MCP Observatory
3m ago Tracked 26,562 Last 3m ago 24h 1,904
github TypeScript analyzed f412096

koala73/worldmonitor

github

Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness interface

maintainer
koala73
license
NOASSERTION
first seen
2026-07-05
last seen
2026-08-01
releases · 30d
0
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged dynamic code execution ×28 in koala73/worldmonitor
capabilities 0 tools
transport streamable-http · http verified reported listed in the official MCP registry counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit f412096 · analyzer v28 · 2d ago

skills & prompt files 27

danger signals53

code evidence vv2.5.23 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 3195

filesystem 7

  • fs koala73-worldmonitor-f412096/blog-site/src/lib/cover-webp.ts :1 import { existsSync } from 'node:fs';
  • fs koala73-worldmonitor-f412096/blog-site/src/pages/rss.xml.ts :3 import { existsSync, statSync } from 'node:fs';
  • fs koala73-worldmonitor-f412096/consumer-prices-core/src/api/server.ts :3 import { realpathSync } from 'node:fs';
  • fs koala73-worldmonitor-f412096/consumer-prices-core/src/config/loader.ts :1 import { readFileSync, readdirSync } from 'node:fs';
  • fs koala73-worldmonitor-f412096/consumer-prices-core/src/db/migrate.ts :5 import { readFileSync, readdirSync } from 'node:fs';
  • fs koala73-worldmonitor-f412096/consumer-prices-core/src/normalizers/brand.ts :1 import { readFileSync, existsSync } from 'node:fs';
  • fs koala73-worldmonitor-f412096/docker/build-handlers.mjs :13 import { readdir, stat } from 'node:fs/promises';

shell / exec 4

  • shell koala73-worldmonitor-f412096/api/symbol-search.ts :241 // `$`, scanner probes) don't each reach Finnhub and drain the
  • shell koala73-worldmonitor-f412096/convex/alertRules.ts :107 * - keep only ASCII A-Z 2-letter shapes (`^[A-Z]{2}$`); silently drop the rest
  • shell koala73-worldmonitor-f412096/convex/lib/iso2.ts :12 * - exactly two uppercase ASCII letters (regex `^[A-Z]{2}$`)
  • shell koala73-worldmonitor-f412096/server/_shared/mcp-internal-hmac.ts :378 // F11 (U7+U8 review pass): bound the numeric width. `^[0-9]+$` would

