MCreator/MCreator

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

46 of your 108 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 23.36s · analysis 17.22s · 38.6 MB · GitHub API rate-limit (preflight)

https://github.com/MCreator/MCreator · scanned 2026-06-05 20:04 UTC (4 days, 15 hours ago) · 10 languages

161 raw signals (95 security + 66 graph) 11/13 scanners ran 21st percentile · Java · large (100-500K LoC) System graph score 91 (lower by 24)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 4 days, 15 hours ago · v2 · 36 actionable findings from 2 signal sources. 90 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

88.9% cov · 16 findings

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	65.0	0.15	9.75
`security_score`	100.0	0.25	25.00
`testing_score`	15.0	0.20	3.00
`documentation_score`	75.0	0.15	11.25
`practices_score`	65.0	0.15	9.75
`code_quality`	80.0	0.10	8.00
Overall		1.00	66.8

security_score may be inflated — optional security scanners were skipped on this fast scan

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 1 High 4 Medium 7 Low 10 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 20 System graph 16 Crowd 0 Layer: Software 5 Security 6 Quality 19 Cicd 4 Api 1 Frontend 1

Exclude dismissed / FP Exclude test files

All 14085 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`README.md`	software	healthy	`README.md`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`build.gradle`	software	healthy	`build.gradle`
`crowdin.yml`	software	healthy	`crowdin.yml`
`mcreator.sh`	software	healthy	`platform/linux/mcreator.sh`
`mcreator.sh`	software	healthy	`platform/mac/mcreator.sh`
`FUNDING.yml`	software	healthy	`.github/FUNDING.yml`
`dependabot.yml`	software	healthy	`.github/dependabot.yml`
`bug_report.yml`	software	healthy	`.github/ISSUE_TEMPLATE/bug_report.yml`
`config.yml`	software	healthy	`.github/ISSUE_TEMPLATE/config.yml`
`test.yml`	software	healthy	`.github/workflows/test.yml`
`support.yml`	software	healthy	`.github/workflows/support.yml`
`deploy.yml`	software	healthy	`.github/workflows/deploy.yml`
`documentation.yml`	software	healthy	`.github/workflows/documentation.yml`
`crowdin-push.yml`	software	healthy	`.github/workflows/crowdin-push.yml`
`crowdin-pull.yml`	software	healthy	`.github/workflows/crowdin-pull.yml`
`dependency-submission.yml`	software	healthy	`.github/workflows/dependency-submission.yml`
`entityanimation-mojmap.java`	software	healthy	`src/test/resources/entityanimation-mojmap.java`
`entitymodel-mojmap-1.17.x.java`	software	healthy	`src/test/resources/entitymodel-mojmap-1.17.x.java`
`WorkspaceConvertersTest.java`	software	healthy	`src/test/java/net/mcreator/integration/WorkspaceConvertersT…`
`TestWorkspaceDataProvider.java`	software	healthy	`src/test/java/net/mcreator/integration/TestWorkspaceDataPro…`
`IntegrationTestSetup.java`	software	healthy	`src/test/java/net/mcreator/integration/IntegrationTestSetup…`
`DialogsTest.java`	software	healthy	`src/test/java/net/mcreator/integration/ui/DialogsTest.java`
`ModElementUITest.java`	software	healthy	`src/test/java/net/mcreator/integration/ui/ModElementUITest.…`
`UITestUtil.java`	software	healthy	`src/test/java/net/mcreator/integration/ui/UITestUtil.java`
`ImageMakerTest.java`	software	healthy	`src/test/java/net/mcreator/integration/ui/ImageMakerTest.ja…`
`GTProcedureTriggers.java`	software	healthy	`src/test/java/net/mcreator/integration/generator/GTProcedur…`
`BlocklyTestUtil.java`	software	healthy	`src/test/java/net/mcreator/integration/generator/BlocklyTes…`
`GeneratorsTest.java`	software	healthy	`src/test/java/net/mcreator/integration/generator/Generators…`
`GTCommandArgBlocks.java`	software	healthy	`src/test/java/net/mcreator/integration/generator/GTCommandA…`
`GTScriptBlocks.java`	software	healthy	`src/test/java/net/mcreator/integration/generator/GTScriptBl…`
