Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

StephPonce/oubon_mailbot

https://github.com/StephPonce/oubon_mailbot · scanned 2026-06-16 00:22 UTC (2 months, 2 weeks ago)

442 raw signals (3 security + 439 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 2 weeks ago · v1 · 413 actionable findings from 2 signal sources. 30 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
54.7
/100
Security checks
55
3 findings
System graph
55
100.0% cov · 410 findings
Critical
1
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 1 High 156 Medium 30 Low 131 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 3 System graph 410 Crowd 0 Layer: Quality 167 Cicd 3 Software 18 Frontend 15 Network 1 Hardware 3 Security 156 Api 50
Corpus Intelligence Cross-corpus context (cohort percentile, top patterns, fix plan) is shown only on repositories you own. Sign up and connect your repo to view it.
Scan summary Repository scanned at 54.7/100 with 100.0% coverage. It contains 9111 nodes across 30 cross-layer flows, written primarily in mixed languages. Engine surfaced 439 findings — concentrated in quality (186), security (156), api (50). Risk profile is high: 0 critical, 156 high, 31 medium. Recommended next step: open the quality layer findings first — that's where the highest-impact wins live.

Showing 306 of 413 actionable findings. 443 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

critical Security checks cicd CI/CD security conf 0.86 Foundry mined claimed resolved with failing ci: StephPonce/oubon_mailbot
Graph query export: Claimed resolved with failing CI Query id: claimed_resolved_with_failing_ci Query type: motif_query Intent: Hard negatives where CI/failure evidence contradicts a resolution claim. Motif: claimed_resolved_with_failing_ci Training usage: hard_negative Graph gold label: contradict…
CI/CD securityCI/CD
high System graph quality Integrity conf 1.00 Blocking `requests.get(...)` inside `async def _download_and_save` — ospra_os/media/ai_image_generator.py:412
Sync I/O inside an async function blocks the event loop. While `requests.get(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_th…
ospra_os/media/ai_image_generator.py:412 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `requests.get(...)` inside `async def _fetch_free_proxies` — ospra_os/scraping/proxy_manager.py:155
Sync I/O inside an async function blocks the event loop. While `requests.get(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_th…
ospra_os/scraping/proxy_manager.py:155 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `requests.get(...)` inside `async def _free_proxy_request` — ospra_os/scraping/proxy_manager.py:121
Sync I/O inside an async function blocks the event loop. While `requests.get(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_th…
ospra_os/scraping/proxy_manager.py:121 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `requests.get(...)` inside `async def _free_proxy_request` — ospra_os/scraping/proxy_manager.py:93
Sync I/O inside an async function blocks the event loop. While `requests.get(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_th…
ospra_os/scraping/proxy_manager.py:93 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `requests.get(...)` inside `async def _generate_mock` — ospra_os/media/ai_image_generator.py:398
Sync I/O inside an async function blocks the event loop. While `requests.get(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_th…
ospra_os/media/ai_image_generator.py:398 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `requests.get(...)` inside `async def _get_feed_products` — ospra_os/product_research/connectors/suppliers/aliexpress.py:446
Sync I/O inside an async function blocks the event loop. While `requests.get(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_th…
ospra_os/product_research/connectors/suppliers/aliexpress.py:446 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `requests.get(...)` inside `async def _scraper_api_request` — ospra_os/scraping/proxy_manager.py:69
Sync I/O inside an async function blocks the event loop. While `requests.get(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_th…
ospra_os/scraping/proxy_manager.py:69 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `requests.get(...)` inside `async def _search_affiliate` — ospra_os/product_research/connectors/suppliers/aliexpress.py:338
Sync I/O inside an async function blocks the event loop. While `requests.get(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_th…
ospra_os/product_research/connectors/suppliers/aliexpress.py:338 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `requests.get(...)` inside `async def get_product_details` — ospra_os/product_research/connectors/suppliers/aliexpress.py:633
Sync I/O inside an async function blocks the event loop. While `requests.get(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_th…
ospra_os/product_research/connectors/suppliers/aliexpress.py:633 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `requests.get(...)` inside `async def search_by_category` — ospra_os/product_research/connectors/suppliers/aliexpress.py:557
Sync I/O inside an async function blocks the event loop. While `requests.get(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_th…
ospra_os/product_research/connectors/suppliers/aliexpress.py:557 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _run_startup_deferred` — ospra_os/main.py:1499
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
ospra_os/main.py:1499 Sync io in asyncPerformance
high System graph security auth conf 1.00 FastAPI DELETE `cancel_schedule` without auth dependency — ospra_os/main.py:4044
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:4044 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `clear_cache` without auth dependency — ospra_os/intelligence/unified_discovery_routes.py:1697
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/intelligence/unified_discovery_routes.py:1697 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_product` without auth dependency — ospra_os/integrations/shopify/routes.py:457
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/integrations/shopify/routes.py:457 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_report` without auth dependency — ospra_os/reports/routes.py:302
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/reports/routes.py:302 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_schedule` without auth dependency — ospra_os/reports/routes.py:389
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/reports/routes.py:389 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_shopify_product` without auth dependency — ospra_os/main.py:3462
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:3462 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `remove_partner_client` without auth dependency — ospra_os/whitelabel/routes.py:475
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/whitelabel/routes.py:475 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_inventory` without auth dependency — ospra_os/integrations/shopify/routes.py:474
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/integrations/shopify/routes.py:474 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_store_status` without auth dependency — ospra_os/api/store_routes.py:254
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/api/store_routes.py:254 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `acknowledge_alert` without auth dependency — ospra_os/monitoring/routes.py:420
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/monitoring/routes.py:420 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `acknowledge_error` without auth dependency — ospra_os/monitoring/routes.py:342
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/monitoring/routes.py:342 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `add_partner_client` without auth dependency — ospra_os/whitelabel/routes.py:443
