Open-source intelligence for the global theater. Track everything from the corporate/private jets of the wealthy, and spy satellites, to seismic events in one unified interface. Hook an AI agent up to have it parse through data and find previously unseen correlations. The knowledge is available to all but rarely aggregated in the open, until now.
This report summarizes scanner evidence for BigBodyCobain/Shadowbroker, a Python project with 11,297 GitHub stars. SynthScan examined 373,985 lines of code across 1103 source files, recording 8461 pattern matches distributed across 20 syntactic categories. The legacy adjusted pattern signal is 33.1 (High pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 4762 finding(s).
Are imports declared and package/API names verified? 807 finding(s).
Are wrappers, guards, and repeated structures necessary? 7276 finding(s).
Which changes need focused human review? 8461 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 8461 distinct pattern matches across 20 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .gitlab-ci.yml | 66 | # ── Backend image ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .gitlab-ci.yml | 87 | # ── Frontend image ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .gitlab-ci.yml | 108 | # ── Reverse mirror to GitHub ───────────────────────────────────────────── | COMMENT |
| MEDIUM | start.sh | 67 | # ── Zombie cleanup ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | start.sh | 97 | # ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | kill_wormhole.sh | 2 | # ============================================================ | COMMENT |
| MEDIUM | kill_wormhole.sh | 5 | # ============================================================ | COMMENT |
| MEDIUM⚡ | frontend/src/mesh/infonetEconomyClient.ts | 501 | // ─── Additional payload builders (write-action wiring phase) ───────────── | COMMENT |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 38 | // ─── Status ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 71 | // ─── Petitions ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 116 | // ─── Event payload validation ──────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 132 | // ─── Upgrades ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 157 | // ─── Markets ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 218 | // ─── Gates ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 262 | // ─── Reputation ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 285 | // ─── Bootstrap ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 309 | // ─── Signed write: append an Infonet economy event ─────────────────────── | COMMENT |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 445 | // ─── End-to-end sign + append helper ──────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 738 | // ─── Upgrade-hash governance — propose / signal-ready ────────────────── | COMMENT |
| MEDIUM | frontend/src/mesh/meshIdentity.ts | 971 | // ─── DH Key Exchange (X25519 / ECDH P-256 fallback) ───────────────────── | COMMENT |
| MEDIUM | frontend/src/mesh/meshIdentity.ts | 1328 | // ─── Contact Management (storage) ────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 1 | // ─── ShadowBroker Dashboard Data Types ───────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 5 | // ─── FLIGHTS ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 87 | // ─── SHIPS / MARITIME ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 145 | // ─── SATELLITES ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 211 | // ─── EARTHQUAKES ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 222 | // ─── GPS JAMMING ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 233 | // ─── FIRE HOTSPOTS (NASA FIRMS) ───────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 246 | // ─── TRAINS ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 265 | // ─── CCTV CAMERAS ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 277 | // ─── KIWISDR RECEIVERS ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 291 | // ─── PSK REPORTER SPOTS ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 304 | // ─── SATNOGS GROUND STATIONS ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 334 | // ─── TINYGS LORA SATELLITES ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 350 | // ─── POLICE SCANNERS (OpenMHZ) ────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 363 | // ─── SIGINT (APRS / Meshtastic / JS8Call) ─────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 402 | // ─── INTERNET OUTAGES (IODA) ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 416 | // ─── DATA CENTERS ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 500 | // ─── UAP SIGHTINGS ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 518 | // ─── WASTEWATER SCAN ────────────────────────────────��───────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 560 | // ─── CORRELATION ALERTS ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 562 | // ─── CROWDTHREAT ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 615 | // ─── NEWS / GLOBAL INCIDENTS ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 651 | // ─── UKRAINE FRONTLINE ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 668 | // ─── GDELT INCIDENTS ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 696 | // ─── LIVEUAMAP ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 713 | // ─── STOCKS & COMMODITIES ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 724 | // ─── SPACE WEATHER ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 739 | // ─── WEATHER (RAINVIEWER) ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 746 | // ─── AIRPORTS ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 757 | // ─── RADIO FEEDS ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 768 | // ─── ROUTE ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 777 | // ─── REGION DOSSIER ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 789 | // ─── FRESHNESS METADATA ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 793 | // ─── FIMI DISINFORMATION ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 819 | // ─── ROOT DATA OBJECT ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 1195 | // ─── SAR ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/types/dashboard.ts | 1252 | // ─── COMPONENT PROPS ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/components/PredictionsPanel.tsx | 29 | // ─── Types ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | frontend/src/components/PredictionsPanel.tsx | 103 | // ─── Helpers ───────────────────────────────────────────────────────────────── | COMMENT |
| 1286 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | frontend/src/mesh/infonetEconomyClient.ts | 503 | export function buildChallengeVotePayload( | CODE |
