Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

Catrobat/Catroweb

https://github.com/Catrobat/Catroweb · scanned 2026-06-17 01:23 UTC (1 month, 2 weeks ago)

134 raw signals (0 security + 134 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 month, 2 weeks ago · v2 · last Δ -18.4 (diff) · 96 actionable findings from 1 signal source. 38 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

100.0% cov · 96 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 5 High 1 Medium 82 Low 5 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 96 Crowd 0 Layer: Frontend 2 Hardware 5 Security 51 Cicd 3 Quality 35

Exclude dismissed / FP Exclude test files

All 2308 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`postcss.config.js`	software	healthy	`postcss.config.js`
`.env.prod`	software	healthy	`.env.prod`
`vite.config.mjs`	software	healthy	`vite.config.mjs`
`.env`	software	healthy	`.env`
`openapitools.json`	software	healthy	`openapitools.json`
`opencode.json`	software	healthy	`opencode.json`
`.prettierrc.json`	software	healthy	`.prettierrc.json`
`CHANGELOG.md`	software	healthy	`CHANGELOG.md`
`rector.php`	software	healthy	`rector.php`
`docker-compose.override.yaml`	software	healthy	`docker-compose.override.yaml`
`README.md`	software	healthy	`README.md`
`.stylelintrc.json`	software	healthy	`.stylelintrc.json`
`.php-cs-fixer.dist.php`	software	healthy	`.php-cs-fixer.dist.php`
`LICENSE`	software	healthy	`LICENSE`
`package.json`	software	healthy	`package.json`
`eslint.config.js`	software	healthy	`eslint.config.js`
`deploy.php`	software	healthy	`deploy.php`
`.env.test`	software	healthy	`.env.test`
`yarn.lock`	software	healthy	`yarn.lock`
`composer.json`	software	healthy	`composer.json`
`.env.dev`	software	healthy	`.env.dev`
`.yarnrc.yml`	software	healthy	`.yarnrc.yml`
`setup.js`	software	healthy	`auto-changelog/setup.js`
`catroweb.it.yaml`	software	healthy	`tests/TestData/DataFixtures/translations/catroweb.it.yaml`
`catroweb.en_CA.yaml`	software	healthy	`tests/TestData/DataFixtures/translations/catroweb.en_CA.yaml`
`catroweb.pl.yaml`	software	healthy	`tests/TestData/DataFixtures/translations/catroweb.pl.yaml`
`catroweb.en.yaml`	software	healthy	`tests/TestData/DataFixtures/translations/catroweb.en.yaml`
`catroweb.de.yaml`	software	healthy	`tests/TestData/DataFixtures/translations/catroweb.de.yaml`
`EmailBudgetManagerTest.php`	software	healthy	`tests/PhpUnit/System/Mail/EmailBudgetManagerTest.php`
`CleanExtractsTest.php`	software	healthy	`tests/PhpUnit/System/Commands/CleanExtractsTest.php`
`CleanLogsTest.php`	software	healthy	`tests/PhpUnit/System/Commands/CleanLogsTest.php`
`ArchiveLogsTest.php`	software	healthy	`tests/PhpUnit/System/Commands/ArchiveLogsTest.php`
`ClearCompressedProjectsTest.php`	software	healthy	`tests/PhpUnit/System/Commands/ClearCompressedProjectsTest.p…`
`StudioManagerTest.php`	software	healthy	`tests/PhpUnit/Studio/StudioManagerTest.php`
`AddProjectRequestTest.php`	software	healthy	`tests/PhpUnit/Project/AddProjectRequestTest.php`
`ProjectDeduplicationServiceTest.php`	software	healthy	`tests/PhpUnit/Project/ProjectDeduplicationServiceTest.php`
`ProjectManagerTest.php`	software	healthy	`tests/PhpUnit/Project/ProjectManagerTest.php`
`RemixManagerTest.php`	software	healthy	`tests/PhpUnit/Project/Remix/RemixManagerTest.php`
`RemixUpdaterEventListenerTest.php`	software	healthy	`tests/PhpUnit/Project/Remix/RemixUpdaterEventListenerTest.p…`
`CodeStatisticsServiceTest.php`	software	healthy	`tests/PhpUnit/Project/CodeStatistics/CodeStatisticsServiceT…`
`CodeStatisticsParserTest.php`	software	healthy	`tests/PhpUnit/Project/CodeStatistics/CodeStatisticsParserTe…`
`ProjectExtensionManagerTest.php`	software	healthy	`tests/PhpUnit/Project/Extension/ProjectExtensionManagerTest…`
`VersionValidatorEventListenerTest.php`	software	healthy	`tests/PhpUnit/Project/CatrobatFile/VersionValidatorEventLis…`
`CodeExtractorTest.php`	software	healthy	`tests/PhpUnit/Project/CatrobatFile/CodeExtractorTest.php`
`ExtractedCatrobatFileTest.php`	software	healthy	`tests/PhpUnit/Project/CatrobatFile/ExtractedCatrobatFileTes…`
