mikemajesty/nestjs-microservice-boilerplate-api
17 issues need attention.
17 warnings in the paths between 36 routes and 5 tables.
- ROUTES
- 36
- TABLES
- 5
- FILES READ
- 120
- RULES RUN
- 7/7
17 findings
GET /users/me has no validator or rate limiter attached.
public-entry-guardedGET /health/ready has no validator or rate limiter attached.
public-entry-guardedGET /health has no validator or rate limiter attached.
public-entry-guardedGET /health/startup has no validator or rate limiter attached.
public-entry-guardedGET / has no validator or rate limiter attached.
public-entry-guardedPOST /reset-password/send-email has no validator or rate limiter attached.
public-entry-guardedPUT /reset-password/:token has no validator or rate limiter attached.
public-entry-guardedPOST /login has no validator or rate limiter attached.
public-entry-guardedPOST /refresh has no validator or rate limiter attached.
public-entry-guardedGET /login/google has no validator or rate limiter attached.
public-entry-guardedGET /login/google/callback has no validator or rate limiter attached.
public-entry-guardedPOST /alert has no validator or rate limiter attached.
public-entry-guardedreset_password is not connected to anything.
no-orphan-datastoreusers_password is not connected to anything.
no-orphan-datastorepermissions is not connected to anything.
no-orphan-datastoreusers is not connected to anything.
no-orphan-datastoreroles is not connected to anything.
no-orphan-datastore
Part of this repository was not read, so this report is incomplete. Read 120 of 253 files, schemas and routes first. Point Wyro at a single service directory to read one in full. Unread: src/main.ts, src/main.ts.
Free account, no card. The repository opens as an editable graph.
Add this check to the README
[](https://wyro.in/scan/mikemajesty/nestjs-microservice-boilerplate-api)It updates itself whenever the repository changes and links back to this report.
What this is
Wyro reads the repository’s routes and data models and checks the paths between them: whether a route can reach a table without passing a guard, whether a datastore holding personal data is exposed to a public read, whether an endpoint that issues credentials requires the credentials it issues.
It is rule-based, not a model. The same commit produces the same result every time, and it does not guess at business rules it cannot see. A rule with nothing to look at is reported as not having run — never as a pass.
This check runs on public source through GitHub’s own API and needs no account. A free account adds the editable architecture canvas, private repositories on paid plans, and a CI gate. No card required.