src/mesh/wormholeIdentityClient.ts | 547 | function gateKeyStatusSessionStreamTtlMs(): number { | CODE |
| LOW⚡ | frontend/src/mesh/wormholeIdentityClient.ts | 553 | function gateKeyStatusReusableUntilMs( | CODE |
| LOW⚡ | frontend/src/mesh/wormholeIdentityClient.ts | 587 | function normalizeGateCompatReason(reason: string): string { | CODE |
| LOW⚡ | frontend/src/mesh/wormholeIdentityClient.ts | 591 | function gateLocalRuntimeRequiredDetail(reason: string): string { | CODE |
| LOW⚡ | frontend/src/mesh/wormholeIdentityClient.ts | 595 | function recordGateLocalRuntimeRequired( | CODE |
| LOW⚡ | frontend/src/mesh/wormholeIdentityClient.ts | 1115 | export function getWormholeDmInviteImportErrorResult( | CODE |
| LOW⚡ | frontend/src/mesh/wormholeIdentityClient.ts | 1124 | export async function fetchWormholeDmRootHealth(): Promise<WormholeDmRootHealth> { | CODE |
| LOW⚡ | frontend/src/mesh/wormholeIdentityClient.ts | 1130 | export async function bootstrapWormholeIdentity(): Promise<WormholeIdentity> { | CODE |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 63 | export function isWormholePrepAbortedError(error: unknown): boolean { | CODE |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 68 | export function abortWormholeInteractivePrep(): void { | CODE |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 571 | function isGateSessionStreamActiveForGate(gateId: string): boolean { | CODE |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 608 | function buildGateLocalRuntimeRequiredError( | CODE |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 617 | function gateCompatApprovalStorage(): Storage | null { | CODE |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 639 | function ensureGateCompatApprovalsLoaded(): void { | CODE |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 663 | function persistGateCompatApprovals(): void { | CODE |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 681 | function hasApprovedGateCompatFallback(gateId: string): boolean { | CODE |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 687 | export function approveGateCompatFallback(gateId: string): void { | CODE |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 708 | export function hasGateCompatFallbackApproval(gateId: string): boolean { | CODE |
| 4147 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | backend/auth.py | 62 | def _current_admin_key() -> str: | CODE |
| MEDIUM | backend/auth.py | 69 | def _allow_insecure_admin() -> bool: | CODE |
| MEDIUM | backend/auth.py | 79 | def _debug_mode_enabled() -> bool: | CODE |
| MEDIUM | backend/auth.py | 86 | def _admin_key_required_in_production() -> bool: | CODE |
| MEDIUM | backend/auth.py | 1025 | def _external_assurance_status_snapshot() -> dict[str, Any]: | CODE |
| MEDIUM | backend/auth.py | 1364 | def _anonymous_mode_state() -> dict[str, Any]: | CODE |
| LOW⚡ | backend/auth.py | 65 | except Exception: | CODE |
| LOW⚡ | backend/auth.py | 75 | except Exception: | CODE |
| LOW⚡ | backend/auth.py | 82 | except Exception: | CODE |
| LOW⚡ | backend/auth.py | 90 | except Exception: | CODE |
| LOW⚡ | backend/auth.py | 100 | except Exception as exc: | CODE |
| LOW⚡ | backend/auth.py | 562 | except Exception: | CODE |
| LOW⚡ | backend/auth.py | 584 | except Exception: | CODE |
| LOW⚡ | backend/auth.py | 587 | except Exception as exc: | CODE |
| LOW⚡ | backend/auth.py | 1288 | except Exception: | CODE |
| LOW⚡ | backend/auth.py | 1389 | except Exception: | CODE |
| LOW | backend/auth.py | 379 | except Exception: | CODE |
| LOW | backend/auth.py | 535 | except Exception: | CODE |
| LOW | backend/auth.py | 603 | except Exception: | CODE |
| LOW | backend/auth.py | 644 | except Exception: | CODE |
| LOW | backend/auth.py | 1067 | except Exception as exc: | CODE |
| LOW | backend/auth.py | 1087 | except Exception as exc: | CODE |
| LOW | backend/auth.py | 1135 | except Exception: | CODE |
| LOW | backend/auth.py | 1138 | except Exception: | CODE |
| LOW | backend/auth.py | 1214 | except Exception: | CODE |
| LOW | backend/wormhole_server.py | 48 | except Exception as exc: | CODE |
| LOW | backend/wormhole_server.py | 109 | except Exception: | CODE |
| LOW | backend/node_state.py | 87 | except Exception: | CODE |
| LOW | backend/node_state.py | 183 | except Exception: | CODE |
| LOW | backend/node_state.py | 252 | except Exception as exc: | CODE |
| MEDIUM | backend/main.py | 390 | def _privacy_core_status() -> dict[str, Any]: | CODE |
| MEDIUM | backend/main.py | 1528 | def _swarm_bootstrap_after_transport_ready() -> None: | CODE |
| MEDIUM | backend/main.py | 2677 | def _safe_int(val, default=0): | CODE |
| MEDIUM | backend/main.py | 2761 | def _startup_wormhole_runtime(): | CODE |
| MEDIUM | backend/main.py | 2790 | def _prime_route_database(): | CODE |
| MEDIUM | backend/main.py | 2802 | def _prime_aircraft_database(): | CODE |
| MEDIUM | backend/main.py | 3473 | def _blocking_upgrade() -> str | None: | CODE |
| MEDIUM | backend/main.py | 3590 | def _upgrade_invite_scoped_contact_preferences_background() -> dict[str, Any]: | CODE |
| MEDIUM | backend/main.py | 3831 | def _do_refresh(): | CODE |
| MEDIUM | backend/main.py | 6825 | def _rns_private_dm_ready() -> bool: | CODE |