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/whitelabel/routes.py:443 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `advance_product_stage` without auth dependency — ospra_os/intelligence/intelligence_core_routes.py:202
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/intelligence/intelligence_core_routes.py:202 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `ai_chat` without auth dependency — archive/legacy_mailbot/main.py:1595
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
archive/legacy_mailbot/main.py:1595 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `ai_reply_draft` without auth dependency — archive/legacy_mailbot/main.py:703
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
archive/legacy_mailbot/main.py:703 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `apply_cross_store_learning` without auth dependency — ospra_os/api/store_routes.py:362
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/api/store_routes.py:362 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `bulk_deploy_products` without auth dependency — ospra_os/integrations/shopify/routes.py:408
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/integrations/shopify/routes.py:408 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `bulk_deploy_to_shopify` without auth dependency — ospra_os/main.py:3360
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:3360 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `cancel_subscription` without auth dependency — ospra_os/payments/routes.py:153
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/payments/routes.py:153 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `change_subscription_tier` without auth dependency — ospra_os/payments/routes.py:205
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/payments/routes.py:205 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `chat_with_claude` without auth dependency — archive/legacy_mailbot/main.py:880
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
archive/legacy_mailbot/main.py:880 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `check_waitlist_status` without auth dependency — ospra_os/waitlist/routes.py:81
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/waitlist/routes.py:81 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `claude_chat` without auth dependency — ospra_os/main.py:2846
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:2846 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `compare_niches` without auth dependency — ospra_os/intelligence/niche_routes.py:259
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/intelligence/niche_routes.py:259 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `configure_partner_domain` without auth dependency — ospra_os/whitelabel/routes.py:358
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/whitelabel/routes.py:358 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `contribute_to_global` without auth dependency — ospra_os/learning/learning_routes.py:75
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/learning/learning_routes.py:75 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_ad_schedule` without auth dependency — ospra_os/main.py:3926
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:3926 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_bulk_campaigns` without auth dependency — ospra_os/main.py:3780
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:3780 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_checkout` without auth dependency — ospra_os/payments/routes.py:43
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/payments/routes.py:43 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_meta_campaign` without auth dependency — ospra_os/main.py:3739
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:3739 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_schedule` without auth dependency — ospra_os/reports/routes.py:315
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/reports/routes.py:315 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_store` without auth dependency — ospra_os/api/store_routes.py:198
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/api/store_routes.py:198 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `deploy_product` without auth dependency — ospra_os/integrations/shopify/routes.py:255
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/integrations/shopify/routes.py:255 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `deploy_to_shopify` without auth dependency — ospra_os/main.py:2575
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:2575 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `deploy_to_shopify` without auth dependency — ospra_os/main.py:3302
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:3302 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `disable_job` without auth dependency — ospra_os/monitoring/routes.py:219
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/monitoring/routes.py:219 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `discover_multi_niche` without auth dependency — ospra_os/main.py:2438
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:2438 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `discover_products_api` without auth dependency — ospra_os/main.py:2239
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:2239 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `discover_products_v2` without auth dependency — archive/legacy_mailbot/main.py:1040
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
archive/legacy_mailbot/main.py:1040 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `discover_products` without auth dependency — ospra_os/product_research/routes.py:329
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/product_research/routes.py:329 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `discover_twitter_viral` without auth dependency — ospra_os/product_research/routes.py:450
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/product_research/routes.py:450 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `discover_winning_products` without auth dependency — archive/legacy_mailbot/main.py:929
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
archive/legacy_mailbot/main.py:929 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `dismiss_cross_store_learning` without auth dependency — ospra_os/api/store_routes.py:402
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/api/store_routes.py:402 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `enable_job` without auth dependency — ospra_os/monitoring/routes.py:232
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/monitoring/routes.py:232 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `enhance_images` without auth dependency — ospra_os/intelligence/unified_discovery_routes.py:774
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/intelligence/unified_discovery_routes.py:774 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `ensure_labels` without auth dependency — archive/legacy_mailbot/main.py:394
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
archive/legacy_mailbot/main.py:394 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `execute_action` without auth dependency — ospra_os/intelligence/intelligence_core_routes.py:289
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/intelligence/intelligence_core_routes.py:289 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `find_products` without auth dependency — ospra_os/product_research/routes.py:41
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/product_research/routes.py:41 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `forgot_password` without auth dependency — ospra_os/api/password_reset_routes.py:168
