Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

Pumpkin-MC/Pumpkin

https://github.com/Pumpkin-MC/Pumpkin · scanned 2026-07-23 19:34 UTC (4 days, 21 hours ago)

45 raw signals (0 security + 45 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 4 days, 21 hours ago · v7 · 43 actionable findings from 1 signal source. 2 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

70.0% cov · 43 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 0 Medium 10 Low 33 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 43 Crowd 0 Layer: Hardware 2 Cicd 3 Quality 34 Dependencies 4

Exclude dismissed / FP Exclude test files

All 2843 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`typos.toml`	software	healthy	`typos.toml`
`rust-toolchain.toml`	software	healthy	`rust-toolchain.toml`
`Cargo.toml`	software	healthy	`Cargo.toml`
`README.md`	software	healthy	`README.md`
`rustfmt.toml`	software	healthy	`rustfmt.toml`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`Dockerfile`	software	healthy	`Dockerfile`
`egg-pumpkin.json`	software	healthy	`egg-pumpkin.json`
`LICENSE`	software	healthy	`LICENSE`
`Cargo.lock`	software	healthy	`Cargo.lock`
`CODE_OF_CONDUCT.md`	software	healthy	`CODE_OF_CONDUCT.md`
`SECURITY.md`	software	healthy	`SECURITY.md`
`docker-compose.yml`	software	healthy	`docker-compose.yml`
`Cargo.toml`	software	healthy	`pumpkin-macros/Cargo.toml`
`lib.rs`	software	healthy	`pumpkin-macros/src/lib.rs`
`Cargo.toml`	software	healthy	`pumpkin-codegen/Cargo.toml`
`Clippy.toml`	software	healthy	`pumpkin-codegen/Clippy.toml`
`Cargo.lock`	software	healthy	`pumpkin-codegen/Cargo.lock`
`configured_feature.rs`	software	healthy	`pumpkin-codegen/src/configured_feature.rs`
`spawn_egg.rs`	software	healthy	`pumpkin-codegen/src/spawn_egg.rs`
`entity_status.rs`	software	healthy	`pumpkin-codegen/src/entity_status.rs`
`slot_ranges.rs`	software	healthy	`pumpkin-codegen/src/slot_ranges.rs`
`enchantments.rs`	software	healthy	`pumpkin-codegen/src/enchantments.rs`
`noise_router.rs`	software	healthy	`pumpkin-codegen/src/noise_router.rs`
`sound.rs`	software	healthy	`pumpkin-codegen/src/sound.rs`
`tracked_data.rs`	software	healthy	`pumpkin-codegen/src/tracked_data.rs`
`composter_increase_chance.rs`	software	healthy	`pumpkin-codegen/src/composter_increase_chance.rs`
`bitsets.rs`	software	healthy	`pumpkin-codegen/src/bitsets.rs`
`recipe_remainder.rs`	software	healthy	`pumpkin-codegen/src/recipe_remainder.rs`
`registry.rs`	software	healthy	`pumpkin-codegen/src/registry.rs`
`entity_type.rs`	software	healthy	`pumpkin-codegen/src/entity_type.rs`
`biome.rs`	software	healthy	`pumpkin-codegen/src/biome.rs`
`noise_parameter.rs`	software	healthy	`pumpkin-codegen/src/noise_parameter.rs`
`damage_type.rs`	software	healthy	`pumpkin-codegen/src/damage_type.rs`
`chest_loot.rs`	software	healthy	`pumpkin-codegen/src/chest_loot.rs`
`sound_category.rs`	software	healthy	`pumpkin-codegen/src/sound_category.rs`
`tag.rs`	software	healthy	`pumpkin-codegen/src/tag.rs`
`potion_brewing.rs`	software	healthy	`pumpkin-codegen/src/potion_brewing.rs`
`loot.rs`	software	healthy	`pumpkin-codegen/src/loot.rs`
`screen.rs`	software	healthy	`pumpkin-codegen/src/screen.rs`
`message_type.rs`	software	healthy	`pumpkin-codegen/src/message_type.rs`
`potion.rs`	software	healthy	`pumpkin-codegen/src/potion.rs`
`carver.rs`	software	healthy	`pumpkin-codegen/src/carver.rs`
`villager.rs`	software	healthy	`pumpkin-codegen/src/villager.rs`
`recipes.rs`	software	healthy	`pumpkin-codegen/src/recipes.rs`
`bedrock_creative.rs`	software	healthy	`pumpkin-codegen/src/bedrock_creative.rs`
`jukebox_song.rs`	software	healthy	`pumpkin-codegen/src/jukebox_song.rs`
