Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

sadhaka/loom-engine

https://github.com/sadhaka/loom-engine · scanned 2026-06-15 23:59 UTC (2 months, 3 weeks ago)

462 raw signals (47 security + 415 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 3 weeks ago · v1 · 415 actionable findings from 2 signal sources. 120 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

88.9% cov · 406 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 3 High 3 Medium 14 Low 53 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 9 System graph 406 Crowd 0 Layer: Quality 376 Security 4 Cicd 4 Software 7 Frontend 24

Exclude dismissed / FP Exclude test files

All 2762 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`makeTileAtlasFor`	software	healthy	`demo/arpg.ts:makeTileAtlasFor`
`makeMishaSprite`	software	healthy	`demo/arpg.ts:makeMishaSprite`
`i`	software	healthy	`demo/arpg.ts:i`
`boot`	software	healthy	`demo/arpg.ts:boot`
`tick`	software	healthy	`demo/arpg.ts:tick`
`schedule`	software	healthy	`demo/arpg.ts:schedule`
`makeTileAtlas`	software	healthy	`demo/combat.ts:makeTileAtlas`
`makeEnemyAtlas`	software	healthy	`demo/combat.ts:makeEnemyAtlas`
`playerIdx`	software	healthy	`demo/combat.ts:playerIdx`
`boot`	software	healthy	`demo/combat.ts:boot`
`tick`	software	healthy	`demo/combat.ts:tick`
`schedule`	software	healthy	`demo/combat.ts:schedule`
`makeTileAtlas`	software	healthy	`demo/demo.ts:makeTileAtlas`
`worldIsoX`	software	healthy	`demo/demo.ts:worldIsoX`
`worldIsoY`	software	healthy	`demo/demo.ts:worldIsoY`
`leftClicked`	software	healthy	`demo/demo.ts:leftClicked`
`audioAny`	software	healthy	`demo/demo.ts:audioAny`
`boot`	software	healthy	`demo/demo.ts:boot`
`pushEvent`	software	healthy	`demo/demo.ts:pushEvent`
`tick`	software	healthy	`demo/demo.ts:tick`
`schedule`	software	healthy	`demo/demo.ts:schedule`
`paintAvatar`	software	healthy	`demo/dialogue-mini/main.ts:paintAvatar`
`tick`	software	healthy	`demo/dialogue-mini/main.ts:tick`
`utf8Bytes`	software	healthy	`demo/plaza-persistent/main.ts:utf8Bytes`
`runScenario`	software	healthy	`demo/plaza-persistent/main.ts:runScenario`
`sameList`	software	healthy	`demo/plaza-persistent/main.ts:sameList`
`buildChecks`	software	healthy	`demo/plaza-persistent/main.ts:buildChecks`
`paintSprite`	software	healthy	`demo/plaza-persistent/main.ts:paintSprite`
`spriteFor`	software	healthy	`demo/plaza-persistent/main.ts:spriteFor`
`groupByRegion`	software	healthy	`demo/plaza-persistent/main.ts:groupByRegion`
`drawWorld`	software	healthy	`demo/plaza-persistent/main.ts:drawWorld`
`totals`	software	healthy	`demo/plaza-persistent/main.ts:totals`
`renderStats`	software	healthy	`demo/plaza-persistent/main.ts:renderStats`
`renderChecks`	software	healthy	`demo/plaza-persistent/main.ts:renderChecks`
`boot`	software	healthy	`demo/plaza-persistent/main.ts:boot`
`vec`	software	healthy	`demo/plaza-persistent/main.ts:vec`
`pct`	software	healthy	`demo/plaza-persistent/main.ts:pct`
`frame`	software	healthy	`demo/plaza-persistent/main.ts:frame`
`makeTile`	software	healthy	`demo/plaza-mini/main.ts:makeTile`
`makeSprite`	software	healthy	`demo/plaza-mini/main.ts:makeSprite`
`i`	software	healthy	`demo/plaza-mini/main.ts:i`
`boot`	software	healthy	`demo/plaza-mini/main.ts:boot`
`tick`	software	healthy	`demo/plaza-mini/main.ts:tick`
`makeTile`	software	healthy	`demo/plaza-multiplayer/main.ts:makeTile`
`makeSprite`	software	healthy	`demo/plaza-multiplayer/main.ts:makeSprite`