`ProjectZipReconstructorTest.php`	software	healthy	`tests/PhpUnit/Project/CatrobatFile/ProjectZipReconstructorT…`
`LicenseUpdaterEventListenerTest.php`	software	healthy	`tests/PhpUnit/Project/CatrobatFile/LicenseUpdaterEventListe…`
`NotesAndCreditsValidatorEventListenerTest.php`	software	healthy	`tests/PhpUnit/Project/CatrobatFile/NotesAndCreditsValidator…`
`NameValidatorEventListenerTest.php`	software	healthy	`tests/PhpUnit/Project/CatrobatFile/NameValidatorEventListen…`
`ProjectXmlHeaderValidatorEventListenerTest.php`	software	healthy	`tests/PhpUnit/Project/CatrobatFile/ProjectXmlHeaderValidato…`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`uploadOne`	software	healthy	`vite/upload-sourcemaps.mjs:uploadOne`
`staticCopy`	software	healthy	`vite/plugins.mjs:staticCopy`
`purgeCssPlugin`	software	healthy	`vite/plugins.mjs:purgeCssPlugin`
`cssFiles`	software	healthy	`vite/plugins.mjs:cssFiles`
`cssEntryWrappers`	software	healthy	`vite/plugins.mjs:cssEntryWrappers`
`health`	software	healthy	`docker/nsfw-scanner/app.py:12`
`scan`	software	healthy	`docker/nsfw-scanner/app.py:17`
`isAllowedImageType`	software	healthy	`assets/Studio/ImageCompressor.js:isAllowedImageType`
`exceedsMaxSize`	software	healthy	`assets/Studio/ImageCompressor.js:exceedsMaxSize`
`compressImageIfNeeded`	software	healthy	`assets/Studio/ImageCompressor.js:compressImageIfNeeded`
`compressImage`	software	healthy	`assets/Studio/ImageCompressor.js:compressImage`
`uploadCoverImage`	software	healthy	`assets/Studio/StudioDetailPage.js:uploadCoverImage`
`submitStudioSettings`	software	healthy	`assets/Studio/StudioDetailPage.js:submitStudioSettings`
`renderHeader`	software	healthy	`assets/Studio/StudioDetailPage.js:renderHeader`
`initDescriptionToggle`	software	healthy	`assets/Studio/StudioDetailPage.js:initDescriptionToggle`
`clearStudioHeaderLoadingState`	software	healthy	`assets/Studio/StudioDetailPage.js:clearStudioHeaderLoadingS…`
`renderMembersSection`	software	healthy	`assets/Studio/StudioDetailPage.js:renderMembersSection`
`renderActivitiesSection`	software	healthy	`assets/Studio/StudioDetailPage.js:renderActivitiesSection`
`renderJoinRequestsSection`	software	healthy	`assets/Studio/StudioDetailPage.js:renderJoinRequestsSection`
`renderActionButton`	software	healthy	`assets/Studio/StudioDetailPage.js:renderActionButton`
`createModalHtml`	software	healthy	`assets/Studio/StudioDetailPage.js:createModalHtml`
`makeAjaxRequest`	software	healthy	`assets/Studio/StudioDetailPage.js:makeAjaxRequest`
`submitForm`	software	healthy	`assets/Studio/CreatePage.js:submitForm`
`handleValidationError`	software	healthy	`assets/Studio/CreatePage.js:handleValidationError`
`resetFileInput`	software	healthy	`assets/Studio/CreatePage.js:resetFileInput`
`ProjectEditorTextFieldModel`	software	healthy	`assets/Project/ProjectEditorTextFieldModel.js:ProjectEditor…`
`getCustomTranslationSuccess`	software	healthy	`assets/Project/ProjectEditorTextFieldModel.js:getCustomTran…`
`getCustomTranslationError`	software	healthy	`assets/Project/ProjectEditorTextFieldModel.js:getCustomTran…`
`loadVisNetwork`	software	healthy	`assets/Project/RemixGraphInline.js:loadVisNetwork`
`truncateLabel`	software	healthy	`assets/Project/RemixGraphInline.js:truncateLabel`
`createStatusMarkup`	software	healthy	`assets/Project/RemixGraphInline.js:createStatusMarkup`
`waitForNextFrame`	software	healthy	`assets/Project/RemixGraphInline.js:waitForNextFrame`
`getNodeDisplayName`	software	healthy	`assets/Project/RemixGraphInline.js:getNodeDisplayName`
`createNetworkNode`	software	healthy	`assets/Project/RemixGraphInline.js:createNetworkNode`
`createNetworkEdge`	software	healthy	`assets/Project/RemixGraphInline.js:createNetworkEdge`
`createNetworkOptions`	software	healthy	`assets/Project/RemixGraphInline.js:createNetworkOptions`
`buildIncomingEdgeMap`	software	healthy	`assets/Project/RemixGraphInline.js:buildIncomingEdgeMap`
`hasCyclesInCatrobatEdges`	software	healthy	`assets/Project/RemixGraphInline.js:hasCyclesInCatrobatEdges`
