j5ik2o/event-store-adapter-go

59.5

Adequate · 21 September 2026

1.1k

lines of production code

Go

primary language

4

measurements over time

What this system is

This system is a Go library that implements an Event Store for CQRS and Event Sourcing architectures. It provides a pluggable interface for persisting domain events and snapshots, supporting both in-memory storage for testing and DynamoDB for production use. The library handles aggregate reconstruction, event serialization, and snapshot management with configurable TTL and sharding.

Features

Initial project scaffolding and documentation

The repository is initialized with core project files, including a Makefile for build and test automation, an .editorconfig for consistent coding styles, and a .gitignore for common IDE and OS artifacts. Documentation is added in both English (README.md) and Japanese (README.ja.md), outlining the library's purpose as a DynamoDB-backed Event Store for CQRS/Event Sourcing. Licensing is established with both MIT (LICENSE-MIT) and Apache 2.0 (LICENSE-APACHE) texts, and automated dependency updates are configured via renovate.json.

(repo-wide) · high confidence

Introduce EventStore package with DynamoDB and in-memory implementations

The \pkg\ directory now contains a new EventStore library that provides a pluggable interface for persisting domain events and snapshots. It includes an in-memory implementation (\EventStoreOnMemory\) for testing or lightweight scenarios, and a DynamoDB-backed implementation (\EventStoreOnDynamoDB\) that supports sharding, configurable TTL for snapshot deletion, and custom key resolution. The package also defines core domain types (Aggregate, Event, AggregateId), serialization interfaces with JSON defaults, and helper utilities for setting up DynamoDB tables via Localstack in test environments.

pkg · high confidence

Test coverage

Added tests for EventStore and UserAccount repository

Added test coverage for the EventStore implementation on DynamoDB and in-memory storage, as well as for the UserAccount repository. The new tests verify event persistence, snapshot retrieval, and aggregate reconstruction using both an in-memory store and a Localstack-backed DynamoDB instance.

test · high confidence

Dependencies

Updated Go dependencies and toolchain

The project's dependency manifest has been refreshed, updating the Go toolchain directive to v1.27.1 and the base language version to 1.25.0. Key AWS SDK for Go v2 components have been upgraded, including the core SDK to v1.46.0, configuration to v1.33.3, credentials to v1.20.3, and DynamoDB service to v1.67.0. Additionally, testcontainers-go and its Localstack module are both at v0.44.0, while supporting libraries like docker/go-connections, oklog/ulid/v2, and stretchr/testify have also been updated to their latest specified versions.

(dependencies) · high confidence

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

How this codebase got here

This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.

Score

CAI 53 → 60 (+6.2)
Rubric changed (rubric-2026.08.19 → rubric-2026.09.15) — scores are not directly comparable.

Lenses

Code Health 96 → 97 (+1.5)
Architecture 69 → 69 (+0.0)
Maturity 54 → 54 (+0.0)
Readiness 61 → 61 (-0.1)
Security 44 → 61 (+16.1)

Resolved (24)

Coverage not included — suite not readable by the collector
Critical CVE: [GHSA redacted] (go.mod)
Critical CVE: [GHSA redacted] (go.mod)
Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
Duplicated block (11 lines × 2) (pkg/event_store_on_dynamodb.go)
Duplicated block (12 lines × 2) (pkg/event_store_on_dynamodb.go)
Duplicated block (21 lines × 2) (pkg/common/dynamodb.go)
Duplicated block (32 lines × 2) (pkg/common/dynamodb.go)
High CVE: [GHSA redacted] (go.mod)
High CVE: [GHSA redacted] (go.mod)
High: security finding (details withheld)
High: security finding (details withheld)
High: security finding (details withheld)
High: security finding (details withheld)
High: security finding (details withheld)
High: security finding (details withheld)
High: security finding (details withheld)
LLM evaluation failed
Medium CVE: GO-2026-4970 (go.mod)
Medium CVE: GO-2026-5158 (go.mod)
…and 4 more

New (33)

Critical CVE: [GHSA redacted] (go.mod)
Documentation: no installation or build instructions (README.md)
Documentation: no licence statement (README.md)
Documentation: no usage examples (README.md)
Duplicated block (10 lines × 2) (pkg/event_store_on_dynamodb.go)
Duplicated block (15 lines × 2) (pkg/event_store_on_dynamodb.go)
Duplicated block (15 lines × 2) (pkg/event_store_on_dynamodb.go)
Duplicated block (23 lines × 2) (pkg/common/dynamodb.go)
Duplicated block (32 lines × 2) (pkg/common/dynamodb.go)
Edited copy of a member (62 corresponding lines) (pkg/common/dynamodb.go)
High CVE: [GHSA redacted] (go.mod)
High CVE: [GHSA redacted] (go.mod)
High CVE: [GHSA redacted] (go.mod)
High: security finding (details withheld)
High: security finding (details withheld)
High: security finding (details withheld)
High: security finding (details withheld)
High: security finding (details withheld)
High: security finding (details withheld)
High: security finding (details withheld)
…and 13 more

Changes since last survey

24 commits — 24 feature/other, 0 fixes

By area

(root) — 23 commits
.github/workflows — 1 commit

Notable commits

change: chore(deps): Update aws-sdk-go-v2 monorepo (#357)
change: chore(deps): Update aws-sdk-go-v2 monorepo (#362)
change: chore(deps): Update aws-sdk-go-v2 monorepo (#367)
change: chore(deps): Update aws-sdk-go-v2 monorepo (#368)
change: chore(deps): Update aws-sdk-go-v2 monorepo (#369)
change: chore(deps): Update aws-sdk-go-v2 monorepo (#370)
change: chore(deps): Update aws-sdk-go-v2 monorepo (#371)
change: chore(deps): Update aws-sdk-go-v2 monorepo (#373)
change: chore(deps): Update dependency go to 1.27 (#363)
change: chore(deps): Update go toolchain directive to v1.27.0 (#358)
change: chore(deps): Update go toolchain directive to v1.27.1 (#372)
change: chore(deps): Update module github.com/docker/go-connections to v0.8.1 (#364)
change: chore(deps): Update module github.com/oklog/ulid/v2 to v2.1.2 (#361)
change: chore(deps): Update module github.com/stretchr/testify to v1.12.1 (#365)
change: chore(deps): Update testcontainers-go monorepo to v0.44.0 (#366)
change: version up to v1.0.184
change: version up to v1.0.185
change: version up to v1.0.186
change: version up to v1.0.187
change: version up to v1.0.188
…and 4 more

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

Survey your own repository

j5ik2o/event-store-adapter-go was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.

About this page

The score is its most recent published measurement, taken on 21 September 2026 at a pinned commit. It is not a live figure and does not change until the project is measured again.
Measured at commit 2fb1c288ac5b578057f475f7d0ec260f3e5ec6c6 — the exact code this score is about.
Scored under rubric-2026.09.15 — the same rubric and the same method as every other entry in this index.
Measured by watchdog.canine.dev using codehealth-analyzer preprod-fa71c66cabd8.