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/api/password_reset_routes.py:168 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `forgot_password` without auth dependency — ospra_os/auth/routes.py:461
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/auth/routes.py:461 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `fulfill_order` without auth dependency — ospra_os/main.py:3595
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:3595 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_affiliate_links` without auth dependency — ospra_os/main.py:3551
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:3551 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_cross_store_learnings` without auth dependency — ospra_os/api/store_routes.py:304
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/api/store_routes.py:304 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_marketing_angle` without auth dependency — ospra_os/api/marketing_routes.py:48
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/api/marketing_routes.py:48 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_marketing_angle` without auth dependency — ospra_os/main.py:3019
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:3019 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_multiple_angles` without auth dependency — ospra_os/api/marketing_routes.py:87
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/api/marketing_routes.py:87 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_multiple_angles` without auth dependency — ospra_os/main.py:3076
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:3076 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_product_content` without auth dependency — ospra_os/main.py:2635
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:2635 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_report` without auth dependency — ospra_os/reports/routes.py:93
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/reports/routes.py:93 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `get_adjusted_score` without auth dependency — ospra_os/learning/learning_routes.py:308
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/learning/learning_routes.py:308 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `gmail_ingest` without auth dependency — archive/legacy_mailbot/main.py:279
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
archive/legacy_mailbot/main.py:279 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `gmail_pubsub_webhook` without auth dependency — archive/legacy_mailbot/main.py:742
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
archive/legacy_mailbot/main.py:742 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `gmail_pubsub_webhook` without auth dependency — ospra_os/api/email_automation_routes.py:100
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/api/email_automation_routes.py:100 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `gmail_send_demo` without auth dependency — archive/legacy_mailbot/main.py:290
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
archive/legacy_mailbot/main.py:290 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `grade_products_bulk` without auth dependency — ospra_os/intelligence/intelligence_core_routes.py:179
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/intelligence/intelligence_core_routes.py:179 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `handle_calendly_webhook` without auth dependency — ospra_os/onboarding/routes.py:127
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/onboarding/routes.py:127 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `join_stratosphere_waitlist` without auth dependency — ospra_os/waitlist/routes.py:53
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/waitlist/routes.py:53 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `learn_personal` without auth dependency — ospra_os/learning/learning_routes.py:120
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/learning/learning_routes.py:120 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `legacy_compare` without auth dependency — ospra_os/api/image_generation_routes.py:828
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/api/image_generation_routes.py:828 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `lemonsqueezy_webhook` without auth dependency — ospra_os/payments/routes.py:270
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/payments/routes.py:270 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `manually_process_schedules` without auth dependency — ospra_os/main.py:4068
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:4068 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `monitor_prices` without auth dependency — ospra_os/main.py:3686
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:3686 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `optimize_product_price` without auth dependency — ospra_os/main.py:2725
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:2725 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `pause_campaign` without auth dependency — ospra_os/integrations/meta/routes.py:105
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/integrations/meta/routes.py:105 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `preview_action` without auth dependency — ospra_os/intelligence/intelligence_core_routes.py:282
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/intelligence/intelligence_core_routes.py:282 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `preview_deployment` without auth dependency — ospra_os/api/deployment_routes.py:593
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/api/deployment_routes.py:593 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `preview_deployment` without auth dependency — ospra_os/integrations/shopify/routes.py:349
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/integrations/shopify/routes.py:349 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `process_inbox2` without auth dependency — archive/legacy_mailbot/main.py:476
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
archive/legacy_mailbot/main.py:476 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `process_inbox` without auth dependency — archive/legacy_mailbot/main.py:605
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
archive/legacy_mailbot/main.py:605 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `record_ad_performance` without auth dependency — ospra_os/learning/learning_routes.py:370
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/learning/learning_routes.py:370 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `record_feedback` without auth dependency — ospra_os/learning/learning_routes.py:142
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/learning/learning_routes.py:142 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `refresh_cj_categories` without auth dependency — ospra_os/intelligence/unified_discovery_routes.py:1564
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/intelligence/unified_discovery_routes.py:1564 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `refresh_token` without auth dependency — ospra_os/api/auth_routes.py:206
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/api/auth_routes.py:206 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `refresh_tokens` without auth dependency — ospra_os/auth/routes.py:322
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/auth/routes.py:322 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `reset_claude_chat` without auth dependency — archive/legacy_mailbot/main.py:900
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
archive/legacy_mailbot/main.py:900 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `reset_password` without auth dependency — ospra_os/api/password_reset_routes.py:264
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/api/password_reset_routes.py:264 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `reset_password` without auth dependency — ospra_os/auth/routes.py:525
