CTO Technical Audit
System Health
71%
Executive Summary
Verde Commerce runs a TypeScript monorepo: Next.js storefront, Fastify API, BullMQ workers, PostgreSQL, and Redis. System stability is 71% — production-ready for DTC traffic but cart latency and checkout coupling are the primary engineering risks before holiday peak.
Three security items need attention: cart rate limiting, a transitive JWT advisory, and legacy Stripe webhook idempotency. Tech debt is concentrated in Cart & Checkout (78 debt score, rising). Express Checkout 2.0 depends on decomposing CheckoutService without breaking promo/tax integration.
AI/LLM usage is intentional (Product Truth, signals, RAG) with manageable operational risks.
System Health Overview
System Stability
Monorepo deploys cleanly; cart service shows flash-sale latency spikes.
Security Posture
3 alerts
Tech Debt Index
Checkout module coupling and legacy webhook handler.
Infra Risk
Fly.io + managed Postgres stable; CDN cache headers missing.
Delivery Risk
Holiday traffic prep blocked on checkout hardening.