Dreamstick9

Dreamstick9/filedrop

6 stars 7 forks 6 watchers JavaScript MIT License
View on GitHub Website
80 Open Issues Need Help Last updated: Jul 2, 2026

Open Issues Need Help

View All on GitHub
Insecure Randomness Fallback for Transfer ID 16 days ago
enhancement help wanted
Dreamstick9/filedrop
6

JavaScript
[Medium] Decryption key is wiped from the URL before the browser confirms the download succeeded 16 days ago
bug help wanted triage ECSoC26 possible-duplicate
Dreamstick9/filedrop
6

JavaScript
[Easy] index.js/server.js: mDNS transfer id and X-Transfer-ID are generated separately and diverge 16 days ago
bug help wanted good first issue area/server triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] package.json: npm test never runs test/integration/* suite 16 days ago
enhancement help wanted good first issue kind/tests triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] mdns.js: Windows mDNS registration timeout is hardcoded to 1000ms 16 days ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
Rate Limit Memory Leak via Unbounded Map 16 days ago
bug good first issue
Dreamstick9/filedrop
6

JavaScript
Missing Content-Security-Policy (CSP) Header 16 days ago
bug help wanted good first issue
Dreamstick9/filedrop
6

JavaScript
Sequential Port Availability Checking 16 days ago
enhancement help wanted good first issue
Dreamstick9/filedrop
6

JavaScript
Synchronous File Stat in Loop 16 days ago
good first issue
Dreamstick9/filedrop
6

JavaScript
Deprecated crypto.randomUUID fallback 16 days ago
help wanted good first issue
Dreamstick9/filedrop
6

JavaScript
[Easy] server.js: validate AES key fragment is 64 hex chars before decrypt 16 days ago
bug help wanted good first issue area/server triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
filedrop-mesh: cross-network file transfer over WebRTC (epic) 16 days ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] Add 6-character mesh room code generator and receiver-side entry page 16 days ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] Extend QR/URL format to carry both LAN URL and mesh room code 16 days ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] End-to-end integration test + manual dogfood script for mesh paths 16 days ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] network.js: Docker bridge filtering only blocks `172.17.0.*` (the d… 16 days ago
bug help wanted good first issue ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] server.js: Hardcoded `Cache-Control: max-age=31536000` for forge.min.js 16 days ago
help wanted good first issue triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] cli.js: `fs.statSync` is called up to three times on the same `… 16 days ago
help wanted good first issue triage/triaged
Dreamstick9/filedrop
6

JavaScript
[Easy] lifecycle.js: Empty catch block silently swallows server.shutdown() e… 16 days ago
bug good first issue ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] index.js: Empty catch block suppresses errors during httpAppShutd… 16 days ago
bug help wanted good first issue ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] index.js: Empty catch block suppresses errors during mdns.teardow… 16 days ago
bug help wanted good first issue ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] server.js: Empty catch block suppresses errors during onShutdown c… 16 days ago
bug help wanted good first issue ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] index.js: Empty catch block suppresses errors during httpAppShutd… 16 days ago
bug help wanted good first issue ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] index.js: Empty catch block suppresses errors during mdns.teardow… 16 days ago
bug help wanted good first issue ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] lifecycle.js: Empty catch block silently swallows stdout flush errors… 16 days ago
bug good first issue ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] lifecycle.js: Empty catch block silently swallows mdns.deregister() e… 17 days ago
bug good first issue
Dreamstick9/filedrop
6

JavaScript
[Easy] server.js: Shared ipRequestCounts Map is accessed without synchron… 17 days ago
bug help wanted good first issue
Dreamstick9/filedrop
6

JavaScript
[Medium] Download does not start if the key is added to the URL after the page has already loaded 23 days ago
enhancement help wanted triage ECSoC26 possible-duplicate
Dreamstick9/filedrop
6

JavaScript
[Medium] Add Transport interface in src/transport.js and refactor server.js + index.js to use it 23 days ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] Build @dreamstick/filedrop-signal companion package (WebSocket signaling server) 23 days ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] index.js: negative download-limit input blocks all downloads (0 >= -N) 23 days ago
bug help wanted good first issue triage area/cli ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Hard] server.js: document.execCommand('copy') is deprecated and should u… 25 days ago
help wanted good first issue triage/triaged
Dreamstick9/filedrop
6

