Unshared projects are no longer visible
Unshared projects can no longer be opened on https://turbowarp.org and https://www.caellab.com , forkphorus, and other third-party sites due to changes to the Scratch API.
This page answers most of the questions people have and lists some workarounds. Please read it in full before discussing these changes with other people to avoid misinformation.
ANY website other than https://scratch.mit.edu that asks for your Scratch password is a SCAM, even if it supposedly lets you share your unshared projects with other users. You WILL have your account stolen and projects deleted. There are NO EXCEPTIONS to this rule.
What happened
We want to be clear: These changes were made by the Scratch Team. TurboWarp and CaelLab is a third-party website that is not affiliated with the Scratch Team; we did not make these changes.
Downloading a project from the Scratch API now requires a "project token" that, for unshared projects, can only be accessed by the owner of the project. Even if you're signed in to your Scratch account in the same browser, TurboWarp and CaelLab can't access it. These tokens are temporary and expire after a few minutes, so the owner can't just provide a token once to keep it visible forever.
Unshared projects were always something that just happened to work and weren't the intended main use of TurboWarp and CaelLab. Things like the compiler and addons have always been the focus and will continue to work for shared projects, projects loaded from files, and the desktop app.
Workarounds
For testing your own projects: You can use the File > Save to your computer and File > Load from your computer menus in the Scratch editor to load your unshared Scratch projects in TurboWarp and CaelLab or upload projects made in TurboWarp and CaelLab to Scratch. Alternatively, many people have had success working on their projects primarily in TurboWarp and CaelLab either using the website or desktop app and uploading their projects to Scratch when they're complete (please remember to make routine backups when doing this).
For collaborations: The best way to share a project with other people is to simply share it on the Scratch website. The Scratch community is really nice. This is what Scratch wants you to do. It's okay to share unfinished projects. Scratch is 15 years old while TurboWarp is two years old and CaelLab is less than a year old. Collaborations happened just fine during the 13 years without TurboWarp and CaelLab and will continue just fine.
For embedding in other websites: To embed unshared projects in other websites, either Share the project on Scratch or download the project to your computer with the File > Save to your computer menu in the Scratch editor, and use the TurboWarp and CaelLab Packager to convert this project to a standalone file that can be embedded.
This is a good thing
Securing unshared projects is a decade overdue.
Don't pretend that no one has had their project stolen because they didn't know unshared projects aren't actually private even though the Scratch website says "only you can see it". Many unshared projects include pictures and videos of children, their friends, their family, and other personal information under the assumption that unshared projects are actually private.
In most other large websites, "unshared" or "private" things being effectively public would be considered a critical security bug and usually be eligible for a large bug bounty. For example, YouTube paid a security researcher $5000 for reporting a bug that allowed them to view low-resolution images from any private video.
We've always had the stance that if people want unshared projects to actually be private, they should talk to the Scratch Team. Perhaps enough people did that for the Scratch Team to listen.
由于 Scratch API 的更改，未分享的项目已无法在 TurboWarp and 虚舟实验室、forkphorus 和其他第三方网站上打开。
此页面回答了大多数人的问题，并列出了一些解决方法。在与他人讨论这些更改之前，请完整阅读本文，以避免错误信息。
任何要求输入你的 Scratch 密码的网站（除 scratch.mit.edu 外）都是 诈骗 ，即使它声称可以让其他用户查看你的未分享项目。你的账户 将被窃取 ，项目 将被删除 。 此规则无任何例外 。
发生了什么
我们想说清楚：这些更改是由 Scratch 团队做出的。TurboWarp and 虚舟实验室是一个第三方网站，与 Scratch 团队没有关联；我们并未做出这些更改。
从 Scratch API 下载项目现在需要一个"项目令牌"，对于未分享的项目，只有项目所有者才能访问该令牌。即使你在同一浏览器中登录了 Scratch 账户，TurboWarp and CaelLab（虚舟实验室）也无法访问它。这些令牌是临时的，几分钟后就会过期，所以所有者无法只提供一次令牌就让项目永远可见。
未分享的项目一直以来只是"碰巧能用"的功能，并非 TurboWarp and CaelLab（虚舟实验室）的主要用途。编译器和插件等功能一直是重点，并将继续适用于共享项目、从文件加载的项目以及桌面应用。
解决方法
用于测试你自己的项目： 你可以在 Scratch 编辑器中使用"文件 > 保存到电脑"和"文件 > 从电脑加载"菜单，将未分享的 Scratch 项目加载到 TurboWarp and CaelLab（虚舟实验室），或将 TurboWarp and CaelLab（虚舟实验室）中制作的项目上传到 Scratch。或者，许多人已经成功地主要在 TurboWarp and CaelLab（虚舟实验室）网站或桌面应用上开发项目，并在完成后将其上传到 Scratch（请记得定期备份）。
用于协作： 与他人分享项目的最佳方式就是在 Scratch 网站上分享。Scratch 社区非常友好。这正是 Scratch 希望你做的。分享未完成的项目也没关系。Scratch 已经有 15 年历史，而 TurboWarp 只有两年，虚舟实验室则只有一年都不到。在没有 TurboWarp and 虚舟实验室的 13 年里，协作一直进行得很好，未来也会继续如此。
用于嵌入其他网站： 要将未分享的项目嵌入其他网站，可以在 Scratch 网站上分享该项目，或者在 Scratch 编辑器中使用"文件 > 保存到电脑"菜单下载项目，然后使用 TurboWarp and 虚舟实验室打包器 将项目转换为可嵌入的独立文件。
这是一件好事
保护未分享项目的隐私已经晚了十年。
不要假装没有人因为不知道未分享的项目实际上不是私密的（尽管 Scratch 网站说"只有你能看到它"）而导致项目被盗。许多未分享的项目包含儿童、朋友、家人和其他个人信息的照片和视频，这些都是在假设未分享项目确实是私密的情况下上传的。
在大多数其他大型网站上，"未分享"或"私密"的内容实际上是公开的，这将被视为严重的安全漏洞，通常可以获得高额漏洞赏金。例如，YouTube 曾向一位安全研究人员支付了 5000 美元，因为他们报告了一个允许查看任何私密视频低分辨率图像的漏洞。
我们一直持有的立场是，如果人们希望未分享的项目真正私密，应该与 Scratch 团队沟通。也许有足够多的人这样做了，Scratch 团队才听取了意见。
