MergeFi

MergeFi/backend

100 good first / help-wanted issues · TypeScript · last activity Jul 15, 2026

0 stars 3 forks 0 watchers TypeScript
View on GitHub Website
100 Open Issues Need Help Last updated: Jul 15, 2026

Open Issues Need Help

View All on GitHub
auth/strategies/jwt.strategy.ts has no spec file 6 days ago
good first issue testing Stellar Wave
MergeFi/backend
0

TypeScript
common/validators/date.validator.ts has no spec file 6 days ago
good first issue testing Stellar Wave
MergeFi/backend
0

TypeScript
Controller specs pass unbound methods to expect() (unbound-method lint errors) 6 days ago
good first issue testing Stellar Wave
MergeFi/backend
0

TypeScript
[Regression on closed #284] POST /reputation/:userId/recompute still has no throttle, and every call appends a snapshot 6 days ago
bug good first issue performance Stellar Wave
MergeFi/backend
0

TypeScript
escrow.service.spec.ts has three unnecessary type assertions flagged as lint errors 6 days ago
good first issue testing Stellar Wave
MergeFi/backend
0

TypeScript
common/validators/stellar-address.validator.ts has no spec file 6 days ago
good first issue testing Stellar Wave
MergeFi/backend
0

TypeScript
config/configuration.ts has no spec file 6 days ago
good first issue testing Stellar Wave
MergeFi/backend
0

TypeScript
config/validate-required-config.ts has no spec file 6 days ago
good first issue testing Stellar Wave
MergeFi/backend
0

TypeScript
FundEscrowDto.deadline combines @IsDateString with @Type(() => Date), so every request that sends a deadline fails validation 6 days ago
bug good first issue Stellar Wave
MergeFi/backend
0

TypeScript
ReputationService.history orders ASC, so the default page returns the oldest 50 snapshots, not the latest 6 days ago
bug good first issue Stellar Wave
MergeFi/backend
0

TypeScript
FRONTEND_URL defaults to http://localhost:3001, but the Next.js frontend serves on :3000 — CORS and the OAuth redirect miss it 6 days ago
bug good first issue Stellar Wave
MergeFi/backend
0

TypeScript
GET /bounties/:id loads no relations, so clients get no issue title, repository, claimant or team 6 days ago
bug good first issue Stellar Wave
MergeFi/backend
0

TypeScript
auth/strategies/github.strategy.ts has no spec file 6 days ago
good first issue testing Stellar Wave
MergeFi/backend
0

TypeScript
users/users.mapper.ts has no spec file 6 days ago
good first issue testing Stellar Wave
MergeFi/backend
0

TypeScript
common/validators/money.validator.ts has no spec file 6 days ago
good first issue testing Stellar Wave
MergeFi/backend
0

TypeScript
users/users.controller.ts has no spec file 6 days ago
good first issue testing Stellar Wave
MergeFi/backend
0

TypeScript
GET /milestones and GET /maintenance-pools return no repository or issues, so clients can't show what a milestone or pool belongs to 6 days ago
bug good first issue Stellar Wave
MergeFi/backend
0

TypeScript
github/github-webhook-payload.util.ts has no spec file 6 days ago
good first issue testing Stellar Wave
MergeFi/backend
0

TypeScript
analytics/ttl-cache.ts has no spec file 6 days ago
good first issue testing Stellar Wave
MergeFi/backend
0

TypeScript
POST /milestones/:id/allocate and /bounties/:id/approve|reject are documented in Swagger as working operations 7 days ago
documentation good first issue
MergeFi/backend
0

TypeScript
Health endpoint never checks the database or Soroban RPC, and the production image has no HEALTHCHECK 9 days ago
enhancement good first issue Stellar Wave
MergeFi/backend
0

TypeScript
budgetLocked counts the full amount of partially-paid milestone escrows 9 days ago
bug good first issue Stellar Wave
MergeFi/backend
0

TypeScript
[Regression on closed #324] README still says a stale idempotency key is reclaimed after 30s; the code uses 90s 9 days ago
documentation good first issue Stellar Wave
MergeFi/backend
0

TypeScript
README's escrow section says only fund/release/refund are invoked, but the code also calls release_partial and withdraw 9 days ago
documentation good first issue Stellar Wave
MergeFi/backend
0

TypeScript
README roadmap still lists 'Add role-based authorization guards' as unchecked, although RolesGuard is on every mutation 9 days ago
documentation good first issue Stellar Wave
MergeFi/backend
0

TypeScript
The access_token cookie's maxAge is hard-coded to 7 days regardless of JWT_EXPIRES_IN 9 days ago
bug good first issue Stellar Wave
MergeFi/backend
0

