Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

zhitongblog/unterm

https://github.com/zhitongblog/unterm · scanned 2026-06-16 01:14 UTC (2 months, 1 week ago)

143 raw signals (0 security + 143 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 116 actionable findings from 1 signal source. 27 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

88.9% cov · 116 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 2 Medium 25 Low 76 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 116 Crowd 0 Layer: Software 29 Frontend 2 Network 1 Hardware 6 Security 8 Cicd 4 Quality 66

Exclude dismissed / FP Exclude test files

All 3257 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`PRIVACY.md`	software	healthy	`PRIVACY.md`
`deny.toml`	software	healthy	`deny.toml`
`Cargo.toml`	software	healthy	`Cargo.toml`
`.rustfmt.toml`	software	healthy	`.rustfmt.toml`
`README.md`	software	healthy	`README.md`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`Dockerfile`	software	healthy	`Dockerfile`
`smithery.yaml`	software	healthy	`smithery.yaml`
`LICENSE.md`	software	healthy	`LICENSE.md`
`README-DISTRO-MAINTAINER.md`	software	healthy	`README-DISTRO-MAINTAINER.md`
`Makefile`	software	healthy	`Makefile`
`Cargo.lock`	software	healthy	`Cargo.lock`
`CHANGELOG.md`	software	healthy	`CHANGELOG.md`
`Cargo.toml`	software	healthy	`strip-ansi-escapes/Cargo.toml`
`main.rs`	software	healthy	`strip-ansi-escapes/src/main.rs`
`Cargo.toml`	software	healthy	`pty/Cargo.toml`
`LICENSE.md`	software	healthy	`pty/LICENSE.md`
`whoami_async.rs`	software	healthy	`pty/examples/whoami_async.rs`
`narrow.rs`	software	healthy	`pty/examples/narrow.rs`
`whoami.rs`	software	healthy	`pty/examples/whoami.rs`
`bash.rs`	software	healthy	`pty/examples/bash.rs`
`lib.rs`	software	healthy	`pty/src/lib.rs`
`serial.rs`	software	healthy	`pty/src/serial.rs`
`unix.rs`	software	healthy	`pty/src/unix.rs`
`cmdbuilder.rs`	software	healthy	`pty/src/cmdbuilder.rs`
`conpty.rs`	software	healthy	`pty/src/win/conpty.rs`
`mod.rs`	software	healthy	`pty/src/win/mod.rs`
`psuedocon.rs`	software	healthy	`pty/src/win/psuedocon.rs`
`procthreadattr.rs`	software	healthy	`pty/src/win/procthreadattr.rs`
`Cargo.toml`	software	healthy	`vtparse/Cargo.toml`
`README.md`	software	healthy	`vtparse/README.md`
`LICENSE.md`	software	healthy	`vtparse/LICENSE.md`
`lib.rs`	software	healthy	`vtparse/src/lib.rs`
`enums.rs`	software	healthy	`vtparse/src/enums.rs`
`transitions.rs`	software	healthy	`vtparse/src/transitions.rs`
`Cargo.toml`	software	healthy	`promise/Cargo.toml`
`lib.rs`	software	healthy	`promise/src/lib.rs`
`spawn.rs`	software	healthy	`promise/src/spawn.rs`
`Cargo.toml`	software	healthy	`env-bootstrap/Cargo.toml`
`lib.rs`	software	healthy	`env-bootstrap/src/lib.rs`
`ringlog.rs`	software	healthy	`env-bootstrap/src/ringlog.rs`
`README.md`	software	healthy	`lua-api-crates/README.md`
`Cargo.toml`	software	healthy	`lua-api-crates/filesystem/Cargo.toml`
`lib.rs`	software	healthy	`lua-api-crates/filesystem/src/lib.rs`
`Cargo.toml`	software	healthy	`lua-api-crates/serde-funcs/Cargo.toml`
`lib.rs`	software	healthy	`lua-api-crates/serde-funcs/src/lib.rs`
`Cargo.toml`	software	healthy	`lua-api-crates/plugin/Cargo.toml`
`lib.rs`	software	healthy	`lua-api-crates/plugin/src/lib.rs`
`Cargo.toml`	software	healthy	`lua-api-crates/time-funcs/Cargo.toml`
`lib.rs`	software	healthy	`lua-api-crates/time-funcs/src/lib.rs`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`resolve_block_name`	software	healthy	`test-data/unicode-dump.py:319`
`print_range`	software	healthy	`test-data/unicode-dump.py:331`
`do_show_range`	software	healthy	`test-data/unicode-dump.py:344`
`do_show_block`	software	healthy	`test-data/unicode-dump.py:347`
`do_list_blocks`	software	healthy	`test-data/unicode-dump.py:353`
`serialize_gr_command`	software	healthy	`test-data/kitty-png.py:6`
`write_chunked`	software	healthy	`test-data/kitty-png.py:18`
`just_print`	software	healthy	`test-data/kitty-png.py:27`
`test_x_y_w_h_c_r`	software	healthy	`test-data/kitty-png.py:30`