`i`	software	healthy	`demo/plaza-multiplayer/main.ts:i`
`boot`	software	healthy	`demo/plaza-multiplayer/main.ts:boot`
`tick`	software	healthy	`demo/plaza-multiplayer/main.ts:tick`
`paintSprite`	software	healthy	`demo/survivor-mini/main.ts:paintSprite`
`playerIdx`	software	healthy	`demo/survivor-mini/main.ts:playerIdx`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`LOOM-BOSS-RENDER-SPEC.md`	software	healthy	`LOOM-BOSS-RENDER-SPEC.md`
`LOOM-AUDIO-SPEC.md`	software	healthy	`LOOM-AUDIO-SPEC.md`
`README.md`	software	healthy	`README.md`
`typedoc.json`	software	healthy	`typedoc.json`
`LOOM-RUST-EXTRACTION-SPEC.md`	software	healthy	`LOOM-RUST-EXTRACTION-SPEC.md`
`package.json`	software	healthy	`package.json`
`PRIOR-ART.md`	software	healthy	`PRIOR-ART.md`
`package-lock.json`	software	healthy	`package-lock.json`
`LOOM-DIRECTOR-PROTOCOL-V2.md`	software	healthy	`LOOM-DIRECTOR-PROTOCOL-V2.md`
`SECURITY-AUDIT-0.10.0.md`	software	healthy	`SECURITY-AUDIT-0.10.0.md`
`tsconfig.json`	software	healthy	`tsconfig.json`
`LICENSE`	software	healthy	`LICENSE`
`SECURITY.md`	software	healthy	`SECURITY.md`
`COMMERCIAL_LICENSE_TERMS.md`	software	healthy	`COMMERCIAL_LICENSE_TERMS.md`
`NOTICE.md`	software	healthy	`NOTICE.md`
`tsconfig.demo.json`	software	healthy	`tsconfig.demo.json`
`CHANGELOG.md`	software	healthy	`CHANGELOG.md`
`arpg.ts`	software	healthy	`demo/arpg.ts`
`index.html`	software	healthy	`demo/index.html`
`combat.ts`	software	healthy	`demo/combat.ts`
`demo.ts`	software	healthy	`demo/demo.ts`
`director.html`	software	healthy	`demo/director.html`
`arpg.html`	software	healthy	`demo/arpg.html`
`combat.html`	software	healthy	`demo/combat.html`
`README.md`	software	healthy	`demo/dialogue-mini/README.md`
`index.html`	software	healthy	`demo/dialogue-mini/index.html`
`main.ts`	software	healthy	`demo/dialogue-mini/main.ts`
`README.md`	software	healthy	`demo/plaza-persistent/README.md`
`index.html`	software	healthy	`demo/plaza-persistent/index.html`
`main.ts`	software	healthy	`demo/plaza-persistent/main.ts`
`vector.json`	software	healthy	`demo/plaza-persistent/vector.json`
`README.md`	software	healthy	`demo/plaza-mini/README.md`
`index.html`	software	healthy	`demo/plaza-mini/index.html`
`main.ts`	software	healthy	`demo/plaza-mini/main.ts`
`index.html`	software	healthy	`demo/plaza-multiplayer/index.html`
`main.ts`	software	healthy	`demo/plaza-multiplayer/main.ts`
`README.md`	software	healthy	`demo/survivor-mini/README.md`
`index.html`	software	healthy	`demo/survivor-mini/index.html`
`main.ts`	software	healthy	`demo/survivor-mini/main.ts`
`README.md`	software	healthy	`demo/delve-mini/README.md`
`srd5e-concentration.test.ts`	software	healthy	`tests/srd5e-concentration.test.ts`
`zone-event-system-determinism.test.ts`	software	healthy	`tests/zone-event-system-determinism.test.ts`
`loom-flow.test.ts`	software	healthy	`tests/loom-flow.test.ts`
`world-session.test.ts`	software	healthy	`tests/world-session.test.ts`
`screen-shake.test.ts`	software	healthy	`tests/screen-shake.test.ts`
`pathfinder.test.ts`	software	healthy	`tests/pathfinder.test.ts`
`tween.test.ts`	software	healthy	`tests/tween.test.ts`
`headless-tick-harness.ts`	software	healthy	`tests/headless-tick-harness.ts`
`combat.test.ts`	software	healthy	`tests/combat.test.ts`
`lobby-state.test.ts`	software	healthy	`tests/lobby-state.test.ts`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`ZoneTileRenderSystem`	software	healthy	`demo/arpg.ts:ZoneTileRenderSystem`
