Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

TonyWang-hub/mcp-cn-commerce

https://github.com/TonyWang-hub/mcp-cn-commerce · scanned 2026-06-16 00:40 UTC (2 months, 1 week ago)

79 raw signals (0 security + 79 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 57 actionable findings from 1 signal source. 22 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

88.9% cov · 57 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 0 Medium 11 Low 43 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 57 Crowd 0 Layer: Software 20 Hardware 3 Frontend 1 Security 7 Cicd 3 Quality 23

Exclude dismissed / FP Exclude test files

All 2469 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`test_client_creation_is_lazy`	software	healthy	`tests/test_performance.py:35`
`test_client_reuse`	software	healthy	`tests/test_performance.py:40`
`test_client_pool_limits`	software	healthy	`tests/test_performance.py:54`
`test_client_close_and_recreate`	software	healthy	`tests/test_performance.py:68`
`test_client_close_idempotent`	software	healthy	`tests/test_performance.py:79`
`test_multiple_clients_independent`	software	healthy	`tests/test_performance.py:86`
`test_client_creation_performance`	software	healthy	`tests/test_performance.py:102`
`test_single_endpoint_throughput`	software	healthy	`tests/test_performance.py:120`
`test_many_endpoints_throughput`	software	healthy	`tests/test_performance.py:132`
`test_global_metrics_consistency`	software	healthy	`tests/test_performance.py:145`
`test_summary_generation_performance`	software	healthy	`tests/test_performance.py:157`
`test_reset_performance`	software	healthy	`tests/test_performance.py:170`
`test_endpoint_metrics_latency_statistics`	software	healthy	`tests/test_performance.py:183`
`test_rate_limiter_first_call_immediate`	software	healthy	`tests/test_performance.py:204`
`test_rate_limiter_interval_accuracy`	software	healthy	`tests/test_performance.py:213`
`test_rate_limiter_high_throughput`	software	healthy	`tests/test_performance.py:233`
`test_rate_limiter_min_interval_calculation`	software	healthy	`tests/test_performance.py:247`
`test_concurrent_rate_limiter`	software	healthy	`tests/test_performance.py:260`
`acquire_n`	software	healthy	`tests/test_performance.py:264`
`test_sign_performance_md5`	software	healthy	`tests/test_performance.py:279`
`test_sign_performance_hmac_sha256`	software	healthy	`tests/test_performance.py:299`
`test_sign_with_many_params`	software	healthy	`tests/test_performance.py:319`
`test_sign_result_consistency`	software	healthy	`tests/test_performance.py:334`
`test_sign_different_secrets_produce_different_results`	software	healthy	`tests/test_performance.py:343`
`test_concurrent_metric_recording`	software	healthy	`tests/test_performance.py:362`
`record_requests`	software	healthy	`tests/test_performance.py:381`
`test_concurrent_metric_recording_mixed_success`	software	healthy	`tests/test_performance.py:377`
`test_concurrent_health_checks`	software	healthy	`tests/test_performance.py:402`
`check_health`	software	healthy	`tests/test_performance.py:406`
`test_high_volume_recording`	software	healthy	`tests/test_performance.py:426`
`test_summary_with_many_endpoints`	software	healthy	`tests/test_performance.py:445`
`test_get_all_metrics_performance`	software	healthy	`tests/test_performance.py:458`
`test_endpoint_metrics_creation_speed`	software	healthy	`tests/test_performance.py:479`
`test_endpoint_metrics_update_speed`	software	healthy	`tests/test_performance.py:488`
`test_endpoint_metrics_property_access`	software	healthy	`tests/test_performance.py:502`
`test_compute_delay_performance`	software	healthy	`tests/test_performance.py:521`
`test_compute_delay_exponential_backoff`	software	healthy	`tests/test_performance.py:533`
`test_compute_delay_respects_max`	software	healthy	`tests/test_performance.py:546`
`test_should_retry_exception_performance`	software	healthy	`tests/test_performance.py:554`
`test_should_retry_http_status_performance`	software	healthy	`tests/test_performance.py:573`
`test_hit_rate_with_no_lookups`	software	healthy	`tests/test_dashboard.py:38`
`test_hit_rate_with_hits_and_misses`	software	healthy	`tests/test_dashboard.py:44`
`test_hit_rate_all_hits`	software	healthy	`tests/test_dashboard.py:50`
`test_hit_rate_all_misses`	software	healthy	`tests/test_dashboard.py:55`
`test_record_hit`	software	healthy	`tests/test_dashboard.py:67`
