stefanomantini/opensource/pollinate-timestamp-service

This system is a distributed application that manages timestamp records using a CQRS (Command Query Responsibility Segregation) architecture. It consists of a Go-based command service that accepts HTTP requests and publishes events to Kafka, a Java-based consumer service that processes these events to persist data in PostgreSQL, and a Java-based query service that exposes a REST API to retrieve stored records.

Introduced a new HTTP API for the timestamp command service, enabling clients to submit timestamp records via a POST request to /api/v1/timestamp/{timestamp}. The service validates the timestamp, publishes the record to Kafka, and returns a JSON response containing the record ID. The API includes middleware for correlation ID validation and CORS headers, and exposes a /health endpoint for health checks.

timestamp-command-service/api · high confidence

Introduced a new Timestamp struct in the command service's model package, defining the data structure for timestamp events with fields for event timestamp and command ID.

timestamp-command-service/model · high confidence

The timestamp-command-service now includes a Go-based configuration module that loads environment variables from .env files (defaulting to config/default.env). This allows the service to read settings such as the server port, log level, and Kafka broker/topic details, enabling the command-side of the CQRS architecture to connect to Kafka for publishing timestamp commands.

timestamp-command-service/config · high confidence

A new Go service in the timestamp-command-service/service directory implements the command side of the CQRS pattern, providing a TimestampService that publishes timestamped events to a Kafka topic using the Sarama library. The implementation generates unique command IDs, marshals the timestamp data into JSON, and sends it as a message to Kafka, logging the partition and offset upon success.

timestamp-command-service/service · medium confidence

The timestamp-consumer-service has been introduced as a new Spring Boot application that listens to a Kafka topic (defaulting to 'timestamp.command') and persists received timestamp records into a PostgreSQL database. The service includes a listener that consumes messages, a service layer that handles idempotency checks before saving, and a JPA repository for database interactions.

timestamp-consumer-service · high confidence

The timestamp-query-service now includes a Java/Spring Boot application structure with a Dockerfile for containerized builds, Gradle wrapper scripts, and a .gitignore. The service exposes a REST endpoint at /api/v1/timestamp/{id} to retrieve timestamp records by ID, using Spring Data JPA with a PostgreSQL database. The application runs on port 7082 and uses Spring Boot Actuator for monitoring.

timestamp-query-service · high confidence

The timestamp-command-service is introduced as a Go-based command handler following the CQRS model. This change adds the service's entry point (main.go) which initializes configuration and starts an HTTP server, along with a Dockerfile for containerization, a .gitignore for build artifacts, and a gocover.sh script for running Go tests and coverage.

timestamp-command-service · high confidence

The integration package now includes Go-based integration tests that verify the health of the Command, Consumer, and Query services, as well as end-to-end scenarios for creating and retrieving timestamp records. A Postman collection has also been added to support manual testing of the same endpoints.

integration · high confidence

Added Go module files (go.mod, go.sum) for the integration and timestamp-command-service, and Gradle build files (build.gradle, settings.gradle) for the timestamp-consumer-service and timestamp-query-service. This establishes the dependency management and build configuration for these services.

(dependencies) · high confidence

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

• CAI 52 → 52 (-0.3)
• Rubric changed (rubric-2026.08.19 → rubric-2026.09.15) — scores are not directly comparable.

• Code Health 100 → 100 (+0.0)
• Architecture 100 → 66 (-34.3)
• Maturity 56 → 58 (+1.4)
• Readiness 29 → 36 (+6.7)
• Security 78 → 74 (-4.6)

• Coverage not included — suite not readable by the collector
• Critical CVE: [GHSA redacted] (timestamp-command-service/go.mod)
• Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
• High CVE: [GHSA redacted] (integration/go.sum)
• High CVE: [GHSA redacted] (timestamp-command-service/go.mod)
• High CVE: [GHSA redacted] (timestamp-command-service/go.mod)
• High CVE: [GHSA redacted] (timestamp-command-service/go.mod)
• High CVE: [GHSA redacted] (integration/go.mod)
• Medium CVE: [GHSA redacted] (timestamp-command-service/go.mod)
• Medium CVE: GO-2021-0226 (integration/go.mod)
• Medium IaC: CKV_DOCKER_2 (timestamp-command-service/Dockerfile)
• Medium IaC: CKV_DOCKER_2 (timestamp-consumer-service/Dockerfile)
• Medium IaC: CKV_DOCKER_2 (timestamp-query-service/Dockerfile)
• Medium IaC: CKV_DOCKER_4 (timestamp-command-service/Dockerfile)
• Medium IaC: CKV_DOCKER_4 (timestamp-consumer-service/Dockerfile)
• Medium IaC: CKV_DOCKER_4 (timestamp-query-service/Dockerfile)
• No exposed public API
• Test reliability not included
• early-stage repository — too few commits for a meaningful bus factor
• early-stage repository — too little history to judge knowledge freshness
• …and 2 more

• Critical CVE: [GHSA redacted] (timestamp-command-service/go.mod)
• Documentation: no contributor guidance (README.md)
• Documentation: no installation or build instructions (README.md)
• Documentation: no usage examples (README.md)
• High CVE: [GHSA redacted] (integration/go.sum)
• High CVE: [GHSA redacted] (timestamp-command-service/go.mod)
• High CVE: [GHSA redacted] (timestamp-command-service/go.mod)
• High CVE: [GHSA redacted] (timestamp-command-service/go.mod)
• High CVE: [GHSA redacted] (integration/go.mod)
• High IaC: WD-COMPOSE-0002 (docker-compose.yml)
• High IaC: WD-COMPOSE-0002 (docker-compose.yml)
• High IaC: WD-COMPOSE-0003 (docker-compose.yml)
• High IaC: WD-COMPOSE-0003 (docker-compose.yml)
• High IaC: WD-COMPOSE-0003 (docker-compose.yml)
• High IaC: WD-COMPOSE-0003 (docker-compose.yml)
• High IaC: WD-COMPOSE-0003 (docker-compose.yml)
• High IaC: WD-COMPOSE-0003 (docker-compose.yml)
• High IaC: WD-COMPOSE-0003 (docker-compose.yml)
• High IaC: WD-COMPOSE-0003 (docker-compose.yml)
• High IaC: WD-DOCKER-0013 (timestamp-command-service/Dockerfile)
• …and 27 more

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

stefanomantini/opensource/pollinate-timestamp-service was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.