-
Notifications
You must be signed in to change notification settings - Fork 73
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Infra: Secrets are a committed manifest of placeholders with no rotation path or external provider wired up
area: infraK8s, Helm, CI/CD, deploymentK8s, Helm, CI/CD, deploymentcomplexity: highSubstantial design/implementation work, not a quick fixSubstantial design/implementation work, not a quick fixGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardsecuritySecurity-relevantSecurity-relevantThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#513 In Stellar-Search/GreenPay;Contracts: No resource or fee budgeting, so a contract call can start failing once enough data accumulates
area: contractsSoroban/Rust smart contractsSoroban/Rust smart contractscomplexity: highSubstantial design/implementation work, not a quick fixSubstantial design/implementation work, not a quick fixGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#512 In Stellar-Search/GreenPay;Contracts: Contract upgrades have no storage migration, versioning or rollback path
area: contractsSoroban/Rust smart contractsSoroban/Rust smart contractscomplexity: highSubstantial design/implementation work, not a quick fixSubstantial design/implementation work, not a quick fixGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardsecuritySecurity-relevantSecurity-relevantThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#510 In Stellar-Search/GreenPay;Mobile: Deep links and push notifications are not wired into one routing system, so taps go nowhere
area: mobileExpo/React Native appExpo/React Native appcomplexity: highSubstantial design/implementation work, not a quick fixSubstantial design/implementation work, not a quick fixsecuritySecurity-relevantSecurity-relevantStatus: Open.#509 In Stellar-Search/GreenPay;Mobile: There is no over-the-air update, staged rollout or crash reporting, so a bad mobile release is unrecoverable
area: mobileExpo/React Native appExpo/React Native appcomplexity: highSubstantial design/implementation work, not a quick fixSubstantial design/implementation work, not a quick fixGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardsecuritySecurity-relevantSecurity-relevantThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#508 In Stellar-Search/GreenPay;Frontend: The web donation flow has no offline resilience, while mobile has a full queue and reconciliation
area: frontendNext.js web appNext.js web appcomplexity: highSubstantial design/implementation work, not a quick fixSubstantial design/implementation work, not a quick fixStatus: Open.#507 In Stellar-Search/GreenPay;Frontend: No performance budget: 349 kB of shared JavaScript loads before anything renders
area: frontendNext.js web appNext.js web appcomplexity: highSubstantial design/implementation work, not a quick fixSubstantial design/implementation work, not a quick fixStatus: Open.#506 In Stellar-Search/GreenPay;Frontend: The site is invisible to search engines and social previews — no sitemap, robots or structured data
area: frontendNext.js web appNext.js web appcomplexity: highSubstantial design/implementation work, not a quick fixSubstantial design/implementation work, not a quick fixStatus: Open.#505 In Stellar-Search/GreenPay;Cross-cutting: There is no donor data export or erasure path, and on-chain donations make the usual answer wrong
area: cross-cuttingSpans multiple subsystemsSpans multiple subsystemscomplexity: highSubstantial design/implementation work, not a quick fixSubstantial design/implementation work, not a quick fixsecuritySecurity-relevantSecurity-relevantStatus: Open.#504 In Stellar-Search/GreenPay;Backend: The chain indexer has no gap detection, reorg handling or backfill, so donations can be missed permanently
area: backendNode/Express API + event sourcingNode/Express API + event sourcingcomplexity: highSubstantial design/implementation work, not a quick fixSubstantial design/implementation work, not a quick fixStatus: Open.#503 In Stellar-Search/GreenPay;Backend: There is no safe way to rebuild a projection, so a bug in read-model logic is unrecoverable
area: backendNode/Express API + event sourcingNode/Express API + event sourcingcomplexity: highSubstantial design/implementation work, not a quick fixSubstantial design/implementation work, not a quick fixStatus: Open.#502 In Stellar-Search/GreenPay;Cross-cutting: No distributed tracing links a donation across client, API, event store, job queue and chain
area: cross-cuttingSpans multiple subsystemsSpans multiple subsystemscomplexity: highSubstantial design/implementation work, not a quick fixSubstantial design/implementation work, not a quick fixStatus: Open.#499 In Stellar-Search/GreenPay;