alefeans/python-clean-architecture

This system is a Python backend application scaffold built on FastAPI and Clean Architecture principles, designed to manage user data and authentication. It provides a structured foundation for domain logic, database interactions via SQLModel and Alembic, and secure JWT-based access. The project includes comprehensive tooling for development, testing, and deployment, ensuring code quality and maintainability from the outset.

A new initialization script (scripts/pg/init.sql) has been added to the project. When executed, this script creates three PostgreSQL databases: app\_dev, app\_test, and app\_prod, streamlining the setup process for development, testing, and production environments.

scripts · high confidence

This change introduces the foundational structure for a Python 3.12 FastAPI application based on Clean Architecture and Domain-Driven Design. It adds Docker support with optimized production and development images (including hot reload), a Docker Compose setup for PostgreSQL and pgAdmin, and a Makefile for managing dependencies, linting, testing, and services. The project now uses Ruff for linting/formatting, Mypy for type checking, and Alembic for database migrations, enforced via pre-commit hooks. Configuration is standardized via a .env.example file, and the repository includes an MIT license and comprehensive documentation.

(repo-wide) · high confidence

The application has been reorganized into a Clean Architecture layout, separating concerns into core domain logic (entities, value objects, use cases, and ports) and infrastructure implementations (FastAPI API layer, SQLModel database models, repositories, and JWT authentication). This change introduces a new dependency injection system via FastAPI dependencies to wire use cases to their implementations, standardizes user data handling through value objects like Email and Password, and establishes a Unit of Work pattern for database transactions.

(repo-wide) · high confidence

Added integration tests for API, authentication, and security; Added test infrastructure for FastAPI application; Added unit tests for user domain, use cases, and value objects.

The project is initialized as a Clean Architecture Python backend template, targeting Python 3.12. It establishes a dependency stack centered on FastAPI for the web framework, SQLAlchemy via SQLModel for database ORM, and Alembic for migrations. Authentication is supported by python-jose and passlib (with bcrypt), while async database access is handled by asyncpg. Development tooling includes Ruff for linting, Black for formatting, MyPy for type checking, and Pytest with coverage and asyncio support.

(dependencies) · high confidence

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

• CAI 45 → 47 (+2.2)
• Rubric changed (rubric-2026.08.17 → rubric-2026.09.15) — scores are not directly comparable.

• Code Health 100 → 100 (+0.0)
• Architecture 69 → 69 (+0.0)
• Maturity 55 → 55 (+0.0)
• Readiness 18 → 25 (+6.9)
• Security 95 → 82 (-14.0)

• Coverage not included — suite not readable by the collector
• Dependency hygiene not measured — no supported dependency manifest was read
• High IaC: DS-0029 (Dockerfile)
• No exposed public API
• Test reliability not included
• single-maintainer — knowledge-concentration (bus factor) risk

• Critical CVE: [GHSA redacted] (poetry.lock)
• Critical CVE: [GHSA redacted] (poetry.lock)
• Critical CVE: [GHSA redacted] (poetry.lock)
• Dependency hygiene PARTLY measured — Python dependencies read, no exact pin to grade for currency
• High CVE: [GHSA redacted] (poetry.lock)
• High CVE: [GHSA redacted] (poetry.lock)
• High CVE: [GHSA redacted] (poetry.lock)
• High CVE: [GHSA redacted] (poetry.lock)
• High CVE: [GHSA redacted] (poetry.lock)
• High CVE: [GHSA redacted] (poetry.lock)
• High IaC: DS-0029 (Dockerfile)
• High IaC: DS-0029 (Dockerfile)
• High IaC: WD-COMPOSE-0002 (docker-compose.yml)
• Medium CVE: [GHSA redacted] (poetry.lock)
• Medium CVE: [GHSA redacted] (poetry.lock)
• Medium CVE: [GHSA redacted] (poetry.lock)
• Medium CVE: [GHSA redacted] (poetry.lock)
• Medium CVE: [GHSA redacted] (poetry.lock)
• Medium CVE: PYSEC-2024-230 (poetry.lock)
• Medium CVE: PYSEC-2026-2132 (poetry.lock)
• …and 5 more

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

alefeans/python-clean-architecture was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.