Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

jcode

https://github.com/1jehuang/jcode.git · scanned 2026-05-16 12:49 UTC (1 day, 9 hours ago) · 10 languages

102 findings (14 legacy + 88 scanner) 2/10 scanners ran 40th percentile · Rust · large (100-500K LoC) Scanner says 85 (lower by 15)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 week ago · v4 · 100 findings from 2 sources. Findings combine the legacy security pipeline AND the multi-layer engine (atlas, wiring, flows, ranked) AND verified AI agent contributions.

JSON
Combined
81.5
/100
Repobility
78
12 legacy
9-layer
85
100.0% cov · 88 gaps
Critical
12
click to filter
Agents
6
0 votes
Crowd
0
reported
{# ── 2026-05-17 R27 #5: score breakdown panel ────────────────────── Surfaces the score_breakdown JSON that's been silently stored on Repository for months. Turns hidden math into a trust signal. #}
Score breakdown â 2026-05-17-v4 calibration-aware
Component Sub-score Weight Contribution
structure_score 85.0 0.15 12.75
security_score 80.4 0.25 20.10
testing_score 36.0 0.20 7.20
documentation_score 86.0 0.15 12.90
practices_score 65.0 0.15 9.75
code_quality 70.0 0.10 7.00
Overall 1.00 69.7
Calibrated penalty buckets (security_score): threat: 19.6
security_score may be inflated — optional scanners skipped due to repo size/fast scan
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 12 High 10 Medium 12 Low 60 Source: Legacy 12 9-layer 88 Crowd 0 Layer: Quality 70 Security 20 Software 8 Api 1 Frontend 1

All 1723 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
OAUTH.md software healthy OAUTH.md
TELEMETRY.md software healthy TELEMETRY.md
PLAN_MCP_SKILLS.md software healthy PLAN_MCP_SKILLS.md
Cargo.toml software healthy Cargo.toml
README.md software healthy README.md
CONTRIBUTING.md software healthy CONTRIBUTING.md
build.rs software healthy build.rs
RELEASING.md software healthy RELEASING.md
terminal-capabilities.md software healthy terminal-capabilities.md
codemagic.yaml software healthy codemagic.yaml
AGENTS.md software healthy AGENTS.md
test_injection_fix.py software healthy tests/test_injection_fix.py
test_selfdev_reload.py software healthy tests/test_selfdev_reload.py
test_injection_thorough.py software healthy tests/test_injection_thorough.py
provider_matrix.rs software healthy tests/provider_matrix.rs
ambient.rs software healthy tests/e2e/ambient.rs
transport.rs software healthy tests/e2e/transport.rs
mock_provider.rs software healthy tests/e2e/mock_provider.rs
windows_lifecycle.rs software healthy tests/e2e/windows_lifecycle.rs
burst_spawn.rs software healthy tests/e2e/burst_spawn.rs
binary_integration.rs software healthy tests/e2e/binary_integration.rs
safety.rs software healthy tests/e2e/safety.rs
main.rs software healthy tests/e2e/main.rs
provider_behavior.rs software healthy tests/e2e/provider_behavior.rs
session_flow.rs software healthy tests/e2e/session_flow.rs
mod.rs software healthy tests/e2e/test_support/mod.rs
IOS_CLIENT.md software healthy docs/IOS_CLIENT.md
CLIENT_CORE_PRESENTATION_SPLIT_PLAN.md software healthy docs/CLIENT_CORE_PRESENTATION_SPLIT_PLAN.md
DESKTOP_FIRST_PROTOTYPE.md software healthy docs/DESKTOP_FIRST_PROTOTYPE.md
WINDOWS.md software healthy docs/WINDOWS.md
DESKTOP_APP_ARCHITECTURE.md software healthy docs/DESKTOP_APP_ARCHITECTURE.md
MEMORY_BUDGET.md software healthy docs/MEMORY_BUDGET.md
SERVER_ARCHITECTURE.md software healthy docs/SERVER_ARCHITECTURE.md
MOBILE_IOS_HOST_INTEGRATION.md software healthy docs/MOBILE_IOS_HOST_INTEGRATION.md
BROWSER_PROVIDER_PROTOCOL.md software healthy docs/BROWSER_PROVIDER_PROTOCOL.md
SAFETY_SYSTEM.md software healthy docs/SAFETY_SYSTEM.md
REFACTORING.md software healthy docs/REFACTORING.md
TERMINAL_BENCH.md software healthy docs/TERMINAL_BENCH.md
reddit_dashboard.py software warning docs/reddit_dashboard.py
MOBILE_AGENT_SIMULATOR.md software healthy docs/MOBILE_AGENT_SIMULATOR.md
COMPILE_PERFORMANCE_PLAN.md software healthy docs/COMPILE_PERFORMANCE_PLAN.md
CRATE_OWNERSHIP_BOUNDARIES.md software healthy docs/CRATE_OWNERSHIP_BOUNDARIES.md
SECURITY_DEPENDENCIES.md software healthy docs/SECURITY_DEPENDENCIES.md
ONBOARDING_SANDBOX.md software healthy docs/ONBOARDING_SANDBOX.md
SOFT_INTERRUPT.md software healthy docs/SOFT_INTERRUPT.md
SERVER_SERVICE_SPLIT_PLAN.md software healthy docs/SERVER_SERVICE_SPLIT_PLAN.md
AGENT_NATIVE_VCS_CORE_BEHAVIOR.md software healthy docs/AGENT_NATIVE_VCS_CORE_BEHAVIOR.md
PROVIDER_SESSION_SHARED_CONTRACT_AUDIT.md software healthy docs/PROVIDER_SESSION_SHARED_CONTRACT_AUDIT.md
AMBIENT_MODE.md software healthy docs/AMBIENT_MODE.md
MOBILE_SIMULATOR_WORKFLOW.md software healthy docs/MOBILE_SIMULATOR_WORKFLOW.md