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/auth/routes.py:525 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `resolve_alert` without auth dependency — ospra_os/monitoring/routes.py:437
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/monitoring/routes.py:437 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `resolve_error` without auth dependency — ospra_os/monitoring/routes.py:360
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/monitoring/routes.py:360 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `resume_campaign` without auth dependency — ospra_os/integrations/meta/routes.py:132
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/integrations/meta/routes.py:132 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `resume_subscription` without auth dependency — ospra_os/payments/routes.py:179
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/payments/routes.py:179 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_discovery_now` without auth dependency — ospra_os/main.py:2090
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:2090 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_job_now` without auth dependency — ospra_os/jobs/routes.py:68
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/jobs/routes.py:68 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_schedule` without auth dependency — ospra_os/reports/routes.py:400
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/reports/routes.py:400 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `scrape_aliexpress_product` without auth dependency — ospra_os/main.py:2693
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:2693 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `search_aliexpress` without auth dependency — ospra_os/main.py:3504
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:3504 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `send_custom_notification` without auth dependency — ospra_os/services/notification_routes.py:115
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/services/notification_routes.py:115 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `set_custom_weights` without auth dependency — ospra_os/learning/learning_routes.py:335
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/learning/learning_routes.py:335 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `set_rules` without auth dependency — archive/legacy_mailbot/main.py:378
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
archive/legacy_mailbot/main.py:378 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `simulate_sale` without auth dependency — ospra_os/learning/learning_routes.py:740
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/learning/learning_routes.py:740 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `smart_process_inbox` without auth dependency — archive/legacy_mailbot/main.py:711
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
archive/legacy_mailbot/main.py:711 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `start_gmail_watch` without auth dependency — archive/legacy_mailbot/main.py:807
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
archive/legacy_mailbot/main.py:807 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `start_scheduler` without auth dependency — ospra_os/jobs/routes.py:42
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/jobs/routes.py:42 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `stop_gmail_watch` without auth dependency — archive/legacy_mailbot/main.py:814
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
archive/legacy_mailbot/main.py:814 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `stop_scheduler` without auth dependency — ospra_os/jobs/routes.py:55
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/jobs/routes.py:55 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `submit_onboarding_form` without auth dependency — ospra_os/onboarding/routes.py:61
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/onboarding/routes.py:61 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `sync_emails` without auth dependency — archive/legacy_mailbot/main.py:1612
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
archive/legacy_mailbot/main.py:1612 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `sync_from_shopify` without auth dependency — ospra_os/analytics/customer_routes.py:438
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/analytics/customer_routes.py:438 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `sync_inventory` without auth dependency — ospra_os/main.py:3640
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:3640 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `sync_single_customer` without auth dependency — ospra_os/analytics/customer_routes.py:477
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/analytics/customer_routes.py:477 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `templates_upsert` without auth dependency — archive/legacy_mailbot/main.py:367
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
archive/legacy_mailbot/main.py:367 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `test_integration` without auth dependency — ospra_os/monitoring/routes.py:125
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/monitoring/routes.py:125 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `test_platform_credentials` without auth dependency — ospra_os/main.py:2190
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:2190 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `test_tiktok_search` without auth dependency — ospra_os/auth/tiktok_oauth.py:167
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/auth/tiktok_oauth.py:167 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `trigger_all_users_analysis` without auth dependency — ospra_os/learning/learning_routes.py:580
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/learning/learning_routes.py:580 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `trigger_global_analysis` without auth dependency — ospra_os/learning/learning_routes.py:514
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/learning/learning_routes.py:514 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `trigger_job` without auth dependency — ospra_os/monitoring/routes.py:207
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/monitoring/routes.py:207 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `trigger_learning_now` without auth dependency — ospra_os/learning/learning_routes.py:668
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/learning/learning_routes.py:668 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `trigger_niche_analysis` without auth dependency — ospra_os/intelligence/niche_routes.py:104
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/intelligence/niche_routes.py:104 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `trigger_personal_analysis` without auth dependency — ospra_os/learning/learning_routes.py:548
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/learning/learning_routes.py:548 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `undo_action` without auth dependency — ospra_os/intelligence/intelligence_core_routes.py:296
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/intelligence/intelligence_core_routes.py:296 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `update_ad_set_budget` without auth dependency — ospra_os/main.py:3885
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:3885 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `update_campaign_status` without auth dependency — ospra_os/main.py:3850
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:3850 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `update_checklist_item` without auth dependency — ospra_os/onboarding/routes.py:113