`visit`	software	healthy	`assets/Project/RemixGraphInline.js:visit`
`resetGraphAppearance`	software	healthy	`assets/Project/RemixGraphInline.js:resetGraphAppearance`
`highlightNode`	software	healthy	`assets/Project/RemixGraphInline.js:highlightNode`
`highlightEdge`	software	healthy	`assets/Project/RemixGraphInline.js:highlightEdge`
`highlightPathToNode`	software	healthy	`assets/Project/RemixGraphInline.js:highlightPathToNode`
`closeActionMenu`	software	healthy	`assets/Project/RemixGraphInline.js:closeActionMenu`
`positionActionMenu`	software	healthy	`assets/Project/RemixGraphInline.js:positionActionMenu`
`showUnavailableDialog`	software	healthy	`assets/Project/RemixGraphInline.js:showUnavailableDialog`
`buildMenuAction`	software	healthy	`assets/Project/RemixGraphInline.js:buildMenuAction`
`showActionMenu`	software	healthy	`assets/Project/RemixGraphInline.js:showActionMenu`
`renderStatusState`	software	healthy	`assets/Project/RemixGraphInline.js:renderStatusState`
`renderLoadingState`	software	healthy	`assets/Project/RemixGraphInline.js:renderLoadingState`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`auto-changelog`	software	healthy	`auto-changelog`
`tests`	software	healthy	`tests`
`TestData`	software	healthy	`tests/TestData`
`DataFixtures`	software	healthy	`tests/TestData/DataFixtures`
`translations`	software	healthy	`tests/TestData/DataFixtures/translations`
`PhpUnit`	software	healthy	`tests/PhpUnit`
`System`	software	healthy	`tests/PhpUnit/System`
`Mail`	software	healthy	`tests/PhpUnit/System/Mail`
`Commands`	software	healthy	`tests/PhpUnit/System/Commands`
`Studio`	software	healthy	`tests/PhpUnit/Studio`
`Project`	software	healthy	`tests/PhpUnit/Project`
`Remix`	software	healthy	`tests/PhpUnit/Project/Remix`
`CodeStatistics`	software	healthy	`tests/PhpUnit/Project/CodeStatistics`
`Extension`	software	healthy	`tests/PhpUnit/Project/Extension`
`CatrobatFile`	software	healthy	`tests/PhpUnit/Project/CatrobatFile`
`Scratch`	software	healthy	`tests/PhpUnit/Project/Scratch`
`CodeView`	software	healthy	`tests/PhpUnit/Project/CodeView`
`CatrobatCode`	software	healthy	`tests/PhpUnit/Project/CatrobatCode`
`Parser`	software	healthy	`tests/PhpUnit/Project/CatrobatCode/Parser`
`Security`	software	healthy	`tests/PhpUnit/Security`
`Captcha`	software	healthy	`tests/PhpUnit/Security/Captcha`
`Malware`	software	healthy	`tests/PhpUnit/Security/Malware`
`Authentication`	software	healthy	`tests/PhpUnit/Security/Authentication`
`JwtRefresh`	software	healthy	`tests/PhpUnit/Security/Authentication/JwtRefresh`
`OAuth`	software	healthy	`tests/PhpUnit/Security/OAuth`
`DB`	software	healthy	`tests/PhpUnit/DB`
`Entity`	software	healthy	`tests/PhpUnit/DB/Entity`
`Project`	software	healthy	`tests/PhpUnit/DB/Entity/Project`
`Storage`	software	healthy	`tests/PhpUnit/Storage`
`Images`	software	healthy	`tests/PhpUnit/Storage/Images`
`Admin`	software	healthy	`tests/PhpUnit/Admin`
`System`	software	healthy	`tests/PhpUnit/Admin/System`
`Maintenance`	software	healthy	`tests/PhpUnit/Admin/System/Maintenance`
`FeatureFlag`	software	healthy	`tests/PhpUnit/Admin/System/FeatureFlag`
`Moderation`	software	healthy	`tests/PhpUnit/Moderation`
`Application`	software	healthy	`tests/PhpUnit/Application`
`Locale`	software	healthy	`tests/PhpUnit/Application/Locale`
`Twig`	software	healthy	`tests/PhpUnit/Application/Twig`
`Theme`	software	healthy	`tests/PhpUnit/Application/Theme`
`Framework`	software	healthy	`tests/PhpUnit/Application/Framework`
`Api`	software	healthy	`tests/PhpUnit/Api`
`Services`	software	healthy	`tests/PhpUnit/Api/Services`
`Projects`	software	healthy	`tests/PhpUnit/Api/Services/Projects`
`Base`	software	healthy	`tests/PhpUnit/Api/Services/Base`
`User`	software	healthy	`tests/PhpUnit/Api/Services/User`
`Utils`	software	healthy	`tests/PhpUnit/Utils`
`Translation`	software	healthy	`tests/PhpUnit/Translation`
`.github`	software	healthy	`.github`
`ISSUE_TEMPLATE`	software	healthy	`.github/ISSUE_TEMPLATE`
