Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

terryma2024/happyword

https://github.com/terryma2024/happyword · scanned 2026-06-16 00:32 UTC (2 months, 2 weeks ago)

269 raw signals (0 security + 269 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 2 weeks ago · v1 · 245 actionable findings from 1 signal source. 24 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

100.0% cov · 245 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 1 High 101 Medium 18 Low 104 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 245 Crowd 0 Layer: Software 25 Frontend 3 Hardware 5 Security 107 Cicd 2 Quality 53 Api 50

Exclude dismissed / FP Exclude test files

All 4820 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`walk`	software	healthy	`scripts/validate-codex-agent-port.mjs:walk`
`fail`	software	healthy	`scripts/validate-codex-agent-port.mjs:fail`
`assertExists`	software	healthy	`scripts/validate-codex-agent-port.mjs:assertExists`
`hdc_base`	software	healthy	`scripts/capture_harmony_screenshots.py:46`
`run_shell`	software	healthy	`scripts/capture_harmony_screenshots.py:51`
`hdc_file_recv`	software	healthy	`scripts/capture_harmony_screenshots.py:60`
`start_app`	software	healthy	`scripts/capture_harmony_screenshots.py:69`
`dump_layout`	software	healthy	`scripts/capture_harmony_screenshots.py:76`
`bounds_center`	software	healthy	`scripts/capture_harmony_screenshots.py:84`
`bounds_height`	software	healthy	`scripts/capture_harmony_screenshots.py:92`
`scroll_until_uncovered`	software	healthy	`scripts/capture_harmony_screenshots.py:100`
`click_uncovered`	software	healthy	`scripts/capture_harmony_screenshots.py:123`
`find_attrs`	software	healthy	`scripts/capture_harmony_screenshots.py:130`
`wait_for_component`	software	healthy	`scripts/capture_harmony_screenshots.py:148`
`click_id`	software	healthy	`scripts/capture_harmony_screenshots.py:158`
`click_if_present`	software	healthy	`scripts/capture_harmony_screenshots.py:166`
`press_back`	software	healthy	`scripts/capture_harmony_screenshots.py:174`
`swipe_up`	software	healthy	`scripts/capture_harmony_screenshots.py:179`
`swipe_down`	software	healthy	`scripts/capture_harmony_screenshots.py:185`
`swipe_portrait_up`	software	healthy	`scripts/capture_harmony_screenshots.py:191`
`triple_click_version_label`	software	healthy	`scripts/capture_harmony_screenshots.py:196`
`screen_capture`	software	healthy	`scripts/capture_harmony_screenshots.py:208`
`scroll_capture_series`	software	healthy	`scripts/capture_harmony_screenshots.py:217`
`scroll_capture_portrait_series`	software	healthy	`scripts/capture_harmony_screenshots.py:228`
`ensure_pin_if_possible`	software	healthy	`scripts/capture_harmony_screenshots.py:238`
`go_home_via_back`	software	healthy	`scripts/capture_harmony_screenshots.py:266`
`tap_pin_dialog`	software	healthy	`scripts/capture_harmony_screenshots.py:275`
`maybe_install_hap`	software	healthy	`scripts/capture_harmony_screenshots.py:281`
`main`	software	healthy	`scripts/capture_harmony_screenshots.py:294`
`shot_home`	software	dead	`scripts/capture_harmony_screenshots.py:320`
`shot_battle_result`	software	dead	`scripts/capture_harmony_screenshots.py:323`
`shot_codex`	software	dead	`scripts/capture_harmony_screenshots.py:330`
`shot_today_plan`	software	dead	`scripts/capture_harmony_screenshots.py:337`
`shot_learning_report`	software	dead	`scripts/capture_harmony_screenshots.py:342`
`shot_wishlist_history`	software	dead	`scripts/capture_harmony_screenshots.py:350`
`shot_config_and_pack`	software	dead	`scripts/capture_harmony_screenshots.py:358`
`shot_parent_pin_surface`	software	dead	`scripts/capture_harmony_screenshots.py:374`
`shot_scan_binding`	software	dead	`scripts/capture_harmony_screenshots.py:389`
`shot_parent_admin`	software	dead	`scripts/capture_harmony_screenshots.py:410`
`shot_bound_device_if_any`	software	dead	`scripts/capture_harmony_screenshots.py:441`
`shot_dev_menu_and_bypass`	software	dead	`scripts/capture_harmony_screenshots.py:455`
`escapeRegExp`	software	healthy	`scripts/validate-builtin-examples.mjs:escapeRegExp`
`sentenceContainsWord`	software	healthy	`scripts/validate-builtin-examples.mjs:sentenceContainsWord`
`ensureDir`	software	healthy	`scripts/migrate-claude-agents-to-codex.mjs:ensureDir`
`walk`	software	healthy	`scripts/migrate-claude-agents-to-codex.mjs:walk`
`slugFromPath`	software	healthy	`scripts/migrate-claude-agents-to-codex.mjs:slugFromPath`
