Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

Waffleslop/POTACAT

https://github.com/Waffleslop/POTACAT · scanned 2026-06-16 00:54 UTC (2 months, 1 week ago)

272 raw signals (0 security + 272 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 259 actionable findings from 1 signal source. 13 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

88.9% cov · 259 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 1 High 1 Medium 42 Low 99 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 259 Crowd 0 Layer: Frontend 84 Security 30 Cicd 2 Quality 143

Exclude dismissed / FP Exclude test files

All 4444 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`handler`	software	healthy	`preload.js:handler`
`the`	software	healthy	`preload.js:the`
`setZoom`	software	healthy	`preload-log-popout.js:setZoom`
`getZoom`	software	healthy	`preload-log-popout.js:getZoom`
`setZoom`	software	healthy	`preload-qso-popout.js:setZoom`
`getZoom`	software	healthy	`preload-qso-popout.js:getZoom`
`flush`	software	healthy	`preload-remote-audio.js:flush`
`flush`	software	healthy	`preload-vfo-popout.js:flush`
`_appendStartupLog`	software	healthy	`main.js:_appendStartupLog`
`logStartupStage`	software	healthy	`main.js:logStartupStage`
`generateMorseSamples`	software	healthy	`main.js:generateMorseSamples`
`profileDir`	software	healthy	`main.js:profileDir`
`profileSettingsPath`	software	healthy	`main.js:profileSettingsPath`
`_readJsonSafe`	software	healthy	`main.js:_readJsonSafe`
`_writeJsonAtomic`	software	healthy	`main.js:_writeJsonAtomic`
`loadSettings`	software	healthy	`main.js:loadSettings`
`_splitSettings`	software	healthy	`main.js:_splitSettings`
`saveSettings`	software	healthy	`main.js:saveSettings`
`listProfiles`	software	healthy	`main.js:listProfiles`
`addProfile`	software	healthy	`main.js:addProfile`
`switchProfile`	software	healthy	`main.js:switchProfile`
`archiveProfile`	software	healthy	`main.js:archiveProfile`
`audioSafeSend`	software	healthy	`main.js:audioSafeSend`
`count`	software	healthy	`main.js:count`
`ensureSstvGalleryDir`	software	healthy	`main.js:ensureSstvGalleryDir`
`getFilterPresets`	software	healthy	`main.js:getFilterPresets`
`m`	software	healthy	`main.js:m`
`findNearestPreset`	software	healthy	`main.js:findNearestPreset`
`detectRigType`	software	healthy	`main.js:detectRigType`
`getActiveRigModel`	software	healthy	`main.js:getActiveRigModel`
`activeRig`	software	healthy	`main.js:activeRig`
`getFlexBandAntenna`	software	healthy	`main.js:getFlexBandAntenna`
`getRigCapabilities`	software	healthy	`main.js:getRigCapabilities`
`parseWatchlist`	software	healthy	`main.js:parseWatchlist`
`watchlistMatch`	software	healthy	`main.js:watchlistMatch`
`cs`	software	healthy	`main.js:cs`
`b`	software	healthy	`main.js:b`
`watchlistHasCallsign`	software	healthy	`main.js:watchlistHasCallsign`
`notifyWatchlistSpot`	software	healthy	`main.js:notifyWatchlistSpot`
`freqMHz`	software	healthy	`main.js:freqMHz`
`timeout`	software	healthy	`main.js:timeout`
`findRigctld`	software	healthy	`main.js:findRigctld`
`listRigs`	software	healthy	`main.js:listRigs`
`killRigctld`	software	healthy	`main.js:killRigctld`
`spawnRigctld`	software	healthy	`main.js:spawnRigctld`
`pttType`	software	healthy	`main.js:pttType`
`sendCatStatus`	software	healthy	`main.js:sendCatStatus`
`sendCatFrequency`	software	healthy	`main.js:sendCatFrequency`
`sendCatMode`	software	healthy	`main.js:sendCatMode`
`sendCatPower`	software	healthy	`main.js:sendCatPower`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`preload.js`	software	healthy	`preload.js`
`preload-sstv-popout.js`	software	healthy	`preload-sstv-popout.js`
`preload-pair-request-popout.js`	software	healthy	`preload-pair-request-popout.js`