`WASDMoveSystem`	software	healthy	`demo/arpg.ts:WASDMoveSystem`
`InteractionDispatchSystem`	software	healthy	`demo/arpg.ts:InteractionDispatchSystem`
`ZoneTransitionTickSystem`	software	healthy	`demo/arpg.ts:ZoneTransitionTickSystem`
`TileRenderSystem`	software	healthy	`demo/combat.ts:TileRenderSystem`
`WaveSpawnerSystem`	software	healthy	`demo/combat.ts:WaveSpawnerSystem`
`DeathFxSystem`	software	healthy	`demo/combat.ts:DeathFxSystem`
`HoverSystem`	software	healthy	`demo/demo.ts:HoverSystem`
`TileRenderSystem`	software	healthy	`demo/demo.ts:TileRenderSystem`
`CameraInputSystem`	software	healthy	`demo/demo.ts:CameraInputSystem`
`ClickInputSystem`	software	healthy	`demo/demo.ts:ClickInputSystem`
`DialogueSystem`	software	healthy	`demo/dialogue-mini/main.ts:DialogueSystem`
`TileFloorSystem`	software	healthy	`demo/plaza-mini/main.ts:TileFloorSystem`
`WalkSystem`	software	healthy	`demo/plaza-mini/main.ts:WalkSystem`
`NarratorOverlaySystem`	software	healthy	`demo/plaza-mini/main.ts:NarratorOverlaySystem`
`TileFloorSystem`	software	healthy	`demo/plaza-multiplayer/main.ts:TileFloorSystem`
`WalkBroadcastSystem`	software	healthy	`demo/plaza-multiplayer/main.ts:WalkBroadcastSystem`
`StatsOverlaySystem`	software	healthy	`demo/plaza-multiplayer/main.ts:StatsOverlaySystem`
`AutoTargetSystem`	software	healthy	`demo/survivor-mini/main.ts:AutoTargetSystem`
`EdgeSpawnerSystem`	software	healthy	`demo/survivor-mini/main.ts:EdgeSpawnerSystem`
`FakeES`	software	healthy	`tests/snapshot-recovery.test.ts:FakeES`
`FakeAudioContext`	software	healthy	`tests/spatial-audio-system.test.ts:FakeAudioContext`
`FakeCSSStyleDeclaration`	software	healthy	`tests/touch-input.test.ts:FakeCSSStyleDeclaration`
`MockGL`	software	healthy	`tests/webgl2-device.test.ts:MockGL`
`CapturingLogger`	software	healthy	`tests/ai-plugin-error-isolation.test.ts:CapturingLogger`
`FakeGainNode`	software	healthy	`tests/audio-mixer.test.ts:FakeGainNode`
`FakeAudioContext`	software	healthy	`tests/audio-mixer.test.ts:FakeAudioContext`
`FakeAudioContext`	software	healthy	`tests/spatial-audio-bus.test.ts:FakeAudioContext`
`TrackedResource`	software	healthy	`tests/resource-lifecycle.test.ts:TrackedResource`
`it`	software	healthy	`tests/world-replay.test.ts:it`
`FakeSpatialHandle`	software	healthy	`tests/cue-catalog.test.ts:FakeSpatialHandle`
`MockSnapshotablePool`	software	healthy	`tests/state-snapshot.test.ts:MockSnapshotablePool`
`profile`	software	healthy	`tests/hotkey-profile.test.ts:profile`
`FakeDevice`	software	healthy	`tests/world.test.ts:FakeDevice`
`CounterResource`	software	healthy	`tests/world-snapshot.test.ts:CounterResource`
`NamedResource`	software	healthy	`tests/world-snapshot.test.ts:NamedResource`
`FakeSpatialHandle`	software	healthy	`tests/cue-stop-all.test.ts:FakeSpatialHandle`
`FakeDevice`	software	healthy	`tests/multiplayer.test.ts:FakeDevice`
`FakeStorage`	software	healthy	`tests/persistent-storage.test.ts:FakeStorage`
`Counter`	software	healthy	`tests/persistent-storage.test.ts:Counter`
`FakeAudioParam`	software	healthy	`tests/music-director.test.ts:FakeAudioParam`
`FakeGainNode`	software	healthy	`tests/music-director.test.ts:FakeGainNode`
`FakeBufferSource`	software	healthy	`tests/music-director.test.ts:FakeBufferSource`
`FakeGainNode`	software	healthy	`tests/audio-input.test.ts:FakeGainNode`
`FakeAudioContext`	software	healthy	`tests/audio-input.test.ts:FakeAudioContext`
`implements`	software	healthy	`tests/entropy.test.ts:implements`