`test_record_miss`	software	healthy	`tests/test_dashboard.py:75`
`test_record_eviction`	software	healthy	`tests/test_dashboard.py:81`
`test_set_entry_count`	software	healthy	`tests/test_dashboard.py:88`
`test_hit_rate_calculation`	software	healthy	`tests/test_dashboard.py:95`
`test_reset`	software	healthy	`tests/test_dashboard.py:309`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`TestHTTPClientConnectionPool`	software	healthy	`tests/test_performance.py:32`
`TestMetricsCollectionPerformance`	software	healthy	`tests/test_performance.py:117`
`TestRateLimiterPerformance`	software	healthy	`tests/test_performance.py:200`
`TestSignaturePerformance`	software	healthy	`tests/test_performance.py:276`
`TestConcurrentPerformance`	software	healthy	`tests/test_performance.py:358`
`TestMetricsBenchmark`	software	healthy	`tests/test_performance.py:423`
`TestEndpointMetricsPerformance`	software	healthy	`tests/test_performance.py:476`
`TestRetryConfigPerformance`	software	healthy	`tests/test_performance.py:518`
`TestCacheStats`	software	healthy	`tests/test_dashboard.py:35`
`TestCacheStatsTracker`	software	healthy	`tests/test_dashboard.py:64`
`TestResponseTimeHistogram`	software	healthy	`tests/test_dashboard.py:132`
`TestAlertRule`	software	healthy	`tests/test_dashboard.py:201`
`TestMonitoringDashboard`	software	healthy	`tests/test_dashboard.py:223`
`TestDashboardAlerts`	software	healthy	`tests/test_dashboard.py:323`
`TestDashboardIntegration`	software	healthy	`tests/test_dashboard.py:451`
`TestOceanEngineFullRequestFlow`	software	healthy	`tests/test_integration.py:70`
`TestJDFlow`	software	healthy	`tests/test_integration.py:156`
`TestTaobaoFlow`	software	healthy	`tests/test_integration.py:204`
`TestErrorHandlingFlow`	software	healthy	`tests/test_integration.py:242`
`TestRetryMechanismIntegration`	software	healthy	`tests/test_integration.py:372`
`TestRateLimiterIntegration`	software	healthy	`tests/test_integration.py:538`
`TestConfigLoadingIntegration`	software	healthy	`tests/test_integration.py:621`
`TestCrossPlatformConsistency`	software	healthy	`tests/test_integration.py:719`
`TestSigningIntegration`	software	healthy	`tests/test_integration.py:762`
`TestSecurityInputValidation`	software	healthy	`tests/test_integration.py:844`
`TestPaginationIntegration`	software	healthy	`tests/test_integration.py:948`
`TestEndToEndScenarios`	software	healthy	`tests/test_integration.py:1001`
`TestWeixinStoreTokenCache`	software	healthy	`tests/test_integration.py:1161`
`TestDouDianSigningIntegration`	software	healthy	`tests/test_integration.py:1229`
`TestDoudianFullRequestFlow`	software	healthy	`tests/test_integration.py:1258`
`TestPinduoduoFullRequestFlow`	software	healthy	`tests/test_integration.py:1299`
`AutomationReport`	software	healthy	`tests/test_automation.py:140`
`TestModuleImportability`	software	healthy	`tests/test_automation.py:184`
`TestToolDiscovery`	software	healthy	`tests/test_automation.py:241`
`TestFullRequestFlowAutomation`	software	healthy	`tests/test_automation.py:303`
`TestErrorPropagationAutomation`	software	healthy	`tests/test_automation.py:442`
`TestCrossPlatformConsistency`	software	healthy	`tests/test_automation.py:536`
`TestEnvironmentConfigAutomation`	software	healthy	`tests/test_automation.py:630`
`TestRetryAutomation`	software	healthy	`tests/test_automation.py:690`
`TestRateLimiterAutomation`	software	healthy	`tests/test_automation.py:794`
`TestMetricsAutomation`	software	healthy	`tests/test_automation.py:845`
`TestSecurityAutomation`	software	healthy	`tests/test_automation.py:897`
`TestServerLifecycleAutomation`	software	healthy	`tests/test_automation.py:963`
`TestPaginationAutomation`	software	healthy	`tests/test_automation.py:1021`
`TestHealthCheckAutomation`	software	healthy	`tests/test_automation.py:1074`
`TestBatchRequestAutomation`	software	healthy	`tests/test_automation.py:1118`
`TestAutomationReport`	software	healthy	`tests/test_automation.py:1172`
`CompatTestResult`	software	healthy	`tests/test_api_compatibility.py:50`
`TestBackwardCompatibilityOldResponseFormats`	software	healthy	`tests/test_api_compatibility.py:111`
`TestForwardCompatibilityUnknownFields`	software	healthy	`tests/test_api_compatibility.py:280`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`conftest.py`	software	healthy	`conftest.py`
`README.md`	software	healthy	`README.md`