`RELEASE_NOTES_1.7.4.md`	software	healthy	`RELEASE_NOTES_1.7.4.md`
`RELEASE_NOTES_1.7.5.md`	software	healthy	`RELEASE_NOTES_1.7.5.md`
`preload-log-popout.js`	software	healthy	`preload-log-popout.js`
`README.md`	software	healthy	`README.md`
`preload-jtcat-popout.js`	software	healthy	`preload-jtcat-popout.js`
`preload-qso-popout.js`	software	healthy	`preload-qso-popout.js`
`package.json`	software	healthy	`package.json`
`rig-instructions.md`	software	healthy	`rig-instructions.md`
`preload-spots-popout.js`	software	healthy	`preload-spots-popout.js`
`preload-prop-popout.js`	software	healthy	`preload-prop-popout.js`
`preload-remote-audio.js`	software	healthy	`preload-remote-audio.js`
`package-lock.json`	software	healthy	`package-lock.json`
`preload-vfo-popout.js`	software	healthy	`preload-vfo-popout.js`
`INSTALL.md`	software	healthy	`INSTALL.md`
`preload-popout.js`	software	healthy	`preload-popout.js`
`preload-conditions-popout.js`	software	healthy	`preload-conditions-popout.js`
`preload-cluster-popout.js`	software	healthy	`preload-cluster-popout.js`
`main.js`	software	healthy	`main.js`
`preload-remote-audio-client.js`	software	healthy	`preload-remote-audio-client.js`
`preload-actmap-popout.js`	software	healthy	`preload-actmap-popout.js`
`LICENSE`	software	healthy	`LICENSE`
`preload-bandspread-popout.js`	software	healthy	`preload-bandspread-popout.js`
`CODE_SIGNING.md`	software	healthy	`CODE_SIGNING.md`
`preload-pair-popout.js`	software	healthy	`preload-pair-popout.js`
`prop-popout.html`	software	healthy	`renderer/prop-popout.html`
`actmap-popout.js`	software	healthy	`renderer/actmap-popout.js`
`conditions-popout.html`	software	healthy	`renderer/conditions-popout.html`
`freedv-audio-worklet.js`	software	healthy	`renderer/freedv-audio-worklet.js`
`actmap-popout.html`	software	healthy	`renderer/actmap-popout.html`
`spots-popout.js`	software	healthy	`renderer/spots-popout.js`
`map-popout.js`	software	healthy	`renderer/map-popout.js`
`styles.css`	software	healthy	`renderer/styles.css`
`jtcat-map-popout.html`	software	healthy	`renderer/jtcat-map-popout.html`
`prop-popout.js`	software	healthy	`renderer/prop-popout.js`
`cq-target.js`	software	healthy	`renderer/cq-target.js`
`popout-theme-bootstrap.js`	software	healthy	`renderer/popout-theme-bootstrap.js`
`cluster-popout.html`	software	healthy	`renderer/cluster-popout.html`
`remote-audio.html`	software	healthy	`renderer/remote-audio.html`
`dax-tx-worklet.js`	software	healthy	`renderer/dax-tx-worklet.js`
`remote-audio-answerer.js`	software	healthy	`renderer/remote-audio-answerer.js`
`remote-audio-client.html`	software	healthy	`renderer/remote-audio-client.html`
`conditions-popout.js`	software	healthy	`renderer/conditions-popout.js`
`remote.css`	software	healthy	`renderer/remote.css`
`sstv-audio-worklet.js`	software	healthy	`renderer/sstv-audio-worklet.js`
`index.html`	software	healthy	`renderer/index.html`
`remote.js`	software	healthy	`renderer/remote.js`
`sstv-popout.html`	software	healthy	`renderer/sstv-popout.html`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`FreedvProcessor`	software	healthy	`renderer/freedv-audio-worklet.js:FreedvProcessor`
`DaxTxProcessor`	software	healthy	`renderer/dax-tx-worklet.js:DaxTxProcessor`
`RemoteAudioAnswerer`	software	healthy	`renderer/remote-audio-answerer.js:RemoteAudioAnswerer`
`SstvProcessor`	software	healthy	`renderer/sstv-audio-worklet.js:SstvProcessor`
`toggle`	software	healthy	`renderer/remote.js:toggle`
`so`	software	healthy	`renderer/remote.js:so`
`Waterfall`	software	healthy	`renderer/waterfall.js:Waterfall`
`as`	software	healthy	`renderer/app.js:as`
`attributes`	software	healthy	`renderer/cloud-ui.js:attributes`
