ferstdigital/cqrs-python-demo

This system is a Python-based account management microservice designed to demonstrate Command Query Responsibility Segregation (CQRS) and event sourcing patterns. It provides a REST API for handling deposits, transfers, and balance checks, while utilizing an asynchronous background worker to synchronize local database state with an external event store. The project is structured as a research-oriented demo, complete with Dockerized development environments and pinned dependencies for reproducibility.

This change introduces the foundational structure for a research-oriented CQRS and event-sourcing demonstration application. It provides a Docker-based development environment, including a Dockerfile for the Python application, a docker-compose configuration to orchestrate PostgreSQL and EventStore services, and environment variable templates. The repository also includes a README detailing the technology stack (Flask, EventStore, PostgreSQL) and instructions for local and containerized setup.

(repo-wide) · high confidence

This commit introduces the foundational structure for a Python-based account service. It includes a Django project configuration for the 'accountui' application, a SQLAlchemy-based data model for 'Account' entities (tracking ID, balance, and sequence), and a REST API built with Falcon that exposes endpoints for deposits, transfers, and balance checks. Additionally, an asynchronous background worker using AtomicPuppy is added to consume events from an EventStore (specifically 'created-deposit' and 'created-transfer' events) and update the local database state accordingly.

(repo-wide) · high confidence

The project now includes a requirements.txt file that explicitly pins the versions of all Python dependencies, establishing a reproducible environment for the application.

(dependencies) · high confidence

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

• CAI 43 → 40 (-3.6)
• Rubric changed (rubric-2026.08.17 → rubric-2026.09.15) — scores are not directly comparable.

• Code Health 100 (new)
• Architecture 69 → 69 (+0.0)
• Maturity 62 → 39 (-22.6)
• Readiness 17 → 19 (+2.1)
• Security 94 → 78 (-15.5)

• Dependency hygiene not measured — no supported dependency manifest was read
• No exposed public API
• No tests — template/sample
• complexity unreadable for .py — churn × complexity hotspots could not be measured
• early-stage repository — too few commits for a meaningful bus factor
• early-stage repository — too little history to judge knowledge freshness
• git history depth insufficient

• Banned license: pylint
• Banned license: text-unidecode
• Critical CVE: [GHSA redacted] (requirements.txt)
• Critical CVE: [GHSA redacted] (requirements.txt)
• Critical CVE: [GHSA redacted] (requirements.txt)
• Critical CVE: [GHSA redacted] (requirements.txt)
• Critical CVE: [GHSA redacted] (requirements.txt)
• Critical CVE: [GHSA redacted] (requirements.txt)
• Critical vulnerability: [GHSA redacted] (requirements.txt)
• Documentation: no installation or build instructions (README.md)
• Documentation: no usage examples (README.md)
• High CVE: [GHSA redacted] (requirements.txt)
• High CVE: [GHSA redacted] (requirements.txt)
• High CVE: [GHSA redacted] (requirements.txt)
• High CVE: [GHSA redacted] (requirements.txt)
• High CVE: [GHSA redacted] (requirements.txt)
• High CVE: [GHSA redacted] (requirements.txt)
• High CVE: [GHSA redacted] (requirements.txt)
• High CVE: [GHSA redacted] (requirements.txt)
• High CVE: [GHSA redacted] (requirements.txt)
• …and 104 more

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

ferstdigital/cqrs-python-demo was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.