Demo Mode · Repository writes, test runs, and deployments are safely simulated — no external git operations or production changes occur. Labels: ANALYZED = read-only · PROPOSED = not yet applied · SIMULATED = validated in demo, not executed · REQUIRES_APPROVAL = blocked until you approve.

E-Commerce Platform

acme/ecommerce-platform

E-Commerce Platform

67Fair

Full-stack e-commerce platform with React storefront, Express API, and PostgreSQL database. Handles product catalog, cart, checkout, and order management.

TypeScriptJavaScriptReactExpressPostgreSQLRedisDocker

Total Runs

2

Findings Found

6

Fixed

6

Open

0

Architecture Map

System topology — 9 components, 10 connections

◧frontend
◈service
◫database
◪cache
◻external
HTTPSHTTPinternalinternalinternalTCPTCPTCPTCPHTTPS◧React FrontendReact 18⬡API GatewayNginx◈Express APIExpress 4.x◈Auth ServiceJWT + Bcrypt◈Cart ServiceExpress◈Checkout ServiceExpress◫PostgreSQLPostgreSQL 15◪Redis CacheRedis 7◻StripeStripe API

Repository Overview

Default Branch

main

Languages

TypeScript, JavaScript

Open Findings

6

Health Score

67/100

TypeScriptJavaScriptReactExpressPostgreSQLRedisDocker

Key Files & Directories

src/Application source code
src/auth/Authentication & JWT handling
src/cart/Shopping cart logic
src/checkout/Checkout & payment flow
src/products/Product catalog API
docker-compose.ymlContainer orchestration
prisma/schema.prismaDatabase schema
.env.exampleEnvironment template
README.mdProject documentation

Development Setup

1

Clone the repository

git clone https://github.com/acme/ecommerce-platform.git
cd ecommerce-platform
2

Install dependencies

npm install
3

Configure environment

cp .env.example .env
# Edit .env with your local credentials
4

Start services with Docker

docker-compose up -d postgres redis
5

Run migrations

npm run db:migrate
npm run db:seed
6

Start development server

npm run dev

Testing Guide

Unit Tests

npm test

Run Jest unit test suite

Integration Tests

npm run test:integration

Run API integration tests

Coverage Report

npm run test:coverage

Generate HTML coverage report

Findings

6 fixed · 0 open

  • CRITICAL

    Critical: Password Reset Token Not Invalidated After Use

    src/auth/password-reset.ts

    Fixed
  • HIGH

    Failing Tests: Cart Discount Calculation

    src/cart/discount.ts

    Fixed
  • MEDIUM

    Missing Edge-Case Coverage: Checkout Flow

    src/checkout/edge-cases.ts

    Fixed
  • HIGH

    Outdated Dependency: jsonwebtoken@8.5.1 (CVE-2022-23529)

    package.json

    Fixed
  • LOW

    Documentation Mismatch: Password Reset API Endpoint

    README.md

    Fixed
  • HIGH

    Missing HEALTH_CHECK_PATH in docker-compose.yml

    docker-compose.yml

    Fixed