`titleFromMarkdown`	software	healthy	`scripts/migrate-claude-agents-to-codex.mjs:titleFromMarkdown`
`firstParagraph`	software	healthy	`scripts/migrate-claude-agents-to-codex.mjs:firstParagraph`
`sanitizeDescription`	software	healthy	`scripts/migrate-claude-agents-to-codex.mjs:sanitizeDescript…`
`normalizeBody`	software	healthy	`scripts/migrate-claude-agents-to-codex.mjs:normalizeBody`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`README.md`	software	healthy	`README.md`
`CLAUDE.md`	software	healthy	`CLAUDE.md`
`Dockerfile`	software	healthy	`Dockerfile`
`LICENSE`	software	healthy	`LICENSE`
`AGENTS.md`	software	healthy	`AGENTS.md`
`README.md`	software	healthy	`android/README.md`
`build.gradle.kts`	software	healthy	`android/build.gradle.kts`
`build.gradle.kts`	software	healthy	`android/app/build.gradle.kts`
`BattleLifecycleFlowTest.kt`	software	healthy	`android/app/src/androidTest/java/cool/happyword/wordmagic/B…`
`LocalGrowthFlowTest.kt`	software	healthy	`android/app/src/androidTest/java/cool/happyword/wordmagic/L…`
`ConfigAudioSwitchFlowTest.kt`	software	healthy	`android/app/src/androidTest/java/cool/happyword/wordmagic/C…`
`ForceNativeBattleRule.kt`	software	healthy	`android/app/src/androidTest/java/cool/happyword/wordmagic/F…`
`SmokeTest.kt`	software	healthy	`android/app/src/androidTest/java/cool/happyword/wordmagic/S…`
`CloudBindingFlowTest.kt`	software	healthy	`android/app/src/androidTest/java/cool/happyword/wordmagic/C…`
`HomeUnboundChildFlowTest.kt`	software	healthy	`android/app/src/androidTest/java/cool/happyword/wordmagic/H…`
`FamilyLearningFlowTest.kt`	software	healthy	`android/app/src/androidTest/java/cool/happyword/wordmagic/F…`
`AndroidScreenScreenshotTest.kt`	software	healthy	`android/app/src/androidTest/java/cool/happyword/wordmagic/A…`
`HomeBoundChildFlowTest.kt`	software	healthy	`android/app/src/androidTest/java/cool/happyword/wordmagic/H…`
`TestBackendServer.kt`	software	healthy	`android/app/src/androidTest/java/cool/happyword/wordmagic/T…`
`DeveloperRoutingFlowTest.kt`	software	healthy	`android/app/src/androidTest/java/cool/happyword/wordmagic/D…`
`ConfigCloudSyncVisibilityTest.kt`	software	healthy	`android/app/src/androidTest/java/cool/happyword/wordmagic/C…`
`HomeDailyLearningUiTest.kt`	software	healthy	`android/app/src/androidTest/java/cool/happyword/wordmagic/u…`
`ChildProfileEditLayoutPolicyTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/ui/Child…`
`PageBackButtonPolicyTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/ui/PageB…`
`PageChromeInsetPolicyTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/ui/PageC…`
`OrientationPolicyTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/ui/navig…`
`ConfigLayoutPolicyTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/ui/confi…`
`MessageBubbleGeometryTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/ui/compo…`
`HomeAdventureCardStoryTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/ui/home/…`
`DamageFloaterTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/ui/battl…`
`LetterTemplateLayoutTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/ui/battl…`
`BattleBossIntroLayoutSpecTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/ui/battl…`
`SharedFixtureCompatibilityTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/app/Shar…`
`OfflineFailureGateTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/app/Offl…`
`AppMetadataTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/app/AppM…`
`BuildGateTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/app/Buil…`
`MonsterDialogueCatalogTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/core/Mon…`
`BattleQuestionSchedulerTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/core/Bat…`
`BattleAudioMixerPolicyTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/core/Bat…`
`MonsterProgressTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/core/Mon…`
`LearningRecorderTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/core/Lea…`
`PackModelsTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/core/Pac…`
`PackSelectionStoreTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/core/Pac…`
`SpellbookServiceTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/core/Spe…`
`DailyLearningStateServiceTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/core/Dai…`
`CloudModelsTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/core/Clo…`
`BattleTtsVoiceSelectorTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/core/Bat…`
`LearningReportBuilderTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/core/Lea…`
`PackLibraryTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/core/Pac…`
`GameConfigTest.kt`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/core/Gam…`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`android`	software	healthy	`android`
`app`	software	healthy	`android/app`
`src`	software	healthy	`android/app/src`
`androidTest`	software	healthy	`android/app/src/androidTest`
`java`	software	healthy	`android/app/src/androidTest/java`
`cool`	software	healthy	`android/app/src/androidTest/java/cool`
`happyword`	software	healthy	`android/app/src/androidTest/java/cool/happyword`
`wordmagic`	software	healthy	`android/app/src/androidTest/java/cool/happyword/wordmagic`
`ui`	software	healthy	`android/app/src/androidTest/java/cool/happyword/wordmagic/ui`
`home`	software	healthy	`android/app/src/androidTest/java/cool/happyword/wordmagic/u…`
`test`	software	healthy	`android/app/src/test`
`java`	software	healthy	`android/app/src/test/java`
`cool`	software	healthy	`android/app/src/test/java/cool`
`happyword`	software	healthy	`android/app/src/test/java/cool/happyword`
`wordmagic`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic`
`ui`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/ui`
`navigation`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/ui/navig…`
`config`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/ui/config`
`components`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/ui/compo…`
`home`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/ui/home`
`battle`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/ui/battle`
`app`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/app`
`core`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/core`
`cocos`	software	healthy	`android/app/src/test/java/cool/happyword/wordmagic/cocos`
`main`	software	healthy	`android/app/src/main`
`java`	software	healthy	`android/app/src/main/java`
`com`	software	healthy	`android/app/src/main/java/com`
`cocos`	software	healthy	`android/app/src/main/java/com/cocos`
`lib`	software	healthy	`android/app/src/main/java/com/cocos/lib`
`websocket`	software	healthy	`android/app/src/main/java/com/cocos/lib/websocket`
`cool`	software	healthy	`android/app/src/main/java/cool`
`happyword`	software	healthy	`android/app/src/main/java/cool/happyword`
`wordmagic`	software	healthy	`android/app/src/main/java/cool/happyword/wordmagic`
`ui`	software	healthy	`android/app/src/main/java/cool/happyword/wordmagic/ui`
`navigation`	software	healthy	`android/app/src/main/java/cool/happyword/wordmagic/ui/navig…`
`config`	software	healthy	`android/app/src/main/java/cool/happyword/wordmagic/ui/config`
`parent`	software	healthy	`android/app/src/main/java/cool/happyword/wordmagic/ui/parent`
`components`	software	healthy	`android/app/src/main/java/cool/happyword/wordmagic/ui/compo…`
`result`	software	healthy	`android/app/src/main/java/cool/happyword/wordmagic/ui/result`
`home`	software	healthy	`android/app/src/main/java/cool/happyword/wordmagic/ui/home`
`battle`	software	healthy	`android/app/src/main/java/cool/happyword/wordmagic/ui/battle`
`app`	software	healthy	`android/app/src/main/java/cool/happyword/wordmagic/app`
`core`	software	healthy	`android/app/src/main/java/cool/happyword/wordmagic/core`
`cocos`	software	healthy	`android/app/src/main/java/cool/happyword/wordmagic/cocos`
`generated`	software	healthy	`generated`
`recraft`	software	healthy	`generated/recraft`
`spellbook-covers`	software	healthy	`generated/recraft/spellbook-covers`
`icons`	software	healthy	`generated/recraft/icons`
`monsters`	software	healthy	`generated/recraft/monsters`
`docs`	software	healthy	`docs`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`PublishIn`	software	healthy	`server/mock_ui_server.py:419`
`PairRedeemIn`	software	healthy	`server/mock_ui_server.py:423`
`ChildProfileUpdateIn`	software	healthy	`server/mock_ui_server.py:431`
`_FailingProvider`	software	healthy	`server/tests/test_notification_service.py:99`
`StubAppleOAuthClient`	software	healthy	`server/tests/test_oauth_apple_routes.py:28`
`_FakeCompletions`	software	healthy	`server/tests/test_lesson_service.py:621`
`_FakeChat`	software	healthy	`server/tests/test_lesson_service.py:626`
