Each claimed feature matched against implementation evidence.
OpenAI SDK is imported and a client is instantiated, but every call returns simulated data. The analysis route throws "not implemented" or returns { ok: true, issues: [] }. No real code analysis occurs.
No WebSocket server, no Socket.IO, no real-time subscription. The README claims real-time collaboration but the codebase has zero WebSocket-related imports or routes.
An rbac.ts file exists with role constants defined, but actual middleware and route guards contain only TODO comments. The role check is a no-op.
Stripe is imported and a webhook route exists, but the handler skips signature verification and returns hardcoded { ok: true }. No subscription creation, no payment intent, no customer management.
A notify route exists but only contains a comment "here you would integrate with SendGrid". No webhook dispatch, no HTTP client calls, no event emission.
No email provider SDK, no SendGrid/Mailgun/SES imports, no email template engine. The settings UI has a toggle for notifications but no backend handler.
A polished dashboard exists with charts and metrics, but every value uses Math.random(). Issues fixed, accuracy, scan time, and users online are all fabricated.
The fix endpoint returns a hardcoded success response with null fix. No GitHub API calls, no branch creation, no PR creation. The README claim is entirely aspirational.
No workspace or organization model, no tenant isolation in database queries, no multi-tenancy middleware. The UI shows a workspace selector but it is cosmetic only.
A schedule route exists but contains only "cron scheduling not wired up" as a comment. No cron system integration, no job queue, no recurring task execution.
The export endpoint returns null. No PDF generation library, no CSV serialization, no file download logic. The button in the UI is non-functional.