JavaScript
[Hard] Add relay fallback for symmetric NAT (ciphertext-only, opt-in) 25 days ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Hard] Implement MeshTransport (WebRTC + DataChannel) for cross-network file transfer 25 days ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] index.js: Assumed module interfaces suggest incomplete implementa… 26 days ago
help wanted good first issue ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] security.js: `src/security.js` has no corresponding test file; `vali… 26 days ago
help wanted triage/triaged ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] port.js: `firewallWarningPrinted` is module-level mutable state;… 26 days ago
help wanted triage/triaged ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Hard] Stream existing AES-256-GCM ciphertext over RTCDataChannel with backpressure 26 days ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] lifecycle.js: Transfer timeout is hardcoded to 60 seconds instead of … 26 days ago
help wanted good first issue triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] server.js: resolve forge.min.js via require.resolve (hardcoded node_modules path breaks hoist/pkg) 29 days ago
bug help wanted good first issue area/server triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] server.js: set Referrer-Policy: no-referrer on decryptor HTML to protect ?t= tokens 29 days ago
enhancement help wanted good first issue area/server triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] server.js: `--bind` only picks the QR IP — HTTP still listens on 0.0.0.0 (docs wrong) 29 days ago
bug help wanted area/server triage area/network ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] server.js: stream setup failure after activeIPs.add leaks slot and can hang the client 29 days ago
bug help wanted area/server triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] index.js: add --download-limit flag; non-interactive mode hangs on device-count prompt 29 days ago
enhancement help wanted triage area/cli ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] server.js: sanitize fileName for Content-Disposition (CR/LF header injection) 29 days ago
bug help wanted area/server triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] errors.js: The comment "Clear any in-progress terminal state (rest… about 1 month ago
bug help wanted good first issue triage/triaged ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] Implement pickTransport() policy: prefer mDNS, fall back to WebRTC + signaling about 1 month ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] server.js: completedIPs Set is shared mutable state modified witho… about 1 month ago
bug help wanted good first issue triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] /download rejects HTTP Range requests with 416, breaking Safari and resumable downloads about 1 month ago
bug help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] server.js: Shutdown force-timeout is hardcoded to `3000`ms about 1 month ago
enhancement help wanted ¯\_(ツ)_/¯ triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] server.js: Magic number `chunk = 10000` in client-side `u8ToBinaryString` about 1 month ago
help wanted good first issue triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Hard] security.js: Exported helpers (validateToken, createConnectionLimiter, isSensitiveFile, confirmSensitiveFile) are never used about 1 month ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] port.js: Port range constants `1024`/`65535` are magic numbers duplicated across port.js and cli.js about 1 month ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] Document the --qr flag in --help (it works but is undocumented) about 1 month ago
help wanted good first issue triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] Remove dead `if (false) { window.close(); }` branch in download client about 1 month ago
help wanted good first issue triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] server.js: Default timeout is hardcoded to 60000ms instead of bein… about 1 month ago
help wanted triage ECoSC26
Dreamstick9/filedrop
6

JavaScript
[Easy] qr.js: Default box width `43` is a magic number duplicated in renderMetadataBox and updateStatus about 1 month ago
help wanted good first issue triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] cli.js: Help text links to placeholder URL `https://github.com/<org>/filedrop` about 1 month ago
help wanted good first issue triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] mdns.js: Six module-level mutable variables (`mdnsInstance`, `cu… about 1 month ago
help wanted good first issue ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] server.js: Default version is hardcoded to '1.0.0' instead of bein… about 1 month ago
help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Hard] server.js: Client-side download blob uses hardcoded `application/octet-stream` about 1 month ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] server.js: activeIPs Set is shared mutable state modified without … about 1 month ago
bug help wanted good first issue triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] index.js: SIGINT force-exit timeout is hardcoded to 10000ms about 1 month ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] platform.js: `src/platform.js` has no corresponding test file; `supp… about 1 month ago
help wanted good first issue triage
Dreamstick9/filedrop
6

JavaScript
[Easy] safe-run.js: `src/safe-run.js` has no corresponding test file; the `… about 1 month ago
help wanted good first issue triage
Dreamstick9/filedrop
6

JavaScript
[Medium] lifecycle.js: Failsafe exit timeout is hardcoded to 1000ms instead of… about 1 month ago
help wanted good first issue triage/triaged ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] qr.js: `lastBoxWidth` is module-level mutable state written by… about 1 month ago
help wanted good first issue triage
Dreamstick9/filedrop
6

JavaScript
[Easy] server.js: ipRequestCounts Map is shared mutable state modified wi… about 1 month ago
bug help wanted good first issue triage
Dreamstick9/filedrop
6

JavaScript
[Easy] network.js: `wmicOutput.split('\\n')` splits on the literal two-cha… about 2 months ago
bug help wanted good first issue triage
Dreamstick9/filedrop
6

JavaScript
[Medium] test2.js: `createTempFile` writes a `temp.txt` file to the projec… about 2 months ago
help wanted good first issue triage
Dreamstick9/filedrop
6

JavaScript
[Easy] lifecycle.js: fileStreams Set is shared mutable state modified withou… about 2 months ago
bug help wanted good first issue
Dreamstick9/filedrop
6

JavaScript
[Medium] lifecycle.js: Stdout flush timeout is hardcoded to 500ms instead of b… about 2 months ago
help wanted good first issue triage
Dreamstick9/filedrop
6

JavaScript
[Medium] server.js: Rate limit max requests is hardcoded to 30 instead of b… about 2 months ago
help wanted good first issue triage
Dreamstick9/filedrop
6

JavaScript
[Medium] server.js: Rate limit window is hardcoded to 10000ms instead of be… about 2 months ago
help wanted good first issue triage
Dreamstick9/filedrop
6

JavaScript
[Easy] mdns.js: Empty catch block silently ignores query failures durin… about 2 months ago
bug help wanted good first issue triage
Dreamstick9/filedrop
6

JavaScript
[Easy] mdns.js: Empty catch block in deregister() swallows mdnsInstance… about 2 months ago
bug good first issue
Dreamstick9/filedrop
6

JavaScript
[Easy] index.js: Empty catch block suppresses errors during httpAppShutd… about 2 months ago
bug help wanted good first issue
Dreamstick9/filedrop
6

JavaScript
[Easy] mdns.js: Empty catch block in onQuery silently swallows mdnsInst… about 2 months ago
bug good first issue
Dreamstick9/filedrop
6

JavaScript
Swallowed Error in Catch Block about 2 months ago
enhancement good first issue
Dreamstick9/filedrop
6

JavaScript
Swallowed Error in Catch Block about 2 months ago
good first issue
Dreamstick9/filedrop
6

JavaScript