`_FakeClient`	software	healthy	`server/tests/test_lesson_service.py:629`
`_FakeMessage`	software	healthy	`server/tests/test_lesson_service.py:612`
`_FakeChoice`	software	healthy	`server/tests/test_lesson_service.py:615`
`_FakeCompletion`	software	healthy	`server/tests/test_lesson_service.py:618`
`_FakeResponses`	software	healthy	`server/tests/test_lesson_service.py:500`
`FakeInsertResult`	software	healthy	`server/tests/test_db_connectivity_smoke.py:4`
`FakeDeleteResult`	software	healthy	`server/tests/test_db_connectivity_smoke.py:8`
`FakeCollection`	software	healthy	`server/tests/test_db_connectivity_smoke.py:12`
`FakeDatabase`	software	healthy	`server/tests/test_db_connectivity_smoke.py:32`
`FakeAdmin`	software	healthy	`server/tests/test_db_connectivity_smoke.py:44`
`FakeClient`	software	healthy	`server/tests/test_db_connectivity_smoke.py:53`
`_Response`	software	healthy	`server/tests/test_storage_provider.py:231`
`_Client`	software	healthy	`server/tests/test_storage_provider.py:236`
`StubAlipayOAuthClient`	software	healthy	`server/tests/test_oauth_alipay_routes.py:25`
`FakeClient`	software	healthy	`server/tests/test_e2e_drop_old_pr_dbs.py:169`
`FakeImages`	software	healthy	`server/tests/test_image_generation_providers.py:107`
`FakeAsyncOpenAI`	software	healthy	`server/tests/test_image_generation_providers.py:114`
`FakeResponse`	software	healthy	`server/tests/test_image_generation_providers.py:243`
`FakeAsyncClient`	software	healthy	`server/tests/test_image_generation_providers.py:424`
`StubGoogleOAuthClient`	software	healthy	`server/tests/test_oauth_google_routes.py:28`
`_RequestCodeClient`	software	healthy	`server/tests/test_e2e_auth_utils.py:8`
`StubWeChatOAuthClient`	software	healthy	`server/tests/test_oauth_wechat_routes.py:25`
`TimeoutClient`	software	healthy	`server/tests/test_google_oauth_service.py:38`
`_ExplodingProvider`	software	healthy	`server/tests/test_parent_otp.py:85`
`ParentSession`	software	healthy	`server/tests/e2e/_utils/auth.py:26`
`DeviceSession`	software	healthy	`server/tests/e2e/_utils/auth.py:36`
`UnsafeDatabaseName`	software	healthy	`server/scripts/e2e_reset_db.py:77`
`ResetSummary`	software	healthy	`server/scripts/e2e_reset_db.py:82`
`UrlRef`	software	healthy	`server/scripts/migrate_vercel_blob_to_cos.py:57`
`UnsafePattern`	software	healthy	`server/scripts/e2e_drop_old_pr_dbs.py:41`
`CloudBaseApiError`	software	healthy	`server/scripts/flexdb_api_smoke.py:27`
`FlexDbApiClient`	software	healthy	`server/scripts/flexdb_api_smoke.py:55`
`_SmokeCase`	software	healthy	`server/scripts/cos_storage_smoke.py:35`
`Settings`	software	healthy	`server/app/config.py:52`
`OAuthProvider`	software	healthy	`server/app/models/oauth_identity.py:8`
`OAuthIdentity`	software	healthy	`server/app/models/oauth_identity.py:15`
`Settings`	software	healthy	`server/app/models/oauth_identity.py:23`
`EmailVerificationStatus`	software	healthy	`server/app/models/email_verification.py:8`
`EmailVerification`	software	healthy	`server/app/models/email_verification.py:14`
`Settings`	software	healthy	`server/app/models/email_verification.py:32`
`WordPack`	software	healthy	`server/app/models/word_pack.py:22`
`Settings`	software	healthy	`server/app/models/word_pack.py:36`
`ChildCheckIn`	software	healthy	`server/app/models/child_checkin.py:9`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`GET /api/v1/public/health`	api	healthy	`server/mock_ui_server.py`
`GET /api/v1/public/packs/latest.json`	api	healthy	`server/mock_ui_server.py`
`GET /api/v1/public/global-packs/latest.json`	api	healthy	`server/mock_ui_server.py`
`GET /api/v1/admin/stats`	api	healthy	`server/mock_ui_server.py`
`POST /api/v1/admin/packs/publish`	api	healthy	`server/mock_ui_server.py`
`GET /api/v1/family/{family_id}/lesson-drafts`	api	healthy	`server/mock_ui_server.py`
`GET /api/v1/family/{family_id}/lesson-drafts/{draft_id}`	api	healthy	`server/mock_ui_server.py`
`PATCH /api/v1/family/{family_id}/lesson-drafts/{draft_id}`	api	healthy	`server/mock_ui_server.py`
`PUT /api/v1/family/{family_id}/lesson-drafts/{draft_id}`	api	healthy	`server/mock_ui_server.py`
`POST /api/v1/family/{family_id}/lesson-drafts/{draft_id}/ap…`	api	healthy	`server/mock_ui_server.py`
`POST /api/v1/family/{family_id}/lesson-drafts/{draft_id}/re…`	api	healthy	`server/mock_ui_server.py`
`POST /api/v1/family/{family_id}/lessons/import`	api	healthy	`server/mock_ui_server.py`