network 106

  • net koala73-worldmonitor-f412096/api/_bootstrap-r2.js :103 response = await client.fetch(
  • net koala73-worldmonitor-f412096/api/_github-release.js :4 const res = await fetch(RELEASES_URL, {
  • net koala73-worldmonitor-f412096/api/_notification-webhook-ssrf.ts :189 const response = await fetch(url, {
  • net koala73-worldmonitor-f412096/api/_oauth-token.js :44 const resp = await fetch(`${creds.url}/get/${encodeURIComponent(key)}`, {
  • net koala73-worldmonitor-f412096/api/_relay.js :30 return await fetch(url, { ...options, signal: controller.signal });
  • net koala73-worldmonitor-f412096/api/_sentry-common.js :131 const res = await fetch(_envelopeUrl, {
  • net koala73-worldmonitor-f412096/api/_sentry-edge.js :5 * envelope format, stack parsing, and fire-and-forget fetch (with
  • net koala73-worldmonitor-f412096/api/_upstash-json.js :42 const resp = await fetch(`${creds.url}/pipeline`, {
  • net koala73-worldmonitor-f412096/api/_usage-telemetry.js :137 const response = await fetch(AXIOM_INGEST_URL, {
  • net koala73-worldmonitor-f412096/api/_user-api-key.js :190 resp = await fetch(`${config.siteUrl}${path}`, {
  • net koala73-worldmonitor-f412096/api/brief/[userId]/[issueDate].ts :120 const res = await fetch(`${convexSiteUrl}/relay/followed-countries`, {
  • net koala73-worldmonitor-f412096/api/cache-purge.js :35 const resp = await fetch(`${creds.url}/pipeline`, {
  • net koala73-worldmonitor-f412096/api/create-checkout.ts :47 fetch: (...args) => globalThis.fetch(...args),
  • net koala73-worldmonitor-f412096/api/customer-portal.ts :91 const resp = await fetch(`${CONVEX_SITE_URL}/relay/customer-portal`, {
  • net koala73-worldmonitor-f412096/api/discord/oauth/callback.ts :41 const res = await fetch(`${UPSTASH_URL}/get/${encodeURIComponent(key)}`, {
  • net koala73-worldmonitor-f412096/api/discord/oauth/start.ts :70 const pipelineRes = await fetch(`${UPSTASH_URL}/pipeline`, {
  • net koala73-worldmonitor-f412096/api/docs-mcp.ts :233 const upstream = await fetch(UPSTREAM_URL, {
  • net koala73-worldmonitor-f412096/api/fwdstart.js :14 const response = await fetch('https://www.fwdstart.me/archive', {
  • net koala73-worldmonitor-f412096/api/internal/china-exchange-egress.js :148 upstream = await fetch(SZSE_METADATA_URL, {
  • net koala73-worldmonitor-f412096/api/internal/mcp-grant-context.ts :72 const resp = await fetch(`${url}/get/${encodeURIComponent(key)}`, {
  • net koala73-worldmonitor-f412096/api/internal/mcp-grant-mint.ts :117 const resp = await fetch(`${url}/get/${encodeURIComponent(key)}`, {
  • net koala73-worldmonitor-f412096/api/invalidate-user-api-key-cache.ts :75 const ownerResp = await fetch(`${convexSiteUrl}/api/internal-get-key-owner`, {
  • net koala73-worldmonitor-f412096/api/mcp-proxy.ts :124 const response = await fetch(url.toString(), {
  • net koala73-worldmonitor-f412096/api/mcp/auth.ts :104 * `body` MUST be the EXACT bytes the caller passes to `fetch()` so the
  • net koala73-worldmonitor-f412096/api/mcp/dispatch.ts :276 // HTTP 4xx from an internal sibling fetch (e.g. `feed-digest HTTP 401`)
  • net koala73-worldmonitor-f412096/api/mcp/handler.ts :383 const res = await fetch(new URL(path, req.url), {
  • net koala73-worldmonitor-f412096/api/mcp/registry/company-intel-tools.ts :232 const response = await fetch(url, {
  • net koala73-worldmonitor-f412096/api/mcp/registry/nlp-tools.ts :89 const res = await fetch(digestUrl, {
  • net koala73-worldmonitor-f412096/api/mcp/registry/rpc-tools.ts :333 const response = await fetch(url, {
  • net koala73-worldmonitor-f412096/api/mcp/types.ts :186 // body proxies via fetch (extracted from `${base}/api/...` callsites),
  • net koala73-worldmonitor-f412096/api/notification-channels.ts :51 fetch: (...args) => globalThis.fetch(...args),
  • net koala73-worldmonitor-f412096/api/notify.ts :145 const res = await fetch(
  • net koala73-worldmonitor-f412096/api/oauth/authorize-pro.ts :189 const resp = await fetch(`${url}/getdel/${encodeURIComponent(key)}`, {
  • net koala73-worldmonitor-f412096/api/oauth/authorize.js :54 const resp = await fetch(`${url}/getdel/${encodeURIComponent(key)}`, {
  • net koala73-worldmonitor-f412096/api/oauth/register.js :57 const resp = await fetch(`${url}/pipeline`, {
  • net koala73-worldmonitor-f412096/api/oauth/token.ts :93 const resp = await fetch(`${url}/pipeline`, {
  • net koala73-worldmonitor-f412096/api/product-catalog.js :63 const res = await fetch(`${UPSTASH_URL}/get/${encodeURIComponent(CACHE_KEY)}`, {
  • net koala73-worldmonitor-f412096/api/referral/me.ts :48 * /api/referral/me fetch (or signup-side lookup) re-attempts. A