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/onboarding/routes.py:113 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upgrade_tier` without auth dependency — ospra_os/intelligence/intelligence_core_routes.py:267
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/intelligence/intelligence_core_routes.py:267 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upload_video` without auth dependency — ospra_os/tiktok/routes.py:244
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/tiktok/routes.py:244 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `validate_product_api` without auth dependency — ospra_os/main.py:2382
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/main.py:2382 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `validate_product` without auth dependency — ospra_os/product_research/routes.py:375
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/product_research/routes.py:375 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `verify_partner_domain` without auth dependency — ospra_os/whitelabel/routes.py:396
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/whitelabel/routes.py:396 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `verify_reset_token_endpoint` without auth dependency — ospra_os/api/password_reset_routes.py:235
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/api/password_reset_routes.py:235 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `warm_cache` without auth dependency — ospra_os/intelligence/unified_discovery_routes.py:1630
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/intelligence/unified_discovery_routes.py:1630 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `update_partner_branding` without auth dependency — ospra_os/whitelabel/routes.py:321
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/whitelabel/routes.py:321 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `update_schedule` without auth dependency — ospra_os/reports/routes.py:378
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
ospra_os/reports/routes.py:378 securityAuth fastapi unauth mutation
medium Security checks quality Practices conf 0.62 2 occurrences Foundry mined assumption checks: StephPonce/oubon_mailbot
Comment chain pattern product: assumption_checks Repo: StephPonce/oubon_mailbot Thread: StephPonce/oubon_mailbot#2 Outcome: ambiguous_needs_more_evidence Thread label: thread_needs_classification Source graph label: source_backed_multi_signal_graph Reasons: source_graph_has_real_artifacts, source_g…
2 occurrences
repo-level (2 hits)
medium Security checks quality Practices conf 0.70 Foundry mined unresolved feedback: StephPonce/oubon_mailbot
Graph query export: Human feedback without linked fix evidence Query id: unresolved_feedback Query type: motif_query Intent: Negative/unresolved examples that should not be hallucinated into fixes. Motif: unlinked_feedback_needs_evidence Training usage: negative_or_unresolved Graph gold label: need…
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — frontend/src/components/ProductDiscovery.jsx:3100
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — frontend/src/services/api.js:43
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — frontend/src/services/auth.js:15
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: .claude/projects/-Users-stephenponce-Documents-Ospra-OS-Bots-Ospra-OS/memory/discovery-open-diagnostics.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
.claude/projects/-Users-stephenponce-Documents-Ospra-OS-Bots-Ospra-OS/memory/discovery-open-diagnostics.md VerificationClaude instruction
medium System graph quality Agent instructions conf 1.00 Agent instructions exist but release-hardening basics are missing
AI-coder instruction files were found, but the repo is missing license. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable.
Repo hardeningGenerated repo pattern
medium System graph quality Placeholder conf 1.00 Critical user flow still appears backed by mock or placeholder data
A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded.
Mock dataCritical flowGenerated repo pattern
medium System graph hardware Security conf 1.00 Dockerfile runs as root: Dockerfile
No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image.
Container
medium System graph quality Integrity conf 1.00 4 occurrences Frontend route `/reset-password` has no Link/navigate to it — frontend/src/App.jsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
4 occurrences
repo-level (4 hits)
Orphan pageWiring
medium System graph cicd CI/CD security conf 1.00 GitHub Actions workflow grants broad write permissions
CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions.
.github/workflows/deploy-marketing.yml CI/CD securitySupply chainGithub actions
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in static/dashboard.html:592
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
static/dashboard.html:592 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in static/tiktok_demo.html:992
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
static/tiktok_demo.html:992 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in static/tiktok_oauth_callback.html:206
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
static/tiktok_oauth_callback.html:206 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in website/auth/tiktok/callback.html:206
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
website/auth/tiktok/callback.html:206 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in website/demo/index.html:992
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
website/demo/index.html:992 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'local_storage_auth_token' in static/tiktok_demo.html:873
Found a known-risky pattern (local_storage_auth_token). Review and replace if possible.
static/tiktok_demo.html:873 Local storage auth token
medium System graph security security conf 1.00 Insecure pattern 'local_storage_auth_token' in static/tiktok_oauth_callback.html:197
Found a known-risky pattern (local_storage_auth_token). Review and replace if possible.
static/tiktok_oauth_callback.html:197 Local storage auth token
medium System graph security security conf 1.00 Insecure pattern 'local_storage_auth_token' in website/auth/tiktok/callback.html:197
Found a known-risky pattern (local_storage_auth_token). Review and replace if possible.
website/auth/tiktok/callback.html:197 Local storage auth token
medium System graph security security conf 1.00 Insecure pattern 'local_storage_auth_token' in website/demo/index.html:873
Found a known-risky pattern (local_storage_auth_token). Review and replace if possible.
website/demo/index.html:873 Local storage auth token
medium System graph security security conf 1.00 Insecure pattern 'weak_hash' in ospra_os/api/aliexpress_affiliate_oauth.py:178
Found a known-risky pattern (weak_hash). Review and replace if possible.
ospra_os/api/aliexpress_affiliate_oauth.py:178 Weak hash
medium System graph security security conf 1.00 Insecure pattern 'weak_hash' in ospra_os/api/aliexpress_oauth.py:203
Found a known-risky pattern (weak_hash). Review and replace if possible.
ospra_os/api/aliexpress_oauth.py:203 Weak hash
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — archive/legacy_mailbot/main.py:440
`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — ospra_os/api/ml_routes.py:173
`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — ospra_os/background_jobs/product_monitor.py:275
`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — ospra_os/ml/ai_client.py:255
`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — scripts/smoke/multi_store_system.py:38
`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph quality Placeholder conf 1.00 Placeholder or mock-heavy implementation detected
Found 241 placeholder/mock markers across 90 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data.