`POST /api/v1/public/pair/redeem`	api	healthy	`server/mock_ui_server.py`
`POST /api/v1/family/{family_id}/unbind`	api	healthy	`server/mock_ui_server.py`
`GET /api/v1/family/{family_id}/me`	api	healthy	`server/mock_ui_server.py`
`PUT /api/v1/family/{family_id}/profile`	api	healthy	`server/mock_ui_server.py`
`GET /api/v1/family/_/family-packs/latest.json`	api	healthy	`server/mock_ui_server.py`
`GET /api/v1/family/{family_id}/family-packs/latest.json`	api	healthy	`server/mock_ui_server.py`
`GET /api/v1/family/_/packs/latest.json`	api	healthy	`server/mock_ui_server.py`
`GET /api/v1/family/{family_id}/packs/latest.json`	api	healthy	`server/mock_ui_server.py`
`POST /api/v1/family/{family_id}/word-stats/sync`	api	healthy	`server/mock_ui_server.py`
`GET /api/v1/family/{family_id}/word-stats`	api	healthy	`server/mock_ui_server.py`
`GET /api/v1/family/{family_id}/wishlist`	api	healthy	`server/mock_ui_server.py`
`POST /api/v1/family/{family_id}/wishlist/sync-custom`	api	healthy	`server/mock_ui_server.py`
`POST /api/v1/family/{family_id}/redemption-requests`	api	healthy	`server/mock_ui_server.py`
`GET /api/v1/family/{family_id}/redemption-requests`	api	healthy	`server/mock_ui_server.py`
`GET /api/v1/family/{family_id}/redemption-requests/poll`	api	healthy	`server/mock_ui_server.py`
`GET /__mock_state__`	api	healthy	`server/mock_ui_server.py`
`GET /`	api	healthy	`server/app/main.py`
`GET /login`	api	healthy	`server/app/routers/admin_pages.py`
`POST /login`	api	healthy	`server/app/routers/admin_pages.py`
`POST /logout`	api	healthy	`server/app/routers/admin_pages.py`
`GET /system-config`	api	healthy	`server/app/routers/admin_pages.py`
`POST /system-config/llm-provider`	api	healthy	`server/app/routers/admin_pages.py`
`POST /system-config/llm-provider/test`	api	healthy	`server/app/routers/admin_pages.py`
`POST /system-config/image-provider`	api	healthy	`server/app/routers/admin_pages.py`
`POST /system-config/image-provider/test`	api	healthy	`server/app/routers/admin_pages.py`
`GET /feedback`	api	healthy	`server/app/routers/admin_pages.py`
`POST /feedback/{feedback_id}/reply`	api	healthy	`server/app/routers/admin_pages.py`
`POST /feedback/{feedback_id}/delete`	api	healthy	`server/app/routers/admin_pages.py`
`GET /parents`	api	healthy	`server/app/routers/admin_pages.py`
`GET /parents/{username}`	api	healthy	`server/app/routers/admin_pages.py`
`POST /parents/{username}/suspend`	api	healthy	`server/app/routers/admin_pages.py`
`POST /parents/{username}/restore`	api	healthy	`server/app/routers/admin_pages.py`
`GET /devices`	api	healthy	`server/app/routers/admin_pages.py`
`GET /devices/{binding_id}/revoke`	api	healthy	`server/app/routers/admin_pages.py`
`POST /devices/{binding_id}/revoke`	api	healthy	`server/app/routers/admin_pages.py`
`GET /devices/{binding_id}/restore`	api	healthy	`server/app/routers/admin_pages.py`
`POST /devices/{binding_id}/restore`	api	healthy	`server/app/routers/admin_pages.py`
`GET /global-packs`	api	healthy	`server/app/routers/admin_pages.py`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`auth::server/mock_ui_server.py`	security	healthy	`server/mock_ui_server.py`
`auth::server/app/routers/oauth_common.py`	security	healthy	`server/app/routers/oauth_common.py`
`auth::server/app/routers/oauth_google.py`	security	healthy	`server/app/routers/oauth_google.py`
`auth::server/tests/test_pair_service.py`	security	healthy	`server/tests/test_pair_service.py`
`auth::server/tests/test_parent_pages.py`	security	healthy	`server/tests/test_parent_pages.py`
`auth::server/app/services/oauth_login_service.py`	security	healthy	`server/app/services/oauth_login_service.py`
`auth::server/.env.local.example`	security	healthy	`server/.env.local.example`
`auth::server/tests/test_oauth_google_routes.py`	security	healthy	`server/tests/test_oauth_google_routes.py`
`auth::server/tests/test_oauth_apple_routes.py`	security	healthy	`server/tests/test_oauth_apple_routes.py`
`auth::server/tests/test_apple_oauth_callbacks.py`	security	healthy	`server/tests/test_apple_oauth_callbacks.py`
`auth::server/tests/test_oauth_handoff_service.py`	security	healthy	`server/tests/test_oauth_handoff_service.py`
`auth::server/tests/test_lessons_import_anonymous.py`	security	healthy	`server/tests/test_lessons_import_anonymous.py`
`auth::server/app/services/google_oauth_service.py`	security	healthy	`server/app/services/google_oauth_service.py`