`GTServerRun.java`	software	healthy	`src/test/java/net/mcreator/integration/generator/GTServerRu…`
`GTAITaskBlocks.java`	software	healthy	`src/test/java/net/mcreator/integration/generator/GTAITaskBl…`
`GTScriptTriggers.java`	software	healthy	`src/test/java/net/mcreator/integration/generator/GTScriptTr…`
`GTProcedureBlocks.java`	software	healthy	`src/test/java/net/mcreator/integration/generator/GTProcedur…`
`GTJSONTriggersBlocks.java`	software	healthy	`src/test/java/net/mcreator/integration/generator/GTJSONTrig…`
`GTFeatureBlocks.java`	software	healthy	`src/test/java/net/mcreator/integration/generator/GTFeatureB…`
`GTBuild.java`	software	healthy	`src/test/java/net/mcreator/integration/generator/GTBuild.ja…`
`GTVariables.java`	software	healthy	`src/test/java/net/mcreator/integration/generator/GTVariable…`
`GTEnchantmentEffectBlocks.java`	software	healthy	`src/test/java/net/mcreator/integration/generator/GTEnchantm…`
`GTModElements.java`	software	healthy	`src/test/java/net/mcreator/integration/generator/GTModEleme…`
`ReferencesFinderTest.java`	software	healthy	`src/test/java/net/mcreator/integration/workspace/References…`
`GSONUtilsTest.java`	software	healthy	`src/test/java/net/mcreator/unit/util/GSONUtilsTest.java`
`ListDiffTest.java`	software	healthy	`src/test/java/net/mcreator/unit/util/diff/ListDiffTest.java`
`EncryptUtilsTest.java`	software	healthy	`src/test/java/net/mcreator/unit/io/EncryptUtilsTest.java`
`TransliterationTest.java`	software	healthy	`src/test/java/net/mcreator/unit/io/TransliterationTest.java`
`JavaConventionsTest.java`	software	healthy	`src/test/java/net/mcreator/unit/java/JavaConventionsTest.ja…`
`blockly.html`	software	healthy	`src/main/resources/blockly/blockly.html`
`mcreator_blockly.js`	software	healthy	`src/main/resources/blockly/js/mcreator_blockly.js`
`mcreator_blockly.css`	software	healthy	`src/main/resources/blockly/css/mcreator_blockly.css`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`platform`	software	healthy	`platform`
`linux`	software	healthy	`platform/linux`
`mac`	software	healthy	`platform/mac`
`.github`	software	healthy	`.github`
`ISSUE_TEMPLATE`	software	healthy	`.github/ISSUE_TEMPLATE`
`workflows`	software	healthy	`.github/workflows`
`src`	software	healthy	`src`
`test`	software	healthy	`src/test`
`resources`	software	healthy	`src/test/resources`
`java`	software	healthy	`src/test/java`
`net`	software	healthy	`src/test/java/net`
`mcreator`	software	healthy	`src/test/java/net/mcreator`
`integration`	software	healthy	`src/test/java/net/mcreator/integration`
`ui`	software	healthy	`src/test/java/net/mcreator/integration/ui`
`generator`	software	healthy	`src/test/java/net/mcreator/integration/generator`
`workspace`	software	healthy	`src/test/java/net/mcreator/integration/workspace`
`unit`	software	healthy	`src/test/java/net/mcreator/unit`
`util`	software	healthy	`src/test/java/net/mcreator/unit/util`
`diff`	software	healthy	`src/test/java/net/mcreator/unit/util/diff`
`io`	software	healthy	`src/test/java/net/mcreator/unit/io`
`java`	software	healthy	`src/test/java/net/mcreator/unit/java`
`main`	software	healthy	`src/main`
`resources`	software	healthy	`src/main/resources`
`blockly`	software	healthy	`src/main/resources/blockly`
`js`	software	healthy	`src/main/resources/blockly/js`
`css`	software	healthy	`src/main/resources/blockly/css`
`java`	software	healthy	`src/main/java`
`net`	software	healthy	`src/main/java/net`
`mcreator`	software	healthy	`src/main/java/net/mcreator`
`plugin`	software	healthy	`src/main/java/net/mcreator/plugin`
`events`	software	healthy	`src/main/java/net/mcreator/plugin/events`
`ui`	software	healthy	`src/main/java/net/mcreator/plugin/events/ui`
`workspace`	software	healthy	`src/main/java/net/mcreator/plugin/events/workspace`
`modapis`	software	healthy	`src/main/java/net/mcreator/plugin/modapis`
`util`	software	healthy	`src/main/java/net/mcreator/util`
