Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

unhosted-ai/unhosted-core

https://github.com/unhosted-ai/unhosted-core · scanned 2026-06-16 00:45 UTC (2 months, 1 week ago)

38 raw signals (0 security + 38 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 34 actionable findings from 1 signal source. 4 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

77.8% cov · 34 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 1 Medium 13 Low 12 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 34 Crowd 0 Layer: Frontend 2 Hardware 4 Security 3 Cicd 3 Quality 22

Exclude dismissed / FP Exclude test files

All 453 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`parse_args`	software	healthy	`models/distill/train.py:52`
`load_jsonl`	software	healthy	`models/distill/train.py:86`
`format_for_sft`	software	healthy	`models/distill/train.py:107`
`detect_dtype`	software	healthy	`models/distill/train.py:125`
`build_model_and_tokenizer`	software	healthy	`models/distill/train.py:147`
`train`	software	healthy	`models/distill/train.py:188`
`inference`	software	healthy	`models/distill/train.py:251`
`main`	software	healthy	`models/distill/train.py:293`
`parse_args`	software	healthy	`models/distill/eval.py:56`
`load_test`	software	healthy	`models/distill/eval.py:82`
`chat_completion`	software	healthy	`models/distill/eval.py:107`
`normalize`	software	healthy	`models/distill/eval.py:151`
`tokenize`	software	healthy	`models/distill/eval.py:157`
`lcs_length`	software	healthy	`models/distill/eval.py:164`
`rouge_l_f1`	software	healthy	`models/distill/eval.py:181`
`exact_match`	software	healthy	`models/distill/eval.py:194`
`length_ratio`	software	healthy	`models/distill/eval.py:198`
`main`	software	healthy	`models/distill/eval.py:206`
`mean`	software	healthy	`models/distill/eval.py:309`
`parse_args`	software	healthy	`models/distill/gen_data.py:98`
`collect_documents`	software	healthy	`models/distill/gen_data.py:129`
`load_seen_hashes`	software	healthy	`models/distill/gen_data.py:157`
`call_teacher`	software	healthy	`models/distill/gen_data.py:177`
`_call_teacher_claude`	software	healthy	`models/distill/gen_data.py:192`
`_call_teacher_openai`	software	healthy	`models/distill/gen_data.py:235`
`parse_teacher_response`	software	healthy	`models/distill/gen_data.py:280`
`main`	software	healthy	`models/distill/gen_data.py:321`
`parse_args`	software	healthy	`models/distill/push_to_hub.py:46`
`render_card`	software	healthy	`models/distill/push_to_hub.py:99`
`main`	software	healthy	`models/distill/push_to_hub.py:170`
`run`	software	healthy	`models/distill/pipeline.py:47`
`parse_args`	software	healthy	`models/distill/pipeline.py:54`
`stage_header`	software	healthy	`models/distill/pipeline.py:93`
`split_jsonl`	software	healthy	`models/distill/pipeline.py:100`
`main`	software	healthy	`models/distill/pipeline.py:115`
`pick_device`	software	healthy	`models/llm-lab/llm_lab.py:32`
`banner`	software	healthy	`models/llm-lab/llm_lab.py:41`
`load`	software	healthy	`models/llm-lab/llm_lab.py:45`
`final_norm_and_head`	software	healthy	`models/llm-lab/llm_lab.py:64`
`show_tokenization`	software	healthy	`models/llm-lab/llm_lab.py:76`
`build_input_text`	software	healthy	`models/llm-lab/llm_lab.py:88`
`forward`	software	healthy	`models/llm-lab/llm_lab.py:101`
`show_next_token`	software	healthy	`models/llm-lab/llm_lab.py:107`
`show_logit_lens`	software	healthy	`models/llm-lab/llm_lab.py:124`
`show_attention`	software	healthy	`models/llm-lab/llm_lab.py:147`
`generate`	software	healthy	`models/llm-lab/llm_lab.py:172`
`maybe_plot`	software	healthy	`models/llm-lab/llm_lab.py:195`
`main`	software	healthy	`models/llm-lab/llm_lab.py:222`
`splitWordmark`	software	healthy	`docs/motion.js:splitWordmark`
`revealAll`	software	healthy	`docs/motion.js:revealAll`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`rust-toolchain.toml`	software	healthy	`rust-toolchain.toml`
`ACCEPTABLE_USE.md`	software	healthy	`ACCEPTABLE_USE.md`
`PRIVACY.md`	software	healthy	`PRIVACY.md`
`Cargo.toml`	software	healthy	`Cargo.toml`
`README.md`	software	healthy	`README.md`
