-
Notifications
You must be signed in to change notification settings - Fork 9
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Docker/deployment tooling is entirely absent: no Dockerfile, no docker-compose for local Postgres, no CI pipeline definition
documentationImprovements or additions to documentationImprovements or additions to documentationenhancementNew feature or requestNew feature or requestGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSShelp wantedExtra attention is neededExtra attention is neededMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26very hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#30 In MergeFi/backend;GitHub webhook controller trusts the event payload body shape without runtime validation, risking crashes or logic errors on malformed input
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26securitySecurity-related issueSecurity-related issuetestingTesting/QA infrastructureTesting/QA infrastructurevery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#28 In MergeFi/backend;Add a background job to auto-refund expired FUNDED bounties on-chain, not just flip a status flag locally
architectureArchitecture/design issueArchitecture/design issuebugSomething isn't workingSomething isn't workingenhancementNew feature or requestNew feature or requestGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26very hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#26 In MergeFi/backend;Milestone addIssue and resolveIssue have no protection against an issue being attached to (or resolved under) two milestones simultaneously
architectureArchitecture/design issueArchitecture/design issuebugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26testingTesting/QA infrastructureTesting/QA infrastructurevery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#25 In MergeFi/backend;Add API versioning strategy before the first breaking change forces a painful retrofit
architectureArchitecture/design issueArchitecture/design issueenhancementNew feature or requestNew feature or requestGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26very hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#23 In MergeFi/backend;Analytics payout heatmap and top-clients queries likely load unbounded result sets into memory with no pagination
architectureArchitecture/design issueArchitecture/design issueenhancementNew feature or requestNew feature or requestGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26performancePerformance/optimization issuePerformance/optimization issuevery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#22 In MergeFi/backend;Reputation snapshot computation is vulnerable to gaming via rapid self-dealing bounty cycles between colluding accounts
GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26securitySecurity-related issueSecurity-related issuetestingTesting/QA infrastructureTesting/QA infrastructurevery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#21 In MergeFi/backend;Add comprehensive test coverage for the bounty state machine, escrow release math, and webhook-to-payout integration flow (currently near-zero coverage)
GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSShelp wantedExtra attention is neededExtra attention is neededMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26testingTesting/QA infrastructureTesting/QA infrastructurevery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#20 In MergeFi/backend;Bounty payout to a contributor with no linked Stellar address silently releases to an empty-string recipient
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26securitySecurity-related issueSecurity-related issuetestingTesting/QA infrastructureTesting/QA infrastructurevery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#18 In MergeFi/backend;Structured tracing/observability is entirely absent: no correlation IDs across the webhook -> bounty -> escrow -> Soroban call chain
architectureArchitecture/design issueArchitecture/design issueenhancementNew feature or requestNew feature or requestGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSShelp wantedExtra attention is neededExtra attention is neededMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26very hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#17 In MergeFi/backend;Percentage-split validation for teams and split-releases can be gamed with more than 100 recipients or negative/NaN percentages bypassing sum checks
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26securitySecurity-related issueSecurity-related issuetestingTesting/QA infrastructureTesting/QA infrastructurevery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#15 In MergeFi/backend;Introduce a real TypeORM migration workflow: the repo relies entirely on synchronize, which is unsafe and undocumented for production
architectureArchitecture/design issueArchitecture/design issueenhancementNew feature or requestNew feature or requestGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26very hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#14 In MergeFi/backend;