  • net koala73-worldmonitor-f412096/api/reverse-geocode.js :45 const resp = await fetch(
  • net koala73-worldmonitor-f412096/api/seed-contract-probe.ts :144 resp = await fetch(`${url}/get/${encodeURIComponent(spec.key)}`, {
  • net koala73-worldmonitor-f412096/api/skills/fetch-agentskills.ts :44 const res = await fetch(skillUrl.toString(), {
  • net koala73-worldmonitor-f412096/api/slack/oauth/callback.ts :47 const res = await fetch(`${UPSTASH_URL}/get/${encodeURIComponent(key)}`, {
  • net koala73-worldmonitor-f412096/api/slack/oauth/start.ts :70 const pipelineRes = await fetch(`${UPSTASH_URL}/pipeline`, {
  • net koala73-worldmonitor-f412096/api/symbol-search.ts :224 const resp = await fetch(url, {
  • net koala73-worldmonitor-f412096/api/user-prefs.ts :200 fetch(input, { ...init, signal: init?.signal ?? AbortSignal.timeout(20_000) }),
  • net koala73-worldmonitor-f412096/api/user/mcp-quota.ts :83 const resp = await fetch(`${url}/get/${encodeURIComponent(key)}`, {
  • net koala73-worldmonitor-f412096/api/user/mcp-revoke.ts :93 resp = await fetch(`${siteUrl}/api/internal-revoke-pro-mcp-token`, {
  • net koala73-worldmonitor-f412096/api/widget-agent.ts :212 const healthRes = await fetch(`${RELAY_BASE}/widget-agent/health`, {
  • net koala73-worldmonitor-f412096/api/youtube/live.js :36 const relayRes = await fetch(`${relayBase}/youtube-live?${qs}`, { headers: relayHeaders });
  • net koala73-worldmonitor-f412096/consumer-prices-core/src/acquisition/exa.ts :13 async fetch(url: string, _opts: FetchOptions = {}): Promise<FetchResult> {
  • net koala73-worldmonitor-f412096/consumer-prices-core/src/acquisition/firecrawl.ts :40 async fetch(url: string, opts: FetchOptions = {}): Promise<FetchResult> {
  • net koala73-worldmonitor-f412096/consumer-prices-core/src/acquisition/p0.ts :39 async fetch(url: string, opts: FetchOptions = {}): Promise<FetchResult> {
  • net koala73-worldmonitor-f412096/consumer-prices-core/src/acquisition/playwright.ts :28 async fetch(url: string, opts: FetchOptions = {}): Promise<FetchResult> {
  • net koala73-worldmonitor-f412096/consumer-prices-core/src/acquisition/registry.ts :49 return await primary.fetch(url, mergedOpts);
  • net koala73-worldmonitor-f412096/consumer-prices-core/src/acquisition/types.ts :53 fetch(url: string, opts?: FetchOptions): Promise<FetchResult>;
  • net koala73-worldmonitor-f412096/consumer-prices-core/src/adapters/exa-search.ts :164 const resp = await fetch('https://api.exa.ai/search', {
  • net koala73-worldmonitor-f412096/consumer-prices-core/src/jobs/publish.ts :43 const resp = await fetch(url, {
  • net koala73-worldmonitor-f412096/convex/apiPlanLimitEmails.ts :127 const res = await fetch(RESEND_URL, {
  • net koala73-worldmonitor-f412096/convex/apiPlanLimitUsage.ts :189 // error field and blocks, and a genuine outage rejects the fetch (axiom_query_error).
  • net koala73-worldmonitor-f412096/convex/broadcast/_resendContacts.ts :68 const createRes = await fetch(`${RESEND_API_BASE}/contacts`, {
  • net koala73-worldmonitor-f412096/convex/broadcast/backfillCanaryWaveStamps.ts :161 const res = await fetch(url.toString(), {
  • net koala73-worldmonitor-f412096/convex/broadcast/sendBroadcast.ts :92 const res = await fetch(`${RESEND_API_BASE}/broadcasts`, {
  • net koala73-worldmonitor-f412096/convex/http.ts :447 await fetch(`https://api.telegram.org/bot${botToken}/sendMessage`, {
  • net koala73-worldmonitor-f412096/convex/notificationChannels.ts :138 const response = await fetch(url, {
  • net koala73-worldmonitor-f412096/convex/payments/billing.ts :3090 const res = await fetch(RESEND_EMAILS_URL, {
  • net koala73-worldmonitor-f412096/convex/payments/businessSeats.ts :257 const res = await fetch("https://api.resend.com/emails", {
  • net koala73-worldmonitor-f412096/convex/payments/cacheActions.ts :117 const resp = await fetch(
  • net koala73-worldmonitor-f412096/convex/payments/subscriptionEmails.ts :55 const res = await fetch(RESEND_URL, {
  • net koala73-worldmonitor-f412096/docker/redis-rest-proxy.mjs :18 import http from 'node:http';
  • net koala73-worldmonitor-f412096/middleware.ts :26 // Called from the Railway digest-notifications cron whose fetch() uses the
  • net koala73-worldmonitor-f412096/server/_shared/acled-auth.ts :59 const resp = await fetch(ACLED_TOKEN_URL, {
  • net koala73-worldmonitor-f412096/server/_shared/acled.ts :62 const resp = await fetch(`${ACLED_API_URL}?${params}`, {
  • net koala73-worldmonitor-f412096/server/_shared/brief-carousel-render.ts :48 const res = await fetch(FONT_URL, {
