-
Notifications
You must be signed in to change notification settings - Fork 46
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
No coverage threshold is configured, so npm run test:cov can never fail the build on a coverage regression
bugSomething isn't workingSomething isn't workingenhancementNew feature or requestNew feature or requestStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programtestingTesting/QA infrastructureTesting/QA infrastructurevery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#178 In MergeFi/backend;jest config doesn't separate DB-requiring integration specs from unit specs — npm run test fails without a live Postgres, with no clear signal why
architectureArchitecture/design issueArchitecture/design issuedocumentationImprovements or additions to documentationImprovements or additions to documentationStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programtestingTesting/QA infrastructureTesting/QA infrastructurevery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#177 In MergeFi/backend;[Verified by reproduction] .dockerignore excludes tsconfig.json/tsconfig.build.json/nest-cli.json, breaking npm run build inside every Docker stage
bugSomething isn't workingSomething isn't workingdocumentationImprovements or additions to documentationImprovements or additions to documentationsecuritySecurity-related issueSecurity-related issueStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#176 In MergeFi/backend;eslint fully disables @typescript-eslint/no-explicit-any, a third rule beyond the two the existing eslint-downgrade issue names
bugSomething isn't workingSomething isn't workingenhancementNew feature or requestNew feature or requesthelp wantedExtra attention is neededExtra attention is neededStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#175 In MergeFi/backend;Roadmap's "recurring MaintenancePool deposits" item remains unimplemented — deposit() is entirely manual despite the monthlyDeposit field implying an automatic cadence
documentationImprovements or additions to documentationImprovements or additions to documentationenhancementNew feature or requestNew feature or requesthelp wantedExtra attention is neededExtra attention is neededStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#174 In MergeFi/backend;package.json has no engines field pinning a Node.js version, despite CI hardcoding Node 24
bugSomething isn't workingSomething isn't workingenhancementNew feature or requestNew feature or requesthelp wantedExtra attention is neededExtra attention is neededStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#173 In MergeFi/backend;Bounty/Milestone/MaintenancePool/User list endpoints have no pagination and return the entire table in one unbounded response
GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26performancePerformance/optimization issuePerformance/optimization issueThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#63 In MergeFi/backend;POST /github/sync/:owner/:repo is completely unauthenticated, letting anyone burn the platform's shared GitHub API rate-limit budget syncing arbitrary public repositories
GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26performancePerformance/optimization issuePerformance/optimization issuesecuritySecurity-related issueSecurity-related issueStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#62 In MergeFi/backend;MilestonesService.addIssue never validates that the issue belongs to the milestone's own repository, allowing cross-repository issue attachment and budget misallocation
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Stellar WaveIssues in the Stellar wave programIssues in the Stellar wave programThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#59 In MergeFi/backend;TeamMemberSplit.user uses onDelete: CASCADE, so deleting any team member's account silently desyncs a team's split percentages from 100 and can permanently strand that team's bounty
architectureArchitecture/design issueArchitecture/design issuebugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Third CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#58 In MergeFi/backend;ReputationService and AnalyticsService compute a contributor's lifetime earnings from Bounty.amount instead of the Payment ledger, overstating earnings for every team-split bounty
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Stellar WaveIssues in the Stellar wave programIssues in the Stellar wave programThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#57 In MergeFi/backend;The entire auth module (GitHub/JWT strategies, guards, controller, service) has zero test coverage, leaving MergeFi's only identity boundary completely unverified
GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26securitySecurity-related issueSecurity-related issueStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programtestingTesting/QA infrastructureTesting/QA infrastructureThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#56 In MergeFi/backend;