Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

Whatsonyourmind/modelforge

https://github.com/Whatsonyourmind/modelforge · scanned 2026-06-16 00:57 UTC (2 months, 1 week ago)

184 raw signals (0 security + 184 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 126 actionable findings from 1 signal source. 58 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

100.0% cov · 126 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 3 Medium 14 Low 54 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 126 Crowd 0 Layer: Software 12 Hardware 2 Frontend 1 Cicd 3 Quality 88 Security 3 Api 17

Exclude dismissed / FP Exclude test files

All 4611 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`audit_file`	software	healthy	`audit_suite.py:68`
`main`	software	healthy	`audit_suite.py:189`
`record`	software	healthy	`hardtest_minibond.py:58`
`cell`	software	healthy	`hardtest_minibond.py:68`
`dcol`	software	healthy	`hardtest_minibond.py:78`
`_npv`	software	healthy	`hardtest_loan_tape_securitization.py:28`
`irr`	software	healthy	`hardtest_loan_tape_securitization.py:32`
`clean_room`	software	healthy	`hardtest_loan_tape_securitization.py:57`
`main`	software	healthy	`hardtest_loan_tape_securitization.py:197`
`get`	software	healthy	`hardtest_loan_tape_securitization.py:211`
`row`	software	healthy	`hardtest_loan_tape_securitization.py:221`
`chk`	software	healthy	`hardtest_loan_tape_securitization.py:230`
`add`	software	healthy	`adversarial_audit.py:35`
`cell_refs_in_formula`	software	healthy	`adversarial_audit.py:43`
`detect_same_period_circular`	software	healthy	`adversarial_audit.py:62`
`dfs`	software	healthy	`adversarial_audit.py:93`
`scan_hardcoded_magic_numbers`	software	dead	`adversarial_audit.py:117`
`audit_file`	software	healthy	`adversarial_audit.py:139`
`_strip_cellrefs`	software	healthy	`adversarial_audit.py:183`
`main`	software	healthy	`adversarial_audit.py:341`
`chk`	software	healthy	`hardtest_bank_fig.py:30`
`approx`	software	healthy	`hardtest_bank_fig.py:34`
`clean_room`	software	healthy	`hardtest_bank_fig.py:42`
`base`	software	healthy	`hardtest_bank_fig.py:43`
`recalc_workbook`	software	healthy	`hardtest_bank_fig.py:176`
`val`	software	healthy	`hardtest_bank_fig.py:188`
`row`	software	healthy	`hardtest_bank_fig.py:203`
`series`	software	healthy	`hardtest_bank_fig.py:214`
`main`	software	healthy	`hardtest_bank_fig.py:235`
`check`	software	healthy	`hardtest_project_finance.py:47`
`build_workbook`	software	healthy	`hardtest_project_finance.py:56`
`_a`	software	healthy	`hardtest_project_finance.py:76`
`clean_room`	software	healthy	`hardtest_project_finance.py:81`
`_render`	software	healthy	`hardtest_project_finance.py:125`
`load_live`	software	healthy	`hardtest_project_finance.py:285`
`g`	software	healthy	`hardtest_project_finance.py:291`
`col`	software	healthy	`hardtest_project_finance.py:310`
`main`	software	healthy	`hardtest_project_finance.py:318`
`check`	software	healthy	`hardtest_dcf_enterprise.py:50`
`check_bool`	software	healthy	`hardtest_dcf_enterprise.py:66`
`cell`	software	healthy	`hardtest_dcf_enterprise.py:103`
`add`	software	healthy	`gold_standard_audit.py:57`
`load_wb`	software	healthy	`gold_standard_audit.py:62`
`has_sheet`	software	healthy	`gold_standard_audit.py:66`
`find_row`	software	healthy	`gold_standard_audit.py:70`
`find_row_any_col`	software	healthy	`gold_standard_audit.py:82`
`find_all_rows`	software	healthy	`gold_standard_audit.py:103`
`get_formula`	software	healthy	`gold_standard_audit.py:116`
`has_named_range`	software	healthy	`gold_standard_audit.py:124`
`audit_dcf`	software	healthy	`gold_standard_audit.py:130`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`Finding`	software	healthy	`gold_standard_audit.py:44`
`Reporter`	software	healthy	`hardtest_three_statement.py:56`
`MockBackend`	software	healthy	`tests/test_ingest_classifier.py:18`
`_StubProbe`	software	healthy	`tests/test_trust.py:36`
`_ToyRule`	software	healthy	`tests/test_trust.py:236`
`Stub`	software	healthy	`tests/test_feeds_providers.py:139`
`_Unavail`	software	healthy	`tests/test_feeds_providers.py:479`
`FakeFmp`	software	healthy	`tests/test_feeds_providers.py:493`
`FakeBloomberg`	software	healthy	`tests/test_feeds_providers.py:500`
`Broken`	software	healthy	`tests/test_feeds_providers.py:515`
`Good`	software	healthy	`tests/test_feeds_providers.py:522`
`Authd`	software	healthy	`tests/test_feeds_providers.py:536`
`Free`	software	healthy	`tests/test_feeds_providers.py:543`
`V1`	software	healthy	`tests/test_feeds_providers.py:556`
`V2`	software	healthy	`tests/test_feeds_providers.py:559`
`MockBackend`	software	healthy	`tests/test_ingest_extractor.py:12`
`FakeSpec`	software	healthy	`tests/test_shadow.py:39`
`TestDevelopmentREAdapts`	software	healthy	`tests/deck/test_adapter_development_re.py:119`