  • net koala73-worldmonitor-f412096/server/_shared/email-validation.ts :36 const res = await fetch(
  • net koala73-worldmonitor-f412096/server/_shared/entitlement-check.ts :552 const response = await fetch(`${convexSiteUrl}${CONVEX_INTERNAL_ENTITLEMENTS_PATH}`, {
  • net koala73-worldmonitor-f412096/server/_shared/fetch-json.ts :27 const response = await fetch(url, {
  • net koala73-worldmonitor-f412096/server/_shared/intel-history-client.ts :199 const resp = await fetch(`${siteUrl}${path}`, {
  • net koala73-worldmonitor-f412096/server/_shared/intel-history-embed.ts :132 const resp = await fetch(OPENROUTER_EMBEDDINGS_URL, {
  • net koala73-worldmonitor-f412096/server/_shared/llm-health.ts :25 await fetch(origin, {
  • net koala73-worldmonitor-f412096/server/_shared/llm.ts :437 const resp = await fetch(creds.apiUrl, {
  • net koala73-worldmonitor-f412096/server/_shared/mcp-internal-hmac.ts :232 * the `fetch()` call — the caller is responsible for actually attaching them.
  • net koala73-worldmonitor-f412096/server/_shared/pro-mcp-token.ts :132 const resp = await fetch(`${url}/get/${encodeURIComponent(negCacheKey(tokenId))}`, {
  • net koala73-worldmonitor-f412096/server/_shared/redis.ts :80 const resp = await fetch(`${url}/get/${encodeURIComponent(finalKey)}`, {
  • net koala73-worldmonitor-f412096/server/_shared/sec-edgar.ts :250 const resp = await fetch(`${url}/get/${encodeURIComponent(SEC_CIK_MAP_KEY)}`, {
  • net koala73-worldmonitor-f412096/server/_shared/simulation-queue.ts :40 const resp = await fetch(`${url}/get/${encodeURIComponent(key)}`, {
  • net koala73-worldmonitor-f412096/server/_shared/turnstile.ts :39 const res = await fetch(TURNSTILE_VERIFY_URL, {
  • net koala73-worldmonitor-f412096/server/_shared/usage.ts :570 const resp = await fetch(AXIOM_INGEST_URL, {
  • net koala73-worldmonitor-f412096/server/_shared/user-api-key.ts :149 resp = await fetch(`${convexSiteUrl}/api/internal-validate-api-key`, {
  • net koala73-worldmonitor-f412096/server/auth-session.ts :147 const resp = await fetch(`https://api.clerk.com/v1/users/${userId}`, {
  • net koala73-worldmonitor-f412096/server/gateway.ts :1067 // fetch (api/mcp.ts). This second check defends against (a) the
  • net koala73-worldmonitor-f412096/server/worldmonitor/aviation/v1/_providers/travelpayouts_data.ts :165 const resp = await fetch(url, {
  • net koala73-worldmonitor-f412096/server/worldmonitor/aviation/v1/_shared.ts :277 const resp = await fetch(url, {
  • net koala73-worldmonitor-f412096/server/worldmonitor/aviation/v1/get-flight-status.ts :99 const resp = await fetch(`${relayBase}/aviationstack?${params}`, {
  • net koala73-worldmonitor-f412096/server/worldmonitor/aviation/v1/get-youtube-live-stream-info.ts :57 const relayResponse = await fetch(`${relayBaseUrl}/youtube-live?${query}`, {
  • net koala73-worldmonitor-f412096/server/worldmonitor/aviation/v1/list-airport-flights.ts :150 const resp = await fetch(url, {
  • net koala73-worldmonitor-f412096/server/worldmonitor/aviation/v1/list-aviation-news.ts :62 const resp = await fetch(feedUrl, {
  • net koala73-worldmonitor-f412096/server/worldmonitor/aviation/v1/search-google-dates.ts :57 const resp = await fetch(`${relayBaseUrl}/google-flights/search-dates?${params}`, {
  • net koala73-worldmonitor-f412096/server/worldmonitor/aviation/v1/search-google-flights.ts :57 const resp = await fetch(`${relayBaseUrl}/google-flights/search?${params}`, {
  • net koala73-worldmonitor-f412096/server/worldmonitor/aviation/v1/track-aircraft.ts :59 const resp = await fetch(url, {
  • net koala73-worldmonitor-f412096/server/worldmonitor/batch/v1/execute-batch.ts :184 fetchImpl: FetchLike = (input, init) => fetch(input, init),
  • net koala73-worldmonitor-f412096/server/worldmonitor/cyber/v1/_shared.ts :282 const resp = await fetch(`https://ipinfo.io/${encodeURIComponent(ip)}/json`, {
  • net koala73-worldmonitor-f412096/server/worldmonitor/displacement/v1/get-displacement-summary.ts :59 const response = await fetch(
  • net koala73-worldmonitor-f412096/server/worldmonitor/economic/v1/_fetch-with-timeout.ts :9 return await fetch(url, { ...init, signal: controller.signal });
  • net koala73-worldmonitor-f412096/server/worldmonitor/economic/v1/list-world-bank-indicators.ts :43 const response = await fetch(wbUrl, {
  • net koala73-worldmonitor-f412096/server/worldmonitor/forecast/v1/get-forecast-scorecard.ts :91 const resp = await fetch(`${url}/get/${encodeURIComponent(key)}`, {
  • net koala73-worldmonitor-f412096/server/worldmonitor/imagery/v1/search-imagery.ts :156 const resp = await fetch(STAC_SEARCH, {