| LOW⚡ | frontend/src/mesh/infonetEconomyClient.ts | 513 | export function buildResolutionStakePayload( | CODE |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 305 | export function fetchBootstrapMarketState(marketId: string): Promise<BootstrapMarketState> { | CODE |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 407 | export function buildChallengeFilePayload( | CODE |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 417 | export function buildGateSuspendFilePayload( | CODE |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 434 | export function buildBootstrapResolutionVotePayload( | CODE |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 548 | export function buildGateShutdownFilePayload( | CODE |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 565 | export function buildGateShutdownAppealFilePayload( | CODE |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 694 | export async function buildEvidenceSubmitPayload(args: { | CODE |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 740 | export function buildUpgradeProposePayload(args: { | CODE |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 761 | export function buildUpgradeSignalReadyPayload( | CODE |
| LOW | frontend/src/mesh/gateCompatTelemetry.ts | 74 | function compatTelemetryStorageSelection(): { | CODE |
| LOW | frontend/src/mesh/gateCompatTelemetry.ts | 123 | export function normalizeGateCompatReason(reason: string): string { | CODE |
| LOW | frontend/src/mesh/gateCompatTelemetry.ts | 210 | export function getGateCompatTelemetryEventName(): string { | CODE |
| LOW | frontend/src/mesh/gateCompatTelemetry.ts | 223 | export function getGateCompatTelemetrySnapshot(): GateCompatTelemetrySnapshot { | CODE |
| LOW | frontend/src/mesh/gateCompatTelemetry.ts | 289 | export function summarizeGateCompatTelemetry( | CODE |
| LOW | frontend/src/mesh/gateCompatTelemetry.ts | 310 | export function recordGateCompatTelemetry(input: { | CODE |
| LOW⚡ | frontend/src/mesh/controlPlaneStatusClient.ts | 185 | export function invalidatePrivacyProfileCache(): void { | CODE |
| LOW⚡ | frontend/src/mesh/controlPlaneStatusClient.ts | 193 | export function invalidateInfonetNodeStatusCache(): void { | CODE |
| LOW⚡ | frontend/src/mesh/controlPlaneStatusClient.ts | 197 | export async function fetchPrivacyProfileSnapshot( | CODE |
| LOW | frontend/src/mesh/controlPlaneStatusClient.ts | 221 | export async function fetchInfonetNodeStatusSnapshot( | CODE |
| LOW | frontend/src/mesh/controlPlaneStatusClient.ts | 234 | export async function fetchNodeSettingsSnapshot(): Promise<NodeSettingsSnapshot> { | CODE |
| LOW | frontend/src/mesh/controlPlaneStatusClient.ts | 292 | export async function ensureInfonetParticipantNodeReady(): Promise<void> { | CODE |
| LOW | frontend/src/mesh/meshGateLocalRuntime.ts | 270 | export async function isInlineGateCryptoSupported(): Promise<boolean> { | CODE |
| LOW | frontend/src/mesh/meshGateLocalRuntime.ts | 275 | export async function probeInlineGateCryptoSupport(): Promise<InlineGateCryptoSupport> { | CODE |
| LOW | frontend/src/mesh/meshGateLocalRuntime.ts | 333 | export async function decryptInlineGateMessages( | CODE |
| LOW | frontend/src/mesh/contactTrustSummary.ts | 25 | function normalizeExistingTrustSummary( | CODE |
| LOW | frontend/src/mesh/contactTrustSummary.ts | 120 | function deriveRootWitnessProvenanceState(args: { | CODE |
| LOW | frontend/src/mesh/contactTrustSummary.ts | 159 | export function rootWitnessContinuityLabel( | CODE |
| LOW⚡ | frontend/src/mesh/gateAccessProof.ts | 28 | function gateAccessProofExtendedMaxAgeMs(): number { | CODE |
| LOW⚡ | frontend/src/mesh/gateAccessProof.ts | 34 | function gateAccessHeaderReusableUntilMs(entry: { | CODE |
| LOW⚡ | frontend/src/mesh/gateAccessProof.ts | 44 | export function pruneExpiredGateAccessHeaders(now: number = Date.now()): void { | CODE |
| LOW⚡ | frontend/src/mesh/gateAccessProof.ts | 52 | export function invalidateGateAccessHeaders(gateId?: string): void { | CODE |
| LOW | frontend/src/mesh/gateCatalogSnapshot.ts | 54 | export function invalidateGateCatalogSnapshot(): void { | CODE |
| LOW | frontend/src/mesh/gateCatalogSnapshot.ts | 58 | export function invalidateGateDetailSnapshot(gateId?: string): void { | CODE |
| LOW | frontend/src/mesh/wormholeClient.ts | 151 | export function invalidateWormholeRuntimeCache(): void { | CODE |
| LOW | frontend/src/mesh/wormholeClient.ts | 232 | export async function updatePrivateDeliveryAction( | CODE |
| LOW | frontend/src/mesh/meshDmRatchet.ts | 139 | async function getOrCreateWrapKey(): Promise<CryptoKey> { | CODE |
| LOW | frontend/src/mesh/meshDmRatchet.ts | 188 | async function readPersistedRatchetState(): Promise<string | null> { | CODE |
| LOW | frontend/src/mesh/meshDmRatchet.ts | 203 | async function writePersistedRatchetState(value: string): Promise<void> { | CODE |
| LOW | frontend/src/mesh/meshDeadDrop.ts | 63 | export async function deadDropTokensForContacts( | CODE |
| LOW⚡ | frontend/src/mesh/wormholeIdentityClient.ts | 541 | function gateKeyStatusActiveRoomTtlMs(): number { | CODE |
| LOW⚡ | frontend/src/mesh/wormholeIdentityClient.ts | 547 | function gateKeyStatusSessionStreamTtlMs(): number { | CODE |
| LOW⚡ | frontend/src/mesh/wormholeIdentityClient.ts | 553 | function gateKeyStatusReusableUntilMs( | CODE |
| LOW⚡ | frontend/src/mesh/wormholeIdentityClient.ts | 587 | function normalizeGateCompatReason(reason: string): string { | CODE |
| LOW⚡ | frontend/src/mesh/wormholeIdentityClient.ts | 591 | function gateLocalRuntimeRequiredDetail(reason: string): string { | CODE |
| LOW⚡ | frontend/src/mesh/wormholeIdentityClient.ts | 595 | function recordGateLocalRuntimeRequired( | CODE |
| LOW⚡ | frontend/src/mesh/wormholeIdentityClient.ts | 1115 | export function getWormholeDmInviteImportErrorResult( | CODE |
| LOW⚡ | frontend/src/mesh/wormholeIdentityClient.ts | 1124 | export async function fetchWormholeDmRootHealth(): Promise<WormholeDmRootHealth> { | CODE |
| LOW⚡ | frontend/src/mesh/wormholeIdentityClient.ts | 1130 | export async function bootstrapWormholeIdentity(): Promise<WormholeIdentity> { | CODE |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 63 | export function isWormholePrepAbortedError(error: unknown): boolean { | CODE |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 68 | export function abortWormholeInteractivePrep(): void { | CODE |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 571 | function isGateSessionStreamActiveForGate(gateId: string): boolean { | CODE |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 608 | function buildGateLocalRuntimeRequiredError( | CODE |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 617 | function gateCompatApprovalStorage(): Storage | null { | CODE |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 639 | function ensureGateCompatApprovalsLoaded(): void { | CODE |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 663 | function persistGateCompatApprovals(): void { | CODE |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 681 | function hasApprovedGateCompatFallback(gateId: string): boolean { | CODE |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 687 | export function approveGateCompatFallback(gateId: string): void { | CODE |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 708 | export function hasGateCompatFallbackApproval(gateId: string): boolean { | CODE |
| 4303 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | backend/auth.py | 584 | except Exception: | CODE |
| HIGH | backend/main.py | 1333 | except Exception: | CODE |
| HIGH | backend/main.py | 1591 | except Exception: | CODE |