`workflows`	software	healthy	`.github/workflows`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`auth::translations/catroweb.en_GB.yaml`	security	healthy	`translations/catroweb.en_GB.yaml`
`auth::translations/catroweb.ru_RU.yaml`	security	healthy	`translations/catroweb.ru_RU.yaml`
`auth::translations/catroweb.tr_TR.yaml`	security	healthy	`translations/catroweb.tr_TR.yaml`
`auth::translations/catroweb.zh_CN.yaml`	security	healthy	`translations/catroweb.zh_CN.yaml`
`auth::translations/catroweb.yo_NG.yaml`	security	healthy	`translations/catroweb.yo_NG.yaml`
`auth::translations/catroweb.eu_ES.yaml`	security	healthy	`translations/catroweb.eu_ES.yaml`
`auth::translations/catroweb.chr_US.yaml`	security	healthy	`translations/catroweb.chr_US.yaml`
`auth::translations/catroweb.no_NO.yaml`	security	healthy	`translations/catroweb.no_NO.yaml`
`auth::translations/catroweb.hr_HR.yaml`	security	healthy	`translations/catroweb.hr_HR.yaml`
`auth::translations/catroweb.nl_NL.yaml`	security	healthy	`translations/catroweb.nl_NL.yaml`
`auth::translations/catroweb.gu_IN.yaml`	security	healthy	`translations/catroweb.gu_IN.yaml`
`auth::translations/catroweb.tl_PH.yaml`	security	healthy	`translations/catroweb.tl_PH.yaml`
`auth::translations/catroweb.id_ID.yaml`	security	healthy	`translations/catroweb.id_ID.yaml`
`auth::translations/catroweb.ro_RO.yaml`	security	healthy	`translations/catroweb.ro_RO.yaml`
`auth::translations/catroweb.ur_PK.yaml`	security	healthy	`translations/catroweb.ur_PK.yaml`
`auth::src/Api/OpenAPI/specification.yaml`	security	healthy	`src/Api/OpenAPI/specification.yaml`
`auth::composer.json`	security	healthy	`composer.json`
`auth::.claude/CLAUDE.md`	security	healthy	`.claude/CLAUDE.md`
`auth::translations/catroweb.fr_FR.yaml`	security	healthy	`translations/catroweb.fr_FR.yaml`
`auth::translations/catroweb.en_CA.yaml`	security	healthy	`translations/catroweb.en_CA.yaml`
`auth::translations/catroweb.ig_NG.yaml`	security	healthy	`translations/catroweb.ig_NG.yaml`
`auth::translations/catroweb.en.yaml`	security	healthy	`translations/catroweb.en.yaml`
`auth::translations/catroweb.sv_SE.yaml`	security	healthy	`translations/catroweb.sv_SE.yaml`
`auth::translations/catroweb.az_AZ.yaml`	security	healthy	`translations/catroweb.az_AZ.yaml`
`auth::translations/catroweb.it_IT.yaml`	security	healthy	`translations/catroweb.it_IT.yaml`
`auth::translations/catroweb.en_AU.yaml`	security	healthy	`translations/catroweb.en_AU.yaml`
`auth::translations/catroweb.fa_AF.yaml`	security	healthy	`translations/catroweb.fa_AF.yaml`
`auth::translations/catroweb.ka_GE.yaml`	security	healthy	`translations/catroweb.ka_GE.yaml`
`auth::translations/catroweb.bs_BA.yaml`	security	healthy	`translations/catroweb.bs_BA.yaml`
`auth::docs/README.md`	security	healthy	`docs/README.md`
`auth::translations/catroweb.af_ZA.yaml`	security	healthy	`translations/catroweb.af_ZA.yaml`
`auth::assets/Security/OAuthHandler.js`	security	healthy	`assets/Security/OAuthHandler.js`
`auth::translations/catroweb.ja_JP.yaml`	security	healthy	`translations/catroweb.ja_JP.yaml`
`auth::translations/catroweb.mk_MK.yaml`	security	healthy	`translations/catroweb.mk_MK.yaml`
`auth::translations/catroweb.vi_VN.yaml`	security	healthy	`translations/catroweb.vi_VN.yaml`
`auth::translations/catroweb.fi_FI.yaml`	security	healthy	`translations/catroweb.fi_FI.yaml`
`auth::docker/app/init-jwt-config.sh`	security	healthy	`docker/app/init-jwt-config.sh`
`auth::translations/catroweb.pt_PT.yaml`	security	healthy	`translations/catroweb.pt_PT.yaml`
`auth::translations/catroweb.kk_KZ.yaml`	security	healthy	`translations/catroweb.kk_KZ.yaml`
`auth::translations/catroweb.sq_AL.yaml`	security	healthy	`translations/catroweb.sq_AL.yaml`
`auth::translations/catroweb.pa_IN.yaml`	security	healthy	`translations/catroweb.pa_IN.yaml`
`auth::translations/catroweb.te_IN.yaml`	security	healthy	`translations/catroweb.te_IN.yaml`
`auth::translations/catroweb.pt_BR.yaml`	security	healthy	`translations/catroweb.pt_BR.yaml`
`auth::translations/catroweb.da_DK.yaml`	security	healthy	`translations/catroweb.da_DK.yaml`
