phamtai97/go-experienced-series

This is a Go-based user service built on a hexagonal architecture, exposing functionality via gRPC and HTTP interfaces. It manages user sign-up logic and persists data using MySQL, supported by a structured dependency stack including the Gin framework and Zap logger.

The hexagonal directory now contains a complete Go application implementing a hexagonal architecture. This includes gRPC and HTTP server runners, controllers for both protocols, a user service with sign-up logic, and repository implementations for MySQL. The project also includes a gRPC API definition (user\_service.proto) with generated Go code, along with Buf tooling for API management. A shutdown hook is added to the gRPC runner to ensure graceful resource cleanup.

hexagonal · high confidence

The hexagonal directory now includes a go.mod file and its corresponding go.sum lockfile, establishing the Go 1.19 module 'user-service'. This introduces key dependencies including the Gin web framework (v1.9.1), the Go SQL driver for MySQL (v1.7.1), the Zap logger (v1.18.1), and gRPC/protobuf libraries (v1.59.0 and v1.31.0), along with their indirect dependencies.

(dependencies) · high confidence

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

• CAI 50 → 52 (+2.8)
• Rubric changed (rubric-2026.08.19 → rubric-2026.09.15) — scores are not directly comparable.

• Code Health 100 → 100 (+0.2)
• Architecture 69 → 69 (+0.0)
• Maturity 57 → 52 (-5.5)
• Readiness 26 → 38 (+12.2)
• Security 91 → 72 (-19.3)
• Domain Modelling 100 → 100 (+0.0)

• Coverage not included — suite not readable by the collector
• Critical CVE: [GHSA redacted] (hexagonal/go.mod)
• Critical CVE: [GHSA redacted] (hexagonal/go.mod)
• Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
• Duplicated block (19 lines × 2) (hexagonal/cmd/grpc/runner.go)
• Medium CVE: [GHSA redacted] (hexagonal/go.mod)
• Medium CVE: [GHSA redacted] (hexagonal/go.mod)
• Medium CVE: GO-2023-2041 (hexagonal/go.mod)
• Medium CVE: GO-2026-5024 (hexagonal/go.mod)
• Medium CVE: GO-2026-5970 (hexagonal/go.mod)
• No exposed public API
• Test reliability not included
• The README lists only one visible heading ('## 1. Hexagonal architecture') with no project-level documentation. (README.md)
• early-stage repository — too little history to judge knowledge freshness
• git history depth insufficient
• git history depth insufficient
• single-maintainer — knowledge-concentration (bus factor) risk

• Critical CVE: [GHSA redacted] (hexagonal/go.mod)
• Critical CVE: [GHSA redacted] (hexagonal/go.mod)
• Duplicated block (18 lines × 2) (hexagonal/cmd/grpc/runner.go)
• Medium CVE: [GHSA redacted] (hexagonal/go.mod)
• Medium CVE: [GHSA redacted] (hexagonal/go.mod)
• Medium CVE: GO-2023-2041 (hexagonal/go.mod)
• Medium CVE: GO-2026-5024 (hexagonal/go.mod)
• Medium CVE: GO-2026-5970 (hexagonal/go.mod)
• Medium: security finding (details withheld)
• No ADRs found
• Outdated: github.com/gin-gonic/gin
• Outdated: github.com/go-sql-driver/mysql
• Outdated: go.uber.org/zap
• Outdated: google.golang.org/grpc
• Outdated: google.golang.org/protobuf

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

phamtai97/go-experienced-series was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.