`auth::server/tests/test_google_oauth_service.py`	security	healthy	`server/tests/test_google_oauth_service.py`
`auth::server/app/services/oauth_return_origin_service.py`	security	healthy	`server/app/services/oauth_return_origin_service.py`
`auth::server/tests/test_typed_session.py`	security	healthy	`server/tests/test_typed_session.py`
`auth::server/tests/test_oauth_alipay_routes.py`	security	healthy	`server/tests/test_oauth_alipay_routes.py`
`auth::server/scripts/seed_parent_session.py`	security	healthy	`server/scripts/seed_parent_session.py`
`auth::server/app/config.py`	security	healthy	`server/app/config.py`
`auth::server/tests/e2e/_utils/auth.py`	security	healthy	`server/tests/e2e/_utils/auth.py`
`auth::server/app/routers/oauth_wechat.py`	security	healthy	`server/app/routers/oauth_wechat.py`
`auth::server/app/templates/parent/oauth_bind_email.html`	security	healthy	`server/app/templates/parent/oauth_bind_email.html`
`auth::README.md`	security	healthy	`README.md`
`auth::server/app/services/auth_service.py`	security	healthy	`server/app/services/auth_service.py`
`auth::server/app/routers/parent_pages.py`	security	healthy	`server/app/routers/parent_pages.py`
`auth::server/README.md`	security	healthy	`server/README.md`
`auth::server/app/routers/oauth_alipay.py`	security	healthy	`server/app/routers/oauth_alipay.py`
`auth::tools/vercel/env-bootstrap.sh`	security	healthy	`tools/vercel/env-bootstrap.sh`
`auth::server/scripts/publish_pack.py`	security	healthy	`server/scripts/publish_pack.py`
`auth::server/tests/test_alipay_oauth_service.py`	security	healthy	`server/tests/test_alipay_oauth_service.py`
`auth::server/app/routers/pair.py`	security	healthy	`server/app/routers/pair.py`
`auth::server/tests/test_oauth_return_origin.py`	security	healthy	`server/tests/test_oauth_return_origin.py`
`auth::server/tests/test_oauth_login_service.py`	security	healthy	`server/tests/test_oauth_login_service.py`
`auth::server/tests/e2e/test_child_word_stats_e2e.py`	security	healthy	`server/tests/e2e/test_child_word_stats_e2e.py`
`auth::server/tests/test_parent_login_page.py`	security	healthy	`server/tests/test_parent_login_page.py`
`auth::server/tests/test_google_oauth_callbacks.py`	security	healthy	`server/tests/test_google_oauth_callbacks.py`
`auth::server/app/services/oauth_redirect_urls.py`	security	healthy	`server/app/services/oauth_redirect_urls.py`
`auth::server/tests/test_device_management.py`	security	healthy	`server/tests/test_device_management.py`
`auth::server/app/services/alipay_oauth_service.py`	security	healthy	`server/app/services/alipay_oauth_service.py`
`auth::server/tests/test_oauth_wechat_routes.py`	security	healthy	`server/tests/test_oauth_wechat_routes.py`
`auth::server/app/routers/admin_packs.py`	security	healthy	`server/app/routers/admin_packs.py`
`auth::shared/contracts/openapi/happyword-api.openapi.json`	security	healthy	`shared/contracts/openapi/happyword-api.openapi.json`
`auth::server/app/services/apple_oauth_service.py`	security	healthy	`server/app/services/apple_oauth_service.py`
`auth::server/app/services/oauth_pending_identity_service.py`	security	healthy	`server/app/services/oauth_pending_identity_service.py`
`auth::server/app/routers/child_wishlist.py`	security	healthy	`server/app/routers/child_wishlist.py`
`auth::server/app/templates/parent/login.html`	security	healthy	`server/app/templates/parent/login.html`
`auth::plugins/the1-cocos-codex-agent/skills/cocos-backend-i…`	security	healthy	`plugins/the1-cocos-codex-agent/skills/cocos-backend-integra…`
`auth::server/tests/test_apple_oauth_service.py`	security	healthy	`server/tests/test_apple_oauth_service.py`
`auth::server/app/services/parent_password_service.py`	security	healthy	`server/app/services/parent_password_service.py`
`auth::server/app/services/wechat_oauth_service.py`	security	healthy	`server/app/services/wechat_oauth_service.py`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`HAS_TCB_SECRET_ID`	cicd	healthy	`—`
`E2E_ADMIN_PASS`	cicd	healthy	`—`
`SLACK_WEBHOOK_URL`	cicd	healthy	`—`
`TCB_SECRET_ID`	cicd	healthy	`—`
`HAS_CLOUDBASE_STAGING_BASE_URL`	cicd	healthy	`—`
`TCB_ENV_ID`	cicd	healthy	`—`
`TCB_E2E_MONGODB_URI`	cicd	healthy	`—`
`TCB_SECRET_KEY`	cicd	healthy	`—`
`E2E_CRON_SECRET`	cicd	healthy	`—`
`CLOUDBASE_STAGING_BASE_URL`	cicd	healthy	`—`
`CLOUDBASE_PROD_BASE_URL`	cicd	healthy	`—`
`E2E_ADMIN_USER`	cicd	healthy	`—`
`E2E_STAGING_DB_NAME`	cicd	healthy	`—`