secrets 81

  • secrets koala73-worldmonitor-f412096/api/_client-ip.js :32 const secret = (process.env.CF_EDGE_PROOF_SECRET ?? '').trim();
  • secrets koala73-worldmonitor-f412096/api/_rate-limit.js :48 const token = process.env.UPSTASH_REDIS_REST_TOKEN;
  • secrets koala73-worldmonitor-f412096/api/_relay.js :15 const relaySecret = process.env.RELAY_SHARED_SECRET || '';
  • secrets koala73-worldmonitor-f412096/api/_session.js :23 const s = process.env.WM_SESSION_SECRET;
  • secrets koala73-worldmonitor-f412096/api/_upstash-json.js :86 const token = process.env.UPSTASH_REDIS_REST_TOKEN;
  • secrets koala73-worldmonitor-f412096/api/_usage-telemetry.js :126 const token = process.env.AXIOM_API_TOKEN;
  • secrets koala73-worldmonitor-f412096/api/_user-api-key.js :54 const sharedSecret = process.env.CONVEX_SERVER_SHARED_SECRET || '';
  • secrets koala73-worldmonitor-f412096/api/brief/[userId]/[issueDate].ts :116 const relaySecret = process.env.RELAY_SHARED_SECRET ?? '';
  • secrets koala73-worldmonitor-f412096/api/brief/carousel/[userId]/[issueDate]/[page].ts :78 const secret = process.env.BRIEF_URL_SIGNING_SECRET ?? '';
  • secrets koala73-worldmonitor-f412096/api/brief/share-url.ts :111 const secret = process.env.BRIEF_SHARE_SECRET ?? '';
  • secrets koala73-worldmonitor-f412096/api/cache-purge.js :87 const secret = process.env.RELAY_SHARED_SECRET;
  • secrets koala73-worldmonitor-f412096/api/create-checkout.ts :28 const RELAY_SHARED_SECRET = process.env.RELAY_SHARED_SECRET ?? '';
  • secrets koala73-worldmonitor-f412096/api/customer-portal.ts :25 const RELAY_SHARED_SECRET = process.env.RELAY_SHARED_SECRET ?? '';
  • secrets koala73-worldmonitor-f412096/api/discord/oauth/callback.ts :15 const DISCORD_CLIENT_SECRET = process.env.DISCORD_CLIENT_SECRET ?? '';
  • secrets koala73-worldmonitor-f412096/api/discord/oauth/start.ts :22 const UPSTASH_TOKEN = process.env.UPSTASH_REDIS_REST_TOKEN ?? '';
  • secrets koala73-worldmonitor-f412096/api/internal/china-exchange-egress.js :121 const expected = process.env.RELAY_SHARED_SECRET ?? '';
  • secrets koala73-worldmonitor-f412096/api/internal/mcp-grant-context.ts :70 const token = process.env.UPSTASH_REDIS_REST_TOKEN;
  • secrets koala73-worldmonitor-f412096/api/internal/mcp-grant-mint.ts :115 const token = process.env.UPSTASH_REDIS_REST_TOKEN;
  • secrets koala73-worldmonitor-f412096/api/invalidate-user-api-key-cache.ts :68 const convexSharedSecret = process.env.CONVEX_SERVER_SHARED_SECRET;
  • secrets koala73-worldmonitor-f412096/api/latest-brief.ts :219 const secret = process.env.BRIEF_URL_SIGNING_SECRET ?? '';
  • secrets koala73-worldmonitor-f412096/api/mcp/auth.ts :58 const token = process.env.UPSTASH_REDIS_REST_TOKEN;
  • secrets koala73-worldmonitor-f412096/api/notification-channels.ts :31 const RELAY_SHARED_SECRET = process.env.RELAY_SHARED_SECRET ?? '';
  • secrets koala73-worldmonitor-f412096/api/notify.ts :98 const upstashToken = process.env.UPSTASH_REDIS_REST_TOKEN;
  • secrets koala73-worldmonitor-f412096/api/oauth/authorize-pro.ts :187 const token = process.env.UPSTASH_REDIS_REST_TOKEN;
  • secrets koala73-worldmonitor-f412096/api/oauth/authorize.js :29 const token = process.env.UPSTASH_REDIS_REST_TOKEN;
  • secrets koala73-worldmonitor-f412096/api/oauth/register.js :41 const token = process.env.UPSTASH_REDIS_REST_TOKEN;
  • secrets koala73-worldmonitor-f412096/api/oauth/token.ts :63 const token = process.env.UPSTASH_REDIS_REST_TOKEN;
  • secrets koala73-worldmonitor-f412096/api/product-catalog.js :32 const UPSTASH_TOKEN = process.env.UPSTASH_REDIS_REST_TOKEN ?? '';
  • secrets koala73-worldmonitor-f412096/api/referral/me.ts :61 const relaySecret = process.env.RELAY_SHARED_SECRET ?? '';
  • secrets koala73-worldmonitor-f412096/api/seed-contract-probe.ts :139 const token = process.env.UPSTASH_REDIS_REST_TOKEN;
  • secrets koala73-worldmonitor-f412096/api/slack/oauth/callback.ts :18 const SLACK_CLIENT_SECRET = process.env.SLACK_CLIENT_SECRET ?? '';
  • secrets koala73-worldmonitor-f412096/api/slack/oauth/start.ts :22 const UPSTASH_TOKEN = process.env.UPSTASH_REDIS_REST_TOKEN ?? '';
  • secrets koala73-worldmonitor-f412096/api/symbol-search.ts :185 const apiKey = process.env.FINNHUB_API_KEY;
  • secrets koala73-worldmonitor-f412096/api/user/mcp-quota.ts :81 const token = process.env.UPSTASH_REDIS_REST_TOKEN;
  • secrets koala73-worldmonitor-f412096/api/user/mcp-revoke.ts :86 const sharedSecret = process.env.CONVEX_SERVER_SHARED_SECRET;
  • secrets koala73-worldmonitor-f412096/api/widget-agent.ts :28 const WIDGET_AGENT_KEY = process.env.WIDGET_AGENT_KEY ?? '';
  • secrets koala73-worldmonitor-f412096/consumer-prices-core/src/adapters/search.smoke.ts :19 const exaKey = (process.env.EXA_API_KEYS || process.env.EXA_API_KEY || '').split(/[\n,]+/)[0].trim();
  • secrets koala73-worldmonitor-f412096/consumer-prices-core/src/api/server.ts :16 function requiredApiKey(apiKey = process.env.WORLDMONITOR_SNAPSHOT_API_KEY): string {
  • secrets koala73-worldmonitor-f412096/consumer-prices-core/src/jobs/publish.ts :107 const token = process.env.UPSTASH_REDIS_REST_TOKEN;
  • secrets koala73-worldmonitor-f412096/consumer-prices-core/src/jobs/scrape.ts :84 const exaKey = (process.env.EXA_API_KEYS || process.env.EXA_API_KEY || '').split(/[\n,]+/)[0].trim();
