Stellar-Ecosystem/lodestar

Add form validation feedback to the service registration form about 3 hours ago

enhancement help wanted good first issue GrantFox OSS Official Campaign

3

JavaScript

The backend config.js validates required env vars at import time by throwing synchronously — any missing variable crashes the process before Express middleware, logger, 18 days ago

help wanted Maybe Rewarded GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

reputation in ServiceEntry is i32 with no floor — a service receiving enough negative votes reaches i32::MIN (-2,147,483,648), wrapping to undefined behavior in Soroban's arithmetic if any operation is applied to it 19 days ago

help wanted Maybe Rewarded GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add unit tests for the agents contract's daily spend reset logic 19 days ago

enhancement help wanted good first issue GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add deactivate_service route and contract authorization checks The contract exposes deactivate_service and checks provider == entry.provider, but no backend route calls it, so providers cannot deactivate listings through the API. 20 days ago

help wanted GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add retry with backoff for getTransaction polling in simulateAndSubmit simulateAndSubmit polls getTransaction 20 times with a fixed 1.5s delay and throws if not confirmed, which can fail prematurely under network congestion. 21 days ago

help wanted GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add name/description length validation to register_service register_service accepts arbitrary-length String for name and description with no bounds, allowing unbounded persistent storage growth per entry. 22 days ago

help wanted GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Fix hardcoded Brave Search API header against Serper endpoint in /demo/search 22 days ago

help wanted GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add input validation and length limits for search query q in /demo/search GET /demo/search checks only that q exists but does not bound its length or sanitize it before sending to the upstream search API, risking abuse or oversized requests. 22 days ago

good first issue GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Replace parseFloat/Math.round stroop conversion with a shared precision-safe helper Stroop conversion (amount * 10_000_000) is duplicated across agents.js, services.js, and demo.js using floating-point math, risking rounding drift on larger amounts. 22 days ago

good first issue Maybe Rewarded GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Cache listServices results to reduce redundant Soroban RPC calls GET /api/stats and GET /api/services both call listServices() independently, doubling RPC simulation calls on every poll cycle from the frontend's 30s interval. 22 days ago

help wanted good first issue

Stellar-Ecosystem/lodestar

3

JavaScript

Add request validation for price_usdc format in service registration registerServiceOnChain accepts priceUsdc as a raw string with no format check, so malformed prices can be written on-chain permanently. 22 days ago

help wanted

Stellar-Ecosystem/lodestar

3

JavaScript

Title: Validate category against allowed values in POST /api/reputation/:id and registry routes 22 days ago

help wanted Maybe Rewarded GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

simulateAndSubmit silently treats XDR parse errors on getTransaction as SUCCESS — a class of on-chain failures is permanently invisible to the backend 22 days ago

help wanted Maybe Rewarded GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add transaction status feedback during service registration 22 days ago

good first issue GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

flag_agent authorization is semantically backwards — it requires auth from caller who must equal agent.owner, meaning only the agent's owner can flag their own agent, making the flag function useless as an admin/enforcement tool 22 days ago

help wanted Maybe Rewarded GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

register_service calls provider.require_auth() but the backend always passes the server keypair as provider 23 days ago

help wanted Maybe Rewarded GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

agent.js always picks the highest-reputation service with no fallback — a single malicious high-reputation service can capture all agent traffic permanently 23 days ago

help wanted Maybe Rewarded GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add filter by score tier on the agents page AgentsPage supports sorting (score, payments, newest) but has no way to filter agents by scoreTier (new/building/established/trusted/elite), even though scoreTier is already defined in types.ts. 23 days ago

good first issue GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add agent retry/backoff for x402 payment failures in agent/agent.js buildHttpClient().fetch in agent.js performs a single 402 retry with no backoff or retry limit if the payment payload creation or settlement fails transiently. 24 days ago

good first issue GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add ChainBridge-style category icons consistently across ServiceCard and RegistryPage filters 24 days ago

enhancement good first issue GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

x402 payment middleware in services.js uses config.server.address as payTo — if the server keypair changes between deployments, all x402 payments go to an abandoned address with no migration path 24 days ago

help wanted Maybe Rewarded GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

MIN_SCORE enforcement in SpendingPolicy (min_score_to_earn) is stored but never enforced anywhere in either the contract or the backend 24 days ago

help wanted Maybe Rewarded GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

total_volume_stroops is stored as i128 on-chain but converted to String in mapAgent and then to Number in GET /api/agents/stats via BigInt(a.total_volume_stroops) — the BigInt→Number conversion in stats silently loses precision for large volumes 24 days ago

help wanted Maybe Rewarded GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

The x402 payment flow in agent.js has no verification that the paymentRequired response matches the service's registered price_usdc — agents can be tricked into paying more than the listed price 24 days ago

help wanted good first issue Maybe Rewarded GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add coordinate bounds validation for /demo/weather 25 days ago

good first issue Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Replace server-keypair-as-owner architecture — agents contract owner should be the agent's own wallet, not the backend server key 26 days ago

good first issue Maybe Rewarded GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Replace fixed for loop polling in /api/demo-run with exponential backoff 26 days ago

good first issue GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Persist activity feed beyond in-memory storage activityFeed in services.js is an in-memory array capped at 50 entries that resets on every server restart, losing payment history. 27 days ago

help wanted Maybe Rewarded GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add AGENT_ALLOWED_CATEGORIES enforcement check before calling discovered service endpoints 28 days ago

help wanted GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add register_service duplicate-endpoint check to prevent listing spam register_service allows any provider to register unlimited services with identical endpoint/name values, with no on-chain dedupe check. 28 days ago