`TestDevelopmentREDecks`	software	healthy	`tests/deck/test_adapter_development_re.py:219`
`TestDevelopmentREByteStability`	software	healthy	`tests/deck/test_adapter_development_re.py:267`
`TestDevelopmentREFailClosed`	software	healthy	`tests/deck/test_adapter_development_re.py:286`
`TestRealEstateAdapts`	software	healthy	`tests/deck/test_adapter_real_estate.py:118`
`TestRealEstateDecks`	software	healthy	`tests/deck/test_adapter_real_estate.py:194`
`TestRealEstateByteStability`	software	healthy	`tests/deck/test_adapter_real_estate.py:242`
`TestRealEstateFailClosed`	software	healthy	`tests/deck/test_adapter_real_estate.py:261`
`_RecordCollector`	software	healthy	`tests/deck/test_slide_content.py:45`
`TestDeckBuilds`	software	healthy	`tests/deck/test_pipeline.py:81`
`TestByteStability`	software	healthy	`tests/deck/test_pipeline.py:168`
`TestFailClosed`	software	healthy	`tests/deck/test_pipeline.py:185`
`TestUnsupportedTemplate`	software	healthy	`tests/deck/test_pipeline.py:265`
`TestStampUnit`	software	healthy	`tests/deck/test_pipeline.py:318`
`TestValidatePublicUrl`	software	healthy	`tests/deck/security/test_url_guard.py:30`
`_FakeStream`	software	healthy	`tests/deck/security/test_url_guard.py:63`
`_FakeResponse`	software	healthy	`tests/deck/security/test_url_guard.py:73`
`TestAssertConnectedIpPublic`	software	healthy	`tests/deck/security/test_url_guard.py:80`
`TestLayoutRegion`	software	healthy	`tests/deck/layout/test_layout_solver.py:9`
`TestResolvedPosition`	software	healthy	`tests/deck/layout/test_layout_solver.py:46`
`TestBoundingBox`	software	healthy	`tests/deck/layout/test_layout_solver.py:104`
`TestSlideLayoutSolver`	software	healthy	`tests/deck/layout/test_layout_solver.py:124`
`TestPatternRegistry`	software	healthy	`tests/deck/layout/test_layout_patterns.py:128`
`TestPatternRegions`	software	healthy	`tests/deck/layout/test_layout_patterns.py:200`
`TestBulletPointsConstraintSolving`	software	healthy	`tests/deck/layout/test_layout_patterns.py:288`
`TestTwoColumnNoOverlap`	software	healthy	`tests/deck/layout/test_layout_patterns.py:352`
`TestVisualHierarchy`	software	healthy	`tests/deck/layout/test_layout_patterns.py:390`
`TestGridSystemDefaults`	software	healthy	`tests/deck/layout/test_layout_grid.py:8`
`TestGridSystemColumnCalculations`	software	healthy	`tests/deck/layout/test_layout_grid.py:68`
`TestGridSystemThemeSpacing`	software	healthy	`tests/deck/layout/test_layout_grid.py:129`
`MockTextMeasurer`	software	healthy	`tests/deck/layout/test_layout_engine.py:21`
`MockThemeRegistry`	software	healthy	`tests/deck/layout/test_layout_engine.py:52`
`TestLayoutEngineTitle`	software	healthy	`tests/deck/layout/test_layout_engine.py:164`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`audit_suite.py`	software	healthy	`audit_suite.py`
`hardtest_minibond.py`	software	healthy	`hardtest_minibond.py`
`hardtest_loan_tape_securitization.py`	software	healthy	`hardtest_loan_tape_securitization.py`
`mkdocs.yml`	software	healthy	`mkdocs.yml`
`SOTA_AUDIT.md`	software	healthy	`SOTA_AUDIT.md`
`README.md`	software	healthy	`README.md`
`VALIDATION_REPORT.md`	software	healthy	`VALIDATION_REPORT.md`
`adversarial_audit.py`	software	healthy	`adversarial_audit.py`
`hardtest_bank_fig.py`	software	healthy	`hardtest_bank_fig.py`
`hardtest_project_finance.py`	software	healthy	`hardtest_project_finance.py`
`hardtest_dcf_enterprise.py`	software	healthy	`hardtest_dcf_enterprise.py`
`gold_standard_audit.py`	software	healthy	`gold_standard_audit.py`
`Dockerfile`	software	healthy	`Dockerfile`
`hardtest_npl_portfolio.py`	software	healthy	`hardtest_npl_portfolio.py`
`glama.json`	software	healthy	`glama.json`
`THREAT_MODEL.md`	software	healthy	`THREAT_MODEL.md`
`DEPLOY_NOW.md`	software	healthy	`DEPLOY_NOW.md`
`hardtest_real_estate.py`	software	healthy	`hardtest_real_estate.py`
`hardtest_comps_fairness.py`	software	healthy	`hardtest_comps_fairness.py`
`hardtest_structured_credit.py`	software	healthy	`hardtest_structured_credit.py`
`server.json`	software	healthy	`server.json`
`audit_compute.py`	software	healthy	`audit_compute.py`
`hardtest_hgb_carveout.py`	software	healthy	`hardtest_hgb_carveout.py`
`landing.html`	software	healthy	`landing.html`
`hardtest_external_groundtruth.py`	software	healthy	`hardtest_external_groundtruth.py`
`pyproject.toml`	software	healthy	`pyproject.toml`
`hardtest_development_re.py`	software	healthy	`hardtest_development_re.py`
`hardtest_mna_accretion.py`	software	healthy	`hardtest_mna_accretion.py`
`LICENSE`	software	healthy	`LICENSE`
`hardtest_unitranche.py`	software	healthy	`hardtest_unitranche.py`
`hardtest_portfolio_review.py`	software	healthy	`hardtest_portfolio_review.py`
`hardtest_three_statement.py`	software	healthy	`hardtest_three_statement.py`
`AUDIT_REPORT.md`	software	healthy	`AUDIT_REPORT.md`
`hardtest_lbo_full.py`	software	healthy	`hardtest_lbo_full.py`
`SECURITY.md`	software	healthy	`SECURITY.md`