| HIGH | backend/main.py | 2714 | except Exception: | CODE |
| HIGH | backend/main.py | 2919 | except Exception: | CODE |
| HIGH | backend/main.py | 2925 | except Exception: | CODE |
| HIGH | backend/main.py | 3003 | except Exception: | CODE |
| HIGH | backend/main.py | 4807 | except Exception: | CODE |
| HIGH | backend/main.py | 4863 | except Exception: | CODE |
| HIGH | backend/main.py | 5020 | except Exception: | CODE |
| HIGH | backend/main.py | 6470 | except Exception: | CODE |
| HIGH | backend/main.py | 6786 | except Exception: | CODE |
| HIGH | backend/main.py | 7289 | except Exception: | CODE |
| HIGH | backend/main.py | 7401 | except Exception: | CODE |
| HIGH | backend/main.py | 7501 | except Exception: | CODE |
| HIGH | backend/main.py | 7560 | except Exception: | CODE |
| HIGH | backend/main.py | 8044 | except Exception: | CODE |
| HIGH | backend/main.py | 8079 | except Exception: | CODE |
| HIGH | backend/main.py | 8092 | except Exception: | CODE |
| HIGH | backend/main.py | 9768 | except Exception: | CODE |
| HIGH | backend/main.py | 9933 | except Exception: | CODE |
| HIGH | backend/main.py | 1707 | except Exception: | CODE |
| HIGH | backend/main.py | 1754 | except Exception: | CODE |
| HIGH | backend/main.py | 2908 | except Exception: | CODE |
| HIGH | backend/main.py | 2915 | except Exception: | CODE |
| HIGH | backend/main.py | 3809 | except Exception: | CODE |
| HIGH | backend/main.py | 4485 | except Exception: | CODE |
| HIGH | backend/main.py | 4592 | except Exception: | CODE |
| HIGH | backend/main.py | 4831 | except Exception: | CODE |
| HIGH | backend/main.py | 5150 | except Exception: | CODE |
| HIGH | backend/main.py | 5555 | except Exception: | CODE |
| HIGH | backend/main.py | 5782 | except (ValueError, TypeError): | CODE |
| HIGH | backend/main.py | 5825 | except (ValueError, TypeError): | CODE |
| HIGH | backend/main.py | 5959 | except (ValueError, TypeError): | CODE |
| HIGH | backend/main.py | 6538 | except Exception: | CODE |
| HIGH | backend/main.py | 6809 | except Exception: | CODE |
| HIGH | backend/main.py | 7195 | except Exception: | CODE |
| HIGH | backend/main.py | 3284 | except Exception: | CODE |
| HIGH | backend/main.py | 2798 | except Exception: | CODE |
| HIGH | backend/routers/mesh_public.py | 1095 | except Exception: | CODE |
| HIGH | backend/routers/mesh_public.py | 1151 | except Exception: | CODE |
| HIGH | backend/routers/mesh_public.py | 1308 | except Exception: | CODE |
| HIGH | backend/routers/mesh_public.py | 587 | except Exception: | CODE |
| HIGH | backend/routers/mesh_public.py | 665 | except Exception: | CODE |
| HIGH | backend/routers/mesh_public.py | 766 | except Exception: | CODE |
| HIGH | backend/routers/mesh_public.py | 880 | except Exception: | CODE |
| HIGH | backend/routers/mesh_public.py | 1119 | except Exception: | CODE |
| HIGH | backend/routers/mesh_public.py | 1438 | except Exception: | CODE |
| HIGH | backend/routers/mesh_public.py | 1597 | except Exception: | CODE |
| HIGH | backend/routers/mesh_public.py | 2267 | except asyncio.CancelledError: | CODE |
| HIGH | backend/routers/mesh_public.py | 398 | except Exception: | CODE |
| HIGH | backend/routers/mesh_peer_sync.py | 53 | except Exception: | CODE |
| HIGH | backend/routers/mesh_peer_sync.py | 78 | except (ValueError, TypeError): | CODE |
| HIGH | backend/routers/mesh_peer_sync.py | 128 | except (ValueError, TypeError): | CODE |
| HIGH | backend/routers/mesh_peer_sync.py | 171 | except (ValueError, TypeError): | CODE |
| HIGH | backend/routers/mesh_peer_sync.py | 285 | except (ValueError, TypeError): | CODE |
| HIGH | backend/routers/mesh_dm.py | 263 | except Exception: | CODE |
| HIGH | backend/routers/mesh_dm.py | 439 | except Exception: | CODE |
| HIGH | backend/routers/mesh_dm.py | 473 | except Exception: | CODE |
| HIGH | backend/routers/mesh_dm.py | 486 | except Exception: | CODE |
| 187 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | backend/auth.py | 62 | def _current_admin_key() -> str: | CODE |
| MEDIUM | backend/auth.py | 69 | def _allow_insecure_admin() -> bool: | CODE |
| MEDIUM | backend/auth.py | 79 | def _debug_mode_enabled() -> bool: | CODE |
| MEDIUM | backend/auth.py | 86 | def _admin_key_required_in_production() -> bool: | CODE |
| MEDIUM | backend/auth.py | 1025 | def _external_assurance_status_snapshot() -> dict[str, Any]: | CODE |
| MEDIUM | backend/auth.py | 1364 | def _anonymous_mode_state() -> dict[str, Any]: | CODE |
| LOW⚡ | backend/auth.py | 65 | except Exception: | CODE |
| LOW⚡ | backend/auth.py | 75 | except Exception: | CODE |
| LOW⚡ | backend/auth.py | 82 | except Exception: | CODE |
| LOW⚡ | backend/auth.py | 90 | except Exception: | CODE |
| LOW⚡ | backend/auth.py | 100 | except Exception as exc: | CODE |
| LOW⚡ | backend/auth.py | 562 | except Exception: | CODE |
| LOW⚡ | backend/auth.py | 584 | except Exception: | CODE |
| LOW⚡ | backend/auth.py | 587 | except Exception as exc: | CODE |
| LOW⚡ | backend/auth.py | 1288 | except Exception: | CODE |
| LOW⚡ | backend/auth.py | 1389 | except Exception: | CODE |
| LOW | backend/auth.py | 379 | except Exception: | CODE |
| LOW | backend/auth.py | 535 | except Exception: | CODE |
| LOW | backend/auth.py | 603 | except Exception: | CODE |
| LOW | backend/auth.py | 644 | except Exception: | CODE |
| LOW | backend/auth.py | 1067 | except Exception as exc: | CODE |
| LOW | backend/auth.py | 1087 | except Exception as exc: | CODE |
| LOW | backend/auth.py | 1135 | except Exception: | CODE |
| LOW | backend/auth.py | 1138 | except Exception: | CODE |
| LOW | backend/auth.py | 1214 | except Exception: | CODE |
| LOW | backend/wormhole_server.py | 48 | except Exception as exc: | CODE |
| LOW | backend/wormhole_server.py | 109 | except Exception: | CODE |
| LOW | backend/node_state.py | 87 | except Exception: | CODE |
| LOW | backend/node_state.py | 183 | except Exception: | CODE |
| LOW | backend/node_state.py | 252 | except Exception as exc: | CODE |
| MEDIUM | backend/main.py | 436 | def _privacy_core_status() -> dict[str, Any]: | CODE |
| MEDIUM | backend/main.py | 1574 | def _swarm_bootstrap_after_transport_ready() -> None: | CODE |
| MEDIUM | backend/main.py | 2723 | def _safe_int(val, default=0): | CODE |
| MEDIUM | backend/main.py | 2809 | def _startup_wormhole_runtime(): | CODE |
| MEDIUM | backend/main.py | 2838 | def _prime_route_database(): | CODE |
| MEDIUM | backend/main.py | 2850 | def _prime_aircraft_database(): | CODE |
| MEDIUM | backend/main.py | 3525 | def _blocking_upgrade() -> str | None: | CODE |
| MEDIUM | backend/main.py | 3642 | def _upgrade_invite_scoped_contact_preferences_background() -> dict[str, Any]: | CODE |
| MEDIUM | backend/main.py | 3883 | def _do_refresh(): | CODE |
| MEDIUM | backend/main.py | 6883 | def _rns_private_dm_ready() -> bool: | CODE |
| MEDIUM | backend/main.py | 6909 | def _high_privacy_profile_enabled() -> bool: | CODE |
| LOW⚡ | backend/main.py | 53 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 376 | except Exception as exc: | CODE |
| LOW⚡ | backend/main.py | 1580 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 1591 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 2241 | except Exception as exc: | CODE |