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
send_cmd software healthy tests/test_injection_fix.py:23
test_injection_during_tools software healthy tests/test_injection_fix.py:46
test_injection_api_error software healthy tests/test_injection_fix.py:131
main software healthy tests/test_injection_fix.py:195
send_cmd software healthy tests/test_selfdev_reload.py:24
test_selfdev_status software healthy tests/test_selfdev_reload.py:46
test_selfdev_socket_info software healthy tests/test_selfdev_reload.py:110
test_reload_context software healthy tests/test_selfdev_reload.py:167
main software healthy tests/test_selfdev_reload.py:214
send_cmd software healthy tests/test_injection_thorough.py:25
check_history_order software healthy tests/test_injection_thorough.py:48
test_injection_with_provider software healthy tests/test_injection_thorough.py:82
test_multiple_tools software healthy tests/test_injection_thorough.py:139
test_urgent_interrupt software healthy tests/test_injection_thorough.py:197
test_both_providers software healthy tests/test_injection_thorough.py:259
main software healthy tests/test_injection_thorough.py:300
insertEvent software healthy telemetry-worker/src/worker.js:insertEvent
insertTurnDetails software healthy telemetry-worker/src/worker.js:insertTurnDetails
insertSessionDetails software healthy telemetry-worker/src/worker.js:insertSessionDetails
commonEventEntries software healthy telemetry-worker/src/worker.js:commonEventEntries
getEventColumns software healthy telemetry-worker/src/worker.js:getEventColumns
getSessionDetailColumns software healthy telemetry-worker/src/worker.js:getSessionDetailColumns
getTurnDetailColumns software healthy telemetry-worker/src/worker.js:getTurnDetailColumns
insertDynamic software healthy telemetry-worker/src/worker.js:insertDynamic
boolToInt software healthy telemetry-worker/src/worker.js:boolToInt
jsonResponse software healthy telemetry-worker/src/worker.js:jsonResponse
corsHeaders software healthy telemetry-worker/src/worker.js:corsHeaders
parse_args software healthy scripts/check_panic_budget.py:33
is_test_rust_file software healthy scripts/check_panic_budget.py:39
production_rust_files software healthy scripts/check_panic_budget.py:58
brace_delta software healthy scripts/check_panic_budget.py:69
production_lines software healthy scripts/check_panic_budget.py:79
current_counts software healthy scripts/check_panic_budget.py:108
load_baseline software healthy scripts/check_panic_budget.py:117
write_baseline software healthy scripts/check_panic_budget.py:134
main software healthy scripts/check_panic_budget.py:146
parse_args software healthy scripts/jcode_memory_snapshot.py:53
read_text software healthy scripts/jcode_memory_snapshot.py:69
read_argv software healthy scripts/jcode_memory_snapshot.py:78
parse_socket_path software healthy scripts/jcode_memory_snapshot.py:88
parse_session_id software healthy scripts/jcode_memory_snapshot.py:93
first_non_option software healthy scripts/jcode_memory_snapshot.py:98
classify_process software healthy scripts/jcode_memory_snapshot.py:113
parse_smaps_rollup software healthy scripts/jcode_memory_snapshot.py:143
iter_jcode_processes software healthy scripts/jcode_memory_snapshot.py:158
sum_totals software healthy scripts/jcode_memory_snapshot.py:187
print_human software healthy scripts/jcode_memory_snapshot.py:199
print_group software healthy scripts/jcode_memory_snapshot.py:200
main software healthy scripts/jcode_memory_snapshot.py:233
parse_args software healthy scripts/profile_remote_resume_burst.py:22