  • secrets koala73-worldmonitor-f412096/convex/apiPlanLimitEmails.ts :197 const apiKey = process.env.RESEND_API_KEY;
  • secrets koala73-worldmonitor-f412096/convex/apiPlanLimitUsage.ts :230 const token = process.env.AXIOM_QUERY_TOKEN ?? process.env.AXIOM_API_TOKEN;
  • secrets koala73-worldmonitor-f412096/convex/broadcast/audienceExport.ts :172 const apiKey = process.env.RESEND_API_KEY;
  • secrets koala73-worldmonitor-f412096/convex/broadcast/audienceWaveExport.ts :276 const apiKey = process.env.RESEND_API_KEY;
  • secrets koala73-worldmonitor-f412096/convex/broadcast/backfillCanaryWaveStamps.ts :126 const apiKey = process.env.RESEND_API_KEY;
  • secrets koala73-worldmonitor-f412096/convex/broadcast/sendBroadcast.ts :66 const apiKey = process.env.RESEND_API_KEY;
  • secrets koala73-worldmonitor-f412096/convex/broadcast/waveRuns.ts :696 const apiKey = process.env.RESEND_API_KEY;
  • secrets koala73-worldmonitor-f412096/convex/http.ts :138 const expectedSecret = process.env.CONVEX_SERVER_SHARED_SECRET ?? "";
  • secrets koala73-worldmonitor-f412096/convex/lib/dodo.ts :30 const apiKey = process.env.DODO_API_KEY;
  • secrets koala73-worldmonitor-f412096/convex/lib/identitySigning.ts :28 const key = process.env.DODO_IDENTITY_SIGNING_SECRET;
  • secrets koala73-worldmonitor-f412096/convex/notificationChannels.ts :130 const token = process.env.UPSTASH_REDIS_REST_TOKEN;
  • secrets koala73-worldmonitor-f412096/convex/payments/billing.ts :48 const apiKey = process.env.DODO_API_KEY;
  • secrets koala73-worldmonitor-f412096/convex/payments/businessSeats.ts :251 const apiKey = process.env.RESEND_API_KEY;
  • secrets koala73-worldmonitor-f412096/convex/payments/cacheActions.ts :98 const token = process.env.UPSTASH_REDIS_REST_TOKEN;
  • secrets koala73-worldmonitor-f412096/convex/payments/subscriptionEmails.ts :315 const apiKey = process.env.RESEND_API_KEY;
  • secrets koala73-worldmonitor-f412096/convex/payments/subscriptionHelpers.ts :518 if (process.env.RESEND_API_KEY) {
  • secrets koala73-worldmonitor-f412096/docker/redis-rest-proxy.mjs :23 const TOKEN = process.env.SRH_TOKEN || '';
  • secrets koala73-worldmonitor-f412096/server/_shared/acled-auth.ts :173 const password = process.env.ACLED_PASSWORD?.trim();
  • secrets koala73-worldmonitor-f412096/server/_shared/api-key-rate-limit.ts :41 const token = process.env.UPSTASH_REDIS_REST_TOKEN;
  • secrets koala73-worldmonitor-f412096/server/_shared/brief-url.ts :167 * secret: process.env.BRIEF_URL_SIGNING_SECRET!,
  • secrets koala73-worldmonitor-f412096/server/_shared/client-ip.ts :39 const secret = (process.env.CF_EDGE_PROOF_SECRET ?? '').trim();
  • secrets koala73-worldmonitor-f412096/server/_shared/entitlement-check.ts :178 const secret = process.env.CONVEX_SERVER_SHARED_SECRET ?? '';
  • secrets koala73-worldmonitor-f412096/server/_shared/intel-history-client.ts :46 const secret = process.env.CONVEX_SERVER_SHARED_SECRET ?? '';
  • secrets koala73-worldmonitor-f412096/server/_shared/intel-history-embed.ts :115 const apiKey = process.env.OPENROUTER_API_KEY ?? '';
  • secrets koala73-worldmonitor-f412096/server/_shared/llm.ts :79 const apiKey = process.env.OLLAMA_API_KEY;
  • secrets koala73-worldmonitor-f412096/server/_shared/pro-mcp-token.ts :101 const sharedSecret = process.env.CONVEX_SERVER_SHARED_SECRET;
  • secrets koala73-worldmonitor-f412096/server/_shared/rate-limit.ts :35 const token = process.env.UPSTASH_REDIS_REST_TOKEN;
  • secrets koala73-worldmonitor-f412096/server/_shared/redis.ts :34 return Boolean(process.env.UPSTASH_REDIS_REST_URL && process.env.UPSTASH_REDIS_REST_TOKEN);
  • secrets koala73-worldmonitor-f412096/server/_shared/relay.ts :15 const relaySecret = process.env.RELAY_SHARED_SECRET;
  • secrets koala73-worldmonitor-f412096/server/_shared/sec-edgar.ts :242 const token = process.env.UPSTASH_REDIS_REST_TOKEN;
  • secrets koala73-worldmonitor-f412096/server/_shared/simulation-queue.ts :36 const token = process.env.UPSTASH_REDIS_REST_TOKEN;
  • secrets koala73-worldmonitor-f412096/server/_shared/turnstile.ts :27 const secret = process.env.TURNSTILE_SECRET_KEY;
  • secrets koala73-worldmonitor-f412096/server/_shared/usage.ts :553 const token = process.env.AXIOM_API_TOKEN;
  • secrets koala73-worldmonitor-f412096/server/_shared/user-api-key.ts :142 const convexSharedSecret = process.env.CONVEX_SERVER_SHARED_SECRET;
  • secrets koala73-worldmonitor-f412096/server/auth-session.ts :19 const CLERK_SECRET_KEY = process.env.CLERK_SECRET_KEY ?? '';
  • secrets koala73-worldmonitor-f412096/server/gateway.ts :680 const expected = process.env.WORLDMONITOR_SEED_REFRESH_KEY?.trim() ?? '';
  • secrets koala73-worldmonitor-f412096/server/worldmonitor/aviation/v1/_shared.ts :385 const apiKey = process.env.ICAO_API_KEY;
  • secrets koala73-worldmonitor-f412096/server/worldmonitor/aviation/v1/search-flight-prices.ts :48 const token = process.env.TRAVELPAYOUTS_API_TOKEN ?? '';
  • secrets koala73-worldmonitor-f412096/server/worldmonitor/cyber/v1/_shared.ts :531 const authKey = cleanString(process.env.URLHAUS_AUTH_KEY || '', 200);
  • secrets koala73-worldmonitor-f412096/server/worldmonitor/forecast/v1/get-forecast-scorecard.ts :89 const token = process.env.UPSTASH_REDIS_REST_TOKEN;
  • secrets koala73-worldmonitor-f412096/server/worldmonitor/infrastructure/v1/_shared.ts :60 const token = process.env.UPSTASH_REDIS_REST_TOKEN;