`version.rs`	software	healthy	`pumpkin-codegen/src/version.rs`
`item.rs`	software	healthy	`pumpkin-codegen/src/item.rs`
`structures.rs`	software	healthy	`pumpkin-codegen/src/structures.rs`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`proc-macro-error2@2`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`pumpkin-macros`	software	healthy	`pumpkin-macros`
`src`	software	healthy	`pumpkin-macros/src`
`pumpkin-codegen`	software	healthy	`pumpkin-codegen`
`src`	software	healthy	`pumpkin-codegen/src`
`wit`	software	healthy	`pumpkin-codegen/src/wit`
`remap`	software	healthy	`pumpkin-codegen/src/remap`
`.devcontainer`	software	healthy	`.devcontainer`
`pumpkin-plugin-api`	software	healthy	`pumpkin-plugin-api`
`src`	software	healthy	`pumpkin-plugin-api/src`
`events`	software	healthy	`pumpkin-plugin-api/src/events`
`player`	software	healthy	`pumpkin-plugin-api/src/events/player`
`block`	software	healthy	`pumpkin-plugin-api/src/events/block`
`server`	software	healthy	`pumpkin-plugin-api/src/events/server`
`pumpkin-codecs`	software	healthy	`pumpkin-codecs`
`src`	software	healthy	`pumpkin-codecs/src`
`codec`	software	healthy	`pumpkin-codecs/src/codec`
`assets`	software	healthy	`assets`
`loot_table`	software	healthy	`assets/loot_table`
`chests`	software	healthy	`assets/loot_table/chests`
`trial_chambers`	software	healthy	`assets/loot_table/chests/trial_chambers`
`village`	software	healthy	`assets/loot_table/chests/village`
`registry`	software	healthy	`assets/registry`
`bedrock`	software	healthy	`assets/bedrock`
`packet`	software	healthy	`assets/packet`
`meta_data_type`	software	healthy	`assets/meta_data_type`
`tracked_data`	software	healthy	`assets/tracked_data`
`translations`	software	healthy	`assets/translations`
`tags`	software	healthy	`assets/tags`
`pumpkin`	software	healthy	`pumpkin`
`src`	software	healthy	`pumpkin/src`
`plugin`	software	healthy	`pumpkin/src/plugin`
`api`	software	healthy	`pumpkin/src/plugin/api`
`events`	software	healthy	`pumpkin/src/plugin/api/events`
`player`	software	healthy	`pumpkin/src/plugin/api/events/player`
`block`	software	healthy	`pumpkin/src/plugin/api/events/block`
`server`	software	healthy	`pumpkin/src/plugin/api/events/server`
`world`	software	healthy	`pumpkin/src/plugin/api/events/world`
`loader`	software	healthy	`pumpkin/src/plugin/loader`
`wasm`	software	healthy	`pumpkin/src/plugin/loader/wasm`
`wasm_host`	software	healthy	`pumpkin/src/plugin/loader/wasm/wasm_host`
`wit`	software	healthy	`pumpkin/src/plugin/loader/wasm/wasm_host/wit`
`v0_1`	software	healthy	`pumpkin/src/plugin/loader/wasm/wasm_host/wit/v0_1`
`events`	software	healthy	`pumpkin/src/plugin/loader/wasm/wasm_host/wit/v0_1/events`
`commands`	software	healthy	`pumpkin/src/plugin/loader/wasm/wasm_host/wit/v0_1/commands`
`block`	software	healthy	`pumpkin/src/block`
`fluid`	software	healthy	`pumpkin/src/block/fluid`
`entities`	software	healthy	`pumpkin/src/block/entities`
`blocks`	software	healthy	`pumpkin/src/block/blocks`
`coral`	software	healthy	`pumpkin/src/block/blocks/coral`
`plant`	software	healthy	`pumpkin/src/block/blocks/plant`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`docker-build-deploy`	cicd	healthy	`.github/workflows/docker.yml`
`merge`	cicd	healthy	`.github/workflows/docker.yml`
`format`	cicd	healthy	`.github/workflows/rust.yml`
`machete`	cicd	healthy	`.github/workflows/rust.yml`
`clippy_debug`	cicd	healthy	`.github/workflows/rust.yml`
`clippy_release`	cicd	healthy	`.github/workflows/rust.yml`
`build_and_test`	cicd	healthy	`.github/workflows/rust.yml`
`build_release`	cicd	healthy	`.github/workflows/rust.yml`
`draft_release`	cicd	healthy	`.github/workflows/rust.yml`
`spelling`	cicd	healthy	`.github/workflows/typos.yml`