| MEDIUM | backend/main.py | 6851 | def _high_privacy_profile_enabled() -> bool: | CODE |
| LOW⚡ | backend/main.py | 53 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 349 | except Exception as exc: | CODE |
| LOW⚡ | backend/main.py | 1534 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 1545 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 2195 | except Exception as exc: | CODE |
| LOW⚡ | backend/main.py | 2198 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 2213 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 2465 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 2750 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 2753 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 2856 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 2863 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 2867 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 2873 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 3495 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 3549 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 3596 | except Exception as exc: | CODE |
| LOW⚡ | backend/main.py | 3607 | except Exception as exc: | CODE |
| LOW⚡ | backend/main.py | 3751 | except Exception: | CODE |
| 1011 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | backend/auth.py | 45 | CODE | |
| LOW | backend/auth.py | 45 | CODE | |
| LOW | backend/auth.py | 45 | CODE | |
| LOW | backend/auth.py | 45 | CODE | |
| LOW | backend/wormhole_server.py | 3 | CODE | |
| LOW | backend/main.py | 225 | CODE | |
| LOW | backend/main.py | 225 | CODE | |
| LOW | backend/main.py | 263 | CODE | |
| LOW | backend/main.py | 297 | CODE | |
| LOW | backend/main.py | 297 | CODE | |
| LOW | backend/main.py | 9183 | CODE | |
| LOW | backend/main.py | 9271 | CODE | |
| LOW | backend/main.py | 9292 | CODE | |
| LOW | backend/limiter.py | 29 | CODE | |
| LOW | backend/routers/mesh_public.py | 45 | CODE | |
| LOW | backend/routers/mesh_public.py | 54 | CODE | |
| LOW | backend/routers/mesh_public.py | 55 | CODE | |
| LOW | backend/routers/cctv.py | 6 | CODE | |
| LOW | backend/routers/cctv.py | 8 | CODE | |
| LOW | backend/routers/osint.py | 2 | CODE | |
| LOW | backend/routers/mesh_peer_sync.py | 5 | CODE | |
| LOW | backend/routers/mesh_peer_sync.py | 6 | CODE | |
| LOW | backend/routers/mesh_peer_sync.py | 8 | CODE | |
| LOW | backend/routers/mesh_peer_sync.py | 8 | CODE | |
| LOW | backend/routers/mesh_peer_sync.py | 9 | CODE | |
| LOW | backend/routers/mesh_peer_sync.py | 10 | CODE | |
| LOW | backend/routers/mesh_peer_sync.py | 11 | CODE | |
| LOW | backend/routers/health.py | 3 | CODE | |
| LOW | backend/routers/health.py | 4 | CODE | |
| LOW | backend/routers/intel_feeds.py | 2 | CODE | |
| LOW | backend/routers/tools.py | 4 | CODE | |
| LOW | backend/routers/tools.py | 9 | CODE | |
| LOW | backend/routers/mesh_dm.py | 2 | CODE | |
| LOW | backend/routers/mesh_dm.py | 3 | CODE | |
| LOW | backend/routers/mesh_dm.py | 12 | CODE | |
| LOW | backend/routers/mesh_dm.py | 19 | CODE | |
| LOW | backend/routers/mesh_dm.py | 20 | CODE | |
| LOW | backend/routers/mesh_dm.py | 20 | CODE | |
| LOW | backend/routers/entity_graph.py | 2 | CODE | |
| LOW | backend/routers/infonet.py | 18 | CODE | |
| LOW | backend/routers/infonet.py | 28 | CODE | |
| LOW | backend/routers/sigint.py | 2 | CODE | |
| LOW | backend/routers/sigint.py | 3 | CODE | |
| LOW | backend/routers/sigint.py | 5 | CODE | |
| LOW | backend/routers/radio.py | 2 | CODE | |
| LOW | backend/routers/radio.py | 3 | CODE | |
| LOW | backend/routers/radio.py | 5 | CODE | |
| LOW | backend/routers/mesh_operator.py | 3 | CODE | |
| LOW | backend/routers/mesh_operator.py | 4 | CODE | |
| LOW | backend/routers/mesh_operator.py | 5 | CODE | |
| LOW | backend/routers/mesh_operator.py | 7 | CODE | |
| LOW | backend/routers/analytics.py | 3 | CODE | |
| LOW | backend/routers/scm.py | 2 | CODE | |
| LOW | backend/routers/mesh_oracle.py | 3 | CODE | |
| LOW | backend/routers/mesh_oracle.py | 3 | CODE | |
| LOW | backend/routers/mesh_oracle.py | 4 | CODE | |
| LOW | backend/routers/mesh_oracle.py | 5 | CODE | |
| LOW | backend/routers/mesh_oracle.py | 7 | CODE | |
| LOW | backend/routers/wormhole.py | 4 | CODE | |
| LOW | backend/routers/wormhole.py | 8 | CODE | |
| 698 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | backend/auth.py | 55 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | backend/node_state.py | 58 | def set_sync_state(state: SyncWorkerState) -> None: | CODE |
| LOW | backend/main.py | 21 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/routers/mesh_public.py | 65 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/routers/cctv.py | 10 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/routers/mesh_peer_sync.py | 14 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/routers/intel_feeds.py | 19 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/routers/tools.py | 11 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | backend/routers/mesh_dm.py | 34 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/routers/infonet.py | 598 | __all__ = ["router"] | CODE |
