mpanaryin/job_scope

This system is a backend application infrastructure focused on operational robustness, featuring a FastAPI service backed by PostgreSQL and Redis. It implements a comprehensive observability stack using ELK for centralized logging and Prometheus/Grafana for metrics monitoring. The architecture supports asynchronous database operations, background task processing via Celery, and secure JWT-based authentication with token revocation capabilities.

A new Python script, \tools/print\structure.py\, has been added to the repository. This tool allows users to print a formatted tree view of a directory structure, filtering out common non-essential files and directories (such as \\\pycache\\_\, \.git\, and \venv\) and optionally limiting the depth of displayed folders like \alembic\ or \media\. It can be run from the command line to visualize the project layout.

tools · high confidence

The \infra\ directory now houses the complete operational stack, consolidating services previously scattered in the project root. This change introduces a full ELK-based logging pipeline (Filebeat, Logstash, Elasticsearch, Kibana) that collects and parses application, Nginx, and PostgreSQL logs, including specific handling for Celery tasks and error notifications via Telegram. Additionally, a Prometheus and Grafana stack is added to monitor system, FastAPI, Nginx, and PostgreSQL metrics, with pre-configured dashboards for each. The Nginx configuration has been updated to expose internal metrics endpoints (\/\_\_internal\metrics\\_\, \/stub\_status\) and standardize log paths, while Redis and PostgreSQL configurations are now explicitly managed within this infrastructure layer.

infra · high confidence

The backend now uses Alembic for database schema management, introducing initial migrations for the users and vacancies tables (including a subsequent migration to add an updated\_at column) and configuring the environment to support PostgreSQL-specific features like JSONB. Concurrently, the authentication system has been restructured to support token revocation via Redis storage and allows JWT signing to be configured via an algorithm setting (defaulting to ES256 in the codebase), replacing previous hardcoded or simpler implementations.

backend · high confidence

The logging directory structure has been updated to separate logs by infrastructure component. New placeholder directories have been created for FastAPI, Nginx, and PostgreSQL logs, aligning with the new organizational scheme where logs are stored in the root logs directory and partitioned by service.

logs · medium confidence

Static files, including CSS stylesheets and JavaScript libraries, have been moved from the backend source directory to a dedicated static folder at the project root. This structural change separates static content from the application code, preparing the layout for external serving by nginx rather than the FastAPI backend.

static · high confidence

The backend requirements have been expanded to include async PostgreSQL drivers (asyncpg, psycopg), Alembic for database migrations, Elasticsearch and aiohttp clients, Celery and Redis for background tasks, Prometheus instrumentation, and updated testing libraries (pytest, httpx). The aiosqlite dependency remains present but is now accompanied by the necessary stack to support PostgreSQL and enhanced logging/monitoring capabilities.

(dependencies) · high confidence

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

• CAI 49 → 45 (-4.4)
• Rubric changed (rubric-2026.08.17 → rubric-2026.09.15) — scores are not directly comparable.

• Code Health 99 → 100 (+0.2)
• Architecture 100 → 79 (-20.6)
• Maturity 78 → 67 (-10.8)
• Readiness 17 → 21 (+3.7)
• Security 95 → 75 (-19.9)
• Domain Modelling 100 → 100 (+0.0)
• Accessibility 62 → 53 (-8.7)

• Coverage not included — suite not readable by the collector
• Dependency hygiene not measured — no supported dependency manifest was read
• Duplicated block (14–16 lines × 2) (backend/src/crud/base.py)
• Low IaC: DS-0026 (infra/elk/filebeat/Dockerfile)
• Low: security finding (details withheld)
• Low: security finding (details withheld)
• Low: security finding (details withheld)
• Low: security finding (details withheld)
• Low: security finding (details withheld)
• Low: security finding (details withheld)
• No exposed public API
• Test reliability not included
• early-stage repository — too little history to judge knowledge freshness
• git history depth insufficient
• git history depth insufficient
• single-maintainer — knowledge-concentration (bus factor) risk

• Banned license: psycopg
• Documentation: no usage examples (README.md)
• Duplicated block (14 lines × 2) (backend/src/crud/base.py)
• High CVE: [GHSA redacted] (backend/requirements.txt)
• High IaC: WD-COMPOSE-0002 (docker-compose.test.yml)
• High vulnerability: [GHSA redacted] (backend/requirements.txt)
• Low IaC: WD-COMPOSE-0002 (docker-compose.dev.yml)
• Low IaC: WD-COMPOSE-0002 (docker-compose.dev.yml)
• Low IaC: WD-COMPOSE-0002 (docker-compose.dev.yml)
• Low IaC: WD-COMPOSE-0002 (docker-compose.dev.yml)
• Low IaC: WD-COMPOSE-0002 (docker-compose.dev.yml)
• Low IaC: WD-COMPOSE-0002 (docker-compose.dev.yml)
• Low IaC: WD-COMPOSE-0002 (docker-compose.dev.yml)
• Low IaC: WD-COMPOSE-0002 (docker-compose.dev.yml)
• Low IaC: WD-COMPOSE-0002 (docker-compose.dev.yml)
• Low IaC: WD-COMPOSE-0002 (docker-compose.dev.yml)
• Low IaC: WD-COMPOSE-0002 (docker-compose.dev.yml)
• Low IaC: WD-COMPOSE-0002 (docker-compose.dev.yml)
• Low IaC: WD-COMPOSE-0002 (docker-compose.dev.yml)
• Low IaC: WD-COMPOSE-0002 (docker-compose.dev.yml)
• …and 30 more

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

mpanaryin/job_scope was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.