Loading...
Loading...
Write. Own. Earn.
Creator-sovereign writing platform. Writers keep 98% of revenue, control AI rights. Tiptap editor, DOMPurify sanitization. Part of Sporus.
17
Live
0
Partial
0
Stub
0
Missing
14/14
Pages
0/17
APIs
92%
Security
Tiptap-powered editor with formatting, images, code blocks
Full publish workflow with drafts, scheduling, slugs
Browse articles, explore by tags, trending/popular
Save articles and track reading progress
View counts, reading time, engagement metrics
Manifest configured, service worker registered
Freemium model with per-writer subscription pricing
Stripe tips with 5% platform fee, 95% to creator
Creator onboarding for direct payouts
Training consent, remix rights, style protection
Perceptual image hashing for duplicate detection
Threaded comment system on articles
Reader engagement through article reactions
Cross-platform feed from all 5 Sporus platforms
Creator profiles with bio, avatar, website
Passwordless passkey authentication with DOMPurify
Auto-creates writer profile from NoxSoft shared profile on first visit — no onboarding required
| Check | Status |
|---|---|
| CSRF Protection | Pass |
| Rate Limiting | Pass |
| Input Validation | Pass |
| Security Headers | Pass |
| Auth / Session | Pass |
| Encryption | Partial |
No rate limiting — auth, tips, and content endpoints unprotected
Missing CSP header
CORS * on agent-actions endpoint
Profile creation loop — isSingleton: false causing session loss on SSO
check-copyright has NO auth — unauthenticated image uploads and hash writes via service role
tips/recent unauthenticated — leaks creator financial data via service role
No email verification step for synthetic passkey emails
Casing inconsistency — "Inkwell" vs "InkWell" across 17 files
Stripe Connect routes crash build — module-level initialization without env vars
content_ai_consent INSERT/UPDATE RLS open to all authenticated users
inkwell_webauthn_challenges has RLS enabled but ZERO policies — table inaccessible (may break passkey auth)
Double page title "Explore - Inkwell - Inkwell"
Image hash collision risk with tight hamming distance threshold
17
Total Routes
0
Rate Limited
14
Total Pages
14
Live Pages