| LOW⚡ | backend/main.py | 2244 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 2259 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 2511 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 2798 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 2801 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 2908 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 2915 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 2919 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 2925 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 3547 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 3601 | except Exception: | CODE |
| LOW⚡ | backend/main.py | 3648 | except Exception as exc: | CODE |
| LOW⚡ | backend/main.py | 3659 | except Exception as exc: | CODE |
| LOW⚡ | backend/main.py | 3803 | except Exception: | CODE |
| 1017 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | backend/auth.py | 45 | CODE | |
| LOW | backend/auth.py | 45 | CODE | |
| LOW | backend/auth.py | 45 | CODE | |
| LOW | backend/auth.py | 45 | CODE | |
| LOW | backend/wormhole_server.py | 3 | CODE | |
| LOW | backend/main.py | 252 | CODE | |
| LOW | backend/main.py | 252 | CODE | |
| LOW | backend/main.py | 290 | CODE | |
| LOW | backend/main.py | 324 | CODE | |
| LOW | backend/main.py | 324 | CODE | |
| LOW | backend/main.py | 9251 | CODE | |
| LOW | backend/main.py | 9339 | CODE | |
| LOW | backend/main.py | 9360 | CODE | |
| LOW | backend/limiter.py | 29 | CODE | |
| LOW | backend/routers/mesh_public.py | 45 | CODE | |
| LOW | backend/routers/mesh_public.py | 54 | CODE | |
| LOW | backend/routers/mesh_public.py | 55 | CODE | |
| LOW | backend/routers/cctv.py | 6 | CODE | |
| LOW | backend/routers/cctv.py | 8 | CODE | |
| LOW | backend/routers/osint.py | 2 | CODE | |
| LOW | backend/routers/mesh_peer_sync.py | 5 | CODE | |
| LOW | backend/routers/mesh_peer_sync.py | 6 | CODE | |
| LOW | backend/routers/mesh_peer_sync.py | 8 | CODE | |
| LOW | backend/routers/mesh_peer_sync.py | 8 | CODE | |
| LOW | backend/routers/mesh_peer_sync.py | 9 | CODE | |
| LOW | backend/routers/mesh_peer_sync.py | 10 | CODE | |
| LOW | backend/routers/mesh_peer_sync.py | 11 | CODE | |
| LOW | backend/routers/health.py | 3 | CODE | |
| LOW | backend/routers/health.py | 4 | CODE | |
| LOW | backend/routers/intel_feeds.py | 2 | CODE | |
| LOW | backend/routers/tools.py | 4 | CODE | |
| LOW | backend/routers/tools.py | 9 | CODE | |
| LOW | backend/routers/mesh_dm.py | 2 | CODE | |
| LOW | backend/routers/mesh_dm.py | 3 | CODE | |
| LOW | backend/routers/mesh_dm.py | 12 | CODE | |
| LOW | backend/routers/mesh_dm.py | 19 | CODE | |
| LOW | backend/routers/mesh_dm.py | 20 | CODE | |
| LOW | backend/routers/mesh_dm.py | 20 | CODE | |
| LOW | backend/routers/entity_graph.py | 2 | CODE | |
| LOW | backend/routers/infonet.py | 18 | CODE | |
| LOW | backend/routers/infonet.py | 28 | CODE | |
| LOW | backend/routers/sigint.py | 2 | CODE | |
| LOW | backend/routers/sigint.py | 3 | CODE | |
| LOW | backend/routers/sigint.py | 5 | CODE | |
| LOW | backend/routers/radio.py | 2 | CODE | |
| LOW | backend/routers/radio.py | 3 | CODE | |
| LOW | backend/routers/radio.py | 5 | CODE | |
| LOW | backend/routers/mesh_operator.py | 3 | CODE | |
| LOW | backend/routers/mesh_operator.py | 4 | CODE | |
| LOW | backend/routers/mesh_operator.py | 5 | CODE | |
| LOW | backend/routers/mesh_operator.py | 7 | CODE | |
| LOW | backend/routers/analytics.py | 3 | CODE | |
| LOW | backend/routers/scm.py | 2 | CODE | |
| LOW | backend/routers/mesh_oracle.py | 3 | CODE | |
| LOW | backend/routers/mesh_oracle.py | 3 | CODE | |
| LOW | backend/routers/mesh_oracle.py | 4 | CODE | |
| LOW | backend/routers/mesh_oracle.py | 5 | CODE | |
| LOW | backend/routers/mesh_oracle.py | 7 | CODE | |
| LOW | backend/routers/wormhole.py | 4 | CODE | |
| LOW | backend/routers/wormhole.py | 8 | CODE | |
| 715 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | backend/auth.py | 55 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | backend/node_state.py | 58 | def set_sync_state(state: SyncWorkerState) -> None: | CODE |
| LOW | backend/main.py | 21 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/routers/mesh_public.py | 65 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/routers/cctv.py | 10 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/routers/mesh_peer_sync.py | 14 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/routers/intel_feeds.py | 19 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/routers/tools.py | 11 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | backend/routers/mesh_dm.py | 34 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/routers/infonet.py | 598 | __all__ = ["router"] | CODE |
| LOW | backend/routers/admin.py | 18 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | backend/routers/ai_intel.py | 27 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/routers/mesh_operator.py | 9 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/routers/analytics.py | 34 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/routers/wormhole.py | 157 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/routers/data.py | 18 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | backend/routers/agent_shell.py | 30 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | backend/routers/agent_shell.py | 38 | def _set_winsize(fd: int, rows: int, cols: int) -> None: | CODE |
| LOW | …ckend/tests/mesh/test_signed_write_transport_matrix.py | 65 | def _set_transport_tier(monkeypatch: pytest.MonkeyPatch, tier: str) -> None: | CODE |
| LOW⚡ | backend/services/openclaw_channel.py | 29 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/unusual_whales_connector.py | 24 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/ais_stream.py | 14 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/openclaw_infonet.py | 21 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/satnogs_fetcher.py | 11 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/openclaw_watchdog.py | 20 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/privacy_core_attestation.py | 18 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/liveuamap_settings.py | 19 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/liveuamap_settings.py | 63 | def set_liveuamap_ui_opt_in(opted_in: bool) -> None: | CODE |
| LOW | backend/services/cctv_pipeline.py | 12 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/region_dossier.py | 9 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | backend/services/tinygs_fetcher.py | 29 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/privacy_core_client.py | 28 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/transport_lane_isolation.py | 6 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | backend/services/ai_pin_store.py | 21 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/thermal_sentinel.py | 18 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | backend/services/carrier_tracker.py | 68 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/carrier_tracker.py | 601 | def update_carrier_positions() -> None: | CODE |