`test_cell_offsets`	software	healthy	`test-data/kitty-png.py:41`
`returns`	software	healthy	`web/functions/api/download.ts:returns`
`dynamic`	software	healthy	`web/functions/api/download.ts:dynamic`
`targetForUA`	software	healthy	`web/functions/api/download.ts:targetForUA`
`build`	software	healthy	`web/functions/api/stats.ts:build`
`buildResponse`	software	healthy	`web/functions/api/stats.ts:buildResponse`
`failureResponse`	software	healthy	`web/functions/api/stats.ts:failureResponse`
`jsonResponse`	software	healthy	`web/functions/api/agents/trust.ts:jsonResponse`
`and`	software	healthy	`web/functions/api/agents/manifests.ts:and`
`build`	software	healthy	`web/functions/api/agents/manifests.ts:build`
`failureHeaders`	software	healthy	`web/functions/api/agents/manifests.ts:failureHeaders`
`sha256Hex`	software	healthy	`web/functions/api/agents/manifests.ts:sha256Hex`
`alternates`	software	healthy	`web/src/i18n/locales.ts:alternates`
`fetchStats`	software	healthy	`web/src/lib/stats.ts:fetchStats`
`doFetch`	software	healthy	`web/src/lib/stats.ts:doFetch`
`formatCount`	software	healthy	`web/src/lib/stats.ts:formatCount`
`Vt`	software	healthy	`wezterm-gui/assets/settings/alpine.js:Vt`
`qt`	software	healthy	`wezterm-gui/assets/settings/alpine.js:qt`
`Jt`	software	healthy	`wezterm-gui/assets/settings/alpine.js:Jt`
`Xt`	software	healthy	`wezterm-gui/assets/settings/alpine.js:Xt`
`tr`	software	healthy	`wezterm-gui/assets/settings/alpine.js:tr`
`rr`	software	healthy	`wezterm-gui/assets/settings/alpine.js:rr`
`le`	software	healthy	`wezterm-gui/assets/settings/alpine.js:le`
`Cn`	software	healthy	`wezterm-gui/assets/settings/alpine.js:Cn`
`cr`	software	healthy	`wezterm-gui/assets/settings/alpine.js:cr`
`Rn`	software	healthy	`wezterm-gui/assets/settings/alpine.js:Rn`
`y`	software	healthy	`wezterm-gui/assets/settings/alpine.js:y`
`o`	software	healthy	`wezterm-gui/assets/settings/alpine.js:o`
`ke`	software	healthy	`wezterm-gui/assets/settings/alpine.js:ke`
`pr`	software	healthy	`wezterm-gui/assets/settings/alpine.js:pr`
`Pn`	software	healthy	`wezterm-gui/assets/settings/alpine.js:Pn`
`C`	software	healthy	`wezterm-gui/assets/settings/alpine.js:C`
`d`	software	healthy	`wezterm-gui/assets/settings/alpine.js:d`
`ir`	software	healthy	`wezterm-gui/assets/settings/alpine.js:ir`
`r`	software	healthy	`wezterm-gui/assets/settings/alpine.js:r`
`s`	software	healthy	`wezterm-gui/assets/settings/alpine.js:s`
`_r`	software	healthy	`wezterm-gui/assets/settings/alpine.js:_r`
`re`	software	healthy	`wezterm-gui/assets/settings/alpine.js:re`
`kn`	software	healthy	`wezterm-gui/assets/settings/alpine.js:kn`
`Ln`	software	healthy	`wezterm-gui/assets/settings/alpine.js:Ln`
`ne`	software	healthy	`wezterm-gui/assets/settings/alpine.js:ne`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`strip-ansi-escapes`	software	healthy	`strip-ansi-escapes`
`src`	software	healthy	`strip-ansi-escapes/src`
`pty`	software	healthy	`pty`
`examples`	software	healthy	`pty/examples`
`src`	software	healthy	`pty/src`
`win`	software	healthy	`pty/src/win`
`vtparse`	software	healthy	`vtparse`
`src`	software	healthy	`vtparse/src`
`promise`	software	healthy	`promise`
`src`	software	healthy	`promise/src`
`env-bootstrap`	software	healthy	`env-bootstrap`
`src`	software	healthy	`env-bootstrap/src`
`lua-api-crates`	software	healthy	`lua-api-crates`
`filesystem`	software	healthy	`lua-api-crates/filesystem`
`src`	software	healthy	`lua-api-crates/filesystem/src`
`serde-funcs`	software	healthy	`lua-api-crates/serde-funcs`
`src`	software	healthy	`lua-api-crates/serde-funcs/src`
`plugin`	software	healthy	`lua-api-crates/plugin`
`src`	software	healthy	`lua-api-crates/plugin/src`
`time-funcs`	software	healthy	`lua-api-crates/time-funcs`
`src`	software	healthy	`lua-api-crates/time-funcs/src`
`spawn-funcs`	software	healthy	`lua-api-crates/spawn-funcs`
`src`	software	healthy	`lua-api-crates/spawn-funcs/src`
`procinfo-funcs`	software	healthy	`lua-api-crates/procinfo-funcs`
`src`	software	healthy	`lua-api-crates/procinfo-funcs/src`