`auth::translations/catroweb.kn_IN.yaml`	security	healthy	`translations/catroweb.kn_IN.yaml`
`auth::translations/catroweb.hi_IN.yaml`	security	healthy	`translations/catroweb.hi_IN.yaml`
`auth::translations/catroweb.tw_TW.yaml`	security	healthy	`translations/catroweb.tw_TW.yaml`
`auth::translations/catroweb.sl_SI.yaml`	security	healthy	`translations/catroweb.sl_SI.yaml`
`auth::translations/catroweb.bg_BG.yaml`	security	healthy	`translations/catroweb.bg_BG.yaml`
`auth::translations/catroweb.sd_PK.yaml`	security	healthy	`translations/catroweb.sd_PK.yaml`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`directly`	software	healthy	`assets/bootstrap.js:directly`
`ProjectEditorDialog`	software	healthy	`assets/Project/ProjectEditorDialog.js:ProjectEditorDialog`
`OwnProjectList`	software	healthy	`assets/Project/OwnProjectList.js:OwnProjectList`
`ProjectList`	software	healthy	`assets/Project/ProjectList.js:ProjectList`
`LogoutTokenHandler`	software	healthy	`assets/Security/LogoutTokenHandler.js:LogoutTokenHandler`
`LoginTokenHandler`	software	healthy	`assets/Security/LoginTokenHandler.js:LoginTokenHandler`
`OAuthHandler`	software	healthy	`assets/Security/OAuthHandler.js:OAuthHandler`
`TranslateProject`	software	healthy	`assets/Translate/TranslateProject.js:TranslateProject`
`TranslateComments`	software	healthy	`assets/Translate/TranslateComments.js:TranslateComments`
`Translation`	software	healthy	`assets/Translate/Translation.js:Translation`
`ByLineElementContainer`	software	healthy	`assets/Translate/Translation.js:ByLineElementContainer`
`PieChart`	software	healthy	`assets/Admin/PieChart.js:PieChart`
`material`	software	healthy	`assets/Admin/Layout.js:material`
`from`	software	healthy	`assets/Admin/SystemManagement/Logs.js:from`
`extends`	software	healthy	`assets/controllers/project/browse_controller.js:extends`
`extends`	software	healthy	`assets/controllers/studio/overview_controller.js:extends`
`extends`	software	healthy	`assets/controllers/studio/join-requests_controller.js:exten…`
`extends`	software	healthy	`assets/controllers/studio/activity-list_controller.js:exten…`
`extends`	software	healthy	`assets/controllers/studio/project-list_controller.js:extends`
`extends`	software	healthy	`assets/controllers/studio/comment_controller.js:extends`
`extends`	software	healthy	`assets/controllers/studio/member-list_controller.js:extends`
`extends`	software	healthy	`assets/controllers/security/parent-portal_controller.js:ext…`
`extends`	software	healthy	`assets/controllers/security/reset-password_controller.js:ex…`
`extends`	software	healthy	`assets/controllers/security/registration_controller.js:exte…`
`extends`	software	healthy	`assets/controllers/user/own-project-list_controller.js:exte…`
`OwnProfile`	software	healthy	`assets/User/MyProfilePage.js:OwnProfile`
`UserNotifications`	software	healthy	`assets/User/NotificationsPage.js:UserNotifications`
`UserReports`	software	healthy	`assets/User/ReportsPage.js:UserReports`
`MaintenanceHandler`	software	healthy	`assets/Index/MaintenanceHandler.js:MaintenanceHandler`
`FeaturedBanner`	software	healthy	`assets/Index/FeaturedBanner.js:FeaturedBanner`
`DefaultProjectLists`	software	healthy	`assets/Index/DefaultProjectLists.js:DefaultProjectLists`
`ApiFetch`	software	healthy	`assets/Api/ApiHelper.js:ApiFetch`
`ApiPatchFetch`	software	healthy	`assets/Api/ApiHelper.js:ApiPatchFetch`
`ApiDeleteFetch`	software	healthy	`assets/Api/ApiHelper.js:ApiDeleteFetch`
`ProjectApi`	software	healthy	`assets/Api/ProjectApi.js:ProjectApi`
`CustomTranslationApi`	software	healthy	`assets/Api/CustomTranslationApi.js:CustomTranslationApi`
`material`	software	healthy	`assets/Layout/Base.js:material`
`PasswordVisibilityToggle`	software	healthy	`assets/Components/PasswordVisibilityToggle.js:PasswordVisib…`
`SinglePasswordVisibilityToggle`	software	healthy	`assets/Components/PasswordVisibilityToggle.js:SinglePasswor…`
`AjaxController`	software	healthy	`assets/Components/AjaxController.js:AjaxController`
`MessageDialogs`	software	healthy	`assets/Components/MessageDialogs.js:MessageDialogs`