database 2

  • db koala73-worldmonitor-f412096/consumer-prices-core/src/db/client.ts :1 import pg from 'pg';
  • db koala73-worldmonitor-f412096/docker/redis-rest-proxy.mjs :20 import { createClient } from 'redis';

install hooks 1

  • postinstall koala73-worldmonitor-f412096/package.json :43 cd blog-site && npm ci --prefer-offline

declared dependencies 85

  • @anthropic-ai/sdk@^0.91.1
  • @aws-sdk/client-s3@^3.1009.0
  • @clerk/clerk-js@^6.13.0
  • @deck.gl/core@^9.2.11
  • @deck.gl/layers@^9.2.11
  • @deck.gl/mapbox@^9.2.11
  • @dodopayments/convex@^0.2.8
  • @fontsource/nunito@^5.2.7
  • @fontsource/tajawal@^5.2.7
  • @protomaps/basemaps@^5.7.1
  • @sentry/browser@^10.39.0
  • @upstash/ratelimit@^2.0.8
  • @upstash/redis@^1.36.1
  • @vercel/analytics@^2.0.0
  • @vercel/functions@^3.7.5
  • @vercel/og@^0.11.1
  • @xenova/transformers@^2.17.2
  • aws4fetch@^1.0.20
  • canvas-confetti@^1.9.4
  • convex@^1.32.0
  • d3@^7.9.0
  • deck.gl@^9.2.11
  • dodopayments-checkout@^1.8.0
  • dompurify@^3.4.11
  • fast-xml-parser@^5.8.0
  • globe.gl@^2.45.0
  • h3-js@^4.4.0
  • hls.js@^1.6.15
  • i18next@^25.8.10
  • i18next-browser-languagedetector@^8.2.1
  • jmespath@^0.16.0
  • jose@^6.2.2
  • mailchecker@^6.0.21
  • maplibre-gl@^5.16.0
  • marked@^17.0.3
  • onnxruntime-web@^1.26.0
  • papaparse@^5.5.3
  • pmtiles@^4.4.0
  • preact@^10.25.4
  • satellite.js@^6.0.2
  • supercluster@^8.0.1
  • telegram@^2.26.22
  • topojson-client@^3.1.0
  • uqr@^0.1.2
  • web-vitals@^5.3.0
  • ws@^8.21.0
  • yaml@^2.8.3
  • youtubei.js@^16.0.1
  • zod@^4.3.6
  • @biomejs/biome@^2.4.7
  • @bufbuild/buf@^1.66.0
  • @edge-runtime/vm@^5.0.0
  • @playwright/test@^1.52.0
  • @tauri-apps/cli@^2.10.0
  • @types/canvas-confetti@^1.9.0
  • @types/d3@^7.4.3
  • @types/dompurify@^3.0.5
  • @types/geojson@^7946.0.14
  • @types/jmespath@^0.15.2
  • @types/maplibre-gl@^1.13.2
  • @types/marked@^5.0.2
  • @types/papaparse@^5.5.2
  • @types/supercluster@^7.1.3
  • @types/three@^0.183.1
  • @types/topojson-client@^3.1.5
  • @types/topojson-specification@^1.0.5
  • convex-test@^0.0.43
  • cross-env@^10.1.0
  • esbuild@0.28.1
  • exceljs@^4.4.0
  • happy-dom@^20.11.1
  • markdownlint-cli2@^0.21.0
  • tsx@^4.21.0
  • typescript@^5.7.2
  • vite@^6.0.7
  • vite-plugin-pwa@^1.2.0
  • vitest@^4.1.0
  • tauri-build@2
  • tauri@2
  • serde@1
  • serde_json@1
  • keyring@3
  • reqwest@0.12
  • getrandom@0.2
  • opener@0.8

clipboard 1

  • navigator.clipboard koala73-worldmonitor-f412096/src/services/referral.ts :124 if (typeof navigator !== 'undefined' && navigator.clipboard?.writeText) {

