Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

ViktorBarzin/nextcloud-todos

https://github.com/ViktorBarzin/nextcloud-todos · scanned 2026-06-16 00:49 UTC (2 months, 1 week ago)

25 raw signals (0 security + 25 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 24 actionable findings from 1 signal source. 1 repeated signal grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

100.0% cov · 24 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 1 Medium 2 Low 18 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 24 Crowd 0 Layer: Software 3 Hardware 2 Frontend 1 Security 1 Cicd 2 Quality 6 Api 9

Exclude dismissed / FP Exclude test files

All 251 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`_parsed`	software	healthy	`tests/test_orchestrator.py:7`
`_verdict`	software	healthy	`tests/test_orchestrator.py:11`
`test_mutating_emits_plan_event`	software	healthy	`tests/test_orchestrator.py:16`
`fake_triage`	software	healthy	`tests/test_orchestrator.py:70`
`test_research_emits_answer_event`	software	healthy	`tests/test_orchestrator.py:27`
`test_noise_emits_no_event`	software	healthy	`tests/test_orchestrator.py:36`
`test_changed_etag_still_skipped`	software	healthy	`tests/test_orchestrator.py:45`
`test_completed_todo_skipped`	software	healthy	`tests/test_orchestrator.py:57`
`test_cancelled_todo_skipped`	software	healthy	`tests/test_orchestrator.py:69`
`client`	software	healthy	`tests/test_events_api.py:10`
`test_events_since_cursor`	software	healthy	`tests/test_events_api.py:28`
`test_consume_marks_event`	software	healthy	`tests/test_events_api.py:37`
`test_parse_simple`	software	healthy	`tests/test_parsing.py:9`
`test_parse_with_due`	software	healthy	`tests/test_parsing.py:17`
`test_vevent_is_ignored`	software	healthy	`tests/test_parsing.py:25`
`__init__`	software	healthy	`tests/test_sweep.py:22`
`changed_todos`	software	healthy	`tests/test_sweep.py:26`
`maker`	software	healthy	`tests/test_sweep.py:32`
`test_sweep_only_syncs_allowlisted_calendars`	software	healthy	`tests/test_sweep.py:40`
`fake_triage`	software	healthy	`tests/test_sweep.py:88`
`test_sweep_first_run_baselines_without_processing`	software	healthy	`tests/test_sweep.py:54`
`test_sweep_processes_new_todo_on_later_sync`	software	healthy	`tests/test_sweep.py:77`
`session`	software	healthy	`tests/conftest.py:8`
`test_run_research_emits_answer_event_and_run_row`	software	healthy	`tests/test_runner.py:6`
`fake_agent`	software	healthy	`tests/test_runner.py:28`
`test_run_plan_emits_plan_event`	software	healthy	`tests/test_runner.py:24`
`test_healthz`	software	healthy	`tests/test_app_health.py:9`
`test_api_requires_bearer`	software	healthy	`tests/test_app_health.py:16`
`test_append_note_preserves_summary_adds_line`	software	healthy	`tests/test_caldav_notes.py:6`
`test_append_note_roundtrips_note_with_comma`	software	healthy	`tests/test_caldav_notes.py:17`
`test_todo_roundtrip`	software	healthy	`tests/test_models.py:4`
`client`	software	healthy	`tests/test_webhook_ingress.py:17`
`fake_triage`	software	healthy	`tests/test_webhook_ingress.py:27`
`test_personal_vtodo_is_processed`	software	healthy	`tests/test_webhook_ingress.py:38`
`test_missing_bearer_rejected`	software	healthy	`tests/test_webhook_ingress.py:47`
`test_non_allowlisted_list_dropped`	software	healthy	`tests/test_webhook_ingress.py:53`
`test_updated_event_skipped`	software	healthy	`tests/test_webhook_ingress.py:62`
`test_version`	software	healthy	`tests/test_smoke.py:4`
`test_defaults`	software	healthy	`tests/test_config.py:4`
`test_list_allowlist_parses_csv_env`	software	healthy	`tests/test_config.py:16`
`test_list_allowlist_parses_multiple`	software	healthy	`tests/test_config.py:21`
`test_triage_parses_json_verdict`	software	healthy	`tests/test_triage.py:8`
`handler`	software	healthy	`tests/test_triage.py:17`
`test_noise_is_not_actionable`	software	healthy	`tests/test_triage.py:33`
`maker`	software	healthy	`tests/test_on_approved.py:14`
`test_approval_triggers_execute_run`	software	healthy	`tests/test_on_approved.py:22`
`fake_agent`	software	healthy	`tests/test_on_approved.py:38`
`test_submit_polls_until_complete`	software	healthy	`tests/test_claude_agent.py:6`
`handler`	software	healthy	`tests/test_claude_agent.py:9`