Label	Layer	Status	Path
`dev_container_checks`	cicd	healthy	`.github/workflows/container_tests.yaml`
`create_release`	cicd	healthy	`.github/workflows/create_release_pull_request.yaml`
`eslint`	cicd	healthy	`.github/workflows/code_quality.yaml`
`stylelint`	cicd	healthy	`.github/workflows/code_quality.yaml`
`prettier`	cicd	healthy	`.github/workflows/code_quality.yaml`
`php-cs-fixer`	cicd	healthy	`.github/workflows/code_quality.yaml`
`phpstan`	cicd	healthy	`.github/workflows/code_quality.yaml`
`psalm`	cicd	healthy	`.github/workflows/code_quality.yaml`
`phpcpd`	cicd	healthy	`.github/workflows/code_quality.yaml`
`php-loc`	cicd	healthy	`.github/workflows/code_quality.yaml`
`lint-twig`	cicd	healthy	`.github/workflows/code_quality.yaml`
`lint-yaml`	cicd	healthy	`.github/workflows/code_quality.yaml`
`lint-container`	cicd	healthy	`.github/workflows/code_quality.yaml`
`check-secrets`	cicd	healthy	`.github/workflows/code_quality.yaml`
`synchronize-with-crowdin`	cicd	healthy	`.github/workflows/sync_crowdin.yaml`
`build`	cicd	healthy	`.github/workflows/tests.yaml`
`tests_phpunit`	cicd	healthy	`.github/workflows/tests.yaml`
`tests_behat`	cicd	healthy	`.github/workflows/tests.yaml`
`deploy-swagger-ui`	cicd	healthy	`.github/workflows/deploy_api_spec.yaml`
`sbom`	cicd	healthy	`.github/workflows/sbom.yaml`
`image-scan`	cicd	healthy	`.github/workflows/sbom.yaml`
`check_for_new_catroid_bricks`	cicd	healthy	`.github/workflows/check_for_new_bricks.yaml`
`vet`	cicd	healthy	`.github/workflows/safedep_vet.yaml`
`deploy`	cicd	healthy	`.github/workflows/deployment.yaml`