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
tests software healthy tests
e2e software healthy tests/e2e
test_support software healthy tests/e2e/test_support
docs software healthy docs
dev software healthy docs/dev
telemetry-worker software healthy telemetry-worker
migrations software healthy telemetry-worker/migrations
src software healthy telemetry-worker/src
scripts software healthy scripts
assets software healthy assets
demos software healthy assets/demos
ios software healthy ios
Sources software healthy ios/Sources
JCodeKit software healthy ios/Sources/JCodeKit
JCodeMobile software healthy ios/Sources/JCodeMobile
Assets.xcassets software healthy ios/Sources/JCodeMobile/Assets.xcassets
AppIcon.appiconset software healthy ios/Sources/JCodeMobile/Assets.xcassets/AppIcon.appiconset
Tests software healthy ios/Tests
JCodeKitTests software healthy ios/Tests/JCodeKitTests
crates software healthy crates
jcode-overnight-core software healthy crates/jcode-overnight-core
src software healthy crates/jcode-overnight-core/src
jcode-provider-core software healthy crates/jcode-provider-core
src software healthy crates/jcode-provider-core/src
jcode-tui-tool-display software healthy crates/jcode-tui-tool-display
src software healthy crates/jcode-tui-tool-display/src
jcode-embedding software healthy crates/jcode-embedding
src software healthy crates/jcode-embedding/src
jcode-tui-messages software healthy crates/jcode-tui-messages
src software healthy crates/jcode-tui-messages/src
jcode-tui-render software healthy crates/jcode-tui-render
src software healthy crates/jcode-tui-render/src
jcode-selfdev-types software healthy crates/jcode-selfdev-types
src software healthy crates/jcode-selfdev-types/src
jcode-mobile-sim software healthy crates/jcode-mobile-sim
src software healthy crates/jcode-mobile-sim/src
jcode-side-panel-types software healthy crates/jcode-side-panel-types
src software healthy crates/jcode-side-panel-types/src
jcode-core software healthy crates/jcode-core
src software healthy crates/jcode-core/src
jcode-import-core software healthy crates/jcode-import-core
src software healthy crates/jcode-import-core/src
jcode-pdf software healthy crates/jcode-pdf
src software healthy crates/jcode-pdf/src
jcode-storage software healthy crates/jcode-storage
src software healthy crates/jcode-storage/src
jcode-ambient-types software healthy crates/jcode-ambient-types
src software healthy crates/jcode-ambient-types/src
jcode-tui-style software healthy crates/jcode-tui-style
src software healthy crates/jcode-tui-style/src