| LOW⚡ | backend/services/ai_intel_store.py | 31 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/layer_enable_refresh.py | 11 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/updater.py | 26 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/kiwisdr_fetcher.py | 29 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/liveuamap_scraper.py | 35 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/openclaw_bridge.py | 20 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | backend/services/feed_ingester.py | 21 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/fetch_health.py | 10 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/oracle_service.py | 12 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/radio_intercept.py | 10 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/shodan_connector.py | 20 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/geopolitics.py | 19 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/sentinel_search.py | 16 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/correlation_engine.py | 20 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/analysis_zone_store.py | 20 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/prediction_markets_settings.py | 12 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | backend/services/prediction_markets_settings.py | 33 | def set_prediction_markets_ui_opt_in(opted_in: bool) -> None: | CODE |
| LOW | backend/services/env_check.py | 32 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/agent_shell_settings.py | 12 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/data_fetcher.py | 111 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/tor_hidden_service.py | 20 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/psk_reporter_fetcher.py | 14 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/services/telegram_translate.py | 14 | logger = logging.getLogger(__name__) | CODE |
| 133 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | backend/auth.py | 157 | CODE | |
| LOW | backend/auth.py | 179 | CODE | |
| LOW | backend/main.py | 121 | CODE | |
| LOW | backend/main.py | 1317 | CODE | |
| LOW | backend/main.py | 2025 | CODE | |
| LOW | backend/main.py | 2161 | CODE | |
| LOW | backend/main.py | 2249 | CODE | |
| LOW | backend/main.py | 2274 | CODE | |
| LOW | backend/main.py | 2413 | CODE | |
| LOW | backend/main.py | 2741 | CODE | |
| LOW | backend/main.py | 3267 | CODE | |
| LOW | backend/main.py | 3671 | CODE | |
| LOW | backend/main.py | 4440 | CODE | |
| LOW | backend/main.py | 6029 | CODE | |
| LOW | backend/main.py | 7582 | CODE | |
| LOW | backend/main.py | 10385 | CODE | |
| LOW | backend/main.py | 2782 | CODE | |
| LOW | backend/limiter.py | 80 | CODE | |
| LOW | backend/routers/mesh_public.py | 381 | CODE | |
| LOW | backend/routers/mesh_public.py | 620 | CODE | |
| LOW | backend/routers/mesh_public.py | 784 | CODE | |
| LOW | backend/routers/mesh_public.py | 1783 | CODE | |
| LOW | backend/routers/cctv.py | 241 | CODE | |
| LOW | backend/routers/infonet.py | 448 | CODE | |
| LOW | backend/routers/ai_intel.py | 1021 | CODE | |
| LOW | backend/routers/ai_intel.py | 1142 | CODE | |
| LOW | backend/routers/ai_intel.py | 1370 | CODE | |
| LOW | backend/routers/ai_intel.py | 2971 | CODE | |
| LOW | backend/routers/ai_intel.py | 3211 | CODE | |
| LOW | backend/routers/ai_intel.py | 3411 | CODE | |
| LOW | backend/routers/ai_intel.py | 3434 | CODE | |
| LOW | backend/routers/ai_intel.py | 3257 | CODE | |
| LOW | backend/routers/mesh_operator.py | 33 | CODE | |
| LOW | backend/routers/data.py | 360 | CODE | |
| LOW | backend/routers/data.py | 789 | CODE | |
| LOW | backend/tests/test_2c_exception_visibility.py | 606 | CODE | |
| LOW | backend/tests/test_3c_router_extraction.py | 134 | CODE | |
| LOW | backend/tests/test_per_operator_outbound_attribution.py | 246 | CODE | |
| LOW | backend/tests/mesh/test_gate_secret_rotation_guard.py | 29 | CODE | |
| LOW | backend/services/openclaw_channel.py | 166 | CODE | |
| LOW | backend/services/openclaw_channel.py | 685 | CODE | |
| LOW | backend/services/unusual_whales_connector.py | 138 | CODE | |
| LOW | backend/services/ais_stream.py | 466 | CODE | |
| LOW | backend/services/ais_stream.py | 536 | CODE | |
| LOW | backend/services/ais_stream.py | 596 | CODE | |
| LOW | backend/services/sigint_bridge.py | 333 | CODE | |
| LOW | backend/services/sigint_bridge.py | 878 | CODE | |
| LOW | backend/services/sigint_bridge.py | 978 | CODE | |
| LOW | backend/services/sigint_bridge.py | 1267 | CODE | |
| LOW | backend/services/openclaw_infonet.py | 152 | CODE | |
| LOW | backend/services/openclaw_watchdog.py | 105 | CODE | |
| LOW | backend/services/openclaw_watchdog.py | 551 | CODE | |
| LOW | backend/services/openclaw_watchdog.py | 612 | CODE | |
| LOW | backend/services/entity_profile.py | 28 | CODE | |
| LOW | backend/services/privacy_core_attestation.py | 124 | CODE | |
| LOW | backend/services/cctv_pipeline.py | 368 | CODE | |
| LOW | backend/services/cctv_pipeline.py | 509 | CODE | |
| LOW | backend/services/cctv_pipeline.py | 734 | CODE | |
| LOW | backend/services/cctv_pipeline.py | 802 | CODE | |
| LOW | backend/services/region_dossier.py | 67 | CODE | |
| 191 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | backend/main.py | 0 | copy any gate_message chain events into the local gate_store for read/decrypt. only events that are resident in the loca | STRING |
| HIGH | backend/routers/mesh_public.py | 0 | copy any gate_message chain events into the local gate_store for read/decrypt. only events that are resident in the loca | STRING |
| HIGH | backend/routers/mesh_peer_sync.py | 0 | copy any gate_message chain events into the local gate_store for read/decrypt. only events that are resident in the loca | STRING |
| HIGH | backend/main.py | 0 | list all peers (or filter by bucket: sync, push, bootstrap). | STRING |
| HIGH | backend/routers/mesh_public.py | 0 | list all peers (or filter by bucket: sync, push, bootstrap). | STRING |
| HIGH | backend/routers/mesh_operator.py | 0 | list all peers (or filter by bucket: sync, push, bootstrap). | STRING |
| HIGH | backend/main.py | 0 | add a peer to the store. body: {peer_url, transport?, label?, role?, buckets?[]}. | STRING |
| HIGH | backend/routers/mesh_public.py | 0 | add a peer to the store. body: {peer_url, transport?, label?, role?, buckets?[]}. | STRING |
| HIGH | backend/routers/mesh_operator.py | 0 | add a peer to the store. body: {peer_url, transport?, label?, role?, buckets?[]}. | STRING |
| HIGH | backend/main.py | 0 | remove a peer. body: {peer_url, bucket?}. if bucket omitted, removes from all buckets. | STRING |
| HIGH | backend/routers/mesh_public.py | 0 | remove a peer. body: {peer_url, bucket?}. if bucket omitted, removes from all buckets. | STRING |
| HIGH | backend/routers/mesh_operator.py | 0 | remove a peer. body: {peer_url, bucket?}. if bucket omitted, removes from all buckets. | STRING |
| HIGH | backend/main.py | 0 | enable or disable a peer. body: {peer_url, bucket, enabled: bool}. | STRING |
| HIGH | backend/routers/mesh_public.py | 0 | enable or disable a peer. body: {peer_url, bucket, enabled: bool}. | STRING |
| HIGH | backend/routers/mesh_operator.py | 0 | enable or disable a peer. body: {peer_url, bucket, enabled: bool}. | STRING |