| LOW | backend/routers/admin.py | 18 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | backend/routers/ai_intel.py | 27 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/routers/mesh_operator.py | 9 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/routers/analytics.py | 34 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/routers/wormhole.py | 157 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/routers/data.py | 16 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | backend/routers/agent_shell.py | 34 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | backend/routers/agent_shell.py | 42 | def _set_winsize(fd: int, rows: int, cols: int) -> None: | CODE |
| LOW | …ckend/tests/mesh/test_signed_write_transport_matrix.py | 65 | def _set_transport_tier(monkeypatch: pytest.MonkeyPatch, tier: str) -> None: | CODE |
| LOW⚡ | backend/services/openclaw_channel.py | 29 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/unusual_whales_connector.py | 24 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/ais_stream.py | 14 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/openclaw_infonet.py | 21 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/satnogs_fetcher.py | 11 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/openclaw_watchdog.py | 20 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/privacy_core_attestation.py | 18 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/liveuamap_settings.py | 12 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/liveuamap_settings.py | 38 | def set_liveuamap_ui_opt_in(opted_in: bool) -> None: | CODE |
| LOW | backend/services/cctv_pipeline.py | 12 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/region_dossier.py | 9 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | backend/services/tinygs_fetcher.py | 29 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/privacy_core_client.py | 28 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/transport_lane_isolation.py | 6 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | backend/services/ai_pin_store.py | 21 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/thermal_sentinel.py | 18 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | backend/services/carrier_tracker.py | 68 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/carrier_tracker.py | 601 | def update_carrier_positions() -> None: | CODE |
| LOW⚡ | backend/services/ai_intel_store.py | 31 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/layer_enable_refresh.py | 11 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/updater.py | 26 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/kiwisdr_fetcher.py | 29 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/liveuamap_scraper.py | 9 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/openclaw_bridge.py | 20 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | backend/services/feed_ingester.py | 21 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/fetch_health.py | 10 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/oracle_service.py | 12 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/radio_intercept.py | 10 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/shodan_connector.py | 20 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/geopolitics.py | 19 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/sentinel_search.py | 16 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/correlation_engine.py | 20 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/analysis_zone_store.py | 20 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/prediction_markets_settings.py | 12 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | backend/services/prediction_markets_settings.py | 33 | def set_prediction_markets_ui_opt_in(opted_in: bool) -> None: | CODE |
| LOW | backend/services/env_check.py | 32 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/agent_shell_settings.py | 12 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/data_fetcher.py | 111 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/tor_hidden_service.py | 20 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/psk_reporter_fetcher.py | 14 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/telegram_translate.py | 14 | logger = logging.getLogger(__name__) | CODE |
| 132 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | backend/auth.py | 157 | CODE | |
| LOW | backend/auth.py | 179 | CODE | |
| LOW | backend/main.py | 121 | CODE | |
| LOW | backend/main.py | 1271 | CODE | |
| LOW | backend/main.py | 1979 | CODE | |
| LOW | backend/main.py | 2115 | CODE | |
| LOW | backend/main.py | 2203 | CODE | |
| LOW | backend/main.py | 2228 | CODE | |
| LOW | backend/main.py | 2367 | CODE | |
| LOW | backend/main.py | 2695 | CODE | |
| LOW | backend/main.py | 3215 | CODE | |
| LOW | backend/main.py | 3619 | CODE | |
| LOW | backend/main.py | 4382 | CODE | |
| LOW | backend/main.py | 5971 | CODE | |
| LOW | backend/main.py | 7524 | CODE | |
| LOW | backend/main.py | 10317 | CODE | |
| LOW | backend/main.py | 2734 | CODE | |
| LOW | backend/limiter.py | 80 | CODE | |
| LOW | backend/routers/mesh_public.py | 381 | CODE | |
| LOW | backend/routers/mesh_public.py | 620 | CODE | |
| LOW | backend/routers/mesh_public.py | 784 | CODE | |
| LOW | backend/routers/mesh_public.py | 1783 | CODE | |