`for`	software	healthy	`renderer/cloud-ui.js:for`
`on`	software	healthy	`renderer/cloud-ui.js:on`
`JtcatProcessor`	software	healthy	`renderer/jtcat-audio-worklet.js:JtcatProcessor`
`Vita49SourceProcessor`	software	healthy	`renderer/jtcat-vita49-source-worklet.js:Vita49SourceProcess…`
`RemotePttController`	software	healthy	`renderer/remote-ptt.js:RemotePttController`
`of`	software	healthy	`test/sstv-quality-test.js:of`
`FakePC`	software	healthy	`test/remote-audio-answerer-test.js:FakePC`
`FakePort`	software	healthy	`test/rotorez-test.js:FakePort`
`FakeWorker`	software	healthy	`test/jtcat-test.js:FakeWorker`
`FreedvReporterClient`	software	healthy	`lib/freedv-reporter.js:FreedvReporterClient`
`FreedvEngine`	software	healthy	`lib/freedv-engine.js:FreedvEngine`
`RemoteServer`	software	healthy	`lib/remote-server.js:RemoteServer`
`CloudAuth`	software	healthy	`lib/cloud-auth.js:CloudAuth`
`TcpTransport`	software	healthy	`lib/transport.js:TcpTransport`
`SerialTransport`	software	healthy	`lib/transport.js:SerialTransport`
`in`	software	healthy	`lib/rig-utils.js:in`
`WebSdrClient`	software	healthy	`lib/websdr.js:WebSdrClient`
`AntennaGeniusClient`	software	healthy	`lib/antenna-genius.js:AntennaGeniusClient`
`JtcatManager`	software	healthy	`lib/jtcat-manager.js:JtcatManager`
`BinaryReader`	software	healthy	`lib/wsjtx.js:BinaryReader`
`BinaryWriter`	software	healthy	`lib/wsjtx.js:BinaryWriter`
`WsjtxClient`	software	healthy	`lib/wsjtx.js:WsjtxClient`
`SmartSdrAudio`	software	healthy	`lib/smartsdr-audio.js:SmartSdrAudio`
`packet`	software	healthy	`lib/smartsdr-audio.js:packet`
`PskrClient`	software	healthy	`lib/pskreporter.js:PskrClient`
`SstvEngine`	software	healthy	`lib/sstv-engine.js:SstvEngine`
`SmartSdrClient`	software	healthy	`lib/smartsdr.js:SmartSdrClient`
`PotaSync`	software	healthy	`lib/pota-sync.js:PotaSync`
`RemoteClient`	software	healthy	`lib/remote-client.js:RemoteClient`
`KiwiSdrClient`	software	healthy	`lib/kiwisdr.js:KiwiSdrClient`
`SotaUploader`	software	healthy	`lib/sota.js:SotaUploader`
`TciClient`	software	healthy	`lib/tci.js:TciClient`
`SyncJournal`	software	healthy	`lib/sync-journal.js:SyncJournal`
`TunerGeniusClient`	software	healthy	`lib/tuner-genius.js:TunerGeniusClient`
`CloudTunnelManager`	software	healthy	`lib/cloud-tunnel.js:CloudTunnelManager`
`RigController`	software	healthy	`lib/rig-controller.js:RigController`
`SstvManager`	software	healthy	`lib/sstv-manager.js:SstvManager`
`SstvDecoder`	software	healthy	`lib/sstv-worker.js:SstvDecoder`
`RbnClient`	software	healthy	`lib/rbn.js:RbnClient`
`RotorEzClient`	software	healthy	`lib/rotorez.js:RotorEzClient`
`hosts`	software	healthy	`lib/alsa.js:hosts`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`renderer`	software	healthy	`renderer`
`test`	software	healthy	`test`
`docs`	software	healthy	`docs`
`ios-handoffs`	software	healthy	`docs/ios-handoffs`
`desktop-handoffs`	software	healthy	`docs/desktop-handoffs`
`scripts`	software	healthy	`scripts`
`worker`	software	healthy	`worker`
`donors`	software	healthy	`worker/donors`
`dxpeditions`	software	healthy	`worker/dxpeditions`
`assets`	software	healthy	`assets`
`hamlib`	software	healthy	`assets/hamlib`
`lib`	software	healthy	`lib`
`ft8_native`	software	healthy	`lib/ft8_native`
`ft8_lib`	software	healthy	`lib/ft8_native/ft8_lib`
`demo`	software	healthy	`lib/ft8_native/ft8_lib/demo`
`common`	software	healthy	`lib/ft8_native/ft8_lib/common`
`test`	software	healthy	`lib/ft8_native/ft8_lib/test`
`utils`	software	healthy	`lib/ft8_native/ft8_lib/utils`
`ft4_ft8_public`	software	healthy	`lib/ft8_native/ft8_lib/ft4_ft8_public`
`fft`	software	healthy	`lib/ft8_native/ft8_lib/fft`
`ft8`	software	healthy	`lib/ft8_native/ft8_lib/ft8`
