chnirt/nestjs-restful-best-practice
29 issues need attention.
29 warnings in the paths between 41 routes and 8 tables.
- ROUTES
- 41
- TABLES
- 8
- FILES READ
- 100
- RULES RUN
- 7/7
29 findings
GET /deals has no validator or rate limiter attached.
public-entry-guardedGET /deals/:id has no validator or rate limiter attached.
public-entry-guardedGET /classes has no validator or rate limiter attached.
public-entry-guardedPOST /classes has no validator or rate limiter attached.
public-entry-guardedGET /classes/:id has no validator or rate limiter attached.
public-entry-guardedPUT /classes/:id has no validator or rate limiter attached.
public-entry-guardedDELETE /classes/:id has no validator or rate limiter attached.
public-entry-guardedPOST /users has no validator or rate limiter attached.
public-entry-guardedGET /students has no validator or rate limiter attached.
public-entry-guardedPOST /students has no validator or rate limiter attached.
public-entry-guardedGET /students/:id has no validator or rate limiter attached.
public-entry-guardedPUT /students/:id has no validator or rate limiter attached.
public-entry-guardedDELETE /students/:id has no validator or rate limiter attached.
public-entry-guardedGET /banners has no validator or rate limiter attached.
public-entry-guardedGET /attendance has no validator or rate limiter attached.
public-entry-guardedPOST /attendance has no validator or rate limiter attached.
public-entry-guardedGET /attendance/:id has no validator or rate limiter attached.
public-entry-guardedPUT /attendance/:id has no validator or rate limiter attached.
public-entry-guardedDELETE /attendance/:id has no validator or rate limiter attached.
public-entry-guardedGET / has no validator or rate limiter attached.
public-entry-guardedPOST /req has no validator or rate limiter attached.
public-entry-guardedusers is not connected to anything.
no-orphan-datastoredeals is not connected to anything.
no-orphan-datastoreaddresses is not connected to anything.
no-orphan-datastoreclasses is not connected to anything.
no-orphan-datastorebanners is not connected to anything.
no-orphan-datastoreconnections is not connected to anything.
no-orphan-datastorestudents is not connected to anything.
no-orphan-datastoreattendance is not connected to anything.
no-orphan-datastore
Part of this repository was not read, so this report is incomplete. Unread: src/modules/bidders/bidders.controller.ts.
Free account, no card. The repository opens as an editable graph.
Add this check to the README
[](https://wyro.in/scan/chnirt/nestjs-restful-best-practice)It updates itself whenever the repository changes and links back to this report.
What this is
Wyro reads the repository’s routes and data models and checks the paths between them: whether a route can reach a table without passing a guard, whether a datastore holding personal data is exposed to a public read, whether an endpoint that issues credentials requires the credentials it issues.
It is rule-based, not a model. The same commit produces the same result every time, and it does not guess at business rules it cannot see. A rule with nothing to look at is reported as not having run — never as a pass.
This check runs on public source through GitHub’s own API and needs no account. A free account adds the editable architecture canvas, private repositories on paid plans, and a CI gate. No card required.