`README_en.md`	software	healthy	`README_en.md`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`Dockerfile`	software	healthy	`Dockerfile`
`glama.json`	software	healthy	`glama.json`
`.pre-commit-config.yaml`	software	healthy	`.pre-commit-config.yaml`
`llms-install.md`	software	healthy	`llms-install.md`
`server.json`	software	healthy	`server.json`
`.env.example`	software	healthy	`.env.example`
`pyproject.toml`	software	healthy	`pyproject.toml`
`Makefile`	software	healthy	`Makefile`
`LICENSE`	software	healthy	`LICENSE`
`CODE_OF_CONDUCT.md`	software	healthy	`CODE_OF_CONDUCT.md`
`SECURITY.md`	software	healthy	`SECURITY.md`
`CHANGELOG.md`	software	healthy	`CHANGELOG.md`
`docker-compose.yml`	software	healthy	`docker-compose.yml`
`TODO.md`	software	healthy	`TODO.md`
`test_performance.py`	software	healthy	`tests/test_performance.py`
`test_dashboard.py`	software	healthy	`tests/test_dashboard.py`
`test_integration.py`	software	healthy	`tests/test_integration.py`
`test_automation.py`	software	healthy	`tests/test_automation.py`
`test_api_compatibility.py`	software	healthy	`tests/test_api_compatibility.py`
`test_opt_in_features.py`	software	healthy	`tests/test_opt_in_features.py`
`test_i18n.py`	software	healthy	`tests/test_i18n.py`
`test_cli.py`	software	healthy	`tests/test_cli.py`
`test_normalizer.py`	software	healthy	`tests/test_normalizer.py`
`test_sdd_phase0.py`	software	healthy	`tests/test_sdd_phase0.py`
`test_common_tools.py`	software	healthy	`tests/test_common_tools.py`
`test_benchmark.py`	software	healthy	`tests/test_benchmark.py`
`test_item3_bugfixes.py`	software	healthy	`tests/test_item3_bugfixes.py`
`test_cn_commerce_base.py`	software	healthy	`tests/test_cn_commerce_base.py`
`dashboard.md`	software	healthy	`docs/dashboard.md`
`request-queue.md`	software	healthy	`docs/request-queue.md`
`request-timeout.md`	software	healthy	`docs/request-timeout.md`
`security-best-practices.md`	software	healthy	`docs/security-best-practices.md`
`FAQ.md`	software	healthy	`docs/FAQ.md`
`cli.md`	software	healthy	`docs/cli.md`
`batch-operations.md`	software	healthy	`docs/batch-operations.md`
`request-cache.md`	software	healthy	`docs/request-cache.md`
`caching.md`	software	healthy	`docs/caching.md`
`health-check.md`	software	healthy	`docs/health-check.md`
`request-encryption.md`	software	healthy	`docs/request-encryption.md`
`api-reference.md`	software	healthy	`docs/api-reference.md`
`registry-submission.md`	software	healthy	`docs/registry-submission.md`
`async-queue.md`	software	healthy	`docs/async-queue.md`
`tracing.md`	software	healthy	`docs/tracing.md`
`api-versioning.md`	software	healthy	`docs/api-versioning.md`
`configuration.md`	software	healthy	`docs/configuration.md`
`logging.md`	software	healthy	`docs/logging.md`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`tests`	software	healthy	`tests`
`docs`	software	healthy	`docs`
`specs`	software	healthy	`docs/specs`
`shared`	software	healthy	`shared`
`scripts`	software	healthy	`scripts`
`templates`	software	healthy	`templates`
`daily-report`	software	healthy	`templates/daily-report`
`cs-classify`	software	healthy	`templates/cs-classify`
`bad-review-alert`	software	healthy	`templates/bad-review-alert`
`product-select`	software	healthy	`templates/product-select`
`kol-match`	software	healthy	`templates/kol-match`
`servers`	software	healthy	`servers`
`taobao`	software	healthy	`servers/taobao`
`tests`	software	healthy	`servers/taobao/tests`
`oceanengine`	software	healthy	`servers/oceanengine`
`tests`	software	healthy	`servers/oceanengine/tests`
`weixin_store`	software	healthy	`servers/weixin_store`
`tests`	software	healthy	`servers/weixin_store/tests`
`pinduoduo`	software	healthy	`servers/pinduoduo`
`tests`	software	healthy	`servers/pinduoduo/tests`
`xiaohongshu`	software	healthy	`servers/xiaohongshu`
`tests`	software	healthy	`servers/xiaohongshu/tests`
`kuaishou`	software	healthy	`servers/kuaishou`
`tests`	software	healthy	`servers/kuaishou/tests`
`doudian`	software	healthy	`servers/doudian`
`tests`	software	healthy	`servers/doudian/tests`
`jd`	software	healthy	`servers/jd`
`tests`	software	healthy	`servers/jd/tests`
`examples`	software	healthy	`examples`
`best-practices`	software	healthy	`examples/best-practices`
`basic`	software	healthy	`examples/basic`
`advanced`	software	healthy	`examples/advanced`
`.github`	software	healthy	`.github`
`ISSUE_TEMPLATE`	software	healthy	`.github/ISSUE_TEMPLATE`
`workflows`	software	healthy	`.github/workflows`

