FastAPI starter template with authentication, database integration, and comprehensive test coverage
active 2026-01-09 → 2026-05-04 (UTC)
Activity over time
Daily event counts in the loaded window
Line chart, 116 days from 2026-01-09 to 2026-05-04. Pushes: 19 total, peak 9 in a day. Pull requests: 12 total, peak 12 in a day. Issues: 0 total, peak 0 in a day. Comments: 4 total, peak 3 in a day. Stars: 0 total, peak 0 in a day.
- Pushes
- Pull requests
- Issues
- Comments
- Stars
Stars, PRs, issues and forks are under-captured in the later part of this window. GH Archive progressively stopped capturing non-push events during 2026 — −95% or worse by the end of the window. Every series here except Pushes fades for that reason, so a decline above reflects the archive, not this repository. Pushes stay reliable throughout, so read them, and the contributor counts derived from them, as the real signal. Data health has the measurements.
Top contributors
Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity
| Contributor | Contributions | Pushes | PRs | Comments |
|---|---|---|---|---|
| michaelayoade | 35 | 19 | 12 | 4 |
Recent activity
Latest issues, pull requests and releases
- Issue comment#28michaelayoade2026-03-07 08:26fix(ci): make CI green on main
- Issue comment#6michaelayoade2026-02-28 11:04[fix-security-c1-13] Replace string prefix path traversal guard with Path.is_relative_to() in storage service. In app/services/storage.py around line 74, path traversal protection uses string startswith() which is less robust than the stdlib Path method. Fix: Replace the string prefix check with target_path.is_relative_to(base_path) where both are pathlib.Path objects. Python 3.9+ supports this method. Make sure to resolve() both paths before the check to handle symlinks and relative path compon
- Issue comment#10michaelayoade2026-02-28 11:04[fix-security-c1-12] Validate logo_url scheme in branding service to prevent javascript: and data: URI injection. In templates/admin/login.html line 9, brand.logo_url is used as an img src without validation. Fix: (1) In the branding service (app/services/ — find the branding-related service), add a validate_logo_url() function that checks the URL starts with 'https://' or '/'. Reject javascript:, data:, and any other schemes. (2) Apply this validation before persisting logo_url changes. (3) O
- Issue comment#20michaelayoade2026-02-28 11:04[fix-deps-3] Bump cryptography from 42.0.8 to >=43.0.0 in pyproject.toml. Versions 43.x+ include security patches for RSA/EC operations and memory safety issues in OpenSSL bindings. Steps: (1) In pyproject.toml, change the cryptography constraint to '>=43.0.0'. (2) Run 'poetry update cryptography'. (3) Check for any cryptography API changes: grep -r 'from cryptography' app/ -- verify APIs still valid. (4) Run 'make lint', 'poetry run mypy app/ --ignore-missing-imports', 'pytest tests/ -x --tb=sh
- Pull request#12michaelayoade2026-02-27 06:31
- Pull request#21michaelayoade2026-02-27 06:31
- Pull request#5michaelayoade2026-02-27 06:30
- Pull request#18michaelayoade2026-02-27 06:29
- Pull request#18michaelayoade2026-02-27 05:50
- Pull request#13michaelayoade2026-02-27 05:42
- Pull request#11michaelayoade2026-02-27 05:27
- Pull request#9michaelayoade2026-02-27 05:25
- Pull request#5michaelayoade2026-02-27 05:17
- Pull request#4michaelayoade2026-02-27 05:17
- Pull request#3michaelayoade2026-02-27 05:16
- Pull request#1michaelayoade2026-02-27 05:13
Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 0 stars here means stars gained during the window, not the repo's star count.