`url-funcs`	software	healthy	`lua-api-crates/url-funcs`
`src`	software	healthy	`lua-api-crates/url-funcs/src`
`share-data`	software	healthy	`lua-api-crates/share-data`
`src`	software	healthy	`lua-api-crates/share-data/src`
`mux`	software	healthy	`lua-api-crates/mux`
`src`	software	healthy	`lua-api-crates/mux/src`
`ssh-funcs`	software	healthy	`lua-api-crates/ssh-funcs`
`src`	software	healthy	`lua-api-crates/ssh-funcs/src`
`logging`	software	healthy	`lua-api-crates/logging`
`src`	software	healthy	`lua-api-crates/logging/src`
`color-funcs`	software	healthy	`lua-api-crates/color-funcs`
`src`	software	healthy	`lua-api-crates/color-funcs/src`
`schemes`	software	healthy	`lua-api-crates/color-funcs/src/schemes`
`window-funcs`	software	healthy	`lua-api-crates/window-funcs`
`src`	software	healthy	`lua-api-crates/window-funcs/src`
`termwiz-funcs`	software	healthy	`lua-api-crates/termwiz-funcs`
`src`	software	healthy	`lua-api-crates/termwiz-funcs/src`
`battery`	software	healthy	`lua-api-crates/battery`
`src`	software	healthy	`lua-api-crates/battery/src`
`wezterm-toast-notification`	software	healthy	`wezterm-toast-notification`
`src`	software	healthy	`wezterm-toast-notification/src`
`marketplace`	software	healthy	`marketplace`
`mcp`	software	healthy	`marketplace/mcp`
`configs`	software	healthy	`marketplace/mcp/configs`
`submissions`	software	healthy	`marketplace/submissions`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`does`	software	healthy	`wezterm-gui/assets/settings/tailwind.js:does`
`StringTable`	software	healthy	`deps/freetype/freetype2/src/tools/glnames.py:4896`
`StringNode`	software	healthy	`deps/freetype/freetype2/src/tools/glnames.py:5049`
`ExifInfo`	software	healthy	`deps/freetype/libpng/contrib/pngexif/exifinfo.py:138`
`RepackTest`	software	healthy	`deps/harfbuzz/harfbuzz/test/subset/repack_test.py:8`
`Test`	software	healthy	`deps/harfbuzz/harfbuzz/test/subset/subset_test_suite.py:8`
`SubsetTestSuite`	software	healthy	`deps/harfbuzz/harfbuzz/test/subset/subset_test_suite.py:97`
`ColorFormatter`	software	healthy	`deps/harfbuzz/harfbuzz/test/shape/hb_test_tools.py:12`
`Null`	software	healthy	`deps/harfbuzz/harfbuzz/test/shape/hb_test_tools.py:14`
`ANSI`	software	healthy	`deps/harfbuzz/harfbuzz/test/shape/hb_test_tools.py:24`
`HTML`	software	healthy	`deps/harfbuzz/harfbuzz/test/shape/hb_test_tools.py:40`
`DiffColorizer`	software	healthy	`deps/harfbuzz/harfbuzz/test/shape/hb_test_tools.py:70`
`ZipDiffer`	software	healthy	`deps/harfbuzz/harfbuzz/test/shape/hb_test_tools.py:132`
`DiffFilters`	software	healthy	`deps/harfbuzz/harfbuzz/test/shape/hb_test_tools.py:151`
`Stat`	software	healthy	`deps/harfbuzz/harfbuzz/test/shape/hb_test_tools.py:160`
`Stats`	software	healthy	`deps/harfbuzz/harfbuzz/test/shape/hb_test_tools.py:170`
`DiffSinks`	software	healthy	`deps/harfbuzz/harfbuzz/test/shape/hb_test_tools.py:207`
`Test`	software	healthy	`deps/harfbuzz/harfbuzz/test/shape/hb_test_tools.py:223`
`DiffHelpers`	software	healthy	`deps/harfbuzz/harfbuzz/test/shape/hb_test_tools.py:256`
`FilterHelpers`	software	healthy	`deps/harfbuzz/harfbuzz/test/shape/hb_test_tools.py:283`
`Ngram`	software	healthy	`deps/harfbuzz/harfbuzz/test/shape/hb_test_tools.py:300`
`UtilMains`	software	healthy	`deps/harfbuzz/harfbuzz/test/shape/hb_test_tools.py:317`
`Unicode`	software	healthy	`deps/harfbuzz/harfbuzz/test/shape/hb_test_tools.py:378`
`FileHelpers`	software	healthy	`deps/harfbuzz/harfbuzz/test/shape/hb_test_tools.py:432`
`Manifest`	software	healthy	`deps/harfbuzz/harfbuzz/test/shape/hb_test_tools.py:441`
`PropertyValue`	software	healthy	`deps/harfbuzz/harfbuzz/src/gen-use-table.py:178`
`LanguageTag`	software	healthy	`deps/harfbuzz/harfbuzz/src/gen-tag-table.py:239`
`OpenTypeRegistryParser`	software	healthy	`deps/harfbuzz/harfbuzz/src/gen-tag-table.py:315`
`BCP47Parser`	software	healthy	`deps/harfbuzz/harfbuzz/src/gen-tag-table.py:535`
`Debugger`	software	healthy	`deps/harfbuzz/harfbuzz/src/sample.py:25`
`ConstraintSet`	software	healthy	`deps/harfbuzz/harfbuzz/src/gen-vowel-constraints.py:48`