TypeScript
assertRequiredConfig runs after NestFactory.create, so production boots and connects to the DB with insecure defaults before validation 9 days ago
bug good first issue Stellar Wave
MergeFi/backend
0

TypeScript
POST /bounties/:id/refund admits MAINTAINER via @Roles but the service rejects anyone who isn't the sponsor 9 days ago
bug good first issue Stellar Wave
MergeFi/backend
0

TypeScript
SorobanClientService's doc comment documents maintenance-pool/milestones signatures that don't match the deployed contracts 10 days ago
documentation good first issue Stellar Wave
MergeFi/backend
0

TypeScript
maintenance-pool.service.spec.ts: assignReward tests fail with 'Pool pool-1 is not ACTIVE' since the #276 status guard 10 days ago
good first issue testing Stellar Wave
MergeFi/backend
0

TypeScript
teams.service.spec.ts: create tests fail with 'User u1 not found' after FK pre-checks were added 10 days ago
good first issue testing Stellar Wave
MergeFi/backend
0

TypeScript
github-sync.incremental.spec.ts: all 6 #315 tests fail — octokit mock lacks issues.listForRepo 10 days ago
good first issue testing Stellar Wave
MergeFi/backend
0

TypeScript
milestones.service.spec.ts: fund and resolveIssue tests fail after the sponsor check and the #254 transaction manager argument 10 days ago
good first issue testing Stellar Wave
MergeFi/backend
0

TypeScript
github-webhooks.service.spec.ts declares webhookEventRepo twice and uses issueRepo before assignment after merging #308/#309 10 days ago
good first issue testing
MergeFi/backend
0

TypeScript
bounties.service.ts imports BadRequestException/Injectable/NotFoundException/Optional twice 10 days ago
bug good first issue
MergeFi/backend
0

TypeScript
TeamMemberSplit imports Index twice and declares two separate indexes on teamId 10 days ago
bug good first issue performance
MergeFi/backend
0

TypeScript
GithubWebhooksService.processLinkedIssues' action/preAction are typed Promise<void> but receive Promise<Bounty> 10 days ago
bug good first issue
MergeFi/backend
0

TypeScript
RepoScopeGuard's AuthenticatedRequest interface doesn't type-check against express.Request, and ROLES_KEY is imported but unused 10 days ago
bug good first issue
MergeFi/backend
0

TypeScript
bounties.service.ts passes recipientId: string | null to splitRelease/assertions expecting string | undefined 10 days ago
bug good first issue
MergeFi/backend
0

TypeScript
Three migrations share the timestamp 1785200000000, so their run order depends on filename sorting 10 days ago
bug good first issue
MergeFi/backend
0

TypeScript
CI's 'Lint Code' step runs eslint --fix, so formatting errors are silently fixed in the runner and 92 prettier errors sit on main 10 days ago
bug good first issue testing
MergeFi/backend
0

TypeScript
bounties.service.spec.ts: all 14 tests fail — the TestingModule doesn't provide IssueRepository 10 days ago
good first issue testing
MergeFi/backend
0

TypeScript
analytics.service.spec.ts fails to bootstrap — PaymentRepository isn't provided after #271 moved earnings to the Payment ledger 10 days ago
good first issue testing
MergeFi/backend
0

TypeScript
Bounties, Milestones and Teams controller specs all fail to bootstrap: IdempotencyInterceptor needs IdempotencyKeyRepository 10 days ago
good first issue testing
MergeFi/backend
0

TypeScript
github.controller.spec.ts fails to bootstrap: RepoScopeGuard's UserRepository dependency is missing 10 days ago
good first issue testing
MergeFi/backend
0

TypeScript
github-webhooks.linked-issues.spec.ts: all 11 tests fail — webhookEventRepo mock has no findOne after #308 dedupe 10 days ago
good first issue testing
MergeFi/backend
0

TypeScript
escrow.service.spec.ts: fund test still expects a bare bigint deadline after #301 wrapped u64 arguments 10 days ago
good first issue testing
MergeFi/backend
0

TypeScript
team-split.util.spec.ts no longer compiles: TeamMemberSplitLike now requires userId 10 days ago
good first issue testing
MergeFi/backend
0

TypeScript
sponsors.service.spec.ts activeMilestones test doesn't account for the #279 pagination defaults 10 days ago
good first issue testing
MergeFi/backend
0

TypeScript
ClaimBountyDto is dead code that documents a fake `_placeholder` body field in Swagger 10 days ago
documentation good first issue
MergeFi/backend
0

TypeScript
[Regression on closed #368] EscrowController.splitRelease still returns raw Payment[] entities 10 days ago
bug good first issue
MergeFi/backend
0