`alsa_native`	software	healthy	`lib/alsa_native`
`freedv_native`	software	healthy	`lib/freedv_native`
`codec2_src`	software	healthy	`lib/freedv_native/codec2_src`
`codec2`	software	healthy	`lib/freedv_native/codec2_src/codec2`
`ft4`	software	healthy	`lib/ft4`
`wasm`	software	healthy	`lib/ft4/wasm`
`codecs`	software	healthy	`lib/codecs`
`rade_native`	software	healthy	`lib/rade_native`
`opus_src`	software	healthy	`lib/rade_native/opus_src`
`dnn`	software	healthy	`lib/rade_native/opus_src/dnn`
`arm`	software	healthy	`lib/rade_native/opus_src/dnn/arm`
`x86`	software	healthy	`lib/rade_native/opus_src/dnn/x86`
`cmake`	software	healthy	`lib/rade_native/opus_src/cmake`
`celt`	software	healthy	`lib/rade_native/opus_src/celt`
`mips`	software	healthy	`lib/rade_native/opus_src/celt/mips`
`tests`	software	healthy	`lib/rade_native/opus_src/celt/tests`
`arm`	software	healthy	`lib/rade_native/opus_src/celt/arm`
`x86`	software	healthy	`lib/rade_native/opus_src/celt/x86`
`silk`	software	healthy	`lib/rade_native/opus_src/silk`
`mips`	software	healthy	`lib/rade_native/opus_src/silk/mips`
`tests`	software	healthy	`lib/rade_native/opus_src/silk/tests`
`arm`	software	healthy	`lib/rade_native/opus_src/silk/arm`
`float`	software	healthy	`lib/rade_native/opus_src/silk/float`
`x86`	software	healthy	`lib/rade_native/opus_src/silk/float/x86`
`fixed`	software	healthy	`lib/rade_native/opus_src/silk/fixed`
`mips`	software	healthy	`lib/rade_native/opus_src/silk/fixed/mips`
`arm`	software	healthy	`lib/rade_native/opus_src/silk/fixed/arm`
`x86`	software	healthy	`lib/rade_native/opus_src/silk/fixed/x86`
`x86`	software	healthy	`lib/rade_native/opus_src/silk/x86`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`README.md`
`1.2.3.4`	network	healthy	`test/remote-desktop-e2e-test.js`
`5.6.7.8`	network	healthy	`test/remote-desktop-e2e-test.js`
`203.0.113.9`	network	healthy	`test/tunnel-webui-gate-test.js`
`192.168.1.50`	network	healthy	`test/tunnel-webui-gate-test.js`
`10.0.0.9`	network	healthy	`test/tunnel-webui-gate-test.js`
`172.20.1.1`	network	healthy	`test/tunnel-webui-gate-test.js`
`100.94.0.7`	network	healthy	`test/tunnel-webui-gate-test.js`
`192.168.1.5`	network	healthy	`test/tunnel-webui-gate-test.js`
`169.254.5.5`	network	healthy	`test/tunnel-webui-gate-test.js`
`8.8.8.8`	network	healthy	`test/tunnel-webui-gate-test.js`
`192.168.1.1`	network	healthy	`test/tunnel-webui-gate-test.js`
`203.0.113.42`	network	healthy	`test/tunnel-webui-gate-test.js`
`203.0.113.7`	network	healthy	`test/tunnel-webui-gate-test.js`
`192.168.0.233`	network	healthy	`test/guest-pass-test.js`
`10.0.0.7`	network	healthy	`test/guest-pass-test.js`
`172.16.4.2`	network	healthy	`test/guest-pass-test.js`
`172.31.255.1`	network	healthy	`test/guest-pass-test.js`
`100.104.53.76`	network	healthy	`test/guest-pass-test.js`
`172.32.0.1`	network	healthy	`test/guest-pass-test.js`
`100.64.0.1`	network	healthy	`test/ts-wss-url-test.js`
`10.0.0.5`	network	healthy	`test/pair-request-tunnel-gate-test.js`
`172.16.0.1`	network	healthy	`test/pair-request-tunnel-gate-test.js`
`172.31.255.254`	network	healthy	`test/pair-request-tunnel-gate-test.js`
`172.15.0.1`	network	healthy	`test/pair-request-tunnel-gate-test.js`
`100.94.1.2`	network	healthy	`test/pair-request-tunnel-gate-test.js`
`192.168.1.9`	network	healthy	`test/pair-request-tunnel-gate-test.js`
`192.168.1.42`	network	healthy	`scripts/echocat-cli.js`
`192.168.10.64`	network	healthy	`scripts/probe-flex-audio.js`
`2.5.29.17`	network	healthy	`lib/remote-server.js`
`1.3.6.1`	network	healthy	`lib/remote-server.js`
`5.5.7.3`	network	healthy	`lib/remote-server.js`
`192.168.126.11`	network	healthy	`lib/remote-server.js`
`1.1.1.1`	network	healthy	`lib/cloud-tunnel.js`