`hardtest_credit_leverage.py`	software	healthy	`hardtest_credit_leverage.py`
`stress_test.py`	software	healthy	`stress_test.py`
`CHANGELOG.md`	software	healthy	`CHANGELOG.md`
`docker-compose.yml`	software	healthy	`docker-compose.yml`
`test_ingest_wide.py`	software	healthy	`tests/test_ingest_wide.py`
`test_collab.py`	software	healthy	`tests/test_collab.py`
`test_mcp_conversational.py`	software	healthy	`tests/test_mcp_conversational.py`
`test_bank_fig.py`	software	healthy	`tests/test_bank_fig.py`
`test_portfolio_drift.py`	software	healthy	`tests/test_portfolio_drift.py`
`test_risk_sheet.py`	software	healthy	`tests/test_risk_sheet.py`
`test_loan_tape_securitization.py`	software	healthy	`tests/test_loan_tape_securitization.py`
`test_watch.py`	software	healthy	`tests/test_watch.py`
`test_screen_cli.py`	software	healthy	`tests/test_screen_cli.py`
`test_manifest.py`	software	healthy	`tests/test_manifest.py`
`test_development_re.py`	software	healthy	`tests/test_development_re.py`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`tests`	software	healthy	`tests`
`fixtures`	software	healthy	`tests/fixtures`
`dataroom_enfinity_synth`	software	healthy	`tests/fixtures/dataroom_enfinity_synth`
`deck`	software	healthy	`tests/deck`
`security`	software	healthy	`tests/deck/security`
`layout`	software	healthy	`tests/deck/layout`
`compose`	software	healthy	`tests/deck/compose`
`rendering`	software	healthy	`tests/deck/rendering`
`qa`	software	healthy	`tests/deck/qa`
`themes`	software	healthy	`tests/deck/themes`
`ir`	software	healthy	`tests/deck/ir`
`benchmarks`	software	healthy	`benchmarks`
`briefs`	software	healthy	`benchmarks/briefs`
`results`	software	healthy	`benchmarks/results`
`artifacts`	software	healthy	`benchmarks/artifacts`
`agent`	software	healthy	`benchmarks/artifacts/agent`
`specs`	software	healthy	`benchmarks/specs`
`harness`	software	healthy	`benchmarks/harness`
`modelforge`	software	healthy	`modelforge`
`spec`	software	healthy	`modelforge/spec`
`exporters`	software	healthy	`modelforge/exporters`
`analytics`	software	healthy	`modelforge/analytics`
`watch`	software	healthy	`modelforge/watch`
`ingest`	software	healthy	`modelforge/ingest`
`readers`	software	healthy	`modelforge/ingest/readers`
`prompts`	software	healthy	`modelforge/ingest/prompts`
`chat`	software	healthy	`modelforge/chat`
`risk`	software	healthy	`modelforge/risk`
`finance_core`	software	healthy	`modelforge/finance_core`
`templates`	software	healthy	`modelforge/templates`
`roi`	software	healthy	`modelforge/roi`
`shadow`	software	healthy	`modelforge/shadow`
`deck`	software	healthy	`modelforge/deck`
`security`	software	healthy	`modelforge/deck/security`
`layout`	software	healthy	`modelforge/deck/layout`
`patterns`	software	healthy	`modelforge/deck/layout/patterns`
`compose`	software	healthy	`modelforge/deck/compose`
`rendering`	software	healthy	`modelforge/deck/rendering`
`element_renderers`	software	healthy	`modelforge/deck/rendering/element_renderers`
`chart_renderers`	software	healthy	`modelforge/deck/rendering/chart_renderers`
`slide_renderers`	software	healthy	`modelforge/deck/rendering/slide_renderers`
`qa`	software	healthy	`modelforge/deck/qa`
`checkers`	software	healthy	`modelforge/deck/qa/checkers`
`themes`	software	healthy	`modelforge/deck/themes`
`finance`	software	healthy	`modelforge/deck/finance`
`ir`	software	healthy	`modelforge/deck/ir`
`charts`	software	healthy	`modelforge/deck/ir/charts`
`elements`	software	healthy	`modelforge/deck/ir/elements`
`slides`	software	healthy	`modelforge/deck/ir/slides`
`web`	software	healthy	`modelforge/web`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`GET /healthz`	api	healthy	`modelforge/web/app.py`
`GET /`	api	healthy	`modelforge/web/app.py`
`POST /upload`	api	healthy	`modelforge/web/app.py`
`GET /workbook/{wid}`	api	healthy	`modelforge/web/app.py`
`GET /workbook/{wid}/view`	api	healthy	`modelforge/web/app.py`
`GET /workbook/{wid}/dossier`	api	healthy	`modelforge/web/app.py`
`GET /workbook/{wid}/drift`	api	healthy	`modelforge/web/app.py`
`GET /diff`	api	healthy	`modelforge/web/app.py`
`POST /risk`	api	healthy	`modelforge/web/app.py`
`GET /health`	api	healthy	`modelforge/web/app.py`
`GET /auth/whoami`	api	healthy	`modelforge/web/saas_routes.py`
`POST /tenants`	api	healthy	`modelforge/web/saas_routes.py`
`GET /tenants`	api	healthy	`modelforge/web/saas_routes.py`
`GET /tenants/{tenant_id}`	api	healthy	`modelforge/web/saas_routes.py`
`GET /tenants/{tenant_id}/members`	api	healthy	`modelforge/web/saas_routes.py`
`POST /tenants/{tenant_id}/members`	api	healthy	`modelforge/web/saas_routes.py`
`DELETE /tenants/{tenant_id}/members/{user_id}`	api	healthy	`modelforge/web/saas_routes.py`
`POST /billing/webhook`	api	healthy	`modelforge/web/saas_routes.py`
`GET /tenants/{tenant_id}/workbooks`	api	healthy	`modelforge/web/saas_routes.py`