| HIGH | backend/services/mesh/mesh_reputation.py | 0 | actually write to disk (called by timer or atexit). | STRING |
| HIGH | backend/services/mesh/mesh_dm_relay.py | 0 | actually write to disk (called by timer or atexit). | STRING |
| HIGH | backend/services/mesh/mesh_oracle.py | 0 | actually write to disk (called by timer or atexit). | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | backend/routers/ai_intel.py | 1697 | "returns": "{best_match: {...}|null, results: [{source_layer, entity_type, label, id, callsign, registra | CODE |
| HIGH⚡ | backend/services/privacy_core_client.py | 760 | "Build it with: cd privacy-core && cargo build --release" | CODE |
| HIGH | backend/services/updater.py | 31 | "docker compose pull && docker compose up -d" | CODE |
| HIGH | backend/services/infonet/bootstrap/argon2id.py | 12 | "bootstrap_resolution_vote" || protocol_version || node_id || | STRING |
| HIGH | backend/services/infonet/bootstrap/argon2id.py | 13 | market_id || side || snapshot_event_hash || pow_nonce | STRING |
| HIGH | …es/infonet/privacy/function_keys/challenge_response.py | 6 | Operator issues a fresh nonce; key-holder signs (challenge || nonce | STRING |
| HIGH | …nd/services/infonet/privacy/function_keys/nullifier.py | 8 | nullifier = SHA-256(secret || operator_id) | STRING |
| HIGH | …nd/services/infonet/privacy/function_keys/nullifier.py | 35 | """Return the hex SHA-256 of ``secret || operator_id`` (UTF-8 for | STRING |
| HIGH | backend/services/infonet/markets/evidence.py | 9 | - ``evidence_content_hash`` — SHA-256 of ``(market_id || claimed_outcome | STRING |
| HIGH | backend/services/infonet/markets/evidence.py | 14 | - ``submission_hash`` — SHA-256 of ``(evidence_content_hash || node_id | STRING |
| HIGH | backend/services/infonet/markets/evidence.py | 67 | """SHA-256 of ``content_hash || node_id || timestamp``. | STRING |
| HIGH | scripts/e2e_dm_short_address_live.py | 1087 | "cd /home/ubuntu/Shadowbroker && docker compose -f docker-compose.yml -f docker-compose.participant.yml rest | CODE |
| HIGH⚡ | scripts/e2e_dm_short_address_live.py | 1701 | "cp /tmp/docker-compose.participant.yml docker-compose.participant.yml 2>/dev/null || true && " | STRING |
| HIGH⚡ | scripts/e2e_dm_short_address_live.py | 1707 | "docker cp /tmp/mesh_dm_relay.py shadowbroker-backend:/app/services/mesh/mesh_dm_relay.py 2>/dev/null || true; " | STRING |
| HIGH⚡ | scripts/e2e_dm_short_address_live.py | 1708 | "docker cp /tmp/mesh_signed_events.py shadowbroker-backend:/app/services/mesh/mesh_signed_events.py 2>/dev/null | STRING |
| HIGH⚡ | scripts/e2e_dm_short_address_live.py | 1709 | "docker cp /tmp/openclaw_infonet.py shadowbroker-backend:/app/services/openclaw_infonet.py 2>/dev/null || true; | STRING |
| HIGH⚡ | scripts/e2e_dm_short_address_live.py | 1710 | "docker cp /tmp/wormhole_supervisor.py shadowbroker-backend:/app/services/wormhole_supervisor.py 2>/dev/null || | STRING |
| HIGH⚡ | scripts/e2e_dm_short_address_live.py | 1711 | "docker cp /tmp/tor_hidden_service.py shadowbroker-backend:/app/services/tor_hidden_service.py 2>/dev/null || tr | STRING |
| HIGH⚡ | scripts/e2e_dm_short_address_live.py | 1712 | "docker cp /tmp/privacy_core_attestation.py shadowbroker-backend:/app/services/privacy_core_attestation.py 2>/de | STRING |
| HIGH⚡ | scripts/e2e_dm_short_address_live.py | 1713 | "docker cp /tmp/wormhole_router.py shadowbroker-backend:/app/routers/wormhole.py 2>/dev/null || true; " | STRING |
| HIGH⚡ | scripts/e2e_dm_short_address_live.py | 1714 | "docker cp /tmp/main.py shadowbroker-backend:/app/main.py 2>/dev/null || true; " | STRING |
| HIGH | scripts/e2e_dm_short_address_live.py | 1659 | "git fetch origin && git reset --hard origin/main && " | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docker-compose.gitlab.yml | 1 | # Compose override that points the backend and frontend at the GitLab | COMMENT |
| LOW | docker-compose.yml | 61 | # Shared transport auth for operator peer push. Must be set to a unique secret per deployment. | COMMENT |
| LOW | .gitlab-ci.yml | 1 | # GitLab CI/CD for Shadowbroker | COMMENT |
| LOW | .gitlab-ci.yml | 21 | # - The image build/push uses $CI_JOB_TOKEN, which GitLab provides | COMMENT |
| LOW | frontend/vitest.config.js | 1 | const path = require('path'); | COMMENT |
| LOW | frontend/vitest.config.js | 21 | // findByText / waitFor against React reconciliation): | COMMENT |
| LOW | frontend/next.config.ts | 1 | import type { NextConfig } from 'next'; | COMMENT |
| LOW | frontend/src/components/AIIntelPanel.tsx | 381 | const [nodeId, setNodeId] = React.useState(''); | COMMENT |
| LOW | frontend/src/components/MeshChat.tsx | 1 | // Re-export from decomposed MeshChat module. | COMMENT |
| LOW | …d/src/__tests__/mesh/messagesViewFirstContact.test.tsx | 861 | fireEvent.click(screen.getByRole('button', { name: 'CONTACTS' })); | COMMENT |
| LOW | …d/src/__tests__/mesh/messagesViewFirstContact.test.tsx | 881 | // (a) CI runner starvation — two parallel ci.yml invocations | COMMENT |
| LOW | frontend/src/lib/api.ts | 1 | // All API calls use relative paths (e.g. /api/flights). | COMMENT |
| LOW | backend/main.py | 3741 | # transport has not finished coming up yet. | COMMENT |
| LOW | backend/ais_proxy.js | 1 | // AIS Stream WebSocket proxy. | COMMENT |
| LOW | backend/routers/tools.py | 121 | # ── Sentinel proxy routes (Issue #299/#300/#301, reported by tg12) ────────── | COMMENT |
| LOW | backend/routers/tools.py | 161 | # any same-origin script (XSS, malicious browser extension, dev-tools HAR | COMMENT |
| LOW | backend/routers/ai_intel.py | 2681 | } | COMMENT |
| LOW | backend/routers/ai_intel.py | 2701 | # still surprising — and noisy in the audit log.) | COMMENT |
| LOW | backend/routers/ai_intel.py | 2721 | # no-cache, must-revalidate`` | COMMENT |
| LOW | backend/routers/ai_intel.py | 3181 | # Agent keeps one long-lived GET connection open → server pushes events. | COMMENT |
| LOW | backend/routers/ai_intel.py | 3341 | COMMENT | |
| LOW | backend/tests/test_control_surface_auth.py | 81 | # STAC search + remote SWIR raster reads. Unauthenticated abuse | COMMENT |
| LOW | backend/tests/test_sentinel_routes_auth_gate.py | 221 | assert r.status_code == 200 | COMMENT |
| LOW | backend/services/openclaw_channel.py | 2041 | return poll_dms(limit=int(args.get("limit", 20) or 20)) | COMMENT |
| LOW | backend/services/ais_stream.py | 341 | _vessels: dict[int, dict] = {} | COMMENT |
| LOW | backend/services/config.py | 141 | MESH_DM_NONCE_PER_AGENT_MAX: int = 256 | COMMENT |
| LOW | backend/services/config.py | 181 | # TTL for mailbox binding metadata — shorter = smaller metadata footprint on disk. | COMMENT |
| LOW | backend/services/config.py | 201 | MESH_DM_ROOT_EXTERNAL_WITNESS_WARN_AGE_S: int = 2700 | COMMENT |
| LOW | backend/services/config.py | 221 | MESH_BACKEND_GATE_DECRYPT_COMPAT: bool = False | COMMENT |
| LOW | backend/services/config.py | 281 | MESH_PRIVATE_RELAY_POLICY_TTL_S: int = 3600 | COMMENT |
| LOW | backend/services/config.py | 301 | # Optional JSON artifact generated by CI/release workflow for the Sprint 8 | COMMENT |
| LOW | backend/services/config.py | 321 | # Second explicit opt-in for private-tier clearnet fallback. Without this | COMMENT |