Label	Layer	Status	Path
`port:1025`	network	healthy	`docker-compose.override.yaml`
`port:9222`	network	healthy	`package.json`
`port:04`	network	healthy	`.github/dependabot.yaml`
`port:12`	network	healthy	`src/Api/OpenAPI/specification.yaml`
`port:10`	network	healthy	`src/Api/OpenAPI/specification.yaml`
`port:30`	network	healthy	`src/Api/OpenAPI/specification.yaml`
`port:8080`	network	healthy	`docker/docker-compose.test.yaml`
`port:80`	network	healthy	`docker/docker-compose.test.yaml`
`port:9200`	network	healthy	`docker/docker-compose.test.yaml`
`port:3000`	network	healthy	`docker/docker-compose.dev.yaml`
`port:3310`	network	healthy	`docker/docker-compose.dev.yaml`
`port:5050`	network	healthy	`docker/docker-compose.dev.yaml`
`port:5000`	network	healthy	`docker/docker-compose.dev.yaml`
`port:8025`	network	healthy	`docker/docker-compose.dev.yaml`
`port:8081`	network	healthy	`docker/docker-compose.dev.yaml`

Label	Layer	Status	Path
`gha::container_tests`	cicd	healthy	`.github/workflows/container_tests.yaml`
`gha::create_release_pull_request`	cicd	healthy	`.github/workflows/create_release_pull_request.yaml`
`gha::code_quality`	cicd	healthy	`.github/workflows/code_quality.yaml`
`gha::sync_crowdin`	cicd	healthy	`.github/workflows/sync_crowdin.yaml`
`gha::tests`	cicd	healthy	`.github/workflows/tests.yaml`
`gha::deploy_api_spec`	cicd	healthy	`.github/workflows/deploy_api_spec.yaml`
`gha::sbom`	cicd	healthy	`.github/workflows/sbom.yaml`
`gha::check_for_new_bricks`	cicd	healthy	`.github/workflows/check_for_new_bricks.yaml`
`gha::safedep_vet`	cicd	healthy	`.github/workflows/safedep_vet.yaml`
`gha::deployment`	cicd	healthy	`.github/workflows/deployment.yaml`