`FakeEventSource`	software	healthy	`tests/director/sse-director-bridge-networking.test.ts:FakeE…`
`TimeMachine`	software	healthy	`tests/director/sse-director-bridge-networking.test.ts:TimeM…`
`FakeEventSource`	software	healthy	`tests/director/sse-zone-bridge-networking.test.ts:FakeEvent…`
`TraceReplayer`	software	healthy	`tests/trace-replay/replay.ts:TraceReplayer`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`demo`	software	healthy	`demo`
`dialogue-mini`	software	healthy	`demo/dialogue-mini`
`plaza-persistent`	software	healthy	`demo/plaza-persistent`
`plaza-mini`	software	healthy	`demo/plaza-mini`
`plaza-multiplayer`	software	healthy	`demo/plaza-multiplayer`
`survivor-mini`	software	healthy	`demo/survivor-mini`
`delve-mini`	software	healthy	`demo/delve-mini`
`tests`	software	healthy	`tests`
`fixtures`	software	healthy	`tests/fixtures`
`director`	software	healthy	`tests/director`
`trace-replay`	software	healthy	`tests/trace-replay`
`fixtures`	software	healthy	`tests/trace-replay/fixtures`
`fuzzer`	software	healthy	`tests/fuzzer`
`plugins`	software	healthy	`tests/plugins`
`docs`	software	healthy	`docs`
`specs`	software	healthy	`docs/specs`
`packs`	software	healthy	`packs`
`srd5e`	software	healthy	`packs/srd5e`
`rust`	software	healthy	`rust`
`loom_epoch`	software	healthy	`rust/loom_epoch`
`tests`	software	healthy	`rust/loom_epoch/tests`
`src`	software	healthy	`rust/loom_epoch/src`
`loom_snapshot`	software	healthy	`rust/loom_snapshot`
`tests`	software	healthy	`rust/loom_snapshot/tests`
`src`	software	healthy	`rust/loom_snapshot/src`
`loom_c_abi`	software	healthy	`rust/loom_c_abi`
`src`	software	healthy	`rust/loom_c_abi/src`
`loom_session`	software	healthy	`rust/loom_session`
`tests`	software	healthy	`rust/loom_session/tests`
`src`	software	healthy	`rust/loom_session/src`
`loom_combat`	software	healthy	`rust/loom_combat`
`tests`	software	healthy	`rust/loom_combat/tests`
`src`	software	healthy	`rust/loom_combat/src`
`loom_frame`	software	healthy	`rust/loom_frame`
`tests`	software	healthy	`rust/loom_frame/tests`
`src`	software	healthy	`rust/loom_frame/src`
`loom_events`	software	healthy	`rust/loom_events`
`tests`	software	healthy	`rust/loom_events/tests`
`src`	software	healthy	`rust/loom_events/src`
`loom_math`	software	healthy	`rust/loom_math`
`src`	software	healthy	`rust/loom_math/src`
`loom_ruleset`	software	healthy	`rust/loom_ruleset`
`tests`	software	healthy	`rust/loom_ruleset/tests`
`src`	software	healthy	`rust/loom_ruleset/src`
`loom_py`	software	healthy	`rust/loom_py`
`src`	software	healthy	`rust/loom_py/src`
`loom_wasm`	software	healthy	`rust/loom_wasm`
`src`	software	healthy	`rust/loom_wasm/src`
`assets`	software	healthy	`assets`
`knight`	software	healthy	`assets/knight`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`publish`	cicd	healthy	`.github/workflows/npm-publish.yml`
`build-and-deploy`	cicd	healthy	`.github/workflows/docs.yml`
`ts`	cicd	healthy	`.github/workflows/determinism-gate.yml`
`python`	cicd	healthy	`.github/workflows/determinism-gate.yml`
`rust`	cicd	healthy	`.github/workflows/determinism-gate.yml`
`determinism-gate`	cicd	healthy	`.github/workflows/determinism-gate.yml`
`build-rpg`	cicd	healthy	`.github/workflows/release-pypi.yml`
`build-native-wheels`	cicd	healthy	`.github/workflows/release-pypi.yml`
`build-native-sdist`	cicd	healthy	`.github/workflows/release-pypi.yml`
`publish-rpg`	cicd	healthy	`.github/workflows/release-pypi.yml`
`publish-native`	cicd	healthy	`.github/workflows/release-pypi.yml`