| LOW | backend/services/config.py | 341 | # API the backend calls (Wikipedia, Wikidata, Nominatim, GDELT, OpenMHz, | COMMENT |
| LOW | backend/services/region_dossier.py | 21 | # | COMMENT |
| LOW | backend/services/carrier_tracker.py | 161 | }, | COMMENT |
| LOW | backend/services/network_utils.py | 21 | _session.mount("https://", HTTPAdapter(max_retries=_retry, pool_maxsize=20)) | COMMENT |
| LOW | backend/services/network_utils.py | 41 | # The handle: | COMMENT |
| LOW | backend/services/mesh/mesh_crypto.py | 81 | # | COMMENT |
| LOW | backend/services/mesh/mesh_rns.py | 41 | # ── S15B: DM wire-visible ciphertext length alignment ────────────────── | COMMENT |
| LOW | backend/services/mesh/mesh_rollout_flags.py | 41 | # recoverable from disk. Epoch/event_id ceilings already bound *policy* | COMMENT |
| LOW | backend/services/mesh/mesh_rollout_flags.py | 61 | # observed a given author, but a fresh peer (empty sequence state) would | COMMENT |
| LOW | backend/services/mesh/mesh_rollout_flags.py | 81 | # migration, but doing so should degrade release readiness immediately. | COMMENT |
| LOW | backend/services/mesh/mesh_gate_mls.py | 2001 | int(binding.epoch), | COMMENT |
| LOW | backend/services/fetchers/earth_observation.py | 681 | # NUFORC's website switched to a JS-rendered Mapbox GL map. The old HTML | COMMENT |
| LOW | desktop-shell/tauri-skeleton/dev.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | desktop-shell/tauri-skeleton/build.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | desktop-shell/tauri-skeleton/build.sh | 21 | # The web deployment (Docker/Vercel) is unaffected - it continues to use | COMMENT |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/policy.rs | 1 | //! Native-side policy enforcement and audit ring for local-control commands. | COMMENT |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/companion.rs | 1 | //! Optional localhost/browser companion mode. | COMMENT |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/companion.rs | 21 | //! `main.rs` (not by `companion_enable`) so that the Tauri main window also | COMMENT |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/companion.rs | 61 | } | COMMENT |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/tray.rs | 1 | //! Cross-platform tray / menu-bar background lifecycle. | COMMENT |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/main.rs | 21 | pub audit_ring: SharedAuditRing, | COMMENT |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/main.rs | 41 | COMMENT | |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/main.rs | 61 | // every invocation in its AuditRing. | COMMENT |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/main.rs | 501 | // JavaScript on every page load (including full reloads), | COMMENT |
| LOW | …shell/tauri-skeleton/src-tauri/src/companion_server.rs | 1 | //! Loopback-only HTTP server for packaged desktop builds. | COMMENT |
| LOW | privacy-core/src/lib.rs | 1 | //! Privacy Core skeleton for the ShadowBroker / Infonet migration. | COMMENT |
| LOW | .github/workflows/ci.yml | 1 | name: CI - Lint & Test | COMMENT |
| LOW | helm/chart/values-gitlab.yaml | 1 | # Helm values override that points the chart at the GitLab Container | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | frontend/src/mesh/meshDmRatchet.ts | 583 | // Step 1: new receiving chain | COMMENT |
| LOW⚡ | frontend/src/mesh/meshDmRatchet.ts | 590 | // Step 2: new sending chain with a fresh DH key | COMMENT |
| LOW | backend/main.py | 2305 | # Step 1: Ask the peer which gates it has and how many events each | COMMENT |
| LOW | backend/main.py | 2343 | # Step 2: For each gate with new events, pull the batch | COMMENT |
| LOW⚡ | backend/tests/mesh/test_secure_storage_passphrase.py | 339 | # Step 1: create raw envelope (simulate old Docker behavior) | COMMENT |
| LOW⚡ | backend/tests/mesh/test_secure_storage_passphrase.py | 344 | # Step 2: now set up with secret and no raw fallback | COMMENT |
| LOW | backend/services/region_dossier.py | 206 | # Step 1: Reverse geocode | STRING |
| LOW | backend/services/region_dossier.py | 222 | # Step 2: Parallel fetch with real timeouts that do not block on executor shutdown | STRING |
| LOW⚡ | backend/services/tinygs_fetcher.py | 325 | # Step 1: Get TLE data (from cache or CelesTrak) | COMMENT |
| LOW⚡ | backend/services/tinygs_fetcher.py | 331 | # Step 2: Try to fetch TinyGS telemetry (non-blocking, uses cache) | COMMENT |
| LOW⚡ | backend/services/tinygs_fetcher.py | 334 | # Step 3: Propagate all satellites via SGP4 | COMMENT |
| LOW⚡ | backend/services/tinygs_fetcher.py | 340 | # Step 4: Merge and filter | COMMENT |
| LOW | backend/services/thermal_sentinel.py | 55 | # Step 1: STAC search for Sentinel-2 scenes | COMMENT |
| LOW | backend/services/thermal_sentinel.py | 69 | # Step 2: Try SWIR band analysis if rasterio is available | COMMENT |
| LOW | backend/services/thermal_sentinel.py | 88 | # Step 3: Cross-reference with FIRMS fire data | COMMENT |
| LOW⚡ | backend/services/fetchers/earth_observation.py | 1254 | # Step 1: GET the month index to capture session cookies + fresh nonce. | COMMENT |
| LOW | backend/services/fetchers/earth_observation.py | 1281 | # Step 2: POST to admin-ajax.php with length=-1 to pull the whole month. | COMMENT |
| LOW | backend/services/infonet/markets/resolution.py | 240 | # Step 0: zero-evidence → INVALID, return everything. | COMMENT |
| LOW | backend/services/infonet/markets/resolution.py | 358 | # Step 2: oracle-rep supermajority. | COMMENT |
| LOW | backend/services/infonet/markets/resolution.py | 410 | # Step 3: distribute resolution stakes per rep type. | COMMENT |
| LOW | backend/services/infonet/markets/resolution.py | 456 | # Step 4: evidence bonds. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | frontend/src/mesh/meshDmRatchet.ts | 583 | // Step 1: new receiving chain | COMMENT |
| LOW⚡ | frontend/src/mesh/meshDmRatchet.ts | 590 | // Step 2: new sending chain with a fresh DH key | COMMENT |
| LOW | backend/main.py | 2305 | # Step 1: Ask the peer which gates it has and how many events each | COMMENT |
| LOW | backend/main.py | 2343 | # Step 2: For each gate with new events, pull the batch | COMMENT |
| LOW⚡ | backend/tests/mesh/test_secure_storage_passphrase.py | 339 | # Step 1: create raw envelope (simulate old Docker behavior) | COMMENT |
| LOW⚡ | backend/tests/mesh/test_secure_storage_passphrase.py | 344 | # Step 2: now set up with secret and no raw fallback | COMMENT |
| LOW | backend/services/region_dossier.py | 206 | # Step 1: Reverse geocode | STRING |
| LOW | backend/services/region_dossier.py | 222 | # Step 2: Parallel fetch with real timeouts that do not block on executor shutdown | STRING |
| LOW⚡ | backend/services/tinygs_fetcher.py | 325 | # Step 1: Get TLE data (from cache or CelesTrak) | COMMENT |
| LOW⚡ | backend/services/tinygs_fetcher.py | 331 | # Step 2: Try to fetch TinyGS telemetry (non-blocking, uses cache) | COMMENT |
| LOW⚡ | backend/services/tinygs_fetcher.py | 334 | # Step 3: Propagate all satellites via SGP4 | COMMENT |
| LOW⚡ | backend/services/tinygs_fetcher.py | 340 | # Step 4: Merge and filter | COMMENT |
| LOW | backend/services/thermal_sentinel.py | 55 | # Step 1: STAC search for Sentinel-2 scenes | COMMENT |