Mock dataIncompleteGenerated repo pattern
medium System graph network Security conf 1.00 Privileged port 13 in use
Port 13 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer.
render.yaml Ports
medium System graph quality Placeholder conf 1.00 Runtime service client appears to use placeholder configuration
A runtime source file appears to wire Supabase/Firebase/AI/payment-style clients to placeholder URLs, keys, or fallback values. In the Fable corpus this often means the UI/API shape is present while the backend service is not actually configured.
Runtime configService clientGenerated repo pattern
low System graph quality Maintenance conf 1.00 181 TODO/FIXME markers
High count of TODO/FIXME/HACK markers — track them as issues so they're not forgotten.
low System graph quality Integrity conf 1.00 207 env vars used in code but missing from .env.example
Drift between code and config docs. The first few: `ACCESS_TOKEN_EXPIRE_MINUTES`, `ADMIN_EMAIL`, `AE_DS_DETAIL_TTL_SECONDS`, `AE_DS_MIN_INTERVAL`, `ALERT_RECIPIENT_EMAIL`, `ALIEXPRESS_ACCESS_TOKEN`, `ALIEXPRESS_AFFILIATE_APP_KEY`, `ALIEXPRESS_AFFILIATE_APP_SECRET` + 199 more. Add them (with a place…
config drift
low System graph hardware Coverage conf 1.00 Containers defined but no K8s/orchestration manifest found
Repo has Dockerfiles/compose but no Kubernetes/Nomad manifests. If the target deployment is K8s, the manifests may live in a separate ops repo.
Deployment
low System graph quality Debug conf 1.00 Debug logging residue appears in source files
Found 2655 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup.
CleanupRepo hardeningGenerated repo pattern
low System graph hardware Supply chain conf 1.00 Docker base image is tag-pinned but not digest-pinned: python:3.12-slim
Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter.
Dockerfile:2 containersPinned dependencies
low System graph cicd CI/CD security conf 1.00 9 occurrences GitHub Action is tag-pinned rather than SHA-pinned
actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA.
3 files, 9 locations
.github/workflows/deploy-marketing.yml:28, 31, 34, 40 (4 hits)
.github/workflows/frontend-ci.yml:31, 34, 53 (3 hits)
.github/workflows/backend-ci.yml:44, 47 (2 hits)
CI/CD securitySupply chainGithub actions
low System graph quality Tests conf 1.00 Low test-to-source ratio
120 tests / 572 src (ratio 0.21).
low System graph quality Integrity conf 1.00 19 occurrences Near-duplicate function bodies in 2 places
Functions with the same first-5-line body hash: archive/legacy_mailbot/main.py:process_inbox2, archive/legacy_mailbot/main.py:process_inbox This is *the* AI-coder failure mode (4× more duplication in vibe-coded repos — see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separat…
19 occurrences
repo-level (19 hits)
duplicatesduplication
low System graph quality Integrity conf 1.00 Near-duplicate function bodies in 4 places
Functions with the same first-5-line body hash: archive/legacy_mailbot/app/gmail_client.py:build_auth_url, archive/legacy_mailbot/app/gmail_client.py:exchange_code_for_tokens, ospra_os/email_automation/gmail_client.py:build_auth_url, ospra_os/email_automation/gmail_client.py:exchange_code_for_token…
duplicatesduplication
low System graph quality License conf 1.00 No license file detected
No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake.
Repo hardeningGenerated repo pattern
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `ad_copy` in frontend/src/components/ProductDiscovery.jsx:2561
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `ad_copy` in ospra_os/advertising/google/google_ads.py:25
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `ad_copy` in ospra_os/advertising/meta/meta_ads.py:40
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `ad_copy` in ospra_os/advertising/routes.py:170
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `ad_copy` in ospra_os/ai/model_router.py:192
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `ad_copy` in ospra_os/database/advertising_models.py:55
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `ad_copy` in ospra_os/database/testing_models.py:28
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `ad_copy` in ospra_os/intelligence/marketing_angle_generator.py:180
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `ad_copy` in ospra_os/intelligence/smart_recommendations.py:206
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `ad_copy` in ospra_os/ml/model_router.py:131
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `ad_copy` in ospra_os/ml/training_data.py:44
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `ad_copy` in ospra_os/testing/ab_test_engine.py:35
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `ad_copy` in ospra_os/testing/routes.py:36
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `ad_copy` in tests/test_marketing_angles.py:245
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `ai_listing_copy` in ospra_os/core/tiers.py:92
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `auto_fulfillment_v1` in ospra_os/api/fulfillment_routes.py:105
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `auto_fulfillment_v1` in ospra_os/fulfillment/routes.py:67
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `control_copy` in ospra_os/testing/ad_test_manager.py:123
