Open-source intelligence for the global theater. Track everything from the corporate/private jets of the wealthy, and spy satellites, to seismic events in one unified interface. Hook an AI agent up to have it parse through data and find previously unseen correlations. The knowledge is available to all but rarely aggregated in the open, until now.
6981 matches across 15 categories. Click a row to expand file-level details.
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | .gitlab-ci.yml | 66 | # ── Backend image ──────────────────────────────────────────────────────── |
| MEDIUM | .gitlab-ci.yml | 87 | # ── Frontend image ─────────────────────────────────────────────────────── |
| MEDIUM | .gitlab-ci.yml | 108 | # ── Reverse mirror to GitHub ───────────────────────────────────────────── |
| MEDIUM | start.sh | 67 | # ── Zombie cleanup ───────────────────────────────────────────────── |
| MEDIUM | start.sh | 97 | # ─────────────────────────────────────────────────────────────────── |
| MEDIUM | kill_wormhole.sh | 2 | # ============================================================ |
| MEDIUM | kill_wormhole.sh | 5 | # ============================================================ |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 501 | // ─── Additional payload builders (write-action wiring phase) ───────────── |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 38 | // ─── Status ────────────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 71 | // ─── Petitions ─────────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 116 | // ─── Event payload validation ──────────────────────────────────────────── |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 132 | // ─── Upgrades ──────────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 157 | // ─── Markets ───────────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 218 | // ─── Gates ─────────────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 262 | // ─── Reputation ────────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 285 | // ─── Bootstrap ─────────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 309 | // ─── Signed write: append an Infonet economy event ─────────────────────── |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 445 | // ─── End-to-end sign + append helper ──────────────────────────────────── |
| MEDIUM | frontend/src/mesh/infonetEconomyClient.ts | 738 | // ─── Upgrade-hash governance — propose / signal-ready ────────────────── |
| MEDIUM | frontend/src/mesh/meshIdentity.ts | 971 | // ─── DH Key Exchange (X25519 / ECDH P-256 fallback) ───────────────────── |
| MEDIUM | frontend/src/mesh/meshIdentity.ts | 1328 | // ─── Contact Management (storage) ────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 1 | // ─── ShadowBroker Dashboard Data Types ───────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 5 | // ─── FLIGHTS ──────────────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 87 | // ─── SHIPS / MARITIME ─────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 145 | // ─── SATELLITES ───────────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 211 | // ─── EARTHQUAKES ──────────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 222 | // ─── GPS JAMMING ──────────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 233 | // ─── FIRE HOTSPOTS (NASA FIRMS) ───────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 246 | // ─── TRAINS ──────────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 265 | // ─── CCTV CAMERAS ─────────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 277 | // ─── KIWISDR RECEIVERS ───────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 291 | // ─── PSK REPORTER SPOTS ───────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 304 | // ─── SATNOGS GROUND STATIONS ──────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 334 | // ─── TINYGS LORA SATELLITES ───────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 350 | // ─── POLICE SCANNERS (OpenMHZ) ────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 363 | // ─── SIGINT (APRS / Meshtastic / JS8Call) ─────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 402 | // ─── INTERNET OUTAGES (IODA) ──────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 416 | // ─── DATA CENTERS ─────────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 500 | // ─── UAP SIGHTINGS ───────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 518 | // ─── WASTEWATER SCAN ────────────────────────────────��───────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 560 | // ─── CORRELATION ALERTS ──────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 562 | // ─── CROWDTHREAT ─────────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 615 | // ─── NEWS / GLOBAL INCIDENTS ──────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 651 | // ─── UKRAINE FRONTLINE ────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 668 | // ─── GDELT INCIDENTS ──────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 696 | // ─── LIVEUAMAP ────────────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 713 | // ─── STOCKS & COMMODITIES ─────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 724 | // ─── SPACE WEATHER ────────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 739 | // ─── WEATHER (RAINVIEWER) ─────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 746 | // ─── AIRPORTS ─────────────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 757 | // ─── RADIO FEEDS ──────────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 768 | // ─── ROUTE ────────────────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 777 | // ─── REGION DOSSIER ───────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 789 | // ─── FRESHNESS METADATA ───────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 793 | // ─── FIMI DISINFORMATION ──────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 819 | // ─── ROOT DATA OBJECT ─────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 926 | // ─── SAR ───────────────────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/types/dashboard.ts | 983 | // ─── COMPONENT PROPS ──────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/components/PredictionsPanel.tsx | 29 | // ─── Types ─────────────────────────────────────────────────────────────────── |
| MEDIUM | frontend/src/components/PredictionsPanel.tsx | 103 | // ─── Helpers ───────────────────────────────────────────────────────────────── |
| 1272 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 503 | export function buildChallengeVotePayload( |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 513 | export function buildResolutionStakePayload( |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 305 | export function fetchBootstrapMarketState(marketId: string): Promise<BootstrapMarketState> { |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 407 | export function buildChallengeFilePayload( |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 417 | export function buildGateSuspendFilePayload( |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 434 | export function buildBootstrapResolutionVotePayload( |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 548 | export function buildGateShutdownFilePayload( |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 565 | export function buildGateShutdownAppealFilePayload( |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 694 | export async function buildEvidenceSubmitPayload(args: { |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 740 | export function buildUpgradeProposePayload(args: { |
| LOW | frontend/src/mesh/infonetEconomyClient.ts | 761 | export function buildUpgradeSignalReadyPayload( |
| LOW | frontend/src/mesh/gateCompatTelemetry.ts | 74 | function compatTelemetryStorageSelection(): { |
| LOW | frontend/src/mesh/gateCompatTelemetry.ts | 123 | export function normalizeGateCompatReason(reason: string): string { |
| LOW | frontend/src/mesh/gateCompatTelemetry.ts | 210 | export function getGateCompatTelemetryEventName(): string { |
| LOW | frontend/src/mesh/gateCompatTelemetry.ts | 223 | export function getGateCompatTelemetrySnapshot(): GateCompatTelemetrySnapshot { |
| LOW | frontend/src/mesh/gateCompatTelemetry.ts | 289 | export function summarizeGateCompatTelemetry( |
| LOW | frontend/src/mesh/gateCompatTelemetry.ts | 310 | export function recordGateCompatTelemetry(input: { |
| LOW | frontend/src/mesh/controlPlaneStatusClient.ts | 169 | export function invalidatePrivacyProfileCache(): void { |
| LOW | frontend/src/mesh/controlPlaneStatusClient.ts | 177 | export function invalidateInfonetNodeStatusCache(): void { |
| LOW | frontend/src/mesh/controlPlaneStatusClient.ts | 181 | export async function fetchPrivacyProfileSnapshot( |
| LOW | frontend/src/mesh/controlPlaneStatusClient.ts | 205 | export async function fetchInfonetNodeStatusSnapshot( |
| LOW | frontend/src/mesh/controlPlaneStatusClient.ts | 218 | export async function fetchNodeSettingsSnapshot(): Promise<NodeSettingsSnapshot> { |
| LOW | frontend/src/mesh/meshGateLocalRuntime.ts | 270 | export async function isInlineGateCryptoSupported(): Promise<boolean> { |
| LOW | frontend/src/mesh/meshGateLocalRuntime.ts | 275 | export async function probeInlineGateCryptoSupport(): Promise<InlineGateCryptoSupport> { |