Label	Layer	Status	Path
`/status`	frontend	healthy	`main.js`
`/repos/Waffleslop/POTACAT/releases/latest`	frontend	healthy	`main.js`
`/spot/`	frontend	healthy	`main.js`
`/api/public/spots/spot`	frontend	healthy	`main.js`
`/api/pair-account`	frontend	healthy	`main.js`
`/api/pair`	frontend	healthy	`main.js`
`/api/pair-request`	frontend	healthy	`main.js`
`/`	frontend	healthy	`test/tunnel-webui-gate-test.js`
`/health`	frontend	healthy	`test/tunnel-webui-gate-test.js`
`/tmp/bandinfo.js`	frontend	healthy	`lib/websdr.js`
`/spots/`	frontend	healthy	`lib/wwbota.js`

Label	Layer	Status	Path
`port:17310`	network	healthy	`test/revoke-kick.test.js`
`port:17361`	network	healthy	`test/remote-desktop-e2e-test.js`
`port:4992`	network	healthy	`scripts/probe-flex-audio.js`
`port:8901`	network	healthy	`lib/sdr-directory.js`
`port:8073`	network	healthy	`lib/sdr-directory.js`
`port:8902`	network	healthy	`lib/sdr-directory.js`
`port:8074`	network	healthy	`lib/sdr-directory.js`
`port:7300`	network	healthy	`lib/remote-client.js`
`port:443`	network	healthy	`lib/sota.js`
`port:9205`	network	healthy	`lib/cat.js`