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
auth::src/provider/anthropic_tests.rs security healthy src/provider/anthropic_tests.rs
auth::src/tui/app/auth_types.rs security healthy src/tui/app/auth_types.rs
auth::src/cli/auth_test/probes.rs security healthy src/cli/auth_test/probes.rs
auth::src/tui/app.rs security healthy src/tui/app.rs
auth::assets/demos/duck_fast-on-mid-stream_autoedit_timelin… security healthy assets/demos/duck_fast-on-mid-stream_autoedit_timeline.json
auth::src/provider/copilot.rs security healthy src/provider/copilot.rs
auth::src/auth/status_types.rs security healthy src/auth/status_types.rs
auth::src/memory_tests.rs security healthy src/memory_tests.rs
auth::src/provider/tests/auth_refresh.rs security healthy src/provider/tests/auth_refresh.rs
auth::src/tui/app/tests/support_failover/part_01.rs security healthy src/tui/app/tests/support_failover/part_01.rs
auth::src/provider/pricing.rs security healthy src/provider/pricing.rs
auth::crates/jcode-provider-core/src/pricing.rs security healthy crates/jcode-provider-core/src/pricing.rs
auth::src/auth/oauth_tests/basic.rs security healthy src/auth/oauth_tests/basic.rs
auth::src/auth/oauth_tests/flow.rs security healthy src/auth/oauth_tests/flow.rs
auth::src/tui/app/tests/support_failover/part_02.rs security healthy src/tui/app/tests/support_failover/part_02.rs
auth::src/auth/codex_tests.rs security healthy src/auth/codex_tests.rs
auth::src/cli/commands_tests.rs security healthy src/cli/commands_tests.rs
auth::src/provider/startup.rs security healthy src/provider/startup.rs
auth::crates/jcode-provider-core/src/anthropic.rs security healthy crates/jcode-provider-core/src/anthropic.rs
auth::crates/jcode-config-types/src/lib.rs security healthy crates/jcode-config-types/src/lib.rs
auth::src/tui/app/auth_account_picker_saved_accounts.rs security healthy src/tui/app/auth_account_picker_saved_accounts.rs
auth::src/auth/cursor.rs security healthy src/auth/cursor.rs
auth::src/bus.rs security healthy src/bus.rs
auth::src/cli/provider_init/external_auth.rs security healthy src/cli/provider_init/external_auth.rs
auth::assets/demos/duck_fast-on-mid-stream_autoedit_v2_trim… security healthy assets/demos/duck_fast-on-mid-stream_autoedit_v2_trimmed_ti…
auth::src/auth/doctor.rs security healthy src/auth/doctor.rs
auth::src/tui/app/input_help.rs security healthy src/tui/app/input_help.rs
auth::src/provider/account_failover.rs security healthy src/provider/account_failover.rs
auth::src/auth/mod.rs security healthy src/auth/mod.rs
auth::src/tui/app/auth.rs security healthy src/tui/app/auth.rs
auth::scripts/run_terminal_bench_campaign.py security healthy scripts/run_terminal_bench_campaign.py
auth::src/cli/login/scriptable.rs security healthy src/cli/login/scriptable.rs
auth::src/tui/app/inline_interactive.rs security healthy src/tui/app/inline_interactive.rs
auth::src/tui/account_picker.rs security healthy src/tui/account_picker.rs
auth::crates/jcode-auth-types/src/lib.rs security healthy crates/jcode-auth-types/src/lib.rs
auth::scripts/jcode_harbor_agent.py security healthy scripts/jcode_harbor_agent.py
auth::scripts/swallowed_error_budget.json security healthy scripts/swallowed_error_budget.json
auth::src/tui/app/misc_ui.rs security healthy src/tui/app/misc_ui.rs
auth::src/cli/args.rs security healthy src/cli/args.rs
auth::src/ambient_tests.rs security healthy src/ambient_tests.rs
auth::src/auth/external_tests.rs security healthy src/auth/external_tests.rs
auth::src/tui/info_widget.rs security healthy src/tui/info_widget.rs
auth::src/tui/ui_inline_interactive.rs security healthy src/tui/ui_inline_interactive.rs
auth::src/usage/accessors.rs security healthy src/usage/accessors.rs
auth::src/provider/gemini.rs security healthy src/provider/gemini.rs
auth::src/cli/provider_init.rs security healthy src/cli/provider_init.rs
auth::src/tui/usage_overlay.rs security healthy src/tui/usage_overlay.rs
auth::src/auth/gemini.rs security healthy src/auth/gemini.rs
auth::scripts/code_size_budget.json security healthy scripts/code_size_budget.json
auth::src/usage.rs security healthy src/usage.rs