TypeScript
EscrowService.poolWithdraw passes pool_id as a bare bigint (ScVal i128) — the contract declares u64 10 days ago
bug good first issue
MergeFi/backend
0

TypeScript
MaintenancePoolService.create never verifies repositoryId exists — an unknown id becomes an FK-violation 500 10 days ago
bug good first issue
MergeFi/backend
0

TypeScript
TeamsService.create/updateSplits run one SELECT per member to check existence 10 days ago
good first issue performance
MergeFi/backend
0

TypeScript
[Regression on closed #328] main.ts still never calls app.enableShutdownHooks() 10 days ago
bug good first issue
MergeFi/backend
0

TypeScript
[Regression on closed #123] GithubSyncService.getPullRequest and findIssueByGithubId are still dead code 10 days ago
good first issue architecture
MergeFi/backend
0

TypeScript
Maintenance-pool eligibility ignores GitHub's default `documentation` label — only `docs` counts 10 days ago
bug good first issue
MergeFi/backend
0

TypeScript
GITHUB_SYNC_ALLOWED_REPOS is required to sync any new repository but isn't in .env.example or the README 10 days ago
documentation good first issue
MergeFi/backend
0

TypeScript
[Regression on closed #289] EncryptionTransformer is still duplicated inline in github-account.entity.ts 10 days ago
good first issue architecture
MergeFi/backend
0

TypeScript
[Regression on closed #320] CI still never applies the migration files to its Postgres service 10 days ago
good first issue testing
MergeFi/backend
0

TypeScript
[Regression on closed #464] sponsor dashboard pagination still has no ORDER BY 10 days ago
bug good first issue
MergeFi/backend
0

TypeScript
SplitReleaseDto and CreateTeamDto accept an unbounded number of recipients/members 10 days ago
bug good first issue security
MergeFi/backend
0

TypeScript
Team split percentages are validated at full precision but stored rounded to 2 decimals, so stored splits can sum to 99.99 10 days ago
bug good first issue
MergeFi/backend
0

TypeScript
Unused variables on main hide logic that was lost in merges (previousStatus, existingPool, callerUserId…) 10 days ago
bug good first issue
MergeFi/backend
0

TypeScript
MaintenancePoolService.assignReward reports a stale balance in its 'exceeds pool balance' error 10 days ago
bug good first issue
MergeFi/backend
0

TypeScript
ESCROW_DEADLINE_SECONDS and PORT are parsed without validation — a typo makes every fund throw RangeError 10 days ago
bug good first issue
MergeFi/backend
0

TypeScript
test/users.e2e-spec.ts expects 403 for an unauthenticated request, but JwtAuthGuard returns 401 10 days ago
good first issue testing
MergeFi/backend
0

TypeScript
The access_token cookie is set without the `secure` flag outside NODE_ENV=production, including on HTTPS staging deploys 10 days ago
good first issue security
MergeFi/backend
0

TypeScript
JwtStrategy's cookieExtractor calls decodeURIComponent unguarded — a malformed access_token cookie turns every authenticated request into a 500 28 days ago
bug good first issue security Stellar Wave
MergeFi/backend
0

TypeScript
TtlCache.invalidate() is lost if it lands while a load is in flight — stale platform summary is re-cached for a full TTL 28 days ago
bug good first issue performance Stellar Wave
MergeFi/backend
0

TypeScript
SponsorsService's paginated activeBounties/activeMilestones/milestoneProgress use take/skip with no ORDER BY, so pages overlap and skip rows 28 days ago
bug good first issue performance Stellar Wave
MergeFi/backend
0

TypeScript
Repository.primaryLanguage has no index despite being a live BountiesController.list filter column 30 days ago
good first issue performance Stellar Wave
MergeFi/backend
0

TypeScript
CI runs the entire unit/integration test suite twice with no additional signal 30 days ago
good first issue performance Stellar Wave
MergeFi/backend
0

TypeScript
TeamMemberSplit.teamId has no index despite being the delete/join key on every team-splits mutation 30 days ago
good first issue performance Stellar Wave
MergeFi/backend
0

TypeScript
[Regression on closed #126] GithubWebhooksController's rawBody fallback still reconstructs an unsignable buffer — closed by an unrelated PR 30 days ago
documentation good first issue Stellar Wave
MergeFi/backend
0

TypeScript
src/common/entities/index.ts exports github-account.entity.ts twice 30 days ago
documentation good first issue Stellar Wave
MergeFi/backend
0

TypeScript
package.json's own engines.node is looser than typeorm's actual required Node range 30 days ago
documentation good first issue Stellar Wave
MergeFi/backend
0