Label	Layer	Status	Path
`IMAGE_NAME`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`
`CODECOV_TOKEN`	cicd	healthy	`—`
`DEPTRACK_API_KEY`	cicd	healthy	`—`
`DEPLOY_SHARE_SSH_KEY`	cicd	healthy	`—`
`SLACK_WEBHOOK`	cicd	healthy	`—`
`REGISTRY`	cicd	healthy	`—`
`CROWDIN_PROJECT_ID`	cicd	healthy	`—`
`CROWDIN_PERSONAL_TOKEN`	cicd	healthy	`—`
`DEPLOY_HOST`	cicd	healthy	`—`

Label	Layer	Status	Path
`dotenv::.env.prod`	security	healthy	`.env.prod`
`dotenv::.env`	security	healthy	`.env`
`dotenv::.env.test`	security	healthy	`.env.test`
`dotenv::.env.dev`	security	healthy	`.env.dev`
`generic_api_key::.env.prod`	security	healthy	`.env.prod`
`password_literal::translations/catroweb.es_ES.yaml`	security	healthy	`translations/catroweb.es_ES.yaml`
`password_literal::translations/catroweb.zh_TW.yaml`	security	healthy	`translations/catroweb.zh_TW.yaml`
`password_literal::translations/catroweb.hi_IN.yaml`	security	healthy	`translations/catroweb.hi_IN.yaml`

Label	Layer	Status	Path
`redis`	data	healthy	`.env`
`sqlite`	data	healthy	`.env`
`mysql`	data	healthy	`.env`
`postgresql`	data	healthy	`.env`
`elasticsearch`	data	healthy	`docs/README.md`
`mariadb`	data	healthy	`.claude/CLAUDE.md`

Label	Layer	Status	Path
`127.0.0.0`	network	healthy	`.env`
`10.0.0.0`	network	healthy	`.env`
`172.16.0.0`	network	healthy	`.env`
`192.168.0.0`	network	healthy	`.env`
`127.0.0.1`	network	healthy	`.env`

Label	Layer	Status	Path
`ANY /health`	api	healthy	`docker/nsfw-scanner/app.py`
`ANY /scan`	api	healthy	`docker/nsfw-scanner/app.py`

Label	Layer	Status	Path
`image::docker/Dockerfile`	hardware	healthy	`docker/Dockerfile`
`image::docker/nsfw-scanner/Dockerfile`	hardware	healthy	`docker/nsfw-scanner/Dockerfile`

Label	Layer	Status	Path
`Catrobat__Catroweb`	software	healthy	`/data/fable5_failed_archive/Catrobat__Catroweb`

Label	Layer	Status	Path
`nginx`	network	healthy	`docs/operations/README.md`

Label	Layer	Status	Path
`gpu (detected)`	hardware	healthy	`package.json`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/116990f5-e28c-4eda-a5a4-09c07751c798/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/116990f5-e28c-4eda-a5a4-09c07751c798/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

Catrobat/Catroweb

Complete repo analysis

file 50+

function 50+

directory 50+

auth 50+

class 41

job 24

port 15

pipeline 10

env_var 10

secret 8

database 6

service 5

endpoint 2

container 2

repo 1

load_balancer 1

gpu 1