| LOW | frontend/src/mesh/meshGateLocalRuntime.ts | 333 | export async function decryptInlineGateMessages( |
| LOW | frontend/src/mesh/contactTrustSummary.ts | 25 | function normalizeExistingTrustSummary( |
| LOW | frontend/src/mesh/contactTrustSummary.ts | 120 | function deriveRootWitnessProvenanceState(args: { |
| LOW | frontend/src/mesh/contactTrustSummary.ts | 159 | export function rootWitnessContinuityLabel( |
| LOW | frontend/src/mesh/gateAccessProof.ts | 28 | function gateAccessProofExtendedMaxAgeMs(): number { |
| LOW | frontend/src/mesh/gateAccessProof.ts | 34 | function gateAccessHeaderReusableUntilMs(entry: { |
| LOW | frontend/src/mesh/gateAccessProof.ts | 44 | export function pruneExpiredGateAccessHeaders(now: number = Date.now()): void { |
| LOW | frontend/src/mesh/gateAccessProof.ts | 52 | export function invalidateGateAccessHeaders(gateId?: string): void { |
| LOW | frontend/src/mesh/gateCatalogSnapshot.ts | 54 | export function invalidateGateCatalogSnapshot(): void { |
| LOW | frontend/src/mesh/gateCatalogSnapshot.ts | 58 | export function invalidateGateDetailSnapshot(gateId?: string): void { |
| LOW | frontend/src/mesh/wormholeClient.ts | 151 | export function invalidateWormholeRuntimeCache(): void { |
| LOW | frontend/src/mesh/wormholeClient.ts | 232 | export async function updatePrivateDeliveryAction( |
| LOW | frontend/src/mesh/meshDmRatchet.ts | 139 | async function getOrCreateWrapKey(): Promise<CryptoKey> { |
| LOW | frontend/src/mesh/meshDmRatchet.ts | 188 | async function readPersistedRatchetState(): Promise<string | null> { |
| LOW | frontend/src/mesh/meshDmRatchet.ts | 203 | async function writePersistedRatchetState(value: string): Promise<void> { |
| LOW | frontend/src/mesh/meshDeadDrop.ts | 63 | export async function deadDropTokensForContacts( |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 517 | function gateKeyStatusActiveRoomTtlMs(): number { |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 523 | function gateKeyStatusSessionStreamTtlMs(): number { |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 529 | function gateKeyStatusReusableUntilMs( |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 563 | function normalizeGateCompatReason(reason: string): string { |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 567 | function gateLocalRuntimeRequiredDetail(reason: string): string { |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 571 | function recordGateLocalRuntimeRequired( |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 1086 | export function getWormholeDmInviteImportErrorResult( |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 1095 | export async function fetchWormholeDmRootHealth(): Promise<WormholeDmRootHealth> { |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 1101 | export async function bootstrapWormholeIdentity(): Promise<WormholeIdentity> { |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 547 | function isGateSessionStreamActiveForGate(gateId: string): boolean { |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 584 | function buildGateLocalRuntimeRequiredError( |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 593 | function gateCompatApprovalStorage(): Storage | null { |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 615 | function ensureGateCompatApprovalsLoaded(): void { |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 639 | function persistGateCompatApprovals(): void { |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 657 | function hasApprovedGateCompatFallback(gateId: string): boolean { |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 663 | export function approveGateCompatFallback(gateId: string): void { |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 684 | export function hasGateCompatFallbackApproval(gateId: string): boolean { |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 709 | export function invalidateWormholeGateKeyStatus(gateId?: string): void { |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 720 | async function refreshGateSessionStreamBootstrapContext( |
| LOW | frontend/src/mesh/wormholeIdentityClient.ts | 742 | export async function syncBrowserWormholeGateState( |
| 3722 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | backend/auth.py | 62 | def _current_admin_key() -> str: |
| MEDIUM | backend/auth.py | 69 | def _allow_insecure_admin() -> bool: |
| MEDIUM | backend/auth.py | 79 | def _debug_mode_enabled() -> bool: |
| MEDIUM | backend/auth.py | 86 | def _admin_key_required_in_production() -> bool: |
| MEDIUM | backend/auth.py | 1023 | def _external_assurance_status_snapshot() -> dict[str, Any]: |