| LOW | backend/routers/cctv.py | 241 | CODE | |
| LOW | backend/routers/infonet.py | 448 | CODE | |
| LOW | backend/routers/ai_intel.py | 1001 | CODE | |
| LOW | backend/routers/ai_intel.py | 1122 | CODE | |
| LOW | backend/routers/ai_intel.py | 1350 | CODE | |
| LOW | backend/routers/ai_intel.py | 2943 | CODE | |
| LOW | backend/routers/ai_intel.py | 3183 | CODE | |
| LOW | backend/routers/ai_intel.py | 3383 | CODE | |
| LOW | backend/routers/ai_intel.py | 3406 | CODE | |
| LOW | backend/routers/ai_intel.py | 3229 | CODE | |
| LOW | backend/routers/mesh_operator.py | 33 | CODE | |
| LOW | backend/routers/data.py | 333 | CODE | |
| LOW | backend/tests/test_2c_exception_visibility.py | 606 | CODE | |
| LOW | backend/tests/test_3c_router_extraction.py | 134 | CODE | |
| LOW | backend/tests/test_per_operator_outbound_attribution.py | 246 | CODE | |
| LOW | backend/tests/mesh/test_gate_secret_rotation_guard.py | 29 | CODE | |
| LOW | backend/services/openclaw_channel.py | 165 | CODE | |
| LOW | backend/services/openclaw_channel.py | 684 | CODE | |
| LOW | backend/services/unusual_whales_connector.py | 138 | CODE | |
| LOW | backend/services/ais_stream.py | 466 | CODE | |
| LOW | backend/services/ais_stream.py | 536 | CODE | |
| LOW | backend/services/ais_stream.py | 596 | CODE | |
| LOW | backend/services/sigint_bridge.py | 333 | CODE | |
| LOW | backend/services/sigint_bridge.py | 878 | CODE | |
| LOW | backend/services/sigint_bridge.py | 978 | CODE | |
| LOW | backend/services/sigint_bridge.py | 1267 | CODE | |
| LOW | backend/services/openclaw_infonet.py | 152 | CODE | |
| LOW | backend/services/openclaw_watchdog.py | 105 | CODE | |
| LOW | backend/services/openclaw_watchdog.py | 551 | CODE | |
| LOW | backend/services/openclaw_watchdog.py | 612 | CODE | |
| LOW | backend/services/entity_profile.py | 28 | CODE | |
| LOW | backend/services/privacy_core_attestation.py | 124 | CODE | |
| LOW | backend/services/cctv_pipeline.py | 365 | CODE | |
| LOW | backend/services/cctv_pipeline.py | 506 | CODE | |
| LOW | backend/services/cctv_pipeline.py | 731 | CODE | |
| LOW | backend/services/cctv_pipeline.py | 799 | CODE | |
| LOW | backend/services/region_dossier.py | 67 | CODE | |
| LOW | backend/services/region_dossier.py | 167 | CODE | |
| 189 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | backend/main.py | 0 | copy any gate_message chain events into the local gate_store for read/decrypt. only events that are resident in the loca | STRING |
| HIGH | backend/routers/mesh_public.py | 0 | copy any gate_message chain events into the local gate_store for read/decrypt. only events that are resident in the loca | STRING |
| HIGH | backend/routers/mesh_peer_sync.py | 0 | copy any gate_message chain events into the local gate_store for read/decrypt. only events that are resident in the loca | STRING |
| HIGH | backend/main.py | 0 | list all peers (or filter by bucket: sync, push, bootstrap). | STRING |
| HIGH | backend/routers/mesh_public.py | 0 | list all peers (or filter by bucket: sync, push, bootstrap). | STRING |
| HIGH | backend/routers/mesh_operator.py | 0 | list all peers (or filter by bucket: sync, push, bootstrap). | STRING |
| HIGH | backend/main.py | 0 | add a peer to the store. body: {peer_url, transport?, label?, role?, buckets?[]}. | STRING |
| HIGH | backend/routers/mesh_public.py | 0 | add a peer to the store. body: {peer_url, transport?, label?, role?, buckets?[]}. | STRING |
| HIGH | backend/routers/mesh_operator.py | 0 | add a peer to the store. body: {peer_url, transport?, label?, role?, buckets?[]}. | STRING |
| HIGH | backend/main.py | 0 | remove a peer. body: {peer_url, bucket?}. if bucket omitted, removes from all buckets. | STRING |
| HIGH | backend/routers/mesh_public.py | 0 | remove a peer. body: {peer_url, bucket?}. if bucket omitted, removes from all buckets. | STRING |
| HIGH | backend/routers/mesh_operator.py | 0 | remove a peer. body: {peer_url, bucket?}. if bucket omitted, removes from all buckets. | STRING |
| HIGH | backend/main.py | 0 | enable or disable a peer. body: {peer_url, bucket, enabled: bool}. | STRING |
| HIGH | backend/routers/mesh_public.py | 0 | enable or disable a peer. body: {peer_url, bucket, enabled: bool}. | STRING |
| HIGH | backend/routers/mesh_operator.py | 0 | enable or disable a peer. body: {peer_url, bucket, enabled: bool}. | STRING |
| HIGH | backend/services/mesh/mesh_reputation.py | 0 | actually write to disk (called by timer or atexit). | STRING |
| HIGH | backend/services/mesh/mesh_dm_relay.py | 0 | actually write to disk (called by timer or atexit). | STRING |
| HIGH | backend/services/mesh/mesh_oracle.py | 0 | actually write to disk (called by timer or atexit). | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | backend/routers/ai_intel.py | 1670 | "returns": "{best_match: {...}|null, results: [{source_layer, entity_type, label, id, callsign, registra | CODE |
| HIGH⚡ | backend/services/privacy_core_client.py | 760 | "Build it with: cd privacy-core && cargo build --release" | CODE |
| HIGH | backend/services/updater.py | 31 | "docker compose pull && docker compose up -d" | CODE |
| HIGH | backend/services/infonet/bootstrap/argon2id.py | 12 | "bootstrap_resolution_vote" || protocol_version || node_id || | STRING |