`locale`	software	healthy	`src/main/java/net/mcreator/util/locale`
`yaml`	software	healthy	`src/main/java/net/mcreator/util/yaml`
`image`	software	healthy	`src/main/java/net/mcreator/util/image`
`diff`	software	healthy	`src/main/java/net/mcreator/util/diff`
`math`	software	healthy	`src/main/java/net/mcreator/util/math`
`ui`	software	healthy	`src/main/java/net/mcreator/ui`
`wysiwyg`	software	healthy	`src/main/java/net/mcreator/ui/wysiwyg`
`help`	software	healthy	`src/main/java/net/mcreator/ui/help`
`notifications`	software	healthy	`src/main/java/net/mcreator/ui/notifications`
`workspace`	software	healthy	`src/main/java/net/mcreator/ui/workspace`
`breadcrumb`	software	healthy	`src/main/java/net/mcreator/ui/workspace/breadcrumb`
`resources`	software	healthy	`src/main/java/net/mcreator/ui/workspace/resources`
`selector`	software	healthy	`src/main/java/net/mcreator/ui/workspace/selector`
`minecraft`	software	healthy	`src/main/java/net/mcreator/ui/minecraft`
`blockentityanimations`	software	healthy	`src/main/java/net/mcreator/ui/minecraft/blockentityanimatio…`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`getVariablesOfType`	software	healthy	`src/main/resources/blockly/js/mcreator_blockly.js:getVariab…`
`getSerializedLocalVariables`	software	healthy	`src/main/resources/blockly/js/mcreator_blockly.js:getSerial…`
`arrayToBlocklyDropDownArray`	software	healthy	`src/main/resources/blockly/js/mcreator_blockly.js:arrayToBl…`
`to`	software	healthy	`src/main/resources/blockly/js/mcreator_blockly.js:to`
`workspaceToXML`	software	healthy	`src/main/resources/blockly/js/mcreator_blockly.js:workspace…`
`hasEntity`	software	healthy	`plugins/mcreator-core/blockly/js/mcreator_extensions.js:has…`
`isPlayerVar`	software	healthy	`plugins/mcreator-core/blockly/js/mcreator_extensions.js:isP…`
`to`	software	healthy	`plugins/mcreator-core/blockly/js/mcreator_extensions.js:to`
`appendAutoReloadingDataListField`	software	healthy	`plugins/mcreator-core/blockly/js/mcreator_extensions.js:app…`
`checkIfWithin`	software	healthy	`plugins/mcreator-core/blockly/js/mcreator_extensions.js:che…`
`checkIfAfter`	software	healthy	`plugins/mcreator-core/blockly/js/mcreator_extensions.js:che…`
`for`	software	healthy	`plugins/mcreator-core/blockly/js/mcreator_extensions.js:for`
`to`	software	healthy	`plugins/mcreator-core/blockly/js/mcreator_blocks.js:to`
`registerSimpleMutatorContainer`	software	healthy	`plugins/mcreator-core/blockly/js/mcreator_blocks.js:registe…`
`registerSimpleMutatorInput`	software	healthy	`plugins/mcreator-core/blockly/js/mcreator_blocks.js:registe…`
`to`	software	healthy	`plugins/mcreator-core/blockly/js/extensions_procedure_deps.…`
`uniqueValueValidator`	software	healthy	`plugins/mcreator-core/blockly/js/extensions_procedure_deps.…`
`to`	software	healthy	`plugins/mcreator-core/blockly/js/simple_repeating_input_mix…`
`that`	software	healthy	`plugins/mcreator-core/blockly/js/simple_repeating_input_mix…`
`simpleRepeatingInputMixin`	software	healthy	`plugins/mcreator-core/blockly/js/simple_repeating_input_mix…`
`weightedListMutatorMixin`	software	healthy	`plugins/mcreator-core/blockly/js/simple_repeating_input_mix…`
`javabridge`	software	healthy	`plugins/mcreator-core/blockly/js/field_mcitem_selector.js:j…`
`to`	software	healthy	`plugins/mcreator-core/blockly/js/int_provider_validators.js…`
`getIntProviderMinMax`	software	healthy	`plugins/mcreator-core/blockly/js/int_provider_validators.js…`
`isIntProviderWithinBounds`	software	healthy	`plugins/mcreator-core/blockly/js/int_provider_validators.js…`
`for`	software	healthy	`plugins/mcreator-core/blockly/js/int_provider_validators.js…`
`validateIntProviderInputs`	software	healthy	`plugins/mcreator-core/blockly/js/int_provider_validators.js…`
`pattern`	software	healthy	`plugins/mcreator-core/blockly/js/field_resourcelocation.js:…`
`let`	software	healthy	`plugins/mcreator-core/blockly/js/field_data_list_selector.j…`

