awizemann/scarf

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

https://github.com/awizemann/scarf · scanned 2026-05-15 22:09 UTC (2 weeks, 6 days ago) · 10 languages

29 findings (19 legacy + 10 scanner) Scanner says 96 (lower by 34)

File as issue Image v2 schema

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 weeks, 6 days ago · v1 · 14 findings from 1 source. Findings combine the legacy security pipeline AND the multi-layer engine (atlas, wiring, flows, ranked) AND verified AI agent contributions.

JSON

Score breakdown â 2026-05-17-v4 calibration-aware

Component	Sub-score	Weight	Contribution
`structure_score`	40.0	0.15	6.00
`security_score`	86.8	0.25	21.70
`testing_score`	31.0	0.20	6.20
`documentation_score`	90.0	0.15	13.50
`practices_score`	65.0	0.15	9.75
`code_quality`	48.8	0.10	4.88
Overall		1.00	62.0

Calibrated penalty buckets (security_score): agent: 1.2 Â· threat: 12.0

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 13 Medium 0 Low 0 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Legacy 14 9-layer 0 Crowd 0 Layer: Quality 13 Security 1

Exclude dismissed / FP Exclude test files

All 1116 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`BUILDING.md`	software	healthy	`BUILDING.md`
`README.md`	software	healthy	`README.md`
`CLAUDE.md`	software	healthy	`CLAUDE.md`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`RELEASE_NOTES.md`	software	healthy	`releases/v2.6.5/RELEASE_NOTES.md`
`RELEASE_NOTES.md`	software	healthy	`releases/v2.5.1/RELEASE_NOTES.md`
`RELEASE_NOTES.md`	software	healthy	`releases/v2.7.5/RELEASE_NOTES.md`
`APP_STORE_METADATA.md`	software	healthy	`releases/v2.5.0/APP_STORE_METADATA.md`
`RELEASE_NOTES.md`	software	healthy	`releases/v2.5.0/RELEASE_NOTES.md`
`TESTFLIGHT_CHECKLIST.md`	software	healthy	`releases/v2.5.0/TESTFLIGHT_CHECKLIST.md`
`RELEASE_NOTES.md`	software	healthy	`releases/v2.2.0/RELEASE_NOTES.md`
`RELEASE_NOTES.md`	software	healthy	`releases/v2.6.0/RELEASE_NOTES.md`
`RELEASE_NOTES.md`	software	healthy	`releases/v1.6.1/RELEASE_NOTES.md`
`RELEASE_NOTES.md`	software	healthy	`releases/v2.0.1/RELEASE_NOTES.md`
`RELEASE_NOTES.md`	software	healthy	`releases/v2.0.2/RELEASE_NOTES.md`
`RELEASE_NOTES.md`	software	healthy	`releases/v2.7.0/RELEASE_NOTES.md`
`RELEASE_NOTES.md`	software	healthy	`releases/v2.2.1/RELEASE_NOTES.md`
`RELEASE_NOTES.md`	software	healthy	`releases/v2.3.0/RELEASE_NOTES.md`
`RELEASE_NOTES.md`	software	healthy	`releases/v1.6.2/RELEASE_NOTES.md`
`RELEASE_NOTES.md`	software	healthy	`releases/v2.8.0/RELEASE_NOTES.md`
`RELEASE_NOTES.md`	software	healthy	`releases/v2.0.0/RELEASE_NOTES.md`
`RELEASE_NOTES.md`	software	healthy	`releases/v2.7.1/RELEASE_NOTES.md`
`RELEASE_NOTES.md`	software	healthy	`releases/v2.5.2/RELEASE_NOTES.md`
`RELEASE_NOTES.md`	software	healthy	`releases/v2.1.0/RELEASE_NOTES.md`
`catalog.sh`	software	healthy	`scripts/catalog.sh`
`site.sh`	software	healthy	`scripts/site.sh`
`local-build.sh`	software	healthy	`scripts/local-build.sh`
`release.sh`	software	healthy	`scripts/release.sh`
`wiki.sh`	software	healthy	`scripts/wiki.sh`
`Contents.json`	software	healthy	`design/Assets.xcassets/Contents.json`
`Contents.json`	software	healthy	`design/Assets.xcassets/AppIcon-iOS.appiconset/Contents.json`
`README.md`	software	healthy	`design/static-site/README.md`
`index.html`	software	healthy	`design/static-site/index.html`
`colors_and_type.css`	software	healthy	`design/static-site/colors_and_type.css`
`Settings.jsx`	software	healthy	`design/static-site/ui-kit/Settings.jsx`
`macos-window.jsx`	software	healthy	`design/static-site/ui-kit/macos-window.jsx`
`Projects.jsx`	software	healthy	`design/static-site/ui-kit/Projects.jsx`
`Common.jsx`	software	healthy	`design/static-site/ui-kit/Common.jsx`
`Sidebar.jsx`	software	healthy	`design/static-site/ui-kit/Sidebar.jsx`
`Sessions.jsx`	software	healthy	`design/static-site/ui-kit/Sessions.jsx`
`README.md`	software	healthy	`design/static-site/ui-kit/README.md`
`Insights.jsx`	software	healthy	`design/static-site/ui-kit/Insights.jsx`