good first issue GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add revalidate/SWR-based caching to replace fixed 30s polling intervals RegistryPage and AgentsPage both use setInterval(load, 30_000) for polling, causing redundant requests and re-renders even when no data has changed. 28 days ago

good first issue GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add unit tests for sortServices and sortAgents sort functions sortServices (registry page) and sortAgents (agents page) implement custom comparator logic with no test coverage, risking regressions in sort ordering. 28 days ago

good first issue GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add empty-state UI for registry page when no services match filters RegistryPage filters by category and sort but it's unclear whether an explicit empty state is shown when sorted is empty after filtering. 28 days ago

enhancement good first issue GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add client-side timeout error message for cold-start API calls apiFetch uses a 60s AbortSignal.timeout to handle Render cold starts, but if it fires, the resulting AbortError message is generic and unhelpful to users. 28 days ago

help wanted good first issue GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add error retry button to agents page on fetch failure AgentsPage sets error on fetch failure but the interval-based load() will silently keep failing every 30s with no manual retry option for the user. 28 days ago

good first issue GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add loading skeletons to registry and agents pages Both RegistryPage and AgentsPage use a generic loading boolean with presumably minimal visual feedback, giving a jarring experience on slow RPC responses. 28 days ago

good first issue GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add pagination to the agents leaderboard page AgentsPage fetches up to 100 agents via fetchAgents(100) and renders them all at once with no pagination, which will hurt performance and scannability as agent count grows. 28 days ago

help wanted GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add pagination controls to the registry page RegistryPage renders the full sorted services array with no pagination, which will become unwieldy as the registry grows beyond a handful of entries. 28 days ago

help wanted GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add rate limiting to public registry and agent write endpoints POST /api/reputation/:id, POST /api/agents/register, and POST /api/agents/:address/payment have no rate limiting, allowing spam submissions to the on-chain contracts. 28 days ago

help wanted Maybe Rewarded GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

: Add idempotency key support to POST /api/agents/:address/payment record_payment is called without any deduplication, so a retried HTTP request (e.g. on a timeout) can double-count a payment and skew an agent's score. 29 days ago

good first issue Maybe Rewarded GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add server-side filtering by minimum reputation for service discovery 29 days ago

help wanted good first issue Maybe Rewarded GrantFox OSS

Stellar-Ecosystem/lodestar

3

JavaScript

record_payment has no authorization — any backend caller can arbitrarily inflate or deflate any agent's score 29 days ago

help wanted Maybe Rewarded GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add pagination to list_agents in the agents contract 30 days ago

enhancement help wanted good first issue Maybe Rewarded GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Validate Stellar address format consistently across agent routes about 1 month ago

help wanted good first issue Maybe Rewarded GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add pagination to list_services in the registry contract about 1 month ago

help wanted Maybe Rewarded GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add GET /api/services/:id/history for reputation change history The contract only stores the current reputation integer with no historical record, so the frontend cannot show reputation trends over time. about 1 month ago

good first issue Maybe Rewarded GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add request body size limits to Express JSON middleware app.use(express.json()) uses Express defaults with no explicit size limit, allowing oversized payloads to /api/agents/register and other POST routes. about 1 month ago

good first issue Maybe Rewarded GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add unit tests for mapAgent and mapPolicy BigInt/Number conversions mapAgent and mapPolicy in contract.js perform Number() conversions on potentially large i128/u64 values without any test coverage, risking silent precision loss for large volumes. about 1 month ago

good first issue Maybe Rewarded GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add unit tests for the registry contract's insertion-sort-by-reputation logic list_services implements a manual insertion sort by reputation descending in Rust with no contract test coverage for edge cases like ties or single-element lists. about 1 month ago

enhancement good first issue GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add min_score filter to the agent eligibility check on the agent detail page about 1 month ago

enhancement good first issue GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add health check for Soroban RPC connectivity to /healthz about 1 month ago

help wanted good first issue Maybe Rewarded

Stellar-Ecosystem/lodestar

3

JavaScript

Add structured error codes for Soroban simulation failures simulateAndSubmit and simulateRead throw generic Error objects with string messages, which routes can't map to specific HTTP error codes for clients. about 1 month ago

help wanted good first issue Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Title: Add text search filter to the registry page RegistryPage supports category and sort filters but has no free-text search input, making it hard to find a specific service by name. about 1 month ago

good first issue GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add flag_agent, deactivate_agent, and update_policy backend routes about 1 month ago

good first issue GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add wallet connection error handling for unsupported browsers connectWithWallet/initKit in wallet.ts assume window and wallet extensions are present but provide no user-facing error if no Stellar wallet is installed. about 1 month ago

enhancement help wanted good first issue GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add pagination to the activity feed component ActivityFeed.tsx likely renders all entries returned from GET /api/activity (capped at 50), with no "load more" or pagination as activity grows. about 1 month ago

good first issue GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add aria-live announcements for score updates in ScoreBadge ScoreBadge.tsx visually displays an agent's score, but screen reader users have no way to know when a score changes after a payment is recorded. about 1 month ago

good first issue GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add CORS allowlist support for multiple origins config.corsOrigin is a single string passed to cors({ origin: ... }), but production deployments often need multiple allowed origins (e.g. staging and prod frontends). about 1 month ago

help wanted Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Add pagination to GET /api/activity getActivityFeed() always returns the full capped array with no offset/limit, making it hard to integrate into a paginated UI as history grows. about 1 month ago

good first issue Maybe Rewarded GrantFox OSS Official Campaign

Stellar-Ecosystem/lodestar

3

JavaScript

Open Issues Need Help