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `dashboard_v2` in ospra_os/admin/routes.py:143
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `dashboard_v2` in ospra_os/main.py:2029
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `days_old` in ospra_os/intelligence/opportunity_scorer.py:582
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `days_old` in ospra_os/intelligence/saturation_tracker.py:462
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `generate_ad_copy` in ospra_os/advertising/creative_generator.py:28
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `generate_ad_copy` in ospra_os/advertising/scheduler.py:178
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `generate_ad_copy` in ospra_os/api/ml_routes.py:276
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `generate_ad_copy` in ospra_os/integrations/meta/ad_generator.py:17
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `generate_ad_copy` in ospra_os/integrations/meta/campaign_builder.py:48
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `generate_ad_copy` in ospra_os/ml/ai_client.py:24
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `ospra_products_v1` in frontend/src/components/OnboardingChecklist.jsx:8
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `product_intelligence_v2` in archive/legacy_mailbot/main.py:942
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `shopify_legacy` in ospra_os/api/shopify_routes.py:64
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_decrypt_with_wrong_key_falls_back_to_legacy` in tests/test_credential_encryption.py:223
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `too_old` in tests/test_webhook_verification.py:156
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph software Dead code conf 1.00 Possibly dead Python function: bulk_fulfill
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
ospra_os/integrations/aliexpress/fulfillment.py:161
low System graph software Dead code conf 1.00 Possibly dead Python function: check_inventory
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
ospra_os/integrations/cj_dropshipping.py:257
low System graph software Dead code conf 1.00 Possibly dead Python function: clear_expired_cache
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
archive/legacy_mailbot/app/response_cache.py:173
low System graph software Dead code conf 1.00 Possibly dead Python function: create_and_publish_product
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
ospra_os/integrations/shopify/client.py:444
low System graph software Dead code conf 1.00 Possibly dead Python function: create_inbound_shipment_plan
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
ospra_os/integrations/amazon_client.py:676
low System graph software Dead code conf 1.00 Possibly dead Python function: create_report
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
ospra_os/integrations/amazon_client.py:852
low System graph software Dead code conf 1.00 Possibly dead Python function: delete_campaign
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
ospra_os/integrations/meta/client.py:417
low System graph software Dead code conf 1.00 Possibly dead Python function: is_quiet_hours
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
archive/legacy_mailbot/app/business_hours.py:42
low System graph software Dead code conf 1.00 Possibly dead Python function: log_login_failure
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
ospra_os/security/auth_logger.py:102
low System graph software Dead code conf 1.00 Possibly dead Python function: log_logout
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
ospra_os/security/auth_logger.py:118
low System graph software Dead code conf 1.00 Possibly dead Python function: log_permission_denied
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
ospra_os/security/auth_logger.py:140
low System graph software Dead code conf 1.00 Possibly dead Python function: log_suspicious_activity
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
ospra_os/security/auth_logger.py:125
low System graph software Dead code conf 1.00 Possibly dead Python function: log_token_refresh
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
ospra_os/security/auth_logger.py:110
low System graph software Dead code conf 1.00 Possibly dead Python function: monitoring_task
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
ospra_os/main.py:1476
low System graph software Dead code conf 1.00 Possibly dead Python function: process_emails_background
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
archive/legacy_mailbot/main.py:785
low System graph software Dead code conf 1.00 Possibly dead Python function: search_cj_by_niche
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
ospra_os/integrations/cj_dropshipping/client.py:834
low System graph software Dead code conf 1.00 Possibly dead Python function: search_cj_products
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
ospra_os/integrations/cj_dropshipping/client.py:828
low System graph software Dead code conf 1.00 Possibly dead Python function: smart_check_emails_job
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
archive/legacy_mailbot/app/scheduler.py:125
low System graph quality Provenance conf 1.00 Shallow git history limits provenance confidence
The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence.