Label	Layer	Status	Path
`image::Dockerfile`	hardware	healthy	`Dockerfile`
`test`	hardware	healthy	`docker-compose.yml`
`test-cov`	hardware	healthy	`docker-compose.yml`
`lint`	hardware	healthy	`docker-compose.yml`
`shell`	hardware	healthy	`docker-compose.yml`
`oceanengine`	hardware	healthy	`docker-compose.yml`
`doudian`	hardware	healthy	`docker-compose.yml`
`jd`	hardware	healthy	`docker-compose.yml`
`taobao`	hardware	healthy	`docker-compose.yml`
`pinduoduo`	hardware	healthy	`docker-compose.yml`
`kuaishou`	hardware	healthy	`docker-compose.yml`
`xiaohongshu`	hardware	healthy	`docker-compose.yml`
`weixin_store`	hardware	healthy	`docker-compose.yml`

Label	Layer	Status	Path
`auth::servers/doudian/server.py`	security	healthy	`servers/doudian/server.py`
`auth::server.json`	security	healthy	`server.json`
`auth::servers/weixin_store/server.py`	security	healthy	`servers/weixin_store/server.py`
`auth::servers/oceanengine/server.py`	security	healthy	`servers/oceanengine/server.py`
`auth::tests/test_automation.py`	security	healthy	`tests/test_automation.py`
`auth::tests/test_integration.py`	security	healthy	`tests/test_integration.py`
`auth::servers/xiaohongshu/server.py`	security	healthy	`servers/xiaohongshu/server.py`
`auth::tests/test_cn_commerce_base.py`	security	healthy	`tests/test_cn_commerce_base.py`
`auth::README.md`	security	healthy	`README.md`
`auth::.github/ISSUE_TEMPLATE/platform_request.yml`	security	healthy	`.github/ISSUE_TEMPLATE/platform_request.yml`
`auth::.github/workflows/mcp-registry.yml`	security	healthy	`.github/workflows/mcp-registry.yml`
`auth::shared/cn_commerce_base.py`	security	healthy	`shared/cn_commerce_base.py`

Label	Layer	Status	Path
`test`	cicd	healthy	`.github/workflows/test.yml`
`install-smoke`	cicd	healthy	`.github/workflows/test.yml`
`lint`	cicd	healthy	`.github/workflows/test.yml`
`typecheck`	cicd	healthy	`.github/workflows/test.yml`
`code-quality`	cicd	healthy	`.github/workflows/test.yml`
`publish-registry`	cicd	healthy	`.github/workflows/mcp-registry.yml`
`auto-merge`	cicd	healthy	`.github/workflows/auto-merge.yml`
`quality`	cicd	healthy	`.github/workflows/publish.yml`
`release`	cicd	healthy	`.github/workflows/publish.yml`

Label	Layer	Status	Path
`gha::test`	cicd	healthy	`.github/workflows/test.yml`
`gha::mcp-registry`	cicd	healthy	`.github/workflows/mcp-registry.yml`
`gha::auto-merge`	cicd	healthy	`.github/workflows/auto-merge.yml`
`gha::publish`	cicd	healthy	`.github/workflows/publish.yml`

Label	Layer	Status	Path
`GITHUB_TOKEN`	cicd	healthy	`—`
`PYPI_TOKEN`	cicd	healthy	`—`

Label	Layer	Status	Path
`repobility-clone-mliele48`	software	healthy	`/tmp/repobility-clone-mliele48`

Label	Layer	Status	Path
`redis`	data	healthy	`shared/cn_commerce_base.py`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`tests/test_automation.py`

Label	Layer	Status	Path
`loadbalancer`	network	healthy	`tests/test_opt_in_features.py`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/a8cbe20c-6c78-4447-a25e-1fcdaa6d979f/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/a8cbe20c-6c78-4447-a25e-1fcdaa6d979f/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

TonyWang-hub/mcp-cn-commerce

Complete repo analysis

function 50+

class 50+

file 50+

directory 35

container 13

auth 12

job 9

pipeline 4

env_var 2

repo 1

database 1

service 1

load_balancer 1