TypeScript
README documents the pre-fix 30s stale-idempotency-key window; the code has run at 90s since the fix for #90 30 days ago
documentation good first issue Stellar Wave
MergeFi/backend
0

TypeScript
IdempotencyKey.expiresAt has no @Index() in the entity despite the migration creating one for exactly that column 30 days ago
bug good first issue Stellar Wave
MergeFi/backend
0

TypeScript
Two migrations share the identical timestamp 1784800000000 30 days ago
bug good first issue Stellar Wave
MergeFi/backend
0

TypeScript
roles.guard.spec.ts covers only 3 of 5 branches in RolesGuard.canActivate — the 'no roles required' short-circuit and the 'user deleted after token issued' path are untested 30 days ago
good first issue testing Stellar Wave
MergeFi/backend
0

TypeScript
JwtStrategy.validate and RolesGuard each perform an independent, redundant DB round-trip per request — one of which is discarded entirely unused 30 days ago
good first issue performance Stellar Wave
MergeFi/backend
0

TypeScript
reputation.service.spec.ts has no test for getLatest() 30 days ago
good first issue testing Stellar Wave
MergeFi/backend
0

TypeScript
test/users.e2e-spec.ts has zero coverage for PATCH /users/:id/stellar-address 30 days ago
good first issue testing Stellar Wave
MergeFi/backend
0

TypeScript
[Regression on closed #127] GithubStrategy still requests the unused read:org OAuth scope — closed by the same unrelated PR as #120 30 days ago
documentation good first issue Stellar Wave
MergeFi/backend
0

TypeScript
SponsorsController.dashboard's limit/offset query params have no validation, unlike the near-identical ReputationController.history implementation 30 days ago
bug good first issue Stellar Wave
MergeFi/backend
0

TypeScript
No DTO in the entire app uses @IsNotEmpty() — required free-text fields (milestone title, pool name, team name) accept whitespace-only or empty strings about 1 month ago
bug good first issue Stellar Wave
MergeFi/backend
0

TypeScript
The six inline controller-defined DTOs have zero @ApiProperty decorators, so Swagger UI renders blank request bodies for every money-moving and PII-setting endpoint that uses them about 1 month ago
documentation good first issue Stellar Wave
MergeFi/backend
0

TypeScript
main.ts's startup log line uses raw console.log instead of NestJS's Logger, inconsistent with every other log line in the app about 1 month ago
bug good first issue Stellar Wave
MergeFi/backend
0

TypeScript
AuthController.me() has zero Swagger decorators — the only route in its controller neither documented nor deliberately excluded about 1 month ago
documentation good first issue Stellar Wave
MergeFi/backend
0

TypeScript
CreateMilestoneDto still lacks future-deadline validation — the #108/#171 fix only covered bounties about 1 month ago
bug good first issue Stellar Wave
MergeFi/backend
0

TypeScript
Neither BountiesController nor MilestonesController has a controller-level spec file, unlike TeamsController (which fixed #113) about 1 month ago
good first issue testing Stellar Wave
MergeFi/backend
0

TypeScript
CreateTeamDto.name has no @MaxLength, unlike every sibling free-text field the #151 fix covered about 1 month ago
enhancement good first issue Stellar Wave
MergeFi/backend
0

TypeScript
BountyExpiryScheduler has no unit test coverage about 1 month ago
good first issue testing Stellar Wave
MergeFi/backend
0

TypeScript
MaintenancePoolService.assignReward never checks MaintenancePool.status, so a PAUSED or CLOSED pool can still be drained about 1 month ago
bug good first issue security Stellar Wave
MergeFi/backend
0

TypeScript
ReputationSnapshot.userId has no database index despite being the only filter column on every query in ReputationService about 1 month ago
good first issue performance Stellar Wave
MergeFi/backend
0

TypeScript
computeContributorStats in contributor-stats.util.ts is dead code with a stale docstring claiming it's used by both Reputation and Analytics services about 1 month ago
bug documentation good first issue Stellar Wave
MergeFi/backend
0

TypeScript
Add comprehensive test coverage for the bounty state machine, escrow release math, and webhook-to-payout integration flow (currently near-zero coverage) about 2 months ago
help wanted very hard testing Maybe Rewarded GrantFox OSS Official Campaign | FWC26 Stellar Wave
MergeFi/backend
0

TypeScript
eslint fully disables @typescript-eslint/no-explicit-any, a third rule beyond the two the existing eslint-downgrade issue names about 2 months ago
bug enhancement help wanted very hard Stellar Wave
MergeFi/backend
0

TypeScript
package.json has no engines field pinning a Node.js version, despite CI hardcoding Node 24 about 2 months ago
bug enhancement help wanted very hard Stellar Wave
MergeFi/backend
0

TypeScript