Git historyGenerated repo pattern
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — docs/archive/frontend_visual_audit_dec2025/list_models.ts:17
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — docs/archive/frontend_visual_audit_dec2025/visual_audit.ts:134
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — frontend/src/components/OiChat.jsx:96
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — frontend/src/components/ProductDiscovery.jsx:1515
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — frontend/src/hooks/useDashboardContext.jsx:319
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — frontend/src/services/api.js:374
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — frontend/src/services/auth.js:210
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — tools/tiktok-demo/server.js:1152
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph quality Integrity conf 1.00 Stub function `create_product` (body is just `pass`/`return`) — ospra_os/tenancy/audit.py:340
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `endpoint` (body is just `pass`/`return`) — ospra_os/database/connection.py:14
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `set_tag` (body is just `pass`/`return`) — ospra_os/observability/error_tracking.py:336
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph api Wiring conf 1.00 Unused endpoint: GET /analytics/cache-stats
`archive/legacy_mailbot/main.py` declares `GET /analytics/cache-stats` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /analytics/costs
`archive/legacy_mailbot/main.py` declares `GET /analytics/costs` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /analytics/daily
`archive/legacy_mailbot/main.py` declares `GET /analytics/daily` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /analytics/labels
`archive/legacy_mailbot/main.py` declares `GET /analytics/labels` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /analytics/weekly
`archive/legacy_mailbot/main.py` declares `GET /analytics/weekly` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /api/apify/status
`archive/legacy_mailbot/main.py` declares `GET /api/apify/status` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /api/claude/daily-briefing
`archive/legacy_mailbot/main.py` declares `GET /api/claude/daily-briefing` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /api/claude/weekly-report
`archive/legacy_mailbot/main.py` declares `GET /api/claude/weekly-report` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /api/health/detailed
`ospra_os/main.py` declares `GET /api/health/detailed` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /api/intelligence/stats
`archive/legacy_mailbot/main.py` declares `GET /api/intelligence/stats` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /api/platforms
`ospra_os/main.py` declares `GET /api/platforms` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /api/trends/ecommerce
`archive/legacy_mailbot/main.py` declares `GET /api/trends/ecommerce` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /api/v2/niches
`archive/legacy_mailbot/main.py` declares `GET /api/v2/niches` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /api/v2/trending
`archive/legacy_mailbot/main.py` declares `GET /api/v2/trending` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /auth/url
`archive/legacy_mailbot/main.py` declares `GET /auth/url` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /dashboard
`archive/legacy_mailbot/main.py` declares `GET /dashboard` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /debug/intelligence
`archive/legacy_mailbot/main.py` declares `GET /debug/intelligence` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /debug/peek
`archive/legacy_mailbot/main.py` declares `GET /debug/peek` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /gmail/watch/status
`archive/legacy_mailbot/main.py` declares `GET /gmail/watch/status` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /oauth2callback
`archive/legacy_mailbot/main.py` declares `GET /oauth2callback` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /rules/preview
`archive/legacy_mailbot/main.py` declares `GET /rules/preview` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /templates/list
`archive/legacy_mailbot/main.py` declares `GET /templates/list` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /ai/reply-draft
`archive/legacy_mailbot/main.py` declares `POST /ai/reply-draft` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /api/admin/run-discovery-now
`ospra_os/main.py` declares `POST /api/admin/run-discovery-now` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /api/ai/chat
`archive/legacy_mailbot/main.py` declares `POST /api/ai/chat` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /api/claude/chat
`archive/legacy_mailbot/main.py` declares `POST /api/claude/chat` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /api/claude/chat/reset
`archive/legacy_mailbot/main.py` declares `POST /api/claude/chat/reset` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /api/deploy-to-shopify
`ospra_os/main.py` declares `POST /api/deploy-to-shopify` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /api/discover
`ospra_os/main.py` declares `POST /api/discover` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /api/discover-multi
`ospra_os/main.py` declares `POST /api/discover-multi` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /api/email/sync
`archive/legacy_mailbot/main.py` declares `POST /api/email/sync` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /api/generate-content
`ospra_os/main.py` declares `POST /api/generate-content` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /api/intelligence/discover
`archive/legacy_mailbot/main.py` declares `POST /api/intelligence/discover` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /api/marketing/generate-angle
`ospra_os/main.py` declares `POST /api/marketing/generate-angle` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /api/optimize-price
`ospra_os/main.py` declares `POST /api/optimize-price` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /api/platforms/{platform}/test
`ospra_os/main.py` declares `POST /api/platforms/{platform}/test` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /api/scrape-aliexpress-product
`ospra_os/main.py` declares `POST /api/scrape-aliexpress-product` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /api/v2/discover
`archive/legacy_mailbot/main.py` declares `POST /api/v2/discover` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /api/validate-product
`ospra_os/main.py` declares `POST /api/validate-product` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /gmail/ensure-labels
`archive/legacy_mailbot/main.py` declares `POST /gmail/ensure-labels` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /gmail/ingest
`archive/legacy_mailbot/main.py` declares `POST /gmail/ingest` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /gmail/process-inbox
`archive/legacy_mailbot/main.py` declares `POST /gmail/process-inbox` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /gmail/process-inbox2
`archive/legacy_mailbot/main.py` declares `POST /gmail/process-inbox2` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /gmail/pubsub/webhook
`archive/legacy_mailbot/main.py` declares `POST /gmail/pubsub/webhook` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /gmail/send-demo
`archive/legacy_mailbot/main.py` declares `POST /gmail/send-demo` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /gmail/smart-process
`archive/legacy_mailbot/main.py` declares `POST /gmail/smart-process` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /gmail/watch/start
`archive/legacy_mailbot/main.py` declares `POST /gmail/watch/start` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /gmail/watch/stop
`archive/legacy_mailbot/main.py` declares `POST /gmail/watch/stop` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /rules/set
`archive/legacy_mailbot/main.py` declares `POST /rules/set` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /templates/upsert
`archive/legacy_mailbot/main.py` declares `POST /templates/upsert` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph quality Complexity conf 1.00 Very large file: archive/legacy_mailbot/main.py (1649 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: frontend/src/components/ProductDiscovery.jsx (3613 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.

Showing first 300 of 306. Refine filters or use the findings page for deep search.

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/6cc88e22-8c14-4140-a0c2-47328ac0a513/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/6cc88e22-8c14-4140-a0c2-47328ac0a513/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.