Label	Layer	Status	Path
`gha::lint`	cicd	healthy	`deps/freetype/libpng/.github/workflows/lint.yml`
`gha::configure`	cicd	healthy	`deps/freetype/zlib/.github/workflows/configure.yml`
`gha::cmake`	cicd	healthy	`deps/freetype/zlib/.github/workflows/cmake.yml`
`gha::fuzz`	cicd	healthy	`deps/freetype/zlib/.github/workflows/fuzz.yml`
`gha::configs-build`	cicd	healthy	`deps/harfbuzz/harfbuzz/.github/workflows/configs-build.yml`
`gha::arm-ci`	cicd	healthy	`deps/harfbuzz/harfbuzz/.github/workflows/arm-ci.yml`
`gha::msys2-ci`	cicd	healthy	`deps/harfbuzz/harfbuzz/.github/workflows/msys2-ci.yml`
`gha::fontations`	cicd	healthy	`deps/harfbuzz/harfbuzz/.github/workflows/fontations.yml`
`gha::msvc-ci`	cicd	healthy	`deps/harfbuzz/harfbuzz/.github/workflows/msvc-ci.yml`
`gha::scorecard`	cicd	healthy	`deps/harfbuzz/harfbuzz/.github/workflows/scorecard.yml`
`gha::cifuzz`	cicd	healthy	`deps/harfbuzz/harfbuzz/.github/workflows/cifuzz.yml`
`gha::macos-ci`	cicd	healthy	`deps/harfbuzz/harfbuzz/.github/workflows/macos-ci.yml`
`gha::coverity-scan`	cicd	healthy	`deps/harfbuzz/harfbuzz/.github/workflows/coverity-scan.yml`
`gha::linux-ci`	cicd	healthy	`deps/harfbuzz/harfbuzz/.github/workflows/linux-ci.yml`
`gha::ci`	cicd	healthy	`.github/workflows/ci.yml`
`gha::release-windows`	cicd	healthy	`.github/workflows/release-windows.yml`
`gha::release-linux`	cicd	healthy	`.github/workflows/release-linux.yml`
`gitlab-ci`	cicd	healthy	`deps/freetype/freetype2/.gitlab-ci.yml`
`circleci`	cicd	healthy	`deps/harfbuzz/harfbuzz/.circleci/config.yml`