Label	Layer	Status	Path
`gha::npm-publish`	cicd	healthy	`.github/workflows/npm-publish.yml`
`gha::docs`	cicd	healthy	`.github/workflows/docs.yml`
`gha::determinism-gate`	cicd	healthy	`.github/workflows/determinism-gate.yml`
`gha::release-pypi`	cicd	healthy	`.github/workflows/release-pypi.yml`

Label	Layer	Status	Path
`sqlite`	data	healthy	`README.md`
`mariadb`	data	healthy	`LICENSE`
`redis`	data	healthy	`src/director/ai/plugin.ts`

Label	Layer	Status	Path
`auth::.github/workflows/release-pypi.yml`	security	healthy	`.github/workflows/release-pypi.yml`
`auth::.github/workflows/npm-publish.yml`	security	healthy	`.github/workflows/npm-publish.yml`

Label	Layer	Status	Path
`repobility-clone-rcc6yofs`	software	healthy	`/tmp/repobility-clone-rcc6yofs`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`tools/run-bench.sh`

Label	Layer	Status	Path
`port:09`	network	healthy	`.github/dependabot.yml`

Label	Layer	Status	Path
`gpu (detected)`	hardware	healthy	`README.md`

Label	Layer	Status	Path
`GITHUB_TOKEN`	cicd	healthy	`—`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/23ff12ba-d62a-4764-ac25-dffc8f0e8885/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/23ff12ba-d62a-4764-ac25-dffc8f0e8885/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

sadhaka/loom-engine

Complete repo analysis

function 50+

file 50+

class 50+

directory 50+

job 11

pipeline 4

database 3

auth 2

repo 1

service 1

port 1

gpu 1

env_var 1