| MEDIUM | backend/auth.py | 1362 | def _anonymous_mode_state() -> dict[str, Any]: |
| LOW | backend/auth.py | 65 | except Exception: |
| LOW | backend/auth.py | 75 | except Exception: |
| LOW | backend/auth.py | 82 | except Exception: |
| LOW | backend/auth.py | 90 | except Exception: |
| LOW | backend/auth.py | 100 | except Exception as exc: |
| LOW | backend/auth.py | 562 | except Exception: |
| LOW | backend/auth.py | 584 | except Exception: |
| LOW | backend/auth.py | 587 | except Exception as exc: |
| LOW | backend/auth.py | 1286 | except Exception: |
| LOW | backend/auth.py | 1387 | except Exception: |
| LOW | backend/auth.py | 379 | except Exception: |
| LOW | backend/auth.py | 535 | except Exception: |
| LOW | backend/auth.py | 603 | except Exception: |
| LOW | backend/auth.py | 644 | except Exception: |
| LOW | backend/auth.py | 1065 | except Exception as exc: |
| LOW | backend/auth.py | 1085 | except Exception as exc: |
| LOW | backend/auth.py | 1133 | except Exception: |
| LOW | backend/auth.py | 1136 | except Exception: |
| LOW | backend/auth.py | 1212 | except Exception: |
| LOW | backend/wormhole_server.py | 48 | except Exception as exc: |
| LOW | backend/wormhole_server.py | 109 | except Exception: |
| LOW | backend/node_state.py | 87 | except Exception: |
| LOW | backend/node_state.py | 180 | except Exception: |
| LOW | backend/node_state.py | 249 | except Exception as exc: |
| MEDIUM | backend/main.py | 381 | def _privacy_core_status() -> dict[str, Any]: |
| MEDIUM | backend/main.py | 2522 | def _safe_int(val, default=0): |
| MEDIUM | backend/main.py | 2606 | def _startup_wormhole_runtime(): |
| MEDIUM | backend/main.py | 2633 | def _prime_route_database(): |
| MEDIUM | backend/main.py | 2645 | def _prime_aircraft_database(): |
| MEDIUM | backend/main.py | 3316 | def _blocking_upgrade() -> str | None: |
| MEDIUM | backend/main.py | 3430 | def _upgrade_invite_scoped_contact_preferences_background() -> dict[str, Any]: |
| MEDIUM | backend/main.py | 3656 | def _do_refresh(): |
| MEDIUM | backend/main.py | 7011 | def _rns_private_dm_ready() -> bool: |
| MEDIUM | backend/main.py | 7037 | def _high_privacy_profile_enabled() -> bool: |
| LOW | backend/main.py | 53 | except Exception: |
| LOW | backend/main.py | 347 | except Exception as exc: |
| LOW | backend/main.py | 2310 | except Exception: |
| LOW | backend/main.py | 2595 | except Exception: |
| LOW | backend/main.py | 2598 | except Exception: |
| LOW | backend/main.py | 2699 | except Exception: |
| LOW | backend/main.py | 2706 | except Exception: |
| LOW | backend/main.py | 2710 | except Exception: |
| LOW | backend/main.py | 2716 | except Exception: |
| LOW | backend/main.py | 3338 | except Exception: |
| LOW | backend/main.py | 3389 | except Exception: |
| LOW | backend/main.py | 3436 | except Exception as exc: |
| LOW | backend/main.py | 3447 | except Exception as exc: |
| LOW | backend/main.py | 3583 | except Exception: |
| LOW | backend/main.py | 3587 | except Exception: |
| LOW | backend/main.py | 3589 | except Exception: |
| LOW | backend/main.py | 3607 | except Exception: |
| LOW | backend/main.py | 3612 | except Exception: |
| LOW | backend/main.py | 7016 | except Exception: |
| LOW | backend/main.py | 7043 | except Exception: |
| 820 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | backend/auth.py | 45 | |
| LOW | backend/auth.py | 45 | |
| LOW | backend/auth.py | 45 | |
| LOW | backend/auth.py | 45 | |
| LOW | backend/wormhole_server.py | 3 | |
| LOW | backend/main.py | 225 | |
| LOW | backend/main.py | 225 | |
| LOW | backend/main.py | 262 | |
| LOW | backend/main.py | 296 | |
| LOW | backend/main.py | 296 | |
| LOW | backend/main.py | 9217 | |
| LOW | backend/main.py | 9305 | |
| LOW | backend/main.py | 9326 | |
| LOW | backend/limiter.py | 29 | |
| LOW | backend/routers/mesh_public.py | 45 | |
| LOW | backend/routers/mesh_public.py | 54 | |
| LOW | backend/routers/mesh_public.py | 55 | |
| LOW | backend/routers/cctv.py | 6 | |
| LOW | backend/routers/cctv.py | 8 | |
| LOW | backend/routers/mesh_peer_sync.py | 5 | |
| LOW | backend/routers/mesh_peer_sync.py | 6 | |
| LOW | backend/routers/mesh_peer_sync.py | 8 | |
| LOW | backend/routers/mesh_peer_sync.py | 8 | |
| LOW | backend/routers/mesh_peer_sync.py | 9 | |
| LOW | backend/routers/mesh_peer_sync.py | 10 | |
| LOW | backend/routers/mesh_peer_sync.py | 11 | |
| LOW | backend/routers/health.py | 3 | |
| LOW | backend/routers/health.py | 4 | |
| LOW | backend/routers/tools.py | 4 | |
| LOW | backend/routers/tools.py | 9 | |
| LOW | backend/routers/mesh_dm.py | 2 | |
| LOW | backend/routers/mesh_dm.py | 3 | |
| LOW | backend/routers/mesh_dm.py | 12 | |
| LOW | backend/routers/mesh_dm.py | 19 | |
