ourdao-backend good first issues (TypeScript)

docker-compose publishes unauthenticated Redis and default-credential Postgres on all host interfaces 1 day ago

good first issue difficulty: easy security infrastructure task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

verify-backup workflow interpolates workflow_dispatch inputs directly into shell commands 5 days ago

good first issue security Stellar Wave github_actions

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

Scheduled Soroban smoke workflow fails daily: `npm run test:smoke` is not defined in package.json 5 days ago

bug good first issue Stellar Wave github_actions

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

Malformed nonces yield NaN and skip the cheap pre-check; the catch around it is dead code 5 days ago

bug good first issue difficulty: easy Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

GET /api/notifications lacks ?unread= or ?read= filter despite notifications_address_idx (address, read) index 5 days ago

enhancement good first issue Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

Missing single-entity endpoints GET /api/proposals/loan/:id and GET /api/proposals/treasury/:id 5 days ago

enhancement good first issue Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

GET /api/proposals/loan and GET /api/proposals/treasury lack status and borrower filtering 5 days ago

enhancement good first issue Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

authStats.challengesIssued is never incremented when auth challenges are generated 5 days ago

bug good first issue Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

GET /api/loans ignores ?before= pagination cursor when setting Cache-Control header 5 days ago

bug good first issue Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

GET /api/documents returns misleading error "proposal_id query param is required" on invalid input 5 days ago

bug good first issue Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

GET /api/stats serves stale notificationFailures count when responding from in-memory cache 6 days ago

bug good first issue Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

GET /api/loans does not support status filtering despite loans_status_idx index existing 6 days ago

enhancement good first issue Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

scripts/verify-backup.sh unnecessarily requires host psql and leaks decompressed files in /tmp 6 days ago

bug good first issue Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

GET /api/proposals/loan and GET /api/proposals/treasury lack pagination cursor support 6 days ago

enhancement good first issue Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

Implementation-summary files are committed at the repo root again (regression of #185) 6 days ago

documentation good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

README says "145 tests across 18 files" but the repo has 70 test files 6 days ago

documentation good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

CI "npm audit --audit-level=high" fails on main (source-map-js GHSA-68fv-2mgg-jv7q) 6 days ago

good first issue difficulty: easy security task Stellar Wave dependencies

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

GitHub Actions workflows declare no permissions, so jobs run with the default token scope 7 days ago

good first issue difficulty: easy security infrastructure task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

/api/admin/failed-events has no cursor, so old failures become unreachable 28 days ago

bug good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

/api/documents caches historical pages as immutable for a year 28 days ago

bug good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

Server request timeouts and body limits are all inherited defaults 28 days ago

good first issue difficulty: easy security task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

The events storage benchmark is never run by CI 28 days ago

good first issue difficulty: easy infrastructure task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

withLoanDerived calls BigInt() unguarded on three database values 28 days ago

bug good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

CI has no concurrency group and no job timeouts 28 days ago

good first issue difficulty: easy infrastructure task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

.env.example does not cover the stream, quarantine and nonce-store settings 28 days ago

documentation good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

Nonce TTL and capacity are hard-coded twice with different values 29 days ago

enhancement good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

Nonce store shutdown() exists but is never called 29 days ago

bug good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

No CHANGELOG, and /version reports a version that never changes 30 days ago

documentation good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

No CODEOWNERS, so migrations and auth can merge unreviewed about 1 month ago

good first issue difficulty: easy infrastructure task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

CONTRIBUTING never states the migration numbering rule about 1 month ago

documentation good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

An unguarded JSON.parse in the notification handler can crash the process about 1 month ago

bug good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

`/ready` hard-codes a 5-second ledger close time with no constant or comment about 1 month ago

enhancement good first issue difficulty: easy Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

Each SSE client holds a pool connection — ten streams deadlock the whole API about 1 month ago

bug help wanted difficulty: hard security task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

/api/stream is registered outside the /api plugin with a hard-coded prefix about 1 month ago

bug good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

/version does a synchronous file read on every unthrottled request about 1 month ago

bug good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

The same authorization failure returns 401 on one route and 403 on another about 1 month ago

bug good first issue difficulty: easy Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