Label	Layer	Status	Path
`password_literal::server/tests/test_admin_bootstrap.py`	security	healthy	`server/tests/test_admin_bootstrap.py`
`password_literal::server/tests/test_admin_bootstrap.py`	security	healthy	`server/tests/test_admin_bootstrap.py`
`password_literal::server/tests/test_admin_bootstrap.py`	security	healthy	`server/tests/test_admin_bootstrap.py`
`password_literal::server/tests/test_e2e_reset_db.py`	security	healthy	`server/tests/test_e2e_reset_db.py`
`password_literal::server/tests/test_e2e_reset_db.py`	security	healthy	`server/tests/test_e2e_reset_db.py`
`password_literal::server/tests/test_feedback_pages.py`	security	healthy	`server/tests/test_feedback_pages.py`
`password_literal::server/tests/test_parent_password.py`	security	healthy	`server/tests/test_parent_password.py`
`password_literal::server/tests/test_parent_password.py`	security	healthy	`server/tests/test_parent_password.py`
`password_literal::server/tests/test_parent_password.py`	security	healthy	`server/tests/test_parent_password.py`

Label	Layer	Status	Path
`deploy`	cicd	healthy	`.github/workflows/server-cloudbase-cd.yml`
`cloudbase_prod`	cicd	healthy	`.github/workflows/server-cd.yml`
`server_pytest`	cicd	healthy	`.github/workflows/server-ci.yml`
`cloudbase_staging_e2e`	cicd	healthy	`.github/workflows/server-ci.yml`

