Konfirm-xyz

Konfirm-xyz/konfirm-backend

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

34 good first / help-wanted issues · TypeScript · last activity Oct 8, 2026

0 stars 0 forks 0 watchers TypeScript MIT License
View on GitHub
34 Open Issues Need Help Last updated: Oct 8, 2026

Open Issues Need Help

View All on GitHub
Stale eslint-disable comments with no ESLint configured anywhere 6 days ago
enhancement good first issue Stellar Wave priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
assertNetworkReady only checks env vars are non-empty, never that they're valid Stellar strkeys 6 days ago
bug enhancement good first issue priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
Bazaar listing approve/reject has no reason field, unlike every other moderation action 6 days ago
enhancement good first issue Stellar Wave priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
Withdrawal-attempt refresh skip branches have zero test coverage 6 days ago
good first issue Stellar Wave testing priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
Terminal withdrawal-status list duplicated verbatim in two files 6 days ago
enhancement good first issue Stellar Wave priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
Bazaar dedup only checks pending listings, not already-approved ones 6 days ago
bug good first issue Stellar Wave priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
bazaar_listings missing a plain created_at index for unfiltered admin queries 6 days ago
enhancement good first issue Stellar Wave priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
Suspected: Sentry has no beforeSend scrubber as a safety net 6 days ago
enhancement good first issue Stellar Wave priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
README API reference omits the referral and public Bazaar endpoints 6 days ago
documentation good first issue Stellar Wave priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
Suspected: signup accepts a whitespace-only business name — neither frontend nor backend trims before the length check 7 days ago
bug good first issue priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
Malformed /links/:id/public UUID hits the DB raw, surfacing as a false 500/Sentry page instead of a 404 7 days ago
bug good first issue priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
fees sweepPending has no advisory lock, unlike every other sweeper 7 days ago
enhancement good first issue Stellar Wave priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
QR fee-collection doc says collected, actual terminal status is settled 7 days ago
documentation good first issue Stellar Wave priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
submitSigned() doesn't catch malformed-XDR parse failures 7 days ago
bug good first issue Stellar Wave priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
muxed.rs and compliance.rs missing boundary/fail-open test coverage 8 days ago
good first issue Stellar Wave testing priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
sessions.reserve() comment claims compliance screening happens there — it doesn't 8 days ago
documentation good first issue Stellar Wave priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
deposits challenge() doesn't validate account as a Stellar address 8 days ago
good first issue Stellar Wave priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
withdrawals start/preparePayment skip the null-address guard challenge() has 8 days ago
bug good first issue Stellar Wave priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
Add PR template and issue templates for external contributors 9 days ago
documentation good first issue Stellar Wave priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
Enable automatically delete head branches after merge 9 days ago
good first issue Stellar Wave priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
Disable the repo wiki — it's enabled but has never been created 9 days ago
documentation good first issue Stellar Wave priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
Undocumented stellar-sdk version override pin could be mistaken for cruft 9 days ago
documentation good first issue Stellar Wave priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
target-architecture.md labels the already-shipped money-rules library as (new) 9 days ago
documentation good first issue Stellar Wave priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
CI's npm audit scope doesn't match the project's own documented --omit=dev methodology 9 days ago
good first issue Stellar Wave priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
npm run build compiles all 18 spec files into dist/, never caught by CI 9 days ago
bug good first issue Stellar Wave priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
GET /admin/auth/me and POST /admin/auth/logout have zero test coverage 9 days ago
good first issue Stellar Wave testing priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
README claims NestJS 10, actual version is NestJS 11 9 days ago
documentation good first issue Stellar Wave priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
Suspected: getFeeCollectionSigner has the same error-leak pattern as the filed PLATFORM_FEE_ADDRESS issue 9 days ago
bug good first issue Stellar Wave priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
Add SECURITY.md 9 days ago
documentation good first issue Stellar Wave priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
admin-exchange-rate.service.ts's live-rate fetch has no timeout 9 days ago
bug good first issue Stellar Wave priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
Suspected: attestation tx_hash built via silently-truncating hex decode 9 days ago
enhancement good first issue priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
Amount regexes have no upper bound, can crash transaction building 9 days ago
bug good first issue priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
Suspected: GET /payments/prepare-tx's payer param has no address-format validation, crashes with 500 9 days ago
bug good first issue Stellar Wave security testing priority:critical
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript
Suspected: Reconciler-watchdog's own failures vanish to raw console.error 9 days ago
bug good first issue Stellar Wave priority:high
Konfirm-xyz/konfirm-backend
0

The API and settlement-watching service behind Konfirm, a non-custodial payment processor built on Stellar.

TypeScript