| HIGH | backend/services/infonet/bootstrap/argon2id.py | 13 | market_id || side || snapshot_event_hash || pow_nonce | STRING |
| HIGH | …es/infonet/privacy/function_keys/challenge_response.py | 6 | Operator issues a fresh nonce; key-holder signs (challenge || nonce | STRING |
| HIGH | …nd/services/infonet/privacy/function_keys/nullifier.py | 8 | nullifier = SHA-256(secret || operator_id) | STRING |
| HIGH | …nd/services/infonet/privacy/function_keys/nullifier.py | 35 | """Return the hex SHA-256 of ``secret || operator_id`` (UTF-8 for | STRING |
| HIGH | backend/services/infonet/markets/evidence.py | 9 | - ``evidence_content_hash`` — SHA-256 of ``(market_id || claimed_outcome | STRING |
| HIGH | backend/services/infonet/markets/evidence.py | 14 | - ``submission_hash`` — SHA-256 of ``(evidence_content_hash || node_id | STRING |
| HIGH | backend/services/infonet/markets/evidence.py | 67 | """SHA-256 of ``content_hash || node_id || timestamp``. | STRING |
| HIGH | scripts/e2e_dm_short_address_live.py | 1087 | "cd /home/ubuntu/Shadowbroker && docker compose -f docker-compose.yml -f docker-compose.participant.yml rest | CODE |
| HIGH⚡ | scripts/e2e_dm_short_address_live.py | 1701 | "cp /tmp/docker-compose.participant.yml docker-compose.participant.yml 2>/dev/null || true && " | STRING |
| HIGH⚡ | scripts/e2e_dm_short_address_live.py | 1707 | "docker cp /tmp/mesh_dm_relay.py shadowbroker-backend:/app/services/mesh/mesh_dm_relay.py 2>/dev/null || true; " | STRING |
| HIGH⚡ | scripts/e2e_dm_short_address_live.py | 1708 | "docker cp /tmp/mesh_signed_events.py shadowbroker-backend:/app/services/mesh/mesh_signed_events.py 2>/dev/null | STRING |
| HIGH⚡ | scripts/e2e_dm_short_address_live.py | 1709 | "docker cp /tmp/openclaw_infonet.py shadowbroker-backend:/app/services/openclaw_infonet.py 2>/dev/null || true; | STRING |
| HIGH⚡ | scripts/e2e_dm_short_address_live.py | 1710 | "docker cp /tmp/wormhole_supervisor.py shadowbroker-backend:/app/services/wormhole_supervisor.py 2>/dev/null || | STRING |
| HIGH⚡ | scripts/e2e_dm_short_address_live.py | 1711 | "docker cp /tmp/tor_hidden_service.py shadowbroker-backend:/app/services/tor_hidden_service.py 2>/dev/null || tr | STRING |
| HIGH⚡ | scripts/e2e_dm_short_address_live.py | 1712 | "docker cp /tmp/privacy_core_attestation.py shadowbroker-backend:/app/services/privacy_core_attestation.py 2>/de | STRING |
| HIGH⚡ | scripts/e2e_dm_short_address_live.py | 1713 | "docker cp /tmp/wormhole_router.py shadowbroker-backend:/app/routers/wormhole.py 2>/dev/null || true; " | STRING |
| HIGH⚡ | scripts/e2e_dm_short_address_live.py | 1714 | "docker cp /tmp/main.py shadowbroker-backend:/app/main.py 2>/dev/null || true; " | STRING |
| HIGH | scripts/e2e_dm_short_address_live.py | 1659 | "git fetch origin && git reset --hard origin/main && " | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docker-compose.gitlab.yml | 1 | # Compose override that points the backend and frontend at the GitLab | COMMENT |
| LOW | docker-compose.yml | 41 | - MESH_INFONET_ALLOW_CLEARNET_SYNC=${MESH_INFONET_ALLOW_CLEARNET_SYNC:-false} | COMMENT |
| LOW | .gitlab-ci.yml | 1 | # GitLab CI/CD for Shadowbroker | COMMENT |
| LOW | .gitlab-ci.yml | 21 | # - The image build/push uses $CI_JOB_TOKEN, which GitLab provides | COMMENT |
| LOW | frontend/vitest.config.js | 1 | const path = require('path'); | COMMENT |
| LOW | frontend/vitest.config.js | 21 | // findByText / waitFor against React reconciliation): | COMMENT |
| LOW | frontend/next.config.ts | 1 | import type { NextConfig } from 'next'; | COMMENT |
| LOW | frontend/src/components/AIIntelPanel.tsx | 381 | const [nodeId, setNodeId] = React.useState(''); | COMMENT |
| LOW | frontend/src/components/MeshChat.tsx | 1 | // Re-export from decomposed MeshChat module. | COMMENT |
| LOW | …d/src/__tests__/mesh/messagesViewFirstContact.test.tsx | 861 | fireEvent.click(screen.getByRole('button', { name: 'CONTACTS' })); | COMMENT |
| LOW | …d/src/__tests__/mesh/messagesViewFirstContact.test.tsx | 881 | // (a) CI runner starvation — two parallel ci.yml invocations | COMMENT |
| LOW | frontend/src/lib/api.ts | 1 | // All API calls use relative paths (e.g. /api/flights). | COMMENT |
| LOW | backend/ais_proxy.js | 1 | // AIS Stream WebSocket proxy. | COMMENT |
| LOW | backend/routers/health.py | 101 | # who care about MITM-protection posture deserve a visible signal. | COMMENT |
| LOW | backend/routers/tools.py | 121 | # ── Sentinel proxy routes (Issue #299/#300/#301, reported by tg12) ────────── | COMMENT |
| LOW | backend/routers/tools.py | 161 | # any same-origin script (XSS, malicious browser extension, dev-tools HAR | COMMENT |
| LOW | backend/routers/ai_intel.py | 2661 | # Issue #302 (tg12): pre-fix, GET /api/ai/connect-info had two problems: | COMMENT |
| LOW | backend/routers/ai_intel.py | 2681 | # ``hmac_secret_set: false`` | COMMENT |
| LOW | backend/routers/ai_intel.py | 3141 | @router.get("/api/ai/channel/status", dependencies=[Depends(require_local_operator)]) | COMMENT |
| LOW | backend/routers/ai_intel.py | 3321 | # ws://host/api/ai/channel/ws?ts=...&nonce=...&sig=... | COMMENT |
| LOW | backend/tests/test_ais_upstream_health.py | 161 | # alone doesn't escalate when no key is set." | COMMENT |