| LOW | backend/routers/mesh_dm.py | 20 | |
| LOW | backend/routers/mesh_dm.py | 20 | |
| LOW | backend/routers/infonet.py | 18 | |
| LOW | backend/routers/infonet.py | 28 | |
| LOW | backend/routers/sigint.py | 2 | |
| LOW | backend/routers/sigint.py | 3 | |
| LOW | backend/routers/sigint.py | 5 | |
| LOW | backend/routers/radio.py | 2 | |
| LOW | backend/routers/radio.py | 3 | |
| LOW | backend/routers/radio.py | 5 | |
| LOW | backend/routers/mesh_operator.py | 3 | |
| LOW | backend/routers/mesh_operator.py | 4 | |
| LOW | backend/routers/mesh_operator.py | 5 | |
| LOW | backend/routers/mesh_operator.py | 7 | |
| LOW | backend/routers/mesh_oracle.py | 3 | |
| LOW | backend/routers/mesh_oracle.py | 3 | |
| LOW | backend/routers/mesh_oracle.py | 4 | |
| LOW | backend/routers/mesh_oracle.py | 5 | |
| LOW | backend/routers/mesh_oracle.py | 7 | |
| LOW | backend/routers/wormhole.py | 4 | |
| LOW | backend/routers/wormhole.py | 8 | |
| LOW | backend/routers/wormhole.py | 11 | |
| LOW | backend/routers/wormhole.py | 58 | |
| LOW | backend/routers/wormhole.py | 123 | |
| LOW | backend/routers/wormhole.py | 136 | |
| LOW | backend/routers/wormhole.py | 136 | |
| 568 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | backend/auth.py | 157 | |
| LOW | backend/auth.py | 179 | |
| LOW | backend/main.py | 121 | |
| LOW | backend/main.py | 1854 | |
| LOW | backend/main.py | 1976 | |
| LOW | backend/main.py | 2073 | |
| LOW | backend/main.py | 2212 | |
| LOW | backend/main.py | 2540 | |
| LOW | backend/main.py | 3058 | |
| LOW | backend/main.py | 3459 | |
| LOW | backend/main.py | 4007 | |
| LOW | backend/main.py | 4629 | |
| LOW | backend/main.py | 6157 | |
| LOW | backend/main.py | 10294 | |
| LOW | backend/main.py | 2579 | |
| LOW | backend/limiter.py | 80 | |
| LOW | backend/routers/mesh_public.py | 381 | |
| LOW | backend/routers/mesh_public.py | 620 | |
| LOW | backend/routers/mesh_public.py | 784 | |
| LOW | backend/routers/mesh_public.py | 1783 | |
| LOW | backend/routers/cctv.py | 206 | |
| LOW | backend/routers/infonet.py | 448 | |
| LOW | backend/routers/ai_intel.py | 1001 | |
| LOW | backend/routers/ai_intel.py | 1122 | |
| LOW | backend/routers/ai_intel.py | 1350 | |
| LOW | backend/routers/ai_intel.py | 2804 | |
| LOW | backend/routers/ai_intel.py | 3038 | |
| LOW | backend/routers/ai_intel.py | 3238 | |
| LOW | backend/routers/ai_intel.py | 3261 | |
| LOW | backend/routers/ai_intel.py | 3084 | |
| LOW | backend/routers/mesh_operator.py | 33 | |
| LOW | backend/routers/data.py | 315 | |
| LOW | backend/tests/test_2c_exception_visibility.py | 606 | |
| LOW | backend/tests/test_3c_router_extraction.py | 134 | |
| LOW | backend/tests/test_per_operator_outbound_attribution.py | 248 | |
| LOW | backend/tests/mesh/test_gate_secret_rotation_guard.py | 29 | |
| LOW | backend/services/openclaw_channel.py | 134 | |
| LOW | backend/services/openclaw_channel.py | 640 | |
| LOW | backend/services/unusual_whales_connector.py | 138 | |
| LOW | backend/services/ais_stream.py | 466 | |
| LOW | backend/services/ais_stream.py | 536 | |
| LOW | backend/services/ais_stream.py | 596 | |
| LOW | backend/services/sigint_bridge.py | 333 | |
| LOW | backend/services/sigint_bridge.py | 878 | |
| LOW | backend/services/sigint_bridge.py | 978 | |
| LOW | backend/services/sigint_bridge.py | 1267 | |
| LOW | backend/services/openclaw_watchdog.py | 100 | |
| LOW | backend/services/openclaw_watchdog.py | 430 | |
| LOW | backend/services/openclaw_watchdog.py | 491 | |
| LOW | backend/services/privacy_core_attestation.py | 124 | |
| LOW | backend/services/cctv_pipeline.py | 192 | |
| LOW | backend/services/cctv_pipeline.py | 333 | |
| LOW | backend/services/cctv_pipeline.py | 621 | |
| LOW | backend/services/cctv_pipeline.py | 689 | |
| LOW | backend/services/region_dossier.py | 67 | |
| LOW | backend/services/region_dossier.py | 167 | |
| LOW | backend/services/tinygs_fetcher.py | 69 | |
| LOW | backend/services/tinygs_fetcher.py | 96 | |
| LOW | backend/services/ai_pin_store.py | 85 | |
| LOW | backend/services/ai_pin_store.py | 187 | |
| 155 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | backend/main.py | 0 | list all peers (or filter by bucket: sync, push, bootstrap). |
| HIGH | backend/routers/mesh_public.py | 0 | list all peers (or filter by bucket: sync, push, bootstrap). |
| HIGH | backend/routers/mesh_operator.py | 0 | list all peers (or filter by bucket: sync, push, bootstrap). |
| HIGH | backend/main.py | 0 | add a peer to the store. body: {peer_url, transport?, label?, role?, buckets?[]}. |
| HIGH | backend/routers/mesh_public.py | 0 | add a peer to the store. body: {peer_url, transport?, label?, role?, buckets?[]}. |
