adisreyaj/compito

0 errors, 26 warningsmain

26 issues need attention.

26 warnings in the paths between 46 routes and 12 tables.

ROUTE FINDINGS14 of 46 · 7/7 rules
ROUTES
46
TABLES
12
FILES READ
120
RULES RUN
7/7

26 findings

  • GET /ping has no validator or rate limiter attached.

    public-entry-guarded

  • GET /roles has no validator or rate limiter attached.

    public-entry-guarded

  • GET /users/pre-auth/onboard has no validator or rate limiter attached.

    public-entry-guarded

  • GET /users/auth has no validator or rate limiter attached.

    public-entry-guarded

  • GET /users/invites has no validator or rate limiter attached.

    public-entry-guarded

  • POST /users/signup has no validator or rate limiter attached.

    public-entry-guarded

  • GET /tasks/priorities has no validator or rate limiter attached.

    public-entry-guarded

  • POST /tasks/:id/attachments has no validator or rate limiter attached.

    public-entry-guarded

  • DELETE /tasks/:id/attachments/:attachmentId has no validator or rate limiter attached.

    public-entry-guarded

  • POST /invites/pre-auth/:id/accept has no validator or rate limiter attached.

    public-entry-guarded

  • POST /invites/:id/accept has no validator or rate limiter attached.

    public-entry-guarded

  • POST /invites/pre-auth/:id/reject has no validator or rate limiter attached.

    public-entry-guarded

  • POST /invites/:id/reject has no validator or rate limiter attached.

    public-entry-guarded

  • GET /assets/** has no validator or rate limiter attached.

    public-entry-guarded

  • User is not connected to anything.

    no-orphan-datastore

  • Organization is not connected to anything.

    no-orphan-datastore

  • Project is not connected to anything.

    no-orphan-datastore

  • Board is not connected to anything.

    no-orphan-datastore

  • Task is not connected to anything.

    no-orphan-datastore

  • SubTask is not connected to anything.

    no-orphan-datastore

  • Tag is not connected to anything.

    no-orphan-datastore

  • Comment is not connected to anything.

    no-orphan-datastore

  • Role is not connected to anything.

    no-orphan-datastore

  • UserRoleOrg is not connected to anything.

    no-orphan-datastore

  • UserInvite is not connected to anything.

    no-orphan-datastore

  • Attachment is not connected to anything.

    no-orphan-datastore

Part of this repository was not read, so this report is incomplete. Read 120 of 269 files, schemas and routes first. Point Wyro at a single service directory to read one in full. Unread: apps/api/src/main.ts, apps/api/src/app/tag/tag.controller.ts, libs/web/ui/src/util/index.ts.

Free account, no card. The repository opens as an editable graph.

Add this check to the README

wyro architecture badge
[![wyro architecture](https://wyro.in/api/badge/adisreyaj/compito)](https://wyro.in/scan/adisreyaj/compito)

It updates itself whenever the repository changes and links back to this report.

What this is

Wyro reads the repository’s routes and data models and checks the paths between them: whether a route can reach a table without passing a guard, whether a datastore holding personal data is exposed to a public read, whether an endpoint that issues credentials requires the credentials it issues.

It is rule-based, not a model. The same commit produces the same result every time, and it does not guess at business rules it cannot see. A rule with nothing to look at is reported as not having run — never as a pass.

This check runs on public source through GitHub’s own API and needs no account. A free account adds the editable architecture canvas, private repositories on paid plans, and a CI gate. No card required.