Label	Layer	Status	Path
`deploy-render`	cicd	healthy	`.github/workflows/deploy.yml`
`deploy-cf-worker`	cicd	healthy	`.github/workflows/deploy.yml`
`test`	cicd	healthy	`.github/workflows/ci.yml`
`lint`	cicd	healthy	`.github/workflows/ci.yml`
`sbom`	cicd	healthy	`.github/workflows/ci.yml`
`bandit`	cicd	healthy	`.github/workflows/security.yml`
`safety`	cicd	healthy	`.github/workflows/security.yml`
`pip-audit`	cicd	healthy	`.github/workflows/security.yml`
`semgrep`	cicd	healthy	`.github/workflows/security.yml`
`build`	cicd	healthy	`.github/workflows/publish.yml`
`provenance`	cicd	healthy	`.github/workflows/publish.yml`
`publish-pypi`	cicd	healthy	`.github/workflows/publish.yml`
`github-release`	cicd	healthy	`.github/workflows/publish.yml`

Label	Layer	Status	Path
`tenants`	data	healthy	`migrations/001_supabase_init.sql`
`tenant_members`	data	healthy	`migrations/001_supabase_init.sql`
`workbooks`	data	healthy	`migrations/001_supabase_init.sql`
`audit_events_saas`	data	healthy	`migrations/001_supabase_init.sql`
`billing_events`	data	healthy	`migrations/001_supabase_init.sql`
`audit_events`	data	healthy	`modelforge/audit_log.py`
`comment_events`	data	healthy	`modelforge/collab/comments.py`
`cell_comments`	data	healthy	`modelforge/graph/comments.py`
`nodes`	data	healthy	`modelforge/graph/store.py`
`edges`	data	healthy	`modelforge/graph/store.py`