| LOW | backend/tests/test_control_surface_auth.py | 81 | # STAC search + remote SWIR raster reads. Unauthenticated abuse | COMMENT |
| LOW | backend/tests/test_sentinel_routes_auth_gate.py | 221 | assert r.status_code == 200 | COMMENT |
| LOW | backend/services/openclaw_channel.py | 2041 | # --------------------------------------------------------------------------- | COMMENT |
| LOW | backend/services/ais_stream.py | 341 | _vessels: dict[int, dict] = {} | COMMENT |
| LOW | backend/services/config.py | 141 | MESH_DM_REQUEST_MAILBOX_LIMIT: int = 12 | COMMENT |
| LOW | backend/services/config.py | 181 | # When False, mailbox bindings are memory-only (agents re-register on restart). | COMMENT |
| LOW | backend/services/config.py | 201 | # Relative paths resolve from the backend directory. | COMMENT |
| LOW | backend/services/config.py | 221 | # Ordinary shipped gate flows keep compose/post local and submit encrypted | COMMENT |
| LOW | backend/services/config.py | 281 | # before send-time. Anonymous mode uses a cadence gate so user clicks do | COMMENT |
| LOW | backend/services/config.py | 301 | # dev = permissive local/dev behavior; testnet-private = strict private | COMMENT |
| LOW | backend/services/config.py | 321 | MESH_PRIVATE_CLEARNET_FALLBACK_ACKNOWLEDGE: bool = False | COMMENT |
| LOW | backend/services/config.py | 341 | # case backend/services/network_utils.py auto-generates a stable | COMMENT |
| LOW | backend/services/region_dossier.py | 21 | # | COMMENT |
| LOW | backend/services/carrier_tracker.py | 161 | }, | COMMENT |
| LOW | backend/services/network_utils.py | 21 | _session.mount("https://", HTTPAdapter(max_retries=_retry, pool_maxsize=20)) | COMMENT |
| LOW | backend/services/network_utils.py | 41 | # The handle: | COMMENT |
| LOW | backend/services/mesh/mesh_crypto.py | 81 | # | COMMENT |
| LOW | backend/services/mesh/mesh_rns.py | 41 | # ── S15B: DM wire-visible ciphertext length alignment ────────────────── | COMMENT |
| LOW | backend/services/mesh/mesh_rollout_flags.py | 41 | # recoverable from disk. Epoch/event_id ceilings already bound *policy* | COMMENT |
| LOW | backend/services/mesh/mesh_rollout_flags.py | 61 | # observed a given author, but a fresh peer (empty sequence state) would | COMMENT |
| LOW | backend/services/mesh/mesh_rollout_flags.py | 81 | # migration, but doing so should degrade release readiness immediately. | COMMENT |
| LOW | backend/services/mesh/mesh_gate_mls.py | 2001 | int(binding.epoch), | COMMENT |
| LOW | backend/services/fetchers/earth_observation.py | 681 | # NUFORC's website switched to a JS-rendered Mapbox GL map. The old HTML | COMMENT |
| LOW | desktop-shell/tauri-skeleton/dev.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | desktop-shell/tauri-skeleton/build.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | desktop-shell/tauri-skeleton/build.sh | 21 | # The web deployment (Docker/Vercel) is unaffected - it continues to use | COMMENT |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/policy.rs | 1 | //! Native-side policy enforcement and audit ring for local-control commands. | COMMENT |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/companion.rs | 1 | //! Optional localhost/browser companion mode. | COMMENT |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/companion.rs | 21 | //! `main.rs` (not by `companion_enable`) so that the Tauri main window also | COMMENT |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/companion.rs | 61 | } | COMMENT |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/tray.rs | 1 | //! Cross-platform tray / menu-bar background lifecycle. | COMMENT |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/main.rs | 21 | pub audit_ring: SharedAuditRing, | COMMENT |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/main.rs | 41 | COMMENT | |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/main.rs | 61 | // every invocation in its AuditRing. | COMMENT |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/main.rs | 501 | // JavaScript on every page load (including full reloads), | COMMENT |
| LOW | …shell/tauri-skeleton/src-tauri/src/companion_server.rs | 1 | //! Loopback-only HTTP server for packaged desktop builds. | COMMENT |
| LOW | privacy-core/src/lib.rs | 1 | //! Privacy Core skeleton for the ShadowBroker / Infonet migration. | COMMENT |
| LOW | .github/workflows/ci.yml | 1 | name: CI - Lint & Test | COMMENT |
| LOW | helm/chart/values-gitlab.yaml | 1 | # Helm values override that points the chart at the GitLab Container | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | frontend/src/mesh/meshDmRatchet.ts | 583 | // Step 1: new receiving chain | COMMENT |
| LOW⚡ | frontend/src/mesh/meshDmRatchet.ts | 590 | // Step 2: new sending chain with a fresh DH key | COMMENT |
| LOW | backend/main.py | 2259 | # Step 1: Ask the peer which gates it has and how many events each | COMMENT |
| LOW | backend/main.py | 2297 | # Step 2: For each gate with new events, pull the batch | COMMENT |
| LOW⚡ | backend/tests/mesh/test_secure_storage_passphrase.py | 339 | # Step 1: create raw envelope (simulate old Docker behavior) | COMMENT |