Label	Layer	Status	Path
`MACOS_CERTIFICATE_NAME`	cicd	healthy	`—`
`WIN_CERT_PEM`	cicd	healthy	`—`
`MACOS_CERTIFICATE_PWD`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`
`GC_PROJECT_ID`	cicd	healthy	`—`
`CROWDIN_PROJECT_ID`	cicd	healthy	`—`
`MACOS_CI_KEYCHAIN_PWD`	cicd	healthy	`—`
`MACOS_NOTARIZATION_TEAM_ID`	cicd	healthy	`—`
`GC_WORKLOAD_IDENTITY_PROVIDER`	cicd	healthy	`—`
`VT_API_KEY`	cicd	healthy	`—`
`WIN_CERT_KEYSTORE`	cicd	healthy	`—`
`CROWDIN_PERSONAL_TOKEN`	cicd	healthy	`—`
`WIN_CERT_KEYNAME`	cicd	healthy	`—`
`MACOS_NOTARIZATION_PWD`	cicd	healthy	`—`
`MACOS_NOTARIZATION_APPLE_ID`	cicd	healthy	`—`
`MACOS_CERTIFICATE`	cicd	healthy	`—`

Label	Layer	Status	Path
`represents`	software	healthy	`plugins/mcreator-core/blockly/js/field_data_list_dropdown.j…`
`FieldDataListDropdown`	software	healthy	`plugins/mcreator-core/blockly/js/field_data_list_dropdown.j…`
`FieldJavaName`	software	healthy	`plugins/mcreator-core/blockly/js/field_javaname.js:FieldJav…`
`represents`	software	healthy	`plugins/mcreator-core/blockly/js/field_mcitem_selector.js:r…`
`FieldMCItemSelector`	software	healthy	`plugins/mcreator-core/blockly/js/field_mcitem_selector.js:F…`
`represents`	software	healthy	`plugins/mcreator-core/blockly/js/field_ai_condition_selecto…`
`FieldAiConditionSelector`	software	healthy	`plugins/mcreator-core/blockly/js/field_ai_condition_selecto…`
`FieldColorSelector`	software	healthy	`plugins/mcreator-core/blockly/js/field_color_selector.js:Fi…`
`FieldResourceLocation`	software	healthy	`plugins/mcreator-core/blockly/js/field_resourcelocation.js:…`
`represents`	software	healthy	`plugins/mcreator-core/blockly/js/field_data_list_selector.j…`
`FieldDataListSelector`	software	healthy	`plugins/mcreator-core/blockly/js/field_data_list_selector.j…`

Label	Layer	Status	Path
`build`	cicd	healthy	`.github/workflows/test.yml`
`action`	cicd	healthy	`.github/workflows/support.yml`
`prepare_export`	cicd	healthy	`.github/workflows/deploy.yml`
`export_linux`	cicd	healthy	`.github/workflows/deploy.yml`
`export_windows`	cicd	healthy	`.github/workflows/deploy.yml`
`export_macos`	cicd	healthy	`.github/workflows/deploy.yml`
`update_release`	cicd	healthy	`.github/workflows/deploy.yml`
`publish`	cicd	healthy	`.github/workflows/documentation.yml`
`crowdin-push`	cicd	healthy	`.github/workflows/crowdin-push.yml`
`crowdin-pull`	cicd	healthy	`.github/workflows/crowdin-pull.yml`
`dependency-submission`	cicd	healthy	`.github/workflows/dependency-submission.yml`

Label	Layer	Status	Path
`gha::test`	cicd	healthy	`.github/workflows/test.yml`
`gha::support`	cicd	healthy	`.github/workflows/support.yml`
`gha::deploy`	cicd	healthy	`.github/workflows/deploy.yml`
`gha::documentation`	cicd	healthy	`.github/workflows/documentation.yml`
`gha::crowdin-push`	cicd	healthy	`.github/workflows/crowdin-push.yml`
`gha::crowdin-pull`	cicd	healthy	`.github/workflows/crowdin-pull.yml`
`gha::dependency-submission`	cicd	healthy	`.github/workflows/dependency-submission.yml`

Label	Layer	Status	Path
`1.2.4.1`	network	healthy	`build.gradle`
`1.15.4.1`	network	healthy	`build.gradle`
`26.1.2.71`	network	healthy	`plugins/generator-26.1.x/datapack-26.1.x/generator.yaml`

Label	Layer	Status	Path
`repobility-clone-gsh2t3je`	software	healthy	`/tmp/repobility-clone-gsh2t3je`

Label	Layer	Status	Path
`vps::azure`	hardware	healthy	`plugins/mcreator-core/datalists/blocksitems.yaml`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/f9fdc24e-8907-4d6b-8a28-38dcdb7fc916/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/f9fdc24e-8907-4d6b-8a28-38dcdb7fc916/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

MCreator/MCreator

Complete repo analysis

file 50+

directory 50+

function 29

env_var 16

class 11

job 11

pipeline 7

service 3

repo 1

vps 1