koldakov/futuramaapi

0 errors, 47 warningsmain

47 issues need attention.

47 warnings in the paths between 45 routes and 11 tables.

ROUTE FINDINGS36 of 45 · 7/7 rules
ROUTES
45
TABLES
11
FILES READ
120
RULES RUN
7/7

47 findings

  • POST /secret_message has no validator or rate limiter attached.

    public-entry-guarded

  • GET /secret_message/{url} has no validator or rate limiter attached.

    public-entry-guarded

  • POST /users has no validator or rate limiter attached.

    public-entry-guarded

  • GET /users has no validator or rate limiter attached.

    public-entry-guarded

  • POST /users/passwords/request-change has no validator or rate limiter attached.

    public-entry-guarded

  • GET /{shortened} has no validator or rate limiter attached.

    public-entry-guarded

  • GET /activate has no validator or rate limiter attached.

    public-entry-guarded

  • GET /favicon.ico has no validator or rate limiter attached.

    public-entry-guarded

  • GET /health has no validator or rate limiter attached.

    public-entry-guarded

  • GET /swagger has no validator or rate limiter attached.

    public-entry-guarded

  • GET /docs has no validator or rate limiter attached.

    public-entry-guarded

  • GET /robots.txt has no validator or rate limiter attached.

    public-entry-guarded

  • GET /sitemap.xml has no validator or rate limiter attached.

    public-entry-guarded

  • GET / has no validator or rate limiter attached.

    public-entry-guarded

  • GET /about has no validator or rate limiter attached.

    public-entry-guarded

  • GET /changelog has no validator or rate limiter attached.

    public-entry-guarded

  • GET /auth has no validator or rate limiter attached.

    public-entry-guarded

  • POST /logout has no validator or rate limiter attached.

    public-entry-guarded

  • GET /signup has no validator or rate limiter attached.

    public-entry-guarded

  • POST /signup has no validator or rate limiter attached.

    public-entry-guarded

  • POST /auth has no validator or rate limiter attached.

    public-entry-guarded

  • POST /users/auth has no validator or rate limiter attached.

    public-entry-guarded

  • POST /users/refresh has no validator or rate limiter attached.

    public-entry-guarded

  • GET /{character_id} has no validator or rate limiter attached.

    public-entry-guarded

  • GET /{episode_id} has no validator or rate limiter attached.

    public-entry-guarded

  • GET /passwords/change has no validator or rate limiter attached.

    public-entry-guarded

  • POST /passwords/change has no validator or rate limiter attached.

    public-entry-guarded

  • POST /{$callback_url} has no validator or rate limiter attached.

    public-entry-guarded

  • POST /characters/{character_id} has no validator or rate limiter attached.

    public-entry-guarded

  • POST /episodes/{episode_id} has no validator or rate limiter attached.

    public-entry-guarded

  • POST /seasons/{season_id} has no validator or rate limiter attached.

    public-entry-guarded

  • GET /character has no validator or rate limiter attached.

    public-entry-guarded

  • GET /episode has no validator or rate limiter attached.

    public-entry-guarded

  • GET /season has no validator or rate limiter attached.

    public-entry-guarded

  • GET /{season_id} has no validator or rate limiter attached.

    public-entry-guarded

  • GET /sse/characters/{character_id} has no validator or rate limiter attached.

    public-entry-guarded

  • seasons is not connected to anything.

    no-orphan-datastore

  • episode_character_association is not connected to anything.

    no-orphan-datastore

  • episodes is not connected to anything.

    no-orphan-datastore

  • characters is not connected to anything.

    no-orphan-datastore

  • users is not connected to anything.

    no-orphan-datastore

  • links is not connected to anything.

    no-orphan-datastore

  • secret_messages is not connected to anything.

    no-orphan-datastore

  • auth_sessions is not connected to anything.

    no-orphan-datastore

  • requests_counter is not connected to anything.

    no-orphan-datastore

  • system_messages is not connected to anything.

    no-orphan-datastore

  • favorite_characters is not connected to anything.

    no-orphan-datastore

Part of this repository was not read, so this report is incomplete. Read 120 of 156 files, schemas and routes first. Point Wyro at a single service directory to read one in full.

Free account, no card. The repository opens as an editable graph.

Add this check to the README

wyro architecture badge
[![wyro architecture](https://wyro.in/api/badge/koldakov/futuramaapi)](https://wyro.in/scan/koldakov/futuramaapi)

It updates itself whenever the repository changes and links back to this report.

What this is

Wyro reads the repository’s routes and data models and checks the paths between them: whether a route can reach a table without passing a guard, whether a datastore holding personal data is exposed to a public read, whether an endpoint that issues credentials requires the credentials it issues.

It is rule-based, not a model. The same commit produces the same result every time, and it does not guess at business rules it cannot see. A rule with nothing to look at is reported as not having run — never as a pass.

This check runs on public source through GitHub’s own API and needs no account. A free account adds the editable architecture canvas, private repositories on paid plans, and a CI gate. No card required.