| HIGH | backend/routers/mesh_operator.py | 0 | add a peer to the store. body: {peer_url, transport?, label?, role?, buckets?[]}. |
| HIGH | backend/main.py | 0 | remove a peer. body: {peer_url, bucket?}. if bucket omitted, removes from all buckets. |
| HIGH | backend/routers/mesh_public.py | 0 | remove a peer. body: {peer_url, bucket?}. if bucket omitted, removes from all buckets. |
| HIGH | backend/routers/mesh_operator.py | 0 | remove a peer. body: {peer_url, bucket?}. if bucket omitted, removes from all buckets. |
| HIGH | backend/main.py | 0 | enable or disable a peer. body: {peer_url, bucket, enabled: bool}. |
| HIGH | backend/routers/mesh_public.py | 0 | enable or disable a peer. body: {peer_url, bucket, enabled: bool}. |
| HIGH | backend/routers/mesh_operator.py | 0 | enable or disable a peer. body: {peer_url, bucket, enabled: bool}. |
| HIGH | backend/services/mesh/mesh_reputation.py | 0 | actually write to disk (called by timer or atexit). |
| HIGH | backend/services/mesh/mesh_reputation.py | 0 | actually write to disk (called by timer or atexit). |
| HIGH | backend/services/mesh/mesh_dm_relay.py | 0 | actually write to disk (called by timer or atexit). |
| HIGH | backend/services/mesh/mesh_oracle.py | 0 | actually write to disk (called by timer or atexit). |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | docker-compose.gitlab.yml | 1 | # Compose override that points the backend and frontend at the GitLab |
| LOW | docker-compose.yml | 61 | # Treat that bridge as local operator access while ports remain bound to 127.0.0.1 by default. |
| LOW | .gitlab-ci.yml | 1 | # GitLab CI/CD for Shadowbroker |
| LOW | .gitlab-ci.yml | 21 | # - The image build/push uses $CI_JOB_TOKEN, which GitLab provides |
| LOW | frontend/vitest.config.js | 1 | const path = require('path'); |
| LOW | frontend/vitest.config.js | 21 | // findByText / waitFor against React reconciliation): |
| LOW | frontend/next.config.ts | 1 | import type { NextConfig } from 'next'; |
| LOW | frontend/src/components/AIIntelPanel.tsx | 381 | const [nodeId, setNodeId] = React.useState(''); |
| LOW | frontend/src/components/MeshChat.tsx | 1 | // Re-export from decomposed MeshChat module. |
| LOW | …d/src/__tests__/mesh/messagesViewFirstContact.test.tsx | 861 | |
| LOW | …d/src/__tests__/mesh/messagesViewFirstContact.test.tsx | 881 | // (direct + workflow_call from docker-publish.yml) starving |
| LOW | frontend/src/lib/api.ts | 1 | // All API calls use relative paths (e.g. /api/flights). |
| LOW | backend/main.py | 3521 | # transport has not finished coming up yet. |
| LOW | backend/ais_proxy.js | 1 | // AIS Stream WebSocket proxy. |
| LOW | backend/routers/health.py | 61 | # who care about MITM-protection posture deserve a visible signal. |
| LOW | backend/routers/tools.py | 81 | lng: float = Query(..., ge=-180, le=180), |
| LOW | backend/routers/tools.py | 121 | |
| LOW | backend/routers/ai_intel.py | 2521 | # OpenClaw Connection Management (local-operator only — NOT via HMAC) |
| LOW | backend/routers/ai_intel.py | 2541 | # GET /api/ai/connect-info — always returns the MASKED |
| LOW | backend/routers/ai_intel.py | 2561 | # not land in URL history. |
| LOW | backend/routers/ai_intel.py | 3001 | return channel.status() |
| LOW | backend/routers/ai_intel.py | 3161 | |
| LOW | backend/tests/test_ais_upstream_health.py | 161 | # alone doesn't escalate when no key is set." |
| LOW | backend/tests/test_control_surface_auth.py | 81 | # STAC search + remote SWIR raster reads. Unauthenticated abuse |
| LOW | backend/tests/test_sentinel_routes_auth_gate.py | 221 | assert r.status_code == 200 |
| LOW | backend/services/openclaw_channel.py | 1521 | |
| LOW | backend/services/ais_stream.py | 341 | _vessels: dict[int, dict] = {} |
| LOW | backend/services/config.py | 121 | # parked in a single recipient's mailbox at any one time. Once the |
| LOW | backend/services/config.py | 141 | MESH_VOTER_BLIND_SALT_ROTATE_DAYS: int = 30 |
| LOW | backend/services/config.py | 161 | # single boolean flip from silently writing mailbox graph metadata to disk. |
| LOW | backend/services/config.py | 181 | MESH_DM_ROOT_TRANSPARENCY_LEDGER_READBACK_URI: str = "" |
| LOW | backend/services/config.py | 201 | MESH_BACKEND_GATE_PLAINTEXT_COMPAT: bool = False |
| LOW | backend/services/config.py | 261 | MESH_PRIVACY_PREWARM_ANON_CADENCE_S: int = 300 |
| LOW | backend/services/config.py | 281 | # Operator release attestation for the Sprint 8 release gate. This does |
| LOW | backend/services/config.py | 301 | # Meshtastic MQTT broker credentials (defaults match public firmware). |
| LOW | backend/services/config.py | 321 | # |
