ci(technical debt): Added Fallow for technical debt analysis

.fallowrc.json

@@ -0,0 +1,14 @@
+{
+  "$schema": "https://raw.githubusercontent.com/fallow-rs/fallow/main/schema.json",
+  "entry": ["src/index.{js,jsx,mjs}", "src/main.{js,jsx,mjs}"],
+  "workspaces": {
+    "packages": ["apps/*", "packages/*"]
+  },
+  "duplicates": {
+    "minOccurrences": 3,
+    "minLines": 5,
+    "mode": "semantic",
+    "ignore": ["**/lib/**", "**/legacy/**", "**/__generated__/**", "**/generated/**"]
+  },
+  "rules": {}
+}

.forgejo/workflows/ci.yml

@@ -38,3 +38,11 @@ jobs:
 
       - name: Typecheck
         run: pnpm check-types
+
+      - name: Audit security (dependencies)
+        run: pnpm audit --audit-level=moderate
+
+      - name: Analyze codebase health (technical debt)
+        uses: fallow-rs/fallow@v2
+        with:
+          format: sarif

.gitignore

@@ -38,3 +38,4 @@ yarn-error.log*
 # Misc
 .DS_Store
 *.pem
+.fallow/

apps/api/src/main.ts

@@ -1,8 +1,11 @@
 import { NestFactory } from "@nestjs/core";
 import { AppModule } from "./app.module";
 
+const DEFAULT_PORT = 3001;
+
 async function bootstrap() {
   const app = await NestFactory.create(AppModule);
-  await app.listen(process.env.PORT ?? 3001);
+  await app.listen(process.env.PORT ?? DEFAULT_PORT);
 }
+// eslint-disable-next-line @typescript-eslint/no-floating-promises
 bootstrap();