Label	Layer	Status	Path
`lint`	cicd	healthy	`deps/freetype/libpng/.github/workflows/lint.yml`
`ci-configure`	cicd	healthy	`deps/freetype/zlib/.github/workflows/configure.yml`
`ci-cmake`	cicd	healthy	`deps/freetype/zlib/.github/workflows/cmake.yml`
`Fuzzing`	cicd	healthy	`deps/freetype/zlib/.github/workflows/fuzz.yml`
`build`	cicd	healthy	`deps/harfbuzz/harfbuzz/.github/workflows/configs-build.yml`
`arm-none-eabi`	cicd	healthy	`deps/harfbuzz/harfbuzz/.github/workflows/arm-ci.yml`
`msys2`	cicd	healthy	`deps/harfbuzz/harfbuzz/.github/workflows/msys2-ci.yml`
`build`	cicd	healthy	`deps/harfbuzz/harfbuzz/.github/workflows/fontations.yml`
`msvc`	cicd	healthy	`deps/harfbuzz/harfbuzz/.github/workflows/msvc-ci.yml`
`analysis`	cicd	healthy	`deps/harfbuzz/harfbuzz/.github/workflows/scorecard.yml`
`Fuzzing`	cicd	healthy	`deps/harfbuzz/harfbuzz/.github/workflows/cifuzz.yml`
`build`	cicd	healthy	`deps/harfbuzz/harfbuzz/.github/workflows/macos-ci.yml`
`latest`	cicd	healthy	`deps/harfbuzz/harfbuzz/.github/workflows/coverity-scan.yml`
`build`	cicd	healthy	`deps/harfbuzz/harfbuzz/.github/workflows/linux-ci.yml`
`check-macos`	cicd	healthy	`.github/workflows/ci.yml`
`check-linux`	cicd	healthy	`.github/workflows/ci.yml`
`check-windows`	cicd	healthy	`.github/workflows/ci.yml`
`build`	cicd	healthy	`.github/workflows/release-windows.yml`
`build`	cicd	healthy	`.github/workflows/release-linux.yml`