| LOW | backend/services/thermal_sentinel.py | 69 | # Step 2: Try SWIR band analysis if rasterio is available | COMMENT |
| LOW | backend/services/thermal_sentinel.py | 88 | # Step 3: Cross-reference with FIRMS fire data | COMMENT |
| LOW⚡ | backend/services/fetchers/earth_observation.py | 1254 | # Step 1: GET the month index to capture session cookies + fresh nonce. | COMMENT |
| LOW | backend/services/fetchers/earth_observation.py | 1281 | # Step 2: POST to admin-ajax.php with length=-1 to pull the whole month. | COMMENT |
| LOW | backend/services/infonet/markets/resolution.py | 240 | # Step 0: zero-evidence → INVALID, return everything. | COMMENT |
| LOW | backend/services/infonet/markets/resolution.py | 358 | # Step 2: oracle-rep supermajority. | COMMENT |
| LOW | backend/services/infonet/markets/resolution.py | 410 | # Step 3: distribute resolution stakes per rep type. | COMMENT |
| LOW | backend/services/infonet/markets/resolution.py | 456 | # Step 4: evidence bonds. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | backend/tests/mesh/test_5d_replay_persistence.py | 174 | # Create a new store from the same directory — simulates restart | COMMENT |
| MEDIUM | backend/tests/mesh/test_nonce_capacity_isolation.py | 179 | # Create a fresh relay instance and load | COMMENT |
| MEDIUM⚡ | backend/tests/mesh/test_secure_storage_rotation.py | 183 | # Create a DPAPI envelope (Windows default) | COMMENT |
| MEDIUM | backend/tests/mesh/test_secure_storage_rotation.py | 235 | # Create a passphrase master key | COMMENT |
| MEDIUM | backend/services/mesh/mesh_gate_mls.py | 1954 | # Create a durable gate envelope: the plaintext encrypted under the | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | backend/main.py | 491 | CODE | |
| LOW | backend/main.py | 4114 | CODE | |
| LOW | backend/routers/mesh_peer_sync.py | 154 | CODE | |
| LOW | backend/routers/sigint.py | 35 | CODE | |
| LOW | backend/routers/ai_intel.py | 1098 | CODE | |
| LOW | backend/tests/mesh/test_dm_alias_rotation_binding.py | 44 | CODE | |
| LOW | backend/scripts/release_helper.py | 65 | CODE | |
| LOW | backend/services/entity_profile.py | 188 | CODE | |
| LOW | backend/services/entity_trail.py | 172 | CODE | |
| LOW | backend/services/ai_pin_store.py | 232 | CODE | |
| LOW | backend/services/telemetry.py | 1543 | CODE | |
| LOW | backend/services/telemetry.py | 1771 | CODE | |
| LOW | backend/services/privacy_claims.py | 1352 | CODE | |
| LOW | backend/services/wormhole_status.py | 62 | CODE | |
| LOW | backend/services/mesh/mesh_infonet_sync_support.py | 182 | CODE | |
| LOW | backend/services/mesh/mesh_wormhole_contacts.py | 1276 | CODE | |
| LOW | backend/services/mesh/mesh_private_dispatcher.py | 604 | CODE | |
| LOW | backend/services/mesh/mesh_dm_relay.py | 1494 | CODE | |
| LOW | backend/services/fetchers/trains.py | 133 | CODE | |
| LOW | backend/services/infonet/tests/_chain_factory.py | 31 | CODE | |
| LOW | openclaw-skills/shadowbroker/sb_query.py | 479 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | start.sh | 108 | # Check if UV is available (preferred, much faster installs) | COMMENT |
| LOW | backend/routers/ai_intel.py | 3313 | # Check if client disconnected | COMMENT |
| LOW | backend/services/openclaw_bridge.py | 215 | # Increment sequence | COMMENT |
| LOW | backend/services/feed_ingester.py | 102 | # Check if first item looks like a GeoJSON Feature | COMMENT |
| LOW | backend/services/network_utils.py | 278 | # Check if this domain recently failed with requests — skip straight to curl | COMMENT |
| LOW | backend/services/mesh/mesh_oracle.py | 581 | # Check if this staker already has an active stake on this message | COMMENT |
| LOW | backend/services/mesh/mesh_oracle.py | 595 | # Check if there are existing stakes — extend grace period | COMMENT |
| LOW | backend/services/mesh/mesh_oracle.py | 656 | # Check if ALL stakes for this message have expired | COMMENT |
| LOW | backend/services/fetchers/prediction_markets.py | 916 | # Check if query appears in title or word overlap | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | backend/services/fetchers/earth_observation.py | 1745 | CODE | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1748 | CODE | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1749 | CODE | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1761 | CODE | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1762 | CODE | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1763 | CODE | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1764 | CODE | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1824 | CODE | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1829 | CODE | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1831 | CODE | |
| MEDIUM | scripts/e2e_dm_short_address_live.py | 1431 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | frontend/src/i18n/translations/zh-CN.json | 321 | "placeholder": "输入消息..." | CODE |
| LOW | frontend/src/i18n/translations/en.json | 321 | "placeholder": "Type a message..." | CODE |
| LOW | frontend/src/i18n/translations/fr.json | 321 | "placeholder": "Tapez un message..." | CODE |
| LOW | frontend/src/i18n/translations/fa.json | 321 | "placeholder": "پیامی بنویسید..." | CODE |
| LOW | backend/tests/test_per_operator_outbound_attribution.py | 104 | ("user@example.com", "user-example-com"), | CODE |
| LOW⚡ | backend/services/env_check.py | 189 | return "placeholder" | CODE |
| LOW⚡ | backend/services/env_check.py | 201 | return "placeholder" | CODE |
| LOW⚡ | …end/services/infonet/tests/test_privacy_scaffolding.py | 135 | fake_key = FunctionKey(secret=b"fake", epoch="2026-04", credential=b"") | CODE |
| LOW⚡ | …end/services/infonet/tests/test_privacy_scaffolding.py | 138 | ok, reason = verify_response(response=response, key=fake_key, now=1000.5) | CODE |
| LOW | openclaw-skills/shadowbroker/SKILL.md | 267 | await sb.send_command("osint_lookup", {"tool": "leaks", "email": "user@example.com"}) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | README.md | 1028 | │ │ ├── data_fetcher.py # Core scheduler — orchestrates all data sources | CODE |
| MEDIUM | README.md | 1073 | │ │ ├── mesh_wormhole_ratchet.py # Double-ratchet DM scaffolding | CODE |
| MEDIUM | …es/infonet/privacy/function_keys/challenge_response.py | 70 | # scaffolding accepts any opaque bytes. | COMMENT |
| MEDIUM | backend/services/infonet/tests/test_infonet_router.py | 47 | # Sprint 11+ scaffolding: all report not_implemented. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docker-compose.gitlab.yml | 5 | # Usage: | COMMENT |
| LOW | backend/scripts/scan-secrets.sh | 4 | # Usage: | COMMENT |
| LOW | desktop-shell/tauri-skeleton/dev.sh | 10 | # Usage: | COMMENT |
| LOW | desktop-shell/tauri-skeleton/build.sh | 24 | # Usage: | COMMENT |
| LOW | helm/chart/values-gitlab.yaml | 5 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | backend/services/fetchers/nuforc_enrichment.py | 343 | # No date filter — just return the most recent entry for this state | COMMENT |
| MEDIUM | backend/services/infonet/time_validity.py | 46 | # Byzantine arithmetic with up to ~5 colluding nodes (median is robust). | COMMENT |