`THIRD_PARTY_NOTICES.md`	software	healthy	`THIRD_PARTY_NOTICES.md`
`IP_POSTURE.md`	software	healthy	`IP_POSTURE.md`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`Dockerfile`	software	healthy	`Dockerfile`
`COMPLIANCE.md`	software	healthy	`COMPLIANCE.md`
`RELEASING.md`	software	healthy	`RELEASING.md`
`MANIFESTO.md`	software	healthy	`MANIFESTO.md`
`LICENSE`	software	healthy	`LICENSE`
`USE_CASES.md`	software	healthy	`USE_CASES.md`
`Cargo.lock`	software	healthy	`Cargo.lock`
`TERMS.md`	software	healthy	`TERMS.md`
`CODE_OF_CONDUCT.md`	software	healthy	`CODE_OF_CONDUCT.md`
`SECURITY.md`	software	healthy	`SECURITY.md`
`CHANGELOG.md`	software	healthy	`CHANGELOG.md`
`BRAND.md`	software	healthy	`BRAND.md`
`train.py`	software	healthy	`models/distill/train.py`
`eval.py`	software	healthy	`models/distill/eval.py`
`model-card.template.md`	software	healthy	`models/distill/model-card.template.md`
`gen_data.py`	software	healthy	`models/distill/gen_data.py`
`README.md`	software	healthy	`models/distill/README.md`
`push_to_hub.py`	software	healthy	`models/distill/push_to_hub.py`
`requirements.txt`	software	healthy	`models/distill/requirements.txt`
`pipeline.py`	software	healthy	`models/distill/pipeline.py`
`README.md`	software	healthy	`models/llm-lab/README.md`
`llm_lab.py`	software	healthy	`models/llm-lab/llm_lab.py`
`pyproject.toml`	software	healthy	`models/llm-lab/pyproject.toml`
`README.md`	software	healthy	`docs/README.md`
`index.html`	software	healthy	`docs/index.html`
`404.html`	software	healthy	`docs/404.html`
`motion.js`	software	healthy	`docs/motion.js`
`theme.js`	software	healthy	`docs/theme.js`
`style.css`	software	healthy	`docs/style.css`
`docs.html`	software	healthy	`docs/docs.html`
`README.md`	software	healthy	`docs/upstream/README.md`
`homebrew-core-llama-cpp-rpc.md`	software	healthy	`docs/upstream/homebrew-core-llama-cpp-rpc.md`
`llama-cpp-rms-norm-blas.md`	software	healthy	`docs/upstream/llama-cpp-rms-norm-blas.md`
`README.md`	software	healthy	`docs/branding/README.md`
`build-rasters.sh`	software	healthy	`scripts/build-rasters.sh`
`screenshots.sh`	software	healthy	`scripts/screenshots.sh`
`build-dmg.sh`	software	healthy	`scripts/build-dmg.sh`
`build-app-icons.sh`	software	healthy	`scripts/build-app-icons.sh`
`release-macos.sh`	software	healthy	`scripts/release-macos.sh`
`install.sh`	software	healthy	`scripts/install.sh`
`new-spec.sh`	software	healthy	`scripts/new-spec.sh`
`bundle-linux.sh`	software	healthy	`scripts/bundle-linux.sh`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`models`	software	healthy	`models`
`distill`	software	healthy	`models/distill`
`llm-lab`	software	healthy	`models/llm-lab`
`docs`	software	healthy	`docs`
`upstream`	software	healthy	`docs/upstream`
`branding`	software	healthy	`docs/branding`
`scripts`	software	healthy	`scripts`
`assets`	software	healthy	`assets`
`screenshots`	software	healthy	`assets/screenshots`
`design`	software	healthy	`design`
`crates`	software	healthy	`crates`
`unhosted-cli`	software	healthy	`crates/unhosted-cli`
`src`	software	healthy	`crates/unhosted-cli/src`
`unhosted-relay`	software	healthy	`crates/unhosted-relay`
`src`	software	healthy	`crates/unhosted-relay/src`
`unhosted-core`	software	healthy	`crates/unhosted-core`
`web`	software	healthy	`crates/unhosted-core/web`
`src`	software	healthy	`crates/unhosted-core/src`
`unhosted-desktop`	software	healthy	`crates/unhosted-desktop`
`capabilities`	software	healthy	`crates/unhosted-desktop/capabilities`
`src`	software	healthy	`crates/unhosted-desktop/src`
`runs`	software	healthy	`runs`
`2026-05-19-unhosted-qa-v1`	software	healthy	`runs/2026-05-19-unhosted-qa-v1`
`2026-05-20-vrampool-loopback`	software	healthy	`runs/2026-05-20-vrampool-loopback`
`.claude`	software	healthy	`.claude`
`hooks`	software	healthy	`.claude/hooks`
`branding`	software	healthy	`branding`
`colors`	software	healthy	`branding/colors`
`.github`	software	healthy	`.github`
`ISSUE_TEMPLATE`	software	healthy	`.github/ISSUE_TEMPLATE`
`scripts`	software	healthy	`.github/scripts`
`workflows`	software	healthy	`.github/workflows`
`profile`	software	healthy	`.github/profile`