Label	Layer	Status	Path
`build-linux-validate`	cicd	healthy	`.github/workflows/linux-validate.yml`
`sandbox-smoke`	cicd	healthy	`.github/workflows/linux-validate.yml`
`jtcat-tests`	cicd	healthy	`.github/workflows/test.yml`
`build-windows`	cicd	healthy	`.github/workflows/release.yml`
`build-macos-arm64`	cicd	healthy	`.github/workflows/release.yml`
`build-macos-x64`	cicd	healthy	`.github/workflows/release.yml`
`build-linux`	cicd	healthy	`.github/workflows/release.yml`
`build-linux-arm64`	cicd	healthy	`.github/workflows/release.yml`
`create-release`	cicd	healthy	`.github/workflows/release.yml`
`update-website`	cicd	healthy	`.github/workflows/release.yml`

Label	Layer	Status	Path
`auth::lib/cloud-auth.js`	security	healthy	`lib/cloud-auth.js`
`auth::lib/sota.js`	security	healthy	`lib/sota.js`
`auth::main.js`	security	healthy	`main.js`
`auth::lib/cloud-tunnel.js`	security	healthy	`lib/cloud-tunnel.js`
`auth::lib/pota-sync.js`	security	healthy	`lib/pota-sync.js`
`auth::lib/remote-server.js`	security	healthy	`lib/remote-server.js`
`auth::lib/echocat-protocol.js`	security	healthy	`lib/echocat-protocol.js`

Label	Layer	Status	Path
`gha::linux-validate`	cicd	healthy	`.github/workflows/linux-validate.yml`
`gha::test`	cicd	healthy	`.github/workflows/test.yml`
`gha::release`	cicd	healthy	`.github/workflows/release.yml`

Label	Layer	Status	Path
`WEBSITE_UPDATE_TOKEN`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`

Label	Layer	Status	Path
`repobility-clone-u2iokdhx`	software	healthy	`/tmp/repobility-clone-u2iokdhx`

Label	Layer	Status	Path
`sqlite`	data	healthy	`lib/adif.js`

Label	Layer	Status	Path
`nginx`	network	healthy	`lib/cloud-sync.js`

Label	Layer	Status	Path
`gpu (detected)`	hardware	healthy	`renderer/sstv-popout.js`

Label	Layer	Status	Path
`vps::aws`	hardware	healthy	`lib/pota-sync.js`

Label	Layer	Status	Path
`generic_api_key::lib/tiles.js`	security	healthy	`lib/tiles.js`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/862cdbc3-5afe-4e5f-bdd3-79864d1d5ca0/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/862cdbc3-5afe-4e5f-bdd3-79864d1d5ca0/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

Waffleslop/POTACAT

Complete repo analysis

function 50+

file 50+

class 50+

directory 50+

service 34

route 11

port 10

job 10

auth 7

pipeline 3

env_var 2

repo 1

database 1

load_balancer 1

gpu 1

vps 1

secret 1