Member addresses are debug-logged on every challenge request about 1 month ago

good first issue difficulty: easy security Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

CI's `npm audit` step can never fail about 1 month ago

bug good first issue difficulty: easy security infrastructure Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

`MAX_ADDRESS_LENGTH` blocks muxed addresses and is unreachable dead code about 1 month ago

bug good first issue difficulty: easy Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

verify-fix.md is a PR description sitting at the repo root about 1 month ago

documentation good first issue difficulty: easy task

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

reindexFromEventLog buffers the entire event log in memory about 2 months ago

enhancement help wanted difficulty: hard task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

The README's schema table omits three tables and the migration model about 2 months ago

documentation good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

Vote tallies are still an unweighted headcount — the contract publishes no weight about 2 months ago

bug help wanted difficulty: hard task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

CI tests a single Node version while engines claims a range about 2 months ago

good first issue difficulty: easy infrastructure task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

No dependency vulnerability scanning and no Dependabot about 2 months ago

good first issue difficulty: easy security infrastructure task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

LOG_LEVEL is read by the server but documented nowhere about 2 months ago

documentation good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

CONTRIBUTING doesn't tell a contributor how to add a schema migration about 2 months ago

documentation good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

SECURITY.md is missing though both docs point at private reporting about 2 months ago

documentation good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

"48 tests across 8 files" and the reorg known-gap entry are stale about 2 months ago

documentation good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

Status columns are bare TEXT with no CHECK constraint about 2 months ago

bug good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

Nothing warns when the contract emits an event symbol the catalog doesn't know about 2 months ago

enhancement good first issue difficulty: easy testing task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

The events log has no measured growth or storage strategy about 2 months ago

enhancement help wanted difficulty: hard task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

authenticateRequest never returns the address it authenticated about 2 months ago

good first issue difficulty: easy security task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

GET /api/loans/:id returns 500 for a non-numeric id about 2 months ago

bug good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

indexerStale compares seconds against a milliseconds threshold and never fires 2 months ago

bug good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

No single-proposal endpoint — proposals past the first 200 are unreachable 2 months ago

enhancement good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

No unread-notification count endpoint 2 months ago

enhancement good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

Expose the build commit at runtime via GET /version 2 months ago

enhancement good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

No live update channel — every client polls 2 months ago

enhancement help wanted difficulty: hard task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

One event whose handler throws wedges the indexer permanently 2 months ago

bug help wanted difficulty: hard task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

The signed challenge has no domain separation, expiry, or request binding 2 months ago

help wanted difficulty: hard security task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

The drain loop never checks the stop flag — SIGTERM can wait 30 seconds 2 months ago

bug good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

Notify borrowers before a loan comes due 2 months ago

enhancement help wanted difficulty: hard task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

No reorg detection, and no way to re-index from the raw event log 2 months ago

enhancement help wanted difficulty: hard task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

Dockerfile uses npm install, runs as root, and has no healthcheck 2 months ago

good first issue difficulty: easy infrastructure task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

Exited members keep stale stake, inflating /api/stats totalStaked 2 months ago

bug good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

Vote tallies ignore stake weight and can't match the contract 2 months ago

bug help wanted difficulty: hard task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

No schema migration versioning — column changes silently never apply 2 months ago

help wanted difficulty: hard infrastructure task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

docker-compose starts only Postgres, not the API or worker 2 months ago

good first issue difficulty: easy infrastructure task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

/members and /proposals/* truncate at 200 rows with no cursor 2 months ago

bug good first issue difficulty: easy task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

Notification write endpoints let anyone mark any address's notifications read 2 months ago

help wanted difficulty: hard security task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

CORS_ORIGIN defaults to * in code, not localhost as documented 2 months ago

bug good first issue difficulty: easy security task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

Two indexer workers on one database corrupt vote tallies — add leader election 2 months ago

help wanted difficulty: hard infrastructure task Stellar Wave

ourdao/ourdao-backend

0

OurDAO backend — off-chain indexer + read API for the Stellar/Soroban lending DAO.

TypeScript

#api#backend#dao#indexer#lending#soroban#stellar#typescript

ourdao/ourdao-backend

Open Issues Need Help