Issues

• Docs: first-run path is incomplete and .env.example disagrees with the compose stack

  documentation
  n0nuser/fastapi-archetype#69 · Filter by author n0nuser opened on Aug 22, 2026

• Layer boilerplate: Entering.../Exiting... logs, blanket re-raises, and handlers that bypass response_model

  Type: Enhancement
  n0nuser/fastapi-archetype#68 · Filter by author n0nuser opened on Aug 22, 2026

• CI gaps: no type checking, no dependency/image scanning, no build of the Docker image it ships

  Type: EnhancementType: Test
  n0nuser/fastapi-archetype#67 · Filter by author n0nuser opened on Aug 22, 2026

• Cached endpoints have no identity in the cache key, so adding current_user would leak responses between users

  Type: EnhancementType: Security
  n0nuser/fastapi-archetype#66 · Filter by author n0nuser opened on Aug 22, 2026

• Global handlers for ValueError/AttributeError turn ordinary bugs into 500s and mask their origin

  Type: Enhancement
  n0nuser/fastapi-archetype#65 · Filter by author n0nuser opened on Aug 22, 2026

• CRUDBase: any used where typing.Any was meant, and only OperationalError triggers rollback

  Type: Bug
  n0nuser/fastapi-archetype#64 · Filter by author n0nuser opened on Aug 22, 2026

• The cookiecutter template duplicates the whole src/ tree with no CI check for drift

  Type: EnhancementType: Test
  n0nuser/fastapi-archetype#63 · Filter by author n0nuser opened on Aug 22, 2026

• Docker image: dependencies duplicated in requirements.txt, container runs as root, no healthcheck

  Type: Enhancement
  n0nuser/fastapi-archetype#62 · Filter by author n0nuser opened on Aug 22, 2026

• Logging: config read via os.getenv instead of settings, and the rotating file can reach 40 GB

  Type: Enhancement
  n0nuser/fastapi-archetype#61 · Filter by author n0nuser opened on Aug 22, 2026

• init_db() runs create_all at startup, competing with Alembic for schema ownership

  Type: Enhancement
  n0nuser/fastapi-archetype#60 · Filter by author n0nuser opened on Aug 22, 2026

• The only relationship example defaults to lazy="subquery", teaching a poor eager-loading default

  Priority: Low -Type: Enhancement
  n0nuser/fastapi-archetype#59 · Filter by author n0nuser opened on Aug 22, 2026

• Blocking SQLAlchemy calls run inside async def endpoints and stall the event loop

  Priority: High +Type: Enhancement
  n0nuser/fastapi-archetype#58 · Filter by author n0nuser opened on Aug 22, 2026

• Nothing stops a deployment from running in PROD with the built-in default secrets

  Type: EnhancementType: Security
  n0nuser/fastapi-archetype#57 · Filter by author n0nuser opened on Aug 22, 2026

• Demo task endpoints don't use the archetype's own auth guards, and accept an unbounded duration

  Type: EnhancementType: Security
  n0nuser/fastapi-archetype#56 · Filter by author n0nuser opened on Aug 22, 2026

• Startup logs the entire process environment, exposing SECRET_KEY and the database password

  Priority: High +Type: Security
  n0nuser/fastapi-archetype#55 · Filter by author n0nuser opened on Aug 22, 2026

• Joins on to-many relationships lack DISTINCT: duplicated rows in listings and inflated totals

  Type: Bug
  n0nuser/fastapi-archetype#54 · Filter by author n0nuser opened on Aug 22, 2026

• Exception handler mutates the shared ERROR_RESPONSES singleton, leaking error details across requests

  Type: BugType: Security
  n0nuser/fastapi-archetype#53 · Filter by author n0nuser opened on Aug 22, 2026

• Reference pagination example caps offset at 100, so it can't follow its own next/last links

  Type: Bug
  n0nuser/fastapi-archetype#52 · Filter by author n0nuser opened on Aug 22, 2026

• Pagination last link and page_number are off by one

  Type: Bug
  n0nuser/fastapi-archetype#51 · Filter by author n0nuser opened on Aug 22, 2026

• Pagination validator caps every numeric field at 255, so listing more than 255 rows returns 500

  Priority: High +Type: Bug
  n0nuser/fastapi-archetype#50 · Filter by author n0nuser opened on Aug 22, 2026