`Tools.jsx`	software	healthy	`design/static-site/ui-kit/Tools.jsx`
`Logs.jsx`	software	healthy	`design/static-site/ui-kit/Logs.jsx`
`Memory.jsx`	software	healthy	`design/static-site/ui-kit/Memory.jsx`
`index.html`	software	healthy	`design/static-site/ui-kit/index.html`
`index.source.html`	software	healthy	`design/static-site/ui-kit/index.source.html`
`Dashboard.jsx`	software	healthy	`design/static-site/ui-kit/Dashboard.jsx`
`Cron.jsx`	software	healthy	`design/static-site/ui-kit/Cron.jsx`
`Chat.jsx`	software	healthy	`design/static-site/ui-kit/Chat.jsx`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`releases`	software	healthy	`releases`
`v2.6.5`	software	healthy	`releases/v2.6.5`
`v2.5.1`	software	healthy	`releases/v2.5.1`
`v2.7.5`	software	healthy	`releases/v2.7.5`
`v2.5.0`	software	healthy	`releases/v2.5.0`
`v2.2.0`	software	healthy	`releases/v2.2.0`
`v2.6.0`	software	healthy	`releases/v2.6.0`
`v1.6.1`	software	healthy	`releases/v1.6.1`
`v2.0.1`	software	healthy	`releases/v2.0.1`
`v2.0.2`	software	healthy	`releases/v2.0.2`
`v2.7.0`	software	healthy	`releases/v2.7.0`
`v2.2.1`	software	healthy	`releases/v2.2.1`
`v2.3.0`	software	healthy	`releases/v2.3.0`
`v1.6.2`	software	healthy	`releases/v1.6.2`
`v2.8.0`	software	healthy	`releases/v2.8.0`
`v2.0.0`	software	healthy	`releases/v2.0.0`
`v2.7.1`	software	healthy	`releases/v2.7.1`
`v2.5.2`	software	healthy	`releases/v2.5.2`
`v2.1.0`	software	healthy	`releases/v2.1.0`
`scripts`	software	healthy	`scripts`
`design`	software	healthy	`design`
`Assets.xcassets`	software	healthy	`design/Assets.xcassets`
`AppIcon-iOS.appiconset`	software	healthy	`design/Assets.xcassets/AppIcon-iOS.appiconset`
`static-site`	software	healthy	`design/static-site`
`ui-kit`	software	healthy	`design/static-site/ui-kit`
`tokens`	software	healthy	`design/static-site/tokens`
`templates`	software	healthy	`templates`
`awizemann`	software	healthy	`templates/awizemann`
`site-status-checker`	software	healthy	`templates/awizemann/site-status-checker`
`staging`	software	healthy	`templates/awizemann/site-status-checker/staging`
`cron`	software	healthy	`templates/awizemann/site-status-checker/staging/cron`
`hackernews-digest`	software	healthy	`templates/awizemann/hackernews-digest`
`staging`	software	healthy	`templates/awizemann/hackernews-digest/staging`
`cron`	software	healthy	`templates/awizemann/hackernews-digest/staging/cron`
`template-author`	software	healthy	`templates/awizemann/template-author`
`staging`	software	healthy	`templates/awizemann/template-author/staging`
`skills`	software	healthy	`templates/awizemann/template-author/staging/skills`
`scarf-template-author`	software	healthy	`templates/awizemann/template-author/staging/skills/scarf-te…`
`site`	software	healthy	`site`
`landing`	software	healthy	`site/landing`
`tools`	software	healthy	`tools`
`translations`	software	healthy	`tools/translations`
`scarf`	software	healthy	`scarf`
`standards`	software	healthy	`scarf/standards`
`docs`	software	healthy	`scarf/docs`
`v2.8`	software	healthy	`scarf/docs/v2.8`
`scarfUITests`	software	healthy	`scarf/scarfUITests`
`Packages`	software	healthy	`scarf/Packages`
`ScarfCore`	software	healthy	`scarf/Packages/ScarfCore`
`Sources`	software	healthy	`scarf/Packages/ScarfCore/Sources`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`Settings`	software	healthy	`design/static-site/ui-kit/Settings.jsx:Settings`
`GeneralTab`	software	healthy	`design/static-site/ui-kit/Settings.jsx:GeneralTab`
`AppearanceTab`	software	healthy	`design/static-site/ui-kit/Settings.jsx:AppearanceTab`
`AgentTab`	software	healthy	`design/static-site/ui-kit/Settings.jsx:AgentTab`
`PermissionsTab`	software	healthy	`design/static-site/ui-kit/Settings.jsx:PermissionsTab`
`AccountTab`	software	healthy	`design/static-site/ui-kit/Settings.jsx:AccountTab`
`AdvancedTab`	software	healthy	`design/static-site/ui-kit/Settings.jsx:AdvancedTab`
`MacGlass`	software	healthy	`design/static-site/ui-kit/macos-window.jsx:MacGlass`
`MacTrafficLights`	software	healthy	`design/static-site/ui-kit/macos-window.jsx:MacTrafficLights`