`test_sign_verify_roundtrip`	software	healthy	`tests/test_callbacks_hmac.py:11`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`poetry.lock`	software	healthy	`poetry.lock`
`README.md`	software	healthy	`README.md`
`Dockerfile`	software	healthy	`Dockerfile`
`pyproject.toml`	software	healthy	`pyproject.toml`
`test_orchestrator.py`	software	healthy	`tests/test_orchestrator.py`
`test_events_api.py`	software	healthy	`tests/test_events_api.py`
`test_parsing.py`	software	healthy	`tests/test_parsing.py`
`test_sweep.py`	software	healthy	`tests/test_sweep.py`
`conftest.py`	software	healthy	`tests/conftest.py`
`test_runner.py`	software	healthy	`tests/test_runner.py`
`test_app_health.py`	software	healthy	`tests/test_app_health.py`
`test_caldav_notes.py`	software	healthy	`tests/test_caldav_notes.py`
`test_models.py`	software	healthy	`tests/test_models.py`
`test_webhook_ingress.py`	software	healthy	`tests/test_webhook_ingress.py`
`test_smoke.py`	software	healthy	`tests/test_smoke.py`
`test_config.py`	software	healthy	`tests/test_config.py`
`test_triage.py`	software	healthy	`tests/test_triage.py`
`test_on_approved.py`	software	healthy	`tests/test_on_approved.py`
`test_claude_agent.py`	software	healthy	`tests/test_claude_agent.py`
`test_callbacks_hmac.py`	software	healthy	`tests/test_callbacks_hmac.py`
`test_calendars.py`	software	healthy	`tests/test_calendars.py`
`test_card_payload.py`	software	healthy	`tests/test_card_payload.py`
`webhook_created.json`	software	healthy	`tests/fixtures/webhook_created.json`
`openclaw.plugin.json`	software	healthy	`openclaw-plugin/openclaw.plugin.json`
`card.test.mjs`	software	healthy	`openclaw-plugin/card.test.mjs`
`package.json`	software	healthy	`openclaw-plugin/package.json`
`card.mjs`	software	healthy	`openclaw-plugin/card.mjs`
`ntClient.mjs`	software	healthy	`openclaw-plugin/ntClient.mjs`
`index.mjs`	software	healthy	`openclaw-plugin/index.mjs`
`calendars.py`	software	healthy	`nextcloud_todos/calendars.py`
`__init__.py`	software	healthy	`nextcloud_todos/__init__.py`
`db.py`	software	healthy	`nextcloud_todos/db.py`
`claude_agent.py`	software	healthy	`nextcloud_todos/claude_agent.py`
`config.py`	software	healthy	`nextcloud_todos/config.py`
`caldav_client.py`	software	healthy	`nextcloud_todos/caldav_client.py`
`app.py`	software	healthy	`nextcloud_todos/app.py`
`orchestrator.py`	software	healthy	`nextcloud_todos/orchestrator.py`
`triage.py`	software	healthy	`nextcloud_todos/triage.py`
`parsing.py`	software	healthy	`nextcloud_todos/parsing.py`
`models.py`	software	healthy	`nextcloud_todos/models.py`
`hmac_links.py`	software	healthy	`nextcloud_todos/hmac_links.py`
`runner.py`	software	healthy	`nextcloud_todos/runner.py`
`__main__.py`	software	healthy	`nextcloud_todos/__main__.py`
`callbacks.py`	software	healthy	`nextcloud_todos/api/callbacks.py`
`__init__.py`	software	healthy	`nextcloud_todos/api/__init__.py`
`events.py`	software	healthy	`nextcloud_todos/api/events.py`
`webhook.py`	software	healthy	`nextcloud_todos/api/webhook.py`
`env.py`	software	healthy	`alembic/env.py`
`README`	software	healthy	`alembic/README`
`0001_initial.py`	software	healthy	`alembic/versions/0001_initial.py`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`FakeSyncer`	software	healthy	`tests/test_sweep.py:19`
`NtClient`	software	healthy	`openclaw-plugin/ntClient.mjs:NtClient`
`CalendarResolver`	software	healthy	`nextcloud_todos/calendars.py:5`
`AgentResult`	software	healthy	`nextcloud_todos/claude_agent.py:10`
`Settings`	software	healthy	`nextcloud_todos/config.py:8`
`InvalidSyncToken`	software	healthy	`nextcloud_todos/caldav_client.py:21`
`CalDavSyncer`	software	healthy	`nextcloud_todos/caldav_client.py:29`
`ResolverLike`	software	healthy	`nextcloud_todos/caldav_client.py:42`
`LiveCalDavSyncer`	software	healthy	`nextcloud_todos/caldav_client.py:162`
`TriageVerdict`	software	healthy	`nextcloud_todos/triage.py:27`
`ParsedTodo`	software	healthy	`nextcloud_todos/parsing.py:8`
`Todo`	software	healthy	`nextcloud_todos/models.py:16`
`Event`	software	healthy	`nextcloud_todos/models.py:34`
`TriageLog`	software	healthy	`nextcloud_todos/models.py:44`
`Run`	software	healthy	`nextcloud_todos/models.py:54`
`Approval`	software	healthy	`nextcloud_todos/models.py:70`
`SyncState`	software	healthy	`nextcloud_todos/models.py:81`