obfuscation 50

  • dynamic require()/import() koala73-worldmonitor-f412096/api/_sentry-common.test.mjs :33 const { makeCaptureSilentError } = await import(`./_sentry-common.js?test=${Date.now()}-${Math.random()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/api/product-catalog.test.mjs :29 const mod = await import(`./product-catalog.js?test=${Date.now()}-${Math.random()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/scripts/audit-mcp-api-coverage.mjs :293 const importRe = /import(?:\s+type)?\s*\{([^}]+)\}\s*from\s*['"](\.[^'"]+)['"]\s*;?/g;
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/a2a.test.mjs :76 const mod = await import(`../api/a2a.ts?t=${Date.now()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/auth-session.test.mts :109 const mod = await import(`../server/auth-session.ts?t=${Date.now()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/aviation-hydration-path.test.mts :38 harness = await import(`data:text/javascript;base64,${Buffer.from(source).toString('base64')}`) as Harness;
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/checkout-overlay-lifecycle.test.mts :281 return await import(`${dataUrl}#${Date.now()}-${Math.random()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/checkout-pending-dialog.test.mts :254 return await import(`${dataUrl}#${Date.now()}-${Math.random()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/checkout-unparsable-success-body.test.mts :228 return await import(`${dataUrl}#${Date.now()}-${Math.random()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/circuit-breaker-persistent-stale-ceiling.test.mts :41 const mod = await import(`${CIRCUIT_BREAKER_URL}?t=${Date.now()}-default`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/circuit-breaker-swr-eviction.test.mts :36 const mod = await import(`${CIRCUIT_BREAKER_URL}?t=${Date.now()}-swr-evict`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/country-evidence-bundle-export.test.mts :57 const mod = await import(`${pathToFileURL(outfile).href}?t=${Date.now()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/feed-catalog-drift.test.mts :81 feeds = await import(`${pathToFileURL(outfile).href}?t=${Date.now()}`) as FeedsModule;
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/helpers/chat-analyst-panel-harness.mjs :157 const mod = await import(`${pathToFileURL(outfile).href}?t=${Date.now()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/helpers/country-deep-dive-panel-harness.mjs :310 const mod = await import(`${pathToFileURL(outfile).href}?t=${Date.now()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/helpers/minimal-panel-harness.mjs :183 const mod = await import(`${pathToFileURL(outfile).href}?t=${Date.now()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/helpers/runtime-config-panel-harness.mjs :231 const mod = await import(`${pathToFileURL(outfile).href}?t=${Date.now()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/indexnow-submit.test.mjs :14 indexNow = await import(`../scripts/seo-indexnow-submit.mjs?test=${Date.now()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/mcp-anon-client-conformance.test.mjs :71 const mod = await import(`../api/mcp.ts?t=${Date.now()}-anonconf`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/mcp-capability-parity.test.mjs :118 const mod = await import(`../api/mcp.ts?t=${Date.now()}-cap-parity`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/mcp-nlp-tools.test.mjs :153 const mod = await import(`../api/mcp.ts?nlp=${Date.now()}-${Math.random()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/mcp-procurement-tool.test.mjs :44 const mod = await import(`../api/mcp.ts?procurement=${Date.now()}-${Math.random()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/mcp-prompts.test.mjs :64 const mod = await import(`../api/mcp.ts?t=${Date.now()}-prompts`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/mcp-protocol-conformance.test.mjs :86 const mod = await import(`../api/mcp.ts?t=${Date.now()}-${Math.random()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/mcp-protocol-version.test.mjs :65 const mod = await import(`../api/mcp.ts?t=${Date.now()}_on_new`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/mcp-proxy.test.mjs :150 const mod = await import(`../api/mcp-proxy.ts?t=${Date.now()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/mcp-quota-concurrent.test.mjs :63 const mod = await import(`../api/mcp.ts?t=${Date.now()}-${Math.random()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/mcp-quota-no-refund.test.mjs :62 const mod = await import(`../api/mcp.ts?t=${Date.now()}-${Math.random()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/mcp-quota-plan-driven.test.mjs :101 ({ reserveQuota } = await import(`../api/mcp/quota.ts?t=${Date.now()}-${Math.random()}`));
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/mcp-quota.test.mjs :205 const { dailyCounterKey } = await import(`../server/_shared/pro-mcp-token.ts?t=${Date.now()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/mcp-resources.test.mjs :284 const mod = await import(`../api/mcp.ts?t=${Date.now()}-resources`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/mcp-telemetry-schema.test.mjs :96 const mod = await import(`../api/mcp.ts?t=${Date.now()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/mcp-tool-output-contracts.test.mjs :111 mod = await import(`../api/mcp.ts?t=${Date.now()}-${Math.random()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/mcp-transport-conformance.test.mjs :135 const mod = await import(`../api/mcp.ts?t=${Date.now()}-${Math.random()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/mcp-usage-telemetry.test.mjs :53 const mod = await import(`../api/mcp.ts?t=${Date.now()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/mcp-user-key-auth.test.mjs :59 const mod = await import(`../api/mcp.ts?t=${Date.now()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/mcp.test.mjs :61 const mod = await import(`../api/mcp.ts?t=${Date.now()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/mission-presets.test.mts :520 const mod = await import(`${pathToFileURL(outfile).href}?t=${Date.now()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/national-debt-panel-refresh.test.mts :210 const mod = await import(`${pathToFileURL(outfile).href}?t=${Date.now()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/nlweb-ask.test.mjs :20 const mod = await import(`../api/ask.ts?t=${Date.now()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/open-meteo-proxy-fallback.test.mjs :63 const { fetchOpenMeteoArchiveBatch } = await import(`../scripts/_open-meteo-archive.mjs?t=${Date.now()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/pro-activation-alerts-blocked.test.mts :253 const mod = await import(`${pathToFileURL(outfile).href}?t=${Date.now()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/pro-activation-controller.test.mts :165 const mod = await import(`${pathToFileURL(outfile).href}?t=${Date.now()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/pro-mcp-token.test.mjs :110 mod = await import(`../server/_shared/pro-mcp-token.ts?cachebust=${Math.random()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/redis-caching.test.mjs :59 const module = await import(`${pathToFileURL(tempPath).href}?t=${Date.now()}-${Math.random().toString(16).slice(2)}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/renewable-energy-panel-state.test.mts :155 const module = await import(`${pathToFileURL(outfile).href}?t=${Date.now()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/source-provenance.test.mts :118 feeds = await import(`${pathToFileURL(outfile).href}?t=${Date.now()}`) as FeedsModule;
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/telegram-feed-contract.test.mjs :61 const handler = (await import(`../api/telegram-feed.js?t=${Date.now()}`)).default;
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/threat-timeline-panel.test.mts :324 const mod = await import(`${pathToFileURL(outfile).href}?t=${Date.now()}`);
  • dynamic require()/import() koala73-worldmonitor-f412096/tests/widget-store.test.mts :110 const mod = await import(`${pathToFileURL(outfile).href}?t=${Date.now()}`);

transport_posture 1

  • binds all interfaces (0.0.0.0) koala73-worldmonitor-f412096/docker/redis-rest-proxy.mjs :205 server.listen(PORT, '0.0.0.0', () => {