Platform Evolution
Assessment run-2026-07-27-1 · 213 of 213 repos assessed
Repos / company-info-api

company-info-api

RESTful API managing company information (name, address, contact details) with published client NuGet packages and a Windows sync job that pulls company data from Phenix.

66 · amberlowloosely attachedAWS + on-premZDD: no excuseapi

Health score

66

0 to 100 across seven weighted factors; nothing is hidden. Green is 75 and above, amber 50 to 74, red below 50. How scoring works.


Runtime currency / 25
0
.NET Framework, out of mainstream support
Legacy transport / 15
6
Calls at least one legacy WCF endpoint
Test posture / 15
15
Good test coverage
Security hygiene / 15
15
No credentials found in source
Dangerous coupling / 15
15
No dangerous coupling detected
Activity / 10
10
Actively maintained
Deployment hygiene / 5
5
CI in place
Health over time
2026-07-24 (run-2026-07-24-1): 662026-07-27 (run-2026-07-27-1): 66
No change since 2026-07-24 (66 to 66).

Facts

Languagescsharp
FrameworksASP.NET Core 10 (minimal APIs), FluentValidation, Scalar OpenAPI
Runtimes.NET 10, .NET Framework 4.6.2 (client packages)
Tests / CIgood / CI in place
Last commit2026-05-19
OwnerOwner unknown (mapping to be curated)
DomainPlatform services (system generated; curate in repo-owners.json to override)
Product areaShared platform
HostedAWS + on-prem Ships artefacts to both AWS and on-prem machines (see evidence below)
  • Release "\finance\jobs\company-info-sync job": Staging: deployment-group phase (agents on our own machines)
  • Release "\finance\jobs\company-info-sync job": Production: deployment-group phase (agents on our own machines)
  • Release "\finance\jobs\company-info-sync job": Training: deployment-group phase (agents on our own machines)
  • Release "\finance\jobs\company-info-sync job": QA: deployment-group phase (agents on our own machines)
  • build "company-info-api" (azure-pipelines.yml): AWS signal "useTFVarsDeployment: true"
Releases1 release pipeline(s): \finance\jobs\company-info-sync job
Integrationrest, wcf
SourceOpen in Azure DevOps

Risk flags

No risk flags recorded.

Each flag links to its glossary definition.

Dependencies in context

Laying out the graph…
greenamberreddata store (square, dashed link)Node size follows fan-in. Click any node to open it.

Entanglement

loosely attached Bound into the core by 1 mechanism(s).

  • Speaks WCF (client)

Detaches when its WCF surface gains a modern interface or its WCF calls move to one.

Migration playbooks

Generated from this repo's assessment data: what is feasible, what blocks it, and the steps in order. Ratings: green means actionable now, amber means sequence other work first, red means blocked, grey means not applicable.

ZDD adoption

No excuse

Nothing technical is holding this repo on the three-week release. It either already deploys without downtime (AWS) or is a modern, well-tested service the automated stealth path can carry today. Already deploys as a container to AWS, which releases without downtime today. Some artefacts still deploy on-prem; they follow the on-prem path. Separating it from the three-week release is a process decision, not a technical one.

Dependencies and gotchas
  • 27 system(s) depend on this repo; during a rolling deploy they will talk to old and new versions at once, so responses must stay compatible
  • Consumes WCF contract packages: never take a breaking client bump mid-feature, and treat obsolete warnings as migration debt
Steps
  1. Adopt the four-stage discipline from the ZDD engineering standard: pre-deployment compatibility, deployment, feature activation behind a flag, post-release cleanup.
  2. Make every change dual-version safe: backwards-compatible APIs (new major version for breaking wire changes), expand and contract for any schema change, and consumers tolerant of unknown fields.
  3. Audit serialized data: anything in Redis, queues or shared caches must deserialize cleanly across adjacent versions.
  4. Wrap behaviour changes in feature flags so code deploys dark and release becomes a business decision, not a deployment event.
  5. Route deployments through the Workflow Engine's automated drain, deploy, health-check, return cycle (the path proven by the first automated production run in mid-2026).
  6. Verify with area-scoped regression rather than the whole-platform cycle, and watch error rates after rollout with automated rollback on alert.

SQL Server exit

Not applicable

No SQL Server dependency is recorded for this repo. Nothing to migrate.

Containerisation

Partially containerised

Part of this repo already builds containers for AWS while other artefacts still deploy to on-prem machines. Finish the job by moving the remaining artefacts (see the hosting evidence on this page) through the same pipeline template.

Steps
  1. Identify the artefacts still deploying through deployment-group release pipelines (listed in the hosting evidence).
  2. Move each to the shared ci.yml pipeline template with the container parameters, as the already-containerised artefacts in this repo do.
  3. Disarm the old release pipelines once traffic is confirmed on the new deployment.

Recommended actions

Replatform company-info-api to modern .NET

Runs on .NET 10, .NET Framework 4.6.2 (client packages), out of mainstream support. No pinning dependency blocks it; sequence by fan-in (providers before consumers).

Impact: Unblocks 27 dependent system(s)

proposed

Assessment notes

company-info-api

Purpose

A simple RESTful API to manage company information (name, address, contact details), hosted on AWS but usable on-premise via ConnectionBroker. Publishes NuGet packages (TC.Phenix.CompanyInfo, TC.Phenix.CompanyInfo.Api.Client, TC.ApiClient.Utils) consumed by many estate services (e.g. booking-download, booking-data-exporter). Includes a Windows sync job that copies company data out of Phenix into this API.

Tech stack

  • C# on .NET 10 for the API (minimal APIs, source-generated JSON, Scalar/OpenAPI, Phenix JWT bearer auth); client/service packages multi-target net462;netstandard2.0;net8.0;net10.0 for legacy consumers.
  • MongoDB.Driver with MongoDB.Analyzer; TC.ConnectionBroker (Api/Mongo/Wcf), TC.Cognito.Auth.Client for service auth; central package management and .slnx solution.
  • Sync tool (tools/TC.CompanyInfo.Sync.*) reads Phenix booking data over WCF (TC.Phenix.Services.Client) and writes via the API client.

Deployment

release_count 1. included.json shows only the sync job pipelines: build company-info-api [sync-job] and release \finance\jobs\company-info-sync job. The repo also carries azure-pipelines.yml (API/package CI) and deploy-mongodb.yml (Mongo script deployment via TC.ScriptRunner.Mongo); the API itself is AWS-deployed outside classic release pipelines.

Dependencies

  • Internal: the sync job consumes the legacy Phenix booking WCF service (exact estate repo unconfirmed); many estate services depend on this repo's NuGet packages.
  • External: AWS Cognito for client authentication; AWS hosting (AWSSDK.Core).

Data stores

  • MongoDB company-info database, with schema/scripts deployed via a dedicated MongoDB pipeline.

Integration points

  • REST API with OpenAPI/Scalar; generated HTTP API client package; WCF client (sync job) into Phenix.

Code health

Healthy: six test projects covering API, client, data, common and sync layers; CI plus separate sync-job and Mongo pipelines; active development (last commit 2026-05-19).

Modernisation risks

Low: current .NET 10 API. Residual concerns are the net462 package targets kept for legacy Phenix consumers and the WCF-based sync job, both of which persist a dependency on the legacy Phenix estate.