Label	Layer	Status	Path
`Todo`	data	healthy	`nextcloud_todos/models.py`
`Event`	data	healthy	`nextcloud_todos/models.py`
`TriageLog`	data	healthy	`nextcloud_todos/models.py`
`Run`	data	healthy	`nextcloud_todos/models.py`
`Approval`	data	healthy	`nextcloud_todos/models.py`
`SyncState`	data	healthy	`nextcloud_todos/models.py`
`todos`	data	healthy	`nextcloud_todos/models.py`
`events`	data	healthy	`nextcloud_todos/models.py`
`triage_logs`	data	healthy	`nextcloud_todos/models.py`
`runs`	data	healthy	`nextcloud_todos/models.py`
`approvals`	data	healthy	`nextcloud_todos/models.py`
`sync_state`	data	healthy	`nextcloud_todos/models.py`

Label	Layer	Status	Path
`tests`	software	healthy	`tests`
`fixtures`	software	healthy	`tests/fixtures`
`openclaw-plugin`	software	healthy	`openclaw-plugin`
`nextcloud_todos`	software	healthy	`nextcloud_todos`
`api`	software	healthy	`nextcloud_todos/api`
`alembic`	software	healthy	`alembic`
`versions`	software	healthy	`alembic/versions`
`.github`	software	healthy	`.github`
`workflows`	software	healthy	`.github/workflows`

Label	Layer	Status	Path
`GET /healthz`	api	healthy	`nextcloud_todos/app.py`
`GET /approve/{event_id}`	api	healthy	`nextcloud_todos/api/callbacks.py`
`GET /reject/{event_id}`	api	healthy	`nextcloud_todos/api/callbacks.py`
`GET /refine/{event_id}`	api	healthy	`nextcloud_todos/api/callbacks.py`
`POST /refine/{event_id}`	api	healthy	`nextcloud_todos/api/callbacks.py`
`GET /events`	api	healthy	`nextcloud_todos/api/events.py`
`POST /events/{event_id}/consume`	api	healthy	`nextcloud_todos/api/events.py`
`GET /get/{todo_id}`	api	healthy	`nextcloud_todos/api/events.py`
`POST /nextcloud/hook`	api	healthy	`nextcloud_todos/api/webhook.py`

Label	Layer	Status	Path
`postgresql`	data	healthy	`poetry.lock`
`mariadb`	data	healthy	`poetry.lock`
`mysql`	data	healthy	`poetry.lock`
`sqlite`	data	healthy	`tests/test_sweep.py`
`postgres`	data	healthy	`nextcloud_todos/db.py`

Label	Layer	Status	Path
`lint-and-test`	cicd	healthy	`.github/workflows/build.yml`
`build`	cicd	healthy	`.github/workflows/build.yml`
`deploy`	cicd	healthy	`.github/workflows/build.yml`
`notify-failure`	cicd	healthy	`.github/workflows/build.yml`

Label	Layer	Status	Path
`GITHUB_TOKEN`	cicd	healthy	`—`
`WOODPECKER_TOKEN`	cicd	healthy	`—`
`SLACK_WEBHOOK`	cicd	healthy	`—`
`FORGEJO_GIT_TOKEN`	cicd	healthy	`—`

Label	Layer	Status	Path
`vps::aws`	hardware	healthy	`poetry.lock`
`vps::azure`	hardware	healthy	`poetry.lock`
`vps::gcp`	hardware	healthy	`poetry.lock`

Label	Layer	Status	Path
`3.10.0.1`	network	healthy	`poetry.lock`
`1.2.0.0`	network	healthy	`poetry.lock`

Label	Layer	Status	Path
`repobility-clone-w3sls29n`	software	healthy	`/tmp/repobility-clone-w3sls29n`

Label	Layer	Status	Path
`port:8080`	network	healthy	`nextcloud_todos/__main__.py`

Label	Layer	Status	Path
`image::Dockerfile`	hardware	healthy	`Dockerfile`

Label	Layer	Status	Path
`gha::build`	cicd	healthy	`.github/workflows/build.yml`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/b0a9d6fe-590a-48f8-bb4a-fa917079d662/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/b0a9d6fe-590a-48f8-bb4a-fa917079d662/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

ViktorBarzin/nextcloud-todos

Complete repo analysis

function 50+

file 50+

class 17

table 12

directory 9

endpoint 9

database 5

job 4

env_var 4

vps 3

service 2

repo 1

port 1

container 1

pipeline 1