Owner

Arpan0995

1 indexed repository · View on GitHub

pqc-migration-readiness
Static auditor estimating post-quantum (PQC) migration effort for Java codebases: detects quantum-vulnerable JCA usage and structural fra...

Java · 5 stars

Beginner friendly Everything

Open All

Add a benchmarks module README linking to RESULTS.md Open

documentation good first issue

Difficulty 1/5 1-3 hours Newbie friendliness 92/100

Arpan0995/pqc-migration-readiness#45 · Opened Sep 14, 2026
Add a one-command benchmark runner (benchmarks/run-benchmarks.sh) Open

enhancement good first issue

Difficulty 2/5 1-3 hours Newbie friendliness 86/100

Arpan0995/pqc-migration-readiness#44 · Opened Sep 14, 2026
Add negative tests: DualSignature.verify must reject under-length signatures Open

good first issue

Difficulty 2/5 1-3 hours Newbie friendliness 90/100

Arpan0995/pqc-migration-readiness#43 · Opened Sep 14, 2026
SARIF: declare run-level columnKind so startColumn is unambiguous Open

enhancement good first issue

Difficulty 1/5 1-3 hours Newbie friendliness 92/100

Arpan0995/pqc-migration-readiness#42 · Opened Sep 14, 2026
Guard HybridKeyEstablishment.decapsulate against a truncated key-establishment wire Open

enhancement good first issue

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

Arpan0995/pqc-migration-readiness#40 · 1 comment · Opened Sep 14, 2026
Scan aborts on an unreadable directory in the tree instead of skipping it Open

bug good first issue

Difficulty 3/5 1-2 days Newbie friendliness 82/100

Arpan0995/pqc-migration-readiness#39 · Opened Sep 14, 2026
Add a --quiet / -q flag to silence informational stdout Open

enhancement good first issue

Difficulty 3/5 1-2 days Newbie friendliness 84/100

Arpan0995/pqc-migration-readiness#30 · Opened Sep 9, 2026
SARIF: emit stable partialFingerprints so code scanning tracks alerts across runs Open

enhancement good first issue

Difficulty 3/5 1-2 days Newbie friendliness 82/100

Arpan0995/pqc-migration-readiness#26 · Opened Sep 9, 2026
Add a hard-negative test: algorithm names in comments and strings must stay quiet Open

detection good first issue

Difficulty 1/5 1-3 hours Newbie friendliness 88/100

Arpan0995/pqc-migration-readiness#24 · Opened Sep 9, 2026
Add P-384 curve sentinel buffer widths (48, 97) to the F1 rule Open

detection good first issue

Difficulty 2/5 1-3 hours Newbie friendliness 90/100

Arpan0995/pqc-migration-readiness#23 · Opened Sep 9, 2026
Add missing java.security.interfaces marker key types to the F4 coupling list Open

detection good first issue

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

Arpan0995/pqc-migration-readiness#22 · Opened Sep 9, 2026
Gradle projects with per-module build-script names collapse into one (root) module Open

bug detection help wanted

Difficulty 4/5 3-5 days Newbie friendliness 65/100

Arpan0995/pqc-migration-readiness#20 · Opened Sep 9, 2026
Scanning 20k+ files exhausts the default heap: every CompilationUnit is retained for constant propagation Open

bug help wanted

Difficulty 4/5 3-5 days Newbie friendliness 68/100

Arpan0995/pqc-migration-readiness#19 · Opened Sep 9, 2026
One-command install paths: JBang, Homebrew, SDKMAN Open

enhancement help wanted

Difficulty 4/5 3-5 days Newbie friendliness 52/100

Arpan0995/pqc-migration-readiness#15 · Opened Sep 8, 2026
Docs: a walkthrough of how to read a readiness report Open

documentation good first issue

Difficulty 2/5 1-2 days Newbie friendliness 84/100

Arpan0995/pqc-migration-readiness#14 · Opened Sep 8, 2026
Regenerate or remove the stale docs/CODEBASE-SUMMARY.pdf Open

documentation good first issue

Difficulty 1/5 Under an hour Newbie friendliness 86/100

Arpan0995/pqc-migration-readiness#13 · Opened Sep 8, 2026
Hand-labelled ground-truth corpus for detector precision and recall Open

help wanted

Difficulty 4/5 3-5 days Newbie friendliness 72/100

Arpan0995/pqc-migration-readiness#12 · Opened Sep 8, 2026
Reproduce the JMH benchmark campaign on other hardware and JDK builds Open

help wanted

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

Arpan0995/pqc-migration-readiness#11 · Opened Sep 8, 2026
Re-run the Phase 1 case studies with the 1.4.0 auditor Open

good first issue help wanted

Difficulty 3/5 1-2 days Newbie friendliness 74/100

Arpan0995/pqc-migration-readiness#10 · Opened Sep 8, 2026
Per-site remediation guidance: say what each finding should become Open

enhancement help wanted

Difficulty 4/5 3-5 days Newbie friendliness 45/100

Arpan0995/pqc-migration-readiness#9 · Opened Sep 8, 2026
Self-contained HTML report Open

enhancement help wanted

Difficulty 4/5 3-5 days Newbie friendliness 68/100

Arpan0995/pqc-migration-readiness#8 · Opened Sep 8, 2026
Make the per-module hotspot cap configurable Open

enhancement good first issue

Difficulty 4/5 3-5 days Newbie friendliness 72/100

Arpan0995/pqc-migration-readiness#7 · Opened Sep 8, 2026
Add a --fail-on tier threshold so CI can gate on the result Open

enhancement good first issue

Difficulty 4/5 3-5 days Newbie friendliness 72/100

Arpan0995/pqc-migration-readiness#6 · Opened Sep 8, 2026
Model enums and registries so dynamically selected algorithms are found Open

detection enhancement help wanted

Difficulty 4/5 3-5 days Newbie friendliness 68/100

Arpan0995/pqc-migration-readiness#5 · Opened Sep 8, 2026
Detect the JOSE/JWT surface Open

detection enhancement help wanted

Difficulty 4/5 3-5 days Newbie friendliness 68/100

Arpan0995/pqc-migration-readiness#4 · Opened Sep 8, 2026
Detection rule F8: third-party API boundary Open

detection enhancement help wanted

Difficulty 4/5 3-5 days Newbie friendliness 55/100

Arpan0995/pqc-migration-readiness#3 · Opened Sep 8, 2026
Detection rule F2: fixed-width persistence and wire formats Open

detection enhancement help wanted

Difficulty 4/5 3-5 days Newbie friendliness 68/100

Arpan0995/pqc-migration-readiness#2 · Opened Sep 8, 2026
Move GPG signing into a release profile so a plain mvn install works Open

good first issue help wanted

Difficulty 3/5 1-2 days Newbie friendliness 78/100

Arpan0995/pqc-migration-readiness#1 · 2 comments · Opened Sep 8, 2026

Arpan0995

Get new issues in your inbox