Label	Layer	Status	Path
`port:8080`	network	healthy	`Dockerfile`
`port:27017`	network	healthy	`server/README.md`
`port:587`	network	healthy	`server/tests/test_email_provider.py`

Label	Layer	Status	Path
`vps::droplet`	hardware	healthy	`tools/recraft/monster-roster.json`
`vps::aws`	hardware	healthy	`plugins/the1-cocos-codex-agent/skills/cocos-backend-integra…`
`vps::azure`	hardware	healthy	`plugins/the1-cocos-codex-agent/skills/cocos-backend-integra…`

Label	Layer	Status	Path
`gha::server-cloudbase-cd`	cicd	healthy	`.github/workflows/server-cloudbase-cd.yml`
`gha::server-cd`	cicd	healthy	`.github/workflows/server-cd.yml`
`gha::server-ci`	cicd	healthy	`.github/workflows/server-ci.yml`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`README.md`
`10.0.2.2`	network	healthy	`server/README.md`

Label	Layer	Status	Path
`image::Dockerfile`	hardware	healthy	`Dockerfile`
`image::server/Dockerfile`	hardware	healthy	`server/Dockerfile`

Label	Layer	Status	Path
`repobility-clone-owpoapxk`	software	healthy	`/tmp/repobility-clone-owpoapxk`

Label	Layer	Status	Path
`mongodb`	data	healthy	`README.md`

Label	Layer	Status	Path
`gpu (detected)`	hardware	healthy	`plugins/the1-cocos-codex-agent/skills/cocos-mobile-optimize…`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/8a366f20-6ec4-4b89-82e9-b8c8ebb444d8/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/8a366f20-6ec4-4b89-82e9-b8c8ebb444d8/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

terryma2024/happyword

Complete repo analysis

function 50+

file 50+

directory 50+

class 50+

endpoint 50+

auth 50+

env_var 13

secret 9

job 4

port 3

vps 3

pipeline 3

service 2

container 2

repo 1

database 1

gpu 1