Label	Layer	Status	Path
`SIGNPATH_API_TOKEN`	cicd	healthy	`—`
`REGISTRY_IMAGE`	cicd	healthy	`—`
`MC_VERSION`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`
`REGISTRY`	cicd	healthy	`—`
`SIGNPATH_PROJECT_SLUG`	cicd	healthy	`—`
`SIGNPATH_SIGNING_POLICY_SLUG`	cicd	healthy	`—`
`SIGNPATH_ORGANIZATION_ID`	cicd	healthy	`—`
`PUMPKIN_VERSION`	cicd	healthy	`—`
`PLATFORM_PAIR`	cicd	healthy	`—`

Label	Layer	Status	Path
`auth::pumpkin-util/src/lib.rs`	security	healthy	`pumpkin-util/src/lib.rs`
`auth::pumpkin/src/net/bedrock/login.rs`	security	healthy	`pumpkin/src/net/bedrock/login.rs`
`auth::pumpkin-protocol/src/bedrock/server/login.rs`	security	healthy	`pumpkin-protocol/src/bedrock/server/login.rs`
`auth::pumpkin-util/src/jwt/mod.rs`	security	healthy	`pumpkin-util/src/jwt/mod.rs`
`auth::pumpkin/src/server/mod.rs`	security	healthy	`pumpkin/src/server/mod.rs`

Label	Layer	Status	Path
`gha::docker`	cicd	healthy	`.github/workflows/docker.yml`
`gha::rust`	cicd	healthy	`.github/workflows/rust.yml`
`gha::typos`	cicd	healthy	`.github/workflows/typos.yml`

Label	Layer	Status	Path
`port:25565`	network	healthy	`Dockerfile`
`port:2613`	network	healthy	`Dockerfile`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`Dockerfile`
`1.0.0.0`	network	healthy	`pumpkin-util/src/jwt/mod.rs`

Label	Layer	Status	Path
`image::Dockerfile`	hardware	healthy	`Dockerfile`
`pumpkin`	hardware	healthy	`docker-compose.yml`

Label	Layer	Status	Path
`repobility-clone-g85y5qn9`	software	healthy	`/tmp/repobility-clone-g85y5qn9`

Label	Layer	Status	Path
`gpu (detected)`	hardware	healthy	`assets/en_us_java.json`

Label	Layer	Status	Path
`vps::azure`	hardware	healthy	`assets/en_us_java.json`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/37eeff43-6dda-4abd-9a98-2222b06e55ca/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/37eeff43-6dda-4abd-9a98-2222b06e55ca/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

Pumpkin-MC/Pumpkin

Complete repo analysis

file 50+

dependency 50+

directory 50+

job 10

env_var 10

auth 5

pipeline 3

port 2

service 2

container 2

repo 1

gpu 1

vps 1