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
ProcMem software healthy scripts/jcode_memory_snapshot.py:16
Totals software healthy scripts/jcode_memory_snapshot.py:32
ProcSample software healthy scripts/profile_remote_resume_burst.py:33
ProcTracker software healthy scripts/profile_remote_resume_burst.py:39
LiveClient software healthy scripts/profile_remote_resume_burst.py:149
Colors software healthy scripts/jcode_monitor.py:20
MonitorState software healthy scripts/jcode_monitor.py:41
DebugSocketClient software healthy scripts/test_memory.py:43
ToolSpec software healthy scripts/bench_memory_cli.py:36
SessionLaunch software healthy scripts/bench_memory_cli.py:45
ToolRunResult software healthy scripts/bench_memory_cli.py:58
TestResult software healthy scripts/test_reload.py:101
Suite software healthy scripts/test_ci_suites.py:29
TokenUsage software healthy scripts/compare_token_usage.py:39
RunResult software healthy scripts/compare_token_usage.py:60
JcodeHarborAgent software healthy scripts/jcode_harbor_agent.py:186
StartupProfile software healthy scripts/bench_startup.py:37
Budget software healthy scripts/bench_startup.py:44
Sample software healthy scripts/analyze_runtime_memory_log.py:19
Spike software healthy scripts/analyze_runtime_memory_log.py:66
AttributionDelta software healthy scripts/analyze_runtime_memory_log.py:73
Colors software healthy scripts/stress_test.py:26
ToolSpec software healthy scripts/bench_startup_visible_ready.py:49

LabelLayerStatusPath
password_literal::crates/jcode-protocol/src/lib.rs security healthy crates/jcode-protocol/src/lib.rs
password_literal::crates/jcode-protocol/src/protocol_tests/… security healthy crates/jcode-protocol/src/protocol_tests/comm_requests.rs
password_literal::crates/jcode-protocol/src/protocol_tests/… security healthy crates/jcode-protocol/src/protocol_tests/comm_requests.rs
password_literal::crates/jcode-desktop/src/session_launch.rs security healthy crates/jcode-desktop/src/session_launch.rs
password_literal::crates/jcode-desktop/src/session_launch.rs security healthy crates/jcode-desktop/src/session_launch.rs
password_literal::crates/jcode-desktop/src/main_tests.rs security healthy crates/jcode-desktop/src/main_tests.rs
password_literal::crates/jcode-desktop/src/main_tests.rs security healthy crates/jcode-desktop/src/main_tests.rs
password_literal::crates/jcode-desktop/src/main_tests.rs security healthy crates/jcode-desktop/src/main_tests.rs
password_literal::crates/jcode-desktop/src/main_tests.rs security healthy crates/jcode-desktop/src/main_tests.rs
password_literal::src/protocol_tests/comm_requests.rs security healthy src/protocol_tests/comm_requests.rs
password_literal::src/protocol_tests/comm_requests.rs security healthy src/protocol_tests/comm_requests.rs
generic_api_key::src/message/tests.rs security healthy src/message/tests.rs