`dot`	software	healthy	`design/static-site/ui-kit/macos-window.jsx:dot`
`MacToolbar`	software	healthy	`design/static-site/ui-kit/macos-window.jsx:MacToolbar`
`MacSidebarItem`	software	healthy	`design/static-site/ui-kit/macos-window.jsx:MacSidebarItem`
`MacSidebar`	software	healthy	`design/static-site/ui-kit/macos-window.jsx:MacSidebar`
`MacSidebarHeader`	software	healthy	`design/static-site/ui-kit/macos-window.jsx:MacSidebarHeader`
`MacWindow`	software	healthy	`design/static-site/ui-kit/macos-window.jsx:MacWindow`
`Projects`	software	healthy	`design/static-site/ui-kit/Projects.jsx:Projects`
`ContentHeader`	software	healthy	`design/static-site/ui-kit/Common.jsx:ContentHeader`
`Btn`	software	healthy	`design/static-site/ui-kit/Common.jsx:Btn`
`IconBtn`	software	healthy	`design/static-site/ui-kit/Common.jsx:IconBtn`
`Spinner`	software	healthy	`design/static-site/ui-kit/Common.jsx:Spinner`
`Pill`	software	healthy	`design/static-site/ui-kit/Common.jsx:Pill`
`Dot`	software	healthy	`design/static-site/ui-kit/Common.jsx:Dot`
`Card`	software	healthy	`design/static-site/ui-kit/Common.jsx:Card`
`StatCard`	software	healthy	`design/static-site/ui-kit/Common.jsx:StatCard`
`Section`	software	healthy	`design/static-site/ui-kit/Common.jsx:Section`
`Divider`	software	healthy	`design/static-site/ui-kit/Common.jsx:Divider`
`Field`	software	healthy	`design/static-site/ui-kit/Common.jsx:Field`
`HelpIcon`	software	healthy	`design/static-site/ui-kit/Common.jsx:HelpIcon`
`inputStyle`	software	healthy	`design/static-site/ui-kit/Common.jsx:inputStyle`
`TextInput`	software	healthy	`design/static-site/ui-kit/Common.jsx:TextInput`
`TextArea`	software	healthy	`design/static-site/ui-kit/Common.jsx:TextArea`
`Select`	software	healthy	`design/static-site/ui-kit/Common.jsx:Select`
`Toggle`	software	healthy	`design/static-site/ui-kit/Common.jsx:Toggle`
`Checkbox`	software	healthy	`design/static-site/ui-kit/Common.jsx:Checkbox`
`Radio`	software	healthy	`design/static-site/ui-kit/Common.jsx:Radio`
`Segmented`	software	healthy	`design/static-site/ui-kit/Common.jsx:Segmented`
`Tabs`	software	healthy	`design/static-site/ui-kit/Common.jsx:Tabs`
`SettingsGroup`	software	healthy	`design/static-site/ui-kit/Common.jsx:SettingsGroup`
`SettingsRow`	software	healthy	`design/static-site/ui-kit/Common.jsx:SettingsRow`
`Menu`	software	healthy	`design/static-site/ui-kit/Common.jsx:Menu`
`MenuItem`	software	healthy	`design/static-site/ui-kit/Common.jsx:MenuItem`
`KbdKey`	software	healthy	`design/static-site/ui-kit/Common.jsx:KbdKey`
`Avatar`	software	healthy	`design/static-site/ui-kit/Common.jsx:Avatar`
`ProgressBar`	software	healthy	`design/static-site/ui-kit/Common.jsx:ProgressBar`
`EmptyState`	software	healthy	`design/static-site/ui-kit/Common.jsx:EmptyState`
`ScarfSidebar`	software	healthy	`design/static-site/ui-kit/Sidebar.jsx:ScarfSidebar`
`Sessions`	software	healthy	`design/static-site/ui-kit/Sessions.jsx:Sessions`
`onDoc`	software	healthy	`design/static-site/ui-kit/Sessions.jsx:onDoc`
`calls`	software	healthy	`design/static-site/ui-kit/Sessions.jsx:calls`
`Insights`	software	healthy	`design/static-site/ui-kit/Insights.jsx:Insights`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`auth::tools/translations/es.json`	security	healthy	`tools/translations/es.json`
`auth::design/static-site/ui-kit/Health.jsx`	security	healthy	`design/static-site/ui-kit/Health.jsx`
`auth::tools/translations/de.json`	security	healthy	`tools/translations/de.json`
`auth::tools/translations/zh-Hans.json`	security	healthy	`tools/translations/zh-Hans.json`
`auth::tools/translations/pt-BR.json`	security	healthy	`tools/translations/pt-BR.json`
`auth::design/static-site/ui-kit/MCPServers.jsx`	security	healthy	`design/static-site/ui-kit/MCPServers.jsx`
`auth::tools/translations/fr.json`	security	healthy	`tools/translations/fr.json`
`auth::design/static-site/ui-kit/MoreViews.jsx`	security	healthy	`design/static-site/ui-kit/MoreViews.jsx`
`auth::tools/translations/ja.json`	security	healthy	`tools/translations/ja.json`