Label	Layer	Status	Path
`192.168.1.42`	network	healthy	`README.md`
`127.0.0.1`	network	healthy	`models/distill/eval.py`
`192.168.1.1`	network	healthy	`crates/unhosted-core/src/web_fetch.rs`
`100.64.0.0`	network	healthy	`crates/unhosted-core/src/web_fetch.rs`
`10.0.0.1`	network	healthy	`crates/unhosted-core/src/web_fetch.rs`
`172.16.0.1`	network	healthy	`crates/unhosted-core/src/web_fetch.rs`
`169.254.1.1`	network	healthy	`crates/unhosted-core/src/web_fetch.rs`
`100.64.0.1`	network	healthy	`crates/unhosted-core/src/web_fetch.rs`
`8.8.8.8`	network	healthy	`crates/unhosted-core/src/web_fetch.rs`
`1.1.1.1`	network	healthy	`crates/unhosted-core/src/web_fetch.rs`
`172.32.0.1`	network	healthy	`crates/unhosted-core/src/web_fetch.rs`
`1.3.101.112`	network	healthy	`crates/unhosted-core/src/transport.rs`
`192.168.1.99`	network	healthy	`crates/unhosted-core/src/lib.rs`
`192.168.1.20`	network	healthy	`crates/unhosted-core/src/model_manager.rs`
`192.168.1.50`	network	healthy	`crates/unhosted-core/src/vram_pool.rs`

Label	Layer	Status	Path
`build-and-push`	cicd	healthy	`.github/workflows/docker.yml`
`fmt`	cicd	healthy	`.github/workflows/rust.yml`
`clippy`	cicd	healthy	`.github/workflows/rust.yml`
`test`	cicd	healthy	`.github/workflows/rust.yml`
`build`	cicd	healthy	`.github/workflows/release.yml`
`release`	cicd	healthy	`.github/workflows/release.yml`
`deploy`	cicd	healthy	`.github/workflows/pages.yml`
`smoke`	cicd	healthy	`.github/workflows/smoke-release.yml`

Label	Layer	Status	Path
`gha::docker`	cicd	healthy	`.github/workflows/docker.yml`
`gha::rust`	cicd	healthy	`.github/workflows/rust.yml`
`gha::release`	cicd	healthy	`.github/workflows/release.yml`
`gha::pages`	cicd	healthy	`.github/workflows/pages.yml`
`gha::smoke-release`	cicd	healthy	`.github/workflows/smoke-release.yml`

Label	Layer	Status	Path
`GITHUB_TOKEN`	cicd	healthy	`—`
`REGISTRY`	cicd	healthy	`—`
`TAURI_SIGNING_PRIVATE_KEY`	cicd	healthy	`—`
`TAURI_SIGNING_PRIVATE_KEY_PASSWORD`	cicd	healthy	`—`
`IMAGE_NAME`	cicd	healthy	`—`

Label	Layer	Status	Path
`auth::crates/unhosted-core/src/connectors.rs`	security	healthy	`crates/unhosted-core/src/connectors.rs`
`auth::crates/unhosted-core/web/index.html`	security	healthy	`crates/unhosted-core/web/index.html`
`auth::crates/unhosted-core/src/lib.rs`	security	healthy	`crates/unhosted-core/src/lib.rs`
`auth::crates/unhosted-core/web/ui.js`	security	healthy	`crates/unhosted-core/web/ui.js`

Label	Layer	Status	Path
`repobility-clone-67wodtor`	software	healthy	`/tmp/repobility-clone-67wodtor`

Label	Layer	Status	Path
`on`	software	healthy	`docs/motion.js:on`

Label	Layer	Status	Path
`port:7777`	network	healthy	`Dockerfile`

Label	Layer	Status	Path
`image::Dockerfile`	hardware	healthy	`Dockerfile`

Label	Layer	Status	Path
`gpu (detected)`	hardware	healthy	`README.md`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/b258fd61-a63b-444f-8b20-d50c92418479/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/b258fd61-a63b-444f-8b20-d50c92418479/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

unhosted-ai/unhosted-core

Complete repo analysis

function 50+

file 50+

directory 33

service 15

job 8

pipeline 5

env_var 5

auth 4

repo 1

class 1

port 1

container 1

gpu 1