| LOW⚡ | backend/tests/mesh/test_secure_storage_passphrase.py | 344 | # Step 2: now set up with secret and no raw fallback | COMMENT |
| LOW | backend/services/region_dossier.py | 206 | # Step 1: Reverse geocode | STRING |
| LOW | backend/services/region_dossier.py | 222 | # Step 2: Parallel fetch with real timeouts that do not block on executor shutdown | STRING |
| LOW⚡ | backend/services/tinygs_fetcher.py | 325 | # Step 1: Get TLE data (from cache or CelesTrak) | COMMENT |
| LOW⚡ | backend/services/tinygs_fetcher.py | 331 | # Step 2: Try to fetch TinyGS telemetry (non-blocking, uses cache) | COMMENT |
| LOW⚡ | backend/services/tinygs_fetcher.py | 334 | # Step 3: Propagate all satellites via SGP4 | COMMENT |
| LOW⚡ | backend/services/tinygs_fetcher.py | 340 | # Step 4: Merge and filter | COMMENT |
| LOW | backend/services/thermal_sentinel.py | 55 | # Step 1: STAC search for Sentinel-2 scenes | COMMENT |
| LOW | backend/services/thermal_sentinel.py | 69 | # Step 2: Try SWIR band analysis if rasterio is available | COMMENT |
| LOW | backend/services/thermal_sentinel.py | 88 | # Step 3: Cross-reference with FIRMS fire data | COMMENT |
| LOW⚡ | backend/services/fetchers/earth_observation.py | 1220 | # Step 1: GET the month index to capture session cookies + fresh nonce. | COMMENT |
| LOW | backend/services/fetchers/earth_observation.py | 1247 | # Step 2: POST to admin-ajax.php with length=-1 to pull the whole month. | COMMENT |
| LOW | backend/services/infonet/markets/resolution.py | 240 | # Step 0: zero-evidence → INVALID, return everything. | COMMENT |
| LOW | backend/services/infonet/markets/resolution.py | 358 | # Step 2: oracle-rep supermajority. | COMMENT |
| LOW | backend/services/infonet/markets/resolution.py | 410 | # Step 3: distribute resolution stakes per rep type. | COMMENT |
| LOW | backend/services/infonet/markets/resolution.py | 456 | # Step 4: evidence bonds. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | frontend/src/mesh/meshDmRatchet.ts | 583 | // Step 1: new receiving chain | COMMENT |
| LOW⚡ | frontend/src/mesh/meshDmRatchet.ts | 590 | // Step 2: new sending chain with a fresh DH key | COMMENT |
| LOW | backend/main.py | 2259 | # Step 1: Ask the peer which gates it has and how many events each | COMMENT |
| LOW | backend/main.py | 2297 | # Step 2: For each gate with new events, pull the batch | COMMENT |
| LOW⚡ | backend/tests/mesh/test_secure_storage_passphrase.py | 339 | # Step 1: create raw envelope (simulate old Docker behavior) | COMMENT |
| LOW⚡ | backend/tests/mesh/test_secure_storage_passphrase.py | 344 | # Step 2: now set up with secret and no raw fallback | COMMENT |
| LOW | backend/services/region_dossier.py | 206 | # Step 1: Reverse geocode | STRING |
| LOW | backend/services/region_dossier.py | 222 | # Step 2: Parallel fetch with real timeouts that do not block on executor shutdown | STRING |
| LOW⚡ | backend/services/tinygs_fetcher.py | 325 | # Step 1: Get TLE data (from cache or CelesTrak) | COMMENT |
| LOW⚡ | backend/services/tinygs_fetcher.py | 331 | # Step 2: Try to fetch TinyGS telemetry (non-blocking, uses cache) | COMMENT |
| LOW⚡ | backend/services/tinygs_fetcher.py | 334 | # Step 3: Propagate all satellites via SGP4 | COMMENT |
| LOW⚡ | backend/services/tinygs_fetcher.py | 340 | # Step 4: Merge and filter | COMMENT |
| LOW | backend/services/thermal_sentinel.py | 55 | # Step 1: STAC search for Sentinel-2 scenes | COMMENT |
| LOW | backend/services/thermal_sentinel.py | 69 | # Step 2: Try SWIR band analysis if rasterio is available | COMMENT |
| LOW | backend/services/thermal_sentinel.py | 88 | # Step 3: Cross-reference with FIRMS fire data | COMMENT |
| LOW⚡ | backend/services/fetchers/earth_observation.py | 1220 | # Step 1: GET the month index to capture session cookies + fresh nonce. | COMMENT |
| LOW | backend/services/fetchers/earth_observation.py | 1247 | # Step 2: POST to admin-ajax.php with length=-1 to pull the whole month. | COMMENT |
| LOW | backend/services/infonet/markets/resolution.py | 240 | # Step 0: zero-evidence → INVALID, return everything. | COMMENT |
| LOW | backend/services/infonet/markets/resolution.py | 358 | # Step 2: oracle-rep supermajority. | COMMENT |
| LOW | backend/services/infonet/markets/resolution.py | 410 | # Step 3: distribute resolution stakes per rep type. | COMMENT |
| LOW | backend/services/infonet/markets/resolution.py | 456 | # Step 4: evidence bonds. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | backend/tests/mesh/test_5d_replay_persistence.py | 174 | # Create a new store from the same directory — simulates restart | COMMENT |
| MEDIUM | backend/tests/mesh/test_nonce_capacity_isolation.py | 179 | # Create a fresh relay instance and load | COMMENT |
| MEDIUM⚡ | backend/tests/mesh/test_secure_storage_rotation.py | 183 | # Create a DPAPI envelope (Windows default) | COMMENT |
| MEDIUM | backend/tests/mesh/test_secure_storage_rotation.py | 235 | # Create a passphrase master key | COMMENT |
| MEDIUM | backend/services/mesh/mesh_gate_mls.py | 1954 | # Create a durable gate envelope: the plaintext encrypted under the | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | backend/main.py | 445 | CODE | |
| LOW | backend/main.py | 4056 | CODE | |
| LOW | backend/routers/mesh_peer_sync.py | 154 | CODE | |