Label	Layer	Status	Path
`ManifestSlugTests`	software	healthy	`tools/test_build_catalog.py:120`
`ValidationTests`	software	healthy	`tools/test_build_catalog.py:134`
`ConfigSchemaValidationTests`	software	healthy	`tools/test_build_catalog.py:506`
`CatalogJsonTests`	software	healthy	`tools/test_build_catalog.py:801`
`SiteRenderingTests`	software	healthy	`tools/test_build_catalog.py:830`
`RealBundleTest`	software	healthy	`tools/test_build_catalog.py:899`
`ValidationError`	software	healthy	`tools/build-catalog.py:103`
`TemplateRecord`	software	healthy	`tools/build-catalog.py:119`

Label	Layer	Status	Path
`vps::droplet`	hardware	healthy	`design/static-site/ui-kit/Settings.jsx`
`vps::aws`	hardware	healthy	`design/static-site/ui-kit/MoreViews.jsx`

Label	Layer	Status	Path
`repobility-clone-500vkh5i`	software	healthy	`/tmp/repobility-clone-500vkh5i`

Label	Layer	Status	Path
`postgres`	data	healthy	`design/static-site/ui-kit/Tools.jsx`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`design/static-site/ui-kit/MoreViews.jsx`

Label	Layer	Status	Path
`gha::validate-template-pr`	cicd	healthy	`.github/workflows/validate-template-pr.yml`

Label	Layer	Status	Path
`validate`	cicd	healthy	`.github/workflows/validate-template-pr.yml`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/3d58ab02-eb7e-473b-be6b-9456a7c00752/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/3d58ab02-eb7e-473b-be6b-9456a7c00752/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

awizemann/scarf

Complete repo analysis

file 50+

directory 50+

function 50+

auth 9

class 8

vps 2

repo 1

database 1

service 1

pipeline 1

job 1