LabelLayerStatusPath
smoke-x64 cicd healthy .github/workflows/windows-smoke.yml
smoke-arm64 cicd healthy .github/workflows/windows-smoke.yml
quality cicd healthy .github/workflows/ci.yml
mobile-simulator cicd healthy .github/workflows/ci.yml
build cicd healthy .github/workflows/ci.yml
windows-build-test cicd healthy .github/workflows/ci.yml
fmt cicd healthy .github/workflows/ci.yml
powershell-syntax cicd healthy .github/workflows/ci.yml
windows-cross-check cicd healthy .github/workflows/ci.yml
build-linux-macos cicd healthy .github/workflows/release.yml
build-windows cicd healthy .github/workflows/release.yml
release cicd healthy .github/workflows/release.yml

LabelLayerStatusPath
0007_dashboard_indexes.sql data healthy telemetry-worker/migrations/0007_dashboard_indexes.sql
0002_transport_metrics.sql data healthy telemetry-worker/migrations/0002_transport_metrics.sql
0006_token_usage.sql data healthy telemetry-worker/migrations/0006_token_usage.sql
0008_agent_time_and_churn.sql data healthy telemetry-worker/migrations/0008_agent_time_and_churn.sql
0003_usage_expansion.sql data healthy telemetry-worker/migrations/0003_usage_expansion.sql
0001_expand_events.sql data healthy telemetry-worker/migrations/0001_expand_events.sql
0005_workflow_turn_telemetry.sql data healthy telemetry-worker/migrations/0005_workflow_turn_telemetry.sql
0009_feedback_text.sql data healthy telemetry-worker/migrations/0009_feedback_text.sql
0004_telemetry_phase123.sql data healthy telemetry-worker/migrations/0004_telemetry_phase123.sql

LabelLayerStatusPath
127.0.0.1 network healthy tests/e2e/windows_lifecycle.rs
192.168.1.25 network healthy crates/jcode-provider-metadata/src/lib.rs
10.0.0.8 network healthy crates/jcode-provider-metadata/src/lib.rs
8.8.8.8 network healthy crates/jcode-provider-metadata/src/lib.rs

LabelLayerStatusPath
events data healthy telemetry-worker/schema.sql
session_details data healthy telemetry-worker/schema.sql
turn_details data healthy telemetry-worker/schema.sql

LabelLayerStatusPath
gha::windows-smoke cicd healthy .github/workflows/windows-smoke.yml
gha::ci cicd healthy .github/workflows/ci.yml
gha::release cicd healthy .github/workflows/release.yml

LabelLayerStatusPath
HOMEBREW_DEPLOY_KEY cicd healthy —
AUR_SSH_KEY cicd healthy —
DEPLOY_KEY cicd healthy —

LabelLayerStatusPath
vps::azure hardware healthy Cargo.toml
vps::aws hardware healthy Cargo.toml

LabelLayerStatusPath
repobility-clone-_9xd5j9a software healthy /tmp/repobility-clone-_9xd5j9a

LabelLayerStatusPath
sqlite data healthy assets/demos/wolf_timeline.json

LabelLayerStatusPath
port:7643 network healthy crates/jcode-config-types/src/lib.rs
{# ── 2026-05-17 Round 14: AI-agent bridge footer ────────────────────── Discoverability: the /agents/voting/ guide + MCP manifest exist but aren't linked from anywhere users actually land. Small, opt-in footer. #}
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/02c0aa3c-2fdb-4a26-b86f-531b60354fee/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/02c0aa3c-2fdb-4a26-b86f-531b60354fee/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.