This legacy web application demonstrates product-recall workflows with Express and PostgreSQL. The public repository contains no live service configuration, database endpoint, embedded report, or credential.
- Install the locked dependencies with
npm ci. - Export the variables listed in
.env.examplethrough your shell or process manager. The application does not read.envfiles automatically. - Run
npm test, thennpm start.
DATABASE_URL and SESSION_SECRET are required. Startup fails before serving
requests when either is absent; the session secret must contain at least 32
characters. TLS certificate verification is enabled by default.
Never commit local environment files or real credentials. Any credential that was used before this repository was sanitized must be rotated at its service; removing Git history cannot revoke an external credential.