Label	Layer	Status	Path
`auth::web/collab-worker/README.md`	security	healthy	`web/collab-worker/README.md`
`auth::tests/test_saas_routes.py`	security	healthy	`tests/test_saas_routes.py`
`auth::.github/workflows/publish.yml`	security	healthy	`.github/workflows/publish.yml`
`auth::tests/test_collab_realtime.py`	security	healthy	`tests/test_collab_realtime.py`
`auth::tests/test_saas.py`	security	healthy	`tests/test_saas.py`
`auth::modelforge/web/saas_routes.py`	security	healthy	`modelforge/web/saas_routes.py`
`auth::modelforge/saas/auth.py`	security	healthy	`modelforge/saas/auth.py`
`auth::.github/workflows/deploy.yml`	security	healthy	`.github/workflows/deploy.yml`
`auth::web/collab-worker/src/index.ts`	security	healthy	`web/collab-worker/src/index.ts`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`Dockerfile`
`10.0.0.5`	network	healthy	`tests/deck/security/test_url_guard.py`
`169.254.169.254`	network	healthy	`tests/deck/security/test_url_guard.py`
`93.184.216.34`	network	healthy	`tests/deck/security/test_url_guard.py`
`169.254.0.0`	network	healthy	`modelforge/deck/security/url_guard.py`

Label	Layer	Status	Path
`sqlite`	data	healthy	`README.md`
`mongodb`	data	healthy	`tests/deck/compose/test_compose_board_update.py`
`redis`	data	healthy	`tests/deck/rendering/test_render_integration.py`
`postgres`	data	healthy	`modelforge/web/__init__.py`

Label	Layer	Status	Path
`gha::deploy`	cicd	healthy	`.github/workflows/deploy.yml`
`gha::ci`	cicd	healthy	`.github/workflows/ci.yml`
`gha::security`	cicd	healthy	`.github/workflows/security.yml`
`gha::publish`	cicd	healthy	`.github/workflows/publish.yml`

Label	Layer	Status	Path
`CLOUDFLARE_ACCOUNT_ID`	cicd	healthy	`—`
`CLOUDFLARE_API_TOKEN`	cicd	healthy	`—`
`RENDER_DEPLOY_HOOK_URL`	cicd	healthy	`—`
`SUPABASE_JWT_SECRET`	cicd	healthy	`—`

Label	Layer	Status	Path
`image::Dockerfile`	hardware	healthy	`Dockerfile`
`web`	hardware	healthy	`docker-compose.yml`
`drift-watcher`	hardware	healthy	`docker-compose.yml`

Label	Layer	Status	Path
`port:8000`	network	healthy	`Dockerfile`
`port:06`	network	healthy	`.github/workflows/security.yml`

Label	Layer	Status	Path
`repobility-clone-45w1ozwc`	software	healthy	`/tmp/repobility-clone-45w1ozwc`

Label	Layer	Status	Path
`celery`	data	healthy	`tests/deck/rendering/test_render_integration.py`

Label	Layer	Status	Path
`001_supabase_init.sql`	data	healthy	`migrations/001_supabase_init.sql`

Label	Layer	Status	Path
`gpu (detected)`	hardware	healthy	`tests/deck/compose/test_compose_board_update.py`

Label	Layer	Status	Path
`vps::aws`	hardware	healthy	`tests/deck/compose/test_compose_board_update.py`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/282e59a3-8e12-4711-8287-e121d9c35c17/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/282e59a3-8e12-4711-8287-e121d9c35c17/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

Whatsonyourmind/modelforge

Complete repo analysis

function 50+

class 50+

file 50+

directory 50+

endpoint 19

job 13

table 10

auth 9

service 5

database 4

pipeline 4

env_var 4

container 3

port 2

repo 1

queue 1

migration 1

gpu 1

vps 1