| LOW | backend/services/region_dossier.py | 21 | # |
| LOW | backend/services/carrier_tracker.py | 161 | }, |
| LOW | backend/services/network_utils.py | 21 | _session.mount("https://", HTTPAdapter(max_retries=_retry, pool_maxsize=20)) |
| LOW | backend/services/network_utils.py | 41 | # The handle: |
| LOW | backend/services/network_utils.py | 221 | # ``OPERATOR_HANDLE`` setting and migrate call sites incrementally. |
| LOW | backend/services/mesh/mesh_crypto.py | 81 | # |
| LOW | backend/services/mesh/mesh_rns.py | 41 | # ── S15B: DM wire-visible ciphertext length alignment ────────────────── |
| LOW | backend/services/mesh/mesh_rollout_flags.py | 41 | # recoverable from disk. Epoch/event_id ceilings already bound *policy* |
| LOW | backend/services/mesh/mesh_rollout_flags.py | 61 | # observed a given author, but a fresh peer (empty sequence state) would |
| LOW | backend/services/mesh/mesh_rollout_flags.py | 81 | # migration, but doing so should degrade release readiness immediately. |
| LOW | backend/services/mesh/mesh_gate_mls.py | 2001 | int(binding.epoch), |
| LOW | backend/services/fetchers/earth_observation.py | 681 | # NUFORC's website switched to a JS-rendered Mapbox GL map. The old HTML |
| LOW | desktop-shell/tauri-skeleton/dev.sh | 1 | #!/usr/bin/env bash |
| LOW | desktop-shell/tauri-skeleton/build.sh | 1 | #!/usr/bin/env bash |
| LOW | desktop-shell/tauri-skeleton/build.sh | 21 | # The web deployment (Docker/Vercel) is unaffected - it continues to use |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/policy.rs | 1 | //! Native-side policy enforcement and audit ring for local-control commands. |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/companion.rs | 1 | //! Optional localhost/browser companion mode. |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/companion.rs | 21 | //! `main.rs` (not by `companion_enable`) so that the Tauri main window also |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/companion.rs | 61 | } |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/tray.rs | 1 | //! Cross-platform tray / menu-bar background lifecycle. |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/main.rs | 21 | pub audit_ring: SharedAuditRing, |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/main.rs | 41 | |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/main.rs | 61 | // every invocation in its AuditRing. |
| LOW | desktop-shell/tauri-skeleton/src-tauri/src/main.rs | 501 | // JavaScript on every page load (including full reloads), |
| 4 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | backend/routers/ai_intel.py | 1670 | "returns": "{best_match: {...}|null, results: [{source_layer, entity_type, label, id, callsign, registra |
| HIGH | backend/services/privacy_core_client.py | 760 | "Build it with: cd privacy-core && cargo build --release" |
| HIGH | backend/services/updater.py | 31 | "docker compose pull && docker compose up -d" |
| HIGH | backend/services/infonet/bootstrap/argon2id.py | 12 | "bootstrap_resolution_vote" || protocol_version || node_id || |
| HIGH | backend/services/infonet/bootstrap/argon2id.py | 13 | market_id || side || snapshot_event_hash || pow_nonce |
| HIGH | …es/infonet/privacy/function_keys/challenge_response.py | 6 | Operator issues a fresh nonce; key-holder signs (challenge || nonce |
| HIGH | …nd/services/infonet/privacy/function_keys/nullifier.py | 8 | nullifier = SHA-256(secret || operator_id) |
| HIGH | …nd/services/infonet/privacy/function_keys/nullifier.py | 35 | """Return the hex SHA-256 of ``secret || operator_id`` (UTF-8 for |
| HIGH | backend/services/infonet/markets/evidence.py | 9 | - ``evidence_content_hash`` — SHA-256 of ``(market_id || claimed_outcome |
| HIGH | backend/services/infonet/markets/evidence.py | 14 | - ``submission_hash`` — SHA-256 of ``(evidence_content_hash || node_id |
| HIGH | backend/services/infonet/markets/evidence.py | 67 | """SHA-256 of ``content_hash || node_id || timestamp``. |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | frontend/src/mesh/meshDmRatchet.ts | 583 | // Step 1: new receiving chain |
| LOW | frontend/src/mesh/meshDmRatchet.ts | 590 | // Step 2: new sending chain with a fresh DH key |
| LOW | backend/main.py | 2104 | # Step 1: Ask the peer which gates it has and how many events each |
| LOW | backend/main.py | 2142 | # Step 2: For each gate with new events, pull the batch |
| LOW | backend/tests/mesh/test_secure_storage_passphrase.py | 339 | # Step 1: create raw envelope (simulate old Docker behavior) |
| LOW | backend/tests/mesh/test_secure_storage_passphrase.py | 344 | # Step 2: now set up with secret and no raw fallback |