| LOW | backend/routers/sigint.py | 35 | CODE | |
| LOW | backend/routers/ai_intel.py | 1078 | CODE | |
| LOW | backend/tests/mesh/test_dm_alias_rotation_binding.py | 44 | CODE | |
| LOW | backend/scripts/release_helper.py | 65 | CODE | |
| LOW | backend/services/entity_profile.py | 188 | CODE | |
| LOW | backend/services/entity_trail.py | 172 | CODE | |
| LOW | backend/services/ai_pin_store.py | 232 | CODE | |
| LOW | backend/services/telemetry.py | 1543 | CODE | |
| LOW | backend/services/telemetry.py | 1771 | CODE | |
| LOW | backend/services/privacy_claims.py | 1352 | CODE | |
| LOW | backend/services/wormhole_status.py | 62 | CODE | |
| LOW | backend/services/mesh/mesh_infonet_sync_support.py | 182 | CODE | |
| LOW | backend/services/mesh/mesh_wormhole_contacts.py | 1276 | CODE | |
| LOW | backend/services/mesh/mesh_private_dispatcher.py | 604 | CODE | |
| LOW | backend/services/mesh/mesh_dm_relay.py | 1494 | CODE | |
| LOW | backend/services/fetchers/trains.py | 133 | CODE | |
| LOW | backend/services/infonet/tests/_chain_factory.py | 31 | CODE | |
| LOW | openclaw-skills/shadowbroker/sb_query.py | 474 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | start.sh | 108 | # Check if UV is available (preferred, much faster installs) | COMMENT |
| LOW | backend/routers/ai_intel.py | 3285 | # Check if client disconnected | COMMENT |
| LOW | backend/services/openclaw_bridge.py | 215 | # Increment sequence | COMMENT |
| LOW | backend/services/feed_ingester.py | 102 | # Check if first item looks like a GeoJSON Feature | COMMENT |
| LOW | backend/services/network_utils.py | 278 | # Check if this domain recently failed with requests — skip straight to curl | COMMENT |
| LOW | backend/services/mesh/mesh_oracle.py | 581 | # Check if this staker already has an active stake on this message | COMMENT |
| LOW | backend/services/mesh/mesh_oracle.py | 595 | # Check if there are existing stakes — extend grace period | COMMENT |
| LOW | backend/services/mesh/mesh_oracle.py | 656 | # Check if ALL stakes for this message have expired | COMMENT |
| LOW | backend/services/fetchers/prediction_markets.py | 916 | # Check if query appears in title or word overlap | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | backend/services/fetchers/earth_observation.py | 1703 | CODE | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1706 | CODE | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1707 | CODE | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1719 | CODE | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1720 | CODE | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1721 | CODE | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1722 | CODE | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1782 | CODE | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1787 | CODE | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1789 | CODE | |
| MEDIUM | scripts/e2e_dm_short_address_live.py | 1431 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | README.md | 1027 | │ │ ├── data_fetcher.py # Core scheduler — orchestrates all data sources | CODE |
| MEDIUM | README.md | 1072 | │ │ ├── mesh_wormhole_ratchet.py # Double-ratchet DM scaffolding | CODE |
| MEDIUM | …es/infonet/privacy/function_keys/challenge_response.py | 70 | # scaffolding accepts any opaque bytes. | COMMENT |
| MEDIUM | backend/services/infonet/tests/test_infonet_router.py | 47 | # Sprint 11+ scaffolding: all report not_implemented. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | frontend/src/i18n/translations/zh-CN.json | 320 | "placeholder": "输入消息..." | CODE |
| LOW | frontend/src/i18n/translations/en.json | 320 | "placeholder": "Type a message..." | CODE |
| LOW | frontend/src/i18n/translations/fr.json | 320 | "placeholder": "Tapez un message..." | CODE |
| LOW | backend/tests/test_per_operator_outbound_attribution.py | 104 | ("user@example.com", "user-example-com"), | CODE |
| LOW⚡ | backend/services/env_check.py | 187 | return "placeholder" | CODE |
| LOW⚡ | backend/services/env_check.py | 199 | return "placeholder" | CODE |
| LOW⚡ | …end/services/infonet/tests/test_privacy_scaffolding.py | 135 | fake_key = FunctionKey(secret=b"fake", epoch="2026-04", credential=b"") | CODE |
| LOW⚡ | …end/services/infonet/tests/test_privacy_scaffolding.py | 138 | ok, reason = verify_response(response=response, key=fake_key, now=1000.5) | CODE |
| LOW | openclaw-skills/shadowbroker/SKILL.md | 266 | await sb.send_command("osint_lookup", {"tool": "leaks", "email": "user@example.com"}) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docker-compose.gitlab.yml | 5 | # Usage: | COMMENT |
| LOW | backend/scripts/scan-secrets.sh | 4 | # Usage: | COMMENT |
| LOW | desktop-shell/tauri-skeleton/dev.sh | 10 | # Usage: | COMMENT |
| LOW | desktop-shell/tauri-skeleton/build.sh | 24 | # Usage: | COMMENT |
| LOW | helm/chart/values-gitlab.yaml | 5 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | backend/services/fetchers/nuforc_enrichment.py | 343 | # No date filter — just return the most recent entry for this state | COMMENT |
| MEDIUM | backend/services/infonet/time_validity.py | 45 | # Byzantine arithmetic with up to ~5 colluding nodes (median is robust). | COMMENT |