Label	Layer	Status	Path
`auth::unterm-profile/src/sniff/mod.rs`	security	healthy	`unterm-profile/src/sniff/mod.rs`
`auth::web/src/i18n/en-US.json`	security	healthy	`web/src/i18n/en-US.json`
`auth::unterm-agents/src/authn.rs`	security	healthy	`unterm-agents/src/authn.rs`
`auth::marketplace/README.md`	security	healthy	`marketplace/README.md`
`auth::unterm-agents/src/manifest.rs`	security	healthy	`unterm-agents/src/manifest.rs`
`auth::unterm-agents/baked/manifests-fallback.json`	security	healthy	`unterm-agents/baked/manifests-fallback.json`
`auth::wezterm/src/unterm_cli/agent.rs`	security	healthy	`wezterm/src/unterm_cli/agent.rs`
`auth::wezterm-gui/src/web_settings/agents.rs`	security	healthy	`wezterm-gui/src/web_settings/agents.rs`
`auth::wezterm-gui/src/i18n/locales/en.json`	security	healthy	`wezterm-gui/src/i18n/locales/en.json`
`auth::wezterm-gui/src/i18n/locales/zh-CN.json`	security	healthy	`wezterm-gui/src/i18n/locales/zh-CN.json`
`auth::web/src/i18n/zh-CN.json`	security	healthy	`web/src/i18n/zh-CN.json`
`auth::unterm-profile/src/sniff/gh.rs`	security	healthy	`unterm-profile/src/sniff/gh.rs`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`README.md`
`1.3.268.0`	network	healthy	`Cargo.lock`
`10.0.0.1`	network	healthy	`wezterm-ssh/src/config.rs`
`192.168.1.8`	network	healthy	`wezterm-ssh/src/config.rs`

Label	Layer	Status	Path
`vps::aws`	hardware	healthy	`README.md`
`vps::azure`	hardware	healthy	`wezterm-gui/assets/settings/tailwind.js`
`vps::gcp`	hardware	healthy	`unterm-agents/baked/manifests-fallback.json`

Label	Layer	Status	Path
`SCORECARD_TOKEN`	cicd	healthy	`—`
`COVERITY_SCAN_TOKEN`	cicd	healthy	`—`
`GH_TOKEN`	cicd	healthy	`—`

Label	Layer	Status	Path
`port:19876`	network	healthy	`unterm-agents/src/launcher.rs`
`port:10`	network	healthy	`deps/harfbuzz/harfbuzz/.github/workflows/coverity-scan.yml`

Label	Layer	Status	Path
`image::Dockerfile`	hardware	healthy	`Dockerfile`
`image::deps/freetype/libpng/contrib/oss-fuzz/Dockerfile`	hardware	healthy	`deps/freetype/libpng/contrib/oss-fuzz/Dockerfile`

Label	Layer	Status	Path
`repobility-clone-exkaa4sx`	software	healthy	`/tmp/repobility-clone-exkaa4sx`

Label	Layer	Status	Path
`sqlite`	data	healthy	`Cargo.toml`

Label	Layer	Status	Path
`gpu (detected)`	hardware	healthy	`README.md`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/025ca52e-48ff-4c00-8468-cd0400c5fa83/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/025ca52e-48ff-4c00-8468-cd0400c5fa83/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

zhitongblog/unterm

Complete repo analysis

file 50+

function 50+

directory 50+

class 31

pipeline 19

job 19

auth 12

service 4

vps 3

env_var 3

port 2

container 2

repo 1

database 1

gpu 1