| LOW | backend/services/region_dossier.py | 206 | # Step 1: Reverse geocode |
| LOW | backend/services/region_dossier.py | 222 | # Step 2: Parallel fetch with real timeouts that do not block on executor shutdown |
| LOW | backend/services/tinygs_fetcher.py | 325 | # Step 1: Get TLE data (from cache or CelesTrak) |
| LOW | backend/services/tinygs_fetcher.py | 331 | # Step 2: Try to fetch TinyGS telemetry (non-blocking, uses cache) |
| LOW | backend/services/tinygs_fetcher.py | 334 | # Step 3: Propagate all satellites via SGP4 |
| LOW | backend/services/tinygs_fetcher.py | 340 | # Step 4: Merge and filter |
| LOW | backend/services/thermal_sentinel.py | 55 | # Step 1: STAC search for Sentinel-2 scenes |
| LOW | backend/services/thermal_sentinel.py | 69 | # Step 2: Try SWIR band analysis if rasterio is available |
| LOW | backend/services/thermal_sentinel.py | 88 | # Step 3: Cross-reference with FIRMS fire data |
| LOW | backend/services/fetchers/earth_observation.py | 1060 | # Step 1: GET the month index to capture session cookies + fresh nonce. |
| LOW | backend/services/fetchers/earth_observation.py | 1087 | # Step 2: POST to admin-ajax.php with length=-1 to pull the whole month. |
| LOW | backend/services/infonet/markets/resolution.py | 240 | # Step 0: zero-evidence → INVALID, return everything. |
| LOW | backend/services/infonet/markets/resolution.py | 358 | # Step 2: oracle-rep supermajority. |
| LOW | backend/services/infonet/markets/resolution.py | 410 | # Step 3: distribute resolution stakes per rep type. |
| LOW | backend/services/infonet/markets/resolution.py | 456 | # Step 4: evidence bonds. |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | backend/tests/mesh/test_5d_replay_persistence.py | 174 | # Create a new store from the same directory — simulates restart |
| MEDIUM | backend/tests/mesh/test_nonce_capacity_isolation.py | 179 | # Create a fresh relay instance and load |
| MEDIUM | backend/tests/mesh/test_secure_storage_rotation.py | 183 | # Create a DPAPI envelope (Windows default) |
| MEDIUM | backend/tests/mesh/test_secure_storage_rotation.py | 235 | # Create a passphrase master key |
| MEDIUM | backend/services/mesh/mesh_gate_mls.py | 1954 | # Create a durable gate envelope: the plaintext encrypted under the |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | start.sh | 108 | # Check if UV is available (preferred, much faster installs) |
| LOW | backend/routers/ai_intel.py | 3140 | # Check if client disconnected |
| LOW | backend/services/openclaw_bridge.py | 215 | # Increment sequence |
| LOW | backend/services/feed_ingester.py | 102 | # Check if first item looks like a GeoJSON Feature |
| LOW | backend/services/network_utils.py | 300 | # Check if this domain recently failed with requests — skip straight to curl |
| LOW | backend/services/mesh/mesh_oracle.py | 581 | # Check if this staker already has an active stake on this message |
| LOW | backend/services/mesh/mesh_oracle.py | 595 | # Check if there are existing stakes — extend grace period |
| LOW | backend/services/mesh/mesh_oracle.py | 656 | # Check if ALL stakes for this message have expired |
| LOW | backend/services/fetchers/prediction_markets.py | 884 | # Check if query appears in title or word overlap |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | backend/services/fetchers/earth_observation.py | 1576 | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1579 | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1580 | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1592 | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1593 | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1594 | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1595 | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1655 | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1660 | |
| MEDIUM | backend/services/fetchers/earth_observation.py | 1662 |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | docker-compose.gitlab.yml | 5 | # Usage: |
| LOW | backend/scripts/scan-secrets.sh | 4 | # Usage: |
| LOW | desktop-shell/tauri-skeleton/dev.sh | 10 | # Usage: |
| LOW | desktop-shell/tauri-skeleton/build.sh | 24 | # Usage: |
| LOW | helm/chart/values-gitlab.yaml | 5 | # Usage: |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | backend/services/fetchers/nuforc_enrichment.py | 343 | # No date filter — just return the most recent entry for this state |
| MEDIUM | backend/services/infonet/time_validity.py | 45 | # Byzantine arithmetic with up to ~5 colluding nodes (median is robust). |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | backend/tests/test_per_operator_outbound_attribution.py | 104 | ("user@example.com", "user-example-com"), |