‹ Agency Client Portal & Billing PlatformQuality report QR-26-00049

Agency Client Portal & Billing Platform
Self-hosted white-label client portal for agencies to sell services, run projects, and collect payments
- Product ID
- B0419-51750
- Builder
- MD. Rakibuzzaman
- Version reviewed
- 1.0.0 · released 22 Oct 2026
- Stack
- Next.js 16.4.2 (App Router, React 19) · TypeScript 5 · MongoDB 8.0 (replica set required for transactions)
- Built with
- Claude Code
- Review period
- 20 Oct 2026 – 22 Oct 2026 · 1 round of changes
- ✓AI code audit0 checks · 19 Oct 2026
- ✓Installed & run22 Oct 2026
- ✓Demo vs delivered22 Oct 2026
- ✓Final sign-off22 Oct 2026
At a glance
- ✓Installed and run from the delivered code — 8 of 8 checks answered yes.
- ✓Live demo compared with the delivered code — 7 of 7 checks answered yes.
- !5 of 15 promised items delivered (setup guide, example config and the rest).
- !Security scored 0/100 with no failing check.
- ✓No open warnings.
AI code audit
The full source archive was read by our AI auditor against each check. It reads the code — it does not run it; running it is part 2.
| Check | What we found | Score | Result |
|---|
Requirement list
What the builder agreed to deliver before uploading — 5 of 15 met.
- Complete source for every component Partial
- No real credentials in the archive Partial
- Builds from a clean machine Partial
- Database script or migrations Partial
- Authentication and roles on every mutating endpoint Partial
- Pinned dependencies without critical CVEs (nice)Partial
- Documentation set (nice)Partial
- Working live demo Partial
- README.md Met
- HowToSetup.md Met
- CLAUDE.md (or AGENTS.md) (nice)Met
- CHANGELOG.md (nice)Met
- .env.example Met
- a project file Missing
- a project file (nice)Missing
Human review
Reviewers from the Vibe96 team in Dubai worked through each question below; a final reviewer signed it off.
Stage 1 — Installed and run from the delivered code
Completed 22 Oct 2026A reviewer installed the product on a clean machine, following only the guide that ships with it.
| Question | Answer | Reviewer's note |
|---|---|---|
| Packages restored without errors | Yes | |
| Solution builds clean | Yes | |
| Database created from the shipped script or migrations | Yes | |
| First sign-in works with the documented steps | Yes | |
| Setup guide is accurate and complete | Yes | |
| Every module in the feature list opens and works | Yes | |
| No real secrets in the archive | Yes | |
| Branding and company details can be changed without code | Yes |
Stage 2 — Live demo compared with the delivered code
Completed 22 Oct 2026A second reviewer checked that what the listing and demo show is what the buyer receives.
| Question | Answer | Reviewer's note |
|---|---|---|
| Demo URL is reachable | Yes | |
| Demo credentials work | Yes | |
| Demo runs the same version as the archive | Yes | |
| All five differentiators are visible in the demo | Yes | |
| Screenshots match the demo | Yes | |
| Nothing in the demo is missing from the code | Yes | |
| Datasheet claims are accurate | Yes |
Changes asked for during review
- None — approved on the first round.
- Sign-off: approved for sale on 22 Oct 2026.
What this report covers — and what it doesn't
- It covers version 1.0.0 exactly as the buyer downloads it: the source archive, the setup guide and the live demo on the dates above.
- It is not a penetration test, a performance or load test, or a legal review of third-party package licences.
- Scores are a point in time. Libraries age; a later version is audited again and gets its own report.
- Your setup matters. Hosting, configuration and changes made after purchase are outside this review.
- How the score is made: each AI check is scored 0–100 and weighted (security counts most). A listing needs 75 or more, no failing check, and the human review passed.
- Always try the live demo before buying, and ask the builder questions from the product page.
Vibe96 FZ-LLC, Dubai, UAE. This report describes the product at the time of review and is not a warranty.