Eyevinn/intercom-manager

Open Source Intercom Solution

Stars: 90
Forks: 19
Open beginner issues: 8
Indexed issues: 46
Avg merge: 6d 6m
Merged PRs (30d): 53

Dominant language: TypeScript
License: MIT
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 20, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

release-notes workflow has generated nothing since v3.5.0 — the Anthropic model id it calls is retired and returns 404 Open

from-pm-agents

Difficulty 1/5 Under an hour Newbie friendliness 85/100

Eyevinn/intercom-manager#366 · Opened Sep 23, 2026
feat: add video support for intercom lines (WHIP/WHEP, H264) Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

Eyevinn/intercom-manager#341 · 1 comment · Opened Sep 17, 2026
Establish PR review cadence and SLA expectations Open

Medium

Difficulty 5/5 Over a week Newbie friendliness 35/100

Eyevinn/intercom-manager#320 · Opened Sep 15, 2026
Create PR review triage workflow or skill Open

Medium

Difficulty 4/5 3-5 days Newbie friendliness 48/100

Eyevinn/intercom-manager#319 · Opened Sep 15, 2026
Configure CODEOWNERS and/or required reviewers for intercom-manager and intercom-frontend Open

High

Difficulty 4/5 3-5 days Newbie friendliness 48/100

Eyevinn/intercom-manager#318 · Opened Sep 15, 2026
OSC_ENVIRONMENT derived from OSC_HOSTNAME breaks reauth on Elastx (prod-se) instances Open

Urgent

Difficulty 4/5 3-5 days Newbie friendliness 45/100

Eyevinn/intercom-manager#317 · Opened Sep 15, 2026
Share links: add a non-temporary (reusable) link option Open

enhancement High

Difficulty 5/5 Over a week Newbie friendliness 45/100

Eyevinn/intercom-manager#316 · Opened Sep 15, 2026
Backend: add force-disconnect endpoint and data-channel disconnect signal Open

Low

Difficulty 4/5 3-5 days Newbie friendliness 50/100

Eyevinn/intercom-manager#294 · Opened Aug 26, 2026
Security: Add `permissions:` blocks to all GitHub Actions workflows to restrict GITHUB_TOKEN scope Open

Medium security

Eyevinn/intercom-manager#286 · 2 comments · 1 assignee · Opened Aug 10, 2026
Security: Regression — dotenv.config() calls still present in route modules despite #147 being closed Open

Medium security

Difficulty 3/5 1-2 days Newbie friendliness 72/100

Eyevinn/intercom-manager#274 · Opened Jul 27, 2026
Security: Replace long-lived AWS IAM static credentials in CI with OIDC-based short-lived tokens Open

Medium security

Eyevinn/intercom-manager#266 · 2 comments · 1 assignee · Opened Jul 13, 2026
Security: No rate limiting on POST /session, POST /production, GET /reauth, POST /share endpoints Open

bug Medium

Difficulty 2/5 1-3 hours Newbie friendliness 74/100

Eyevinn/intercom-manager#256 · Opened Jun 29, 2026
Security: TURN server credentials transmitted in plaintext HTTP Link response header Open

Medium

Difficulty 4/5 3-5 days Newbie friendliness 48/100

Eyevinn/intercom-manager#251 · Opened Jun 22, 2026
Security: ipAddress field in ingest model has no format validation — SSRF risk when device communication is implemented Open

Low

Difficulty 4/5 3-5 days Newbie friendliness 52/100

Eyevinn/intercom-manager#250 · Opened Jun 22, 2026
Security: ajv ReDoS vulnerability via $data option — update to >=6.14.0 / >=8.18.0 Open

bug dependencies Low

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

Eyevinn/intercom-manager#246 · Opened Jun 15, 2026
Security: Update uuid to v11+ to fix buffer overflow in v3/v5/v6 encode paths Open

bug dependencies Low

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

Eyevinn/intercom-manager#245 · Opened Jun 8, 2026
Security: Update @fastify/static to >=9.2.0 to patch path traversal vulnerabilities Open

bug dependencies Medium

Difficulty 1/5 Under an hour Newbie friendliness 88/100

Eyevinn/intercom-manager#244 · Opened Jun 8, 2026
Security: Add maxLength constraints to unbounded TypeBox String schemas Open

Medium

Difficulty 4/5 3-5 days Newbie friendliness 48/100

Eyevinn/intercom-manager#239 · Opened May 4, 2026
Security: Log authentication failures on WHIP/WHEP endpoints to enable abuse detection Open

Medium

Difficulty 3/5 1-2 days Newbie friendliness 68/100

Eyevinn/intercom-manager#238 · Opened May 4, 2026
Security: Content-Security-Policy is explicitly disabled in Helmet config Open

Low

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

Eyevinn/intercom-manager#237 · Opened May 4, 2026
Security: Pin GitHub Actions to commit SHAs to prevent supply chain attacks Open

Medium

Difficulty 3/5 1-2 days Newbie friendliness 65/100

Eyevinn/intercom-manager#235 · Opened May 4, 2026
Security: Gate Swagger/OpenAPI docs endpoint (/api/docs) in production Open

Medium

Difficulty 3/5 1-2 days Newbie friendliness 48/100

Eyevinn/intercom-manager#233 · Opened Apr 27, 2026
Security: High-severity npm vulnerabilities in transitive deps — flatted, lodash, minimatch, picomatch, glob Open

Medium

Difficulty 4/5 3-5 days Newbie friendliness 52/100

Eyevinn/intercom-manager#231 · Opened Apr 27, 2026
Do not return 405 error when no OSC token is set Open

Low

Difficulty 3/5 1-2 days Newbie friendliness 35/100

Eyevinn/intercom-manager#228 · 1 comment · Opened Apr 20, 2026
Security: Run npm audit fix to address 7 high + 8 moderate dependency vulnerabilities Open

Medium

Difficulty 3/5 1-2 days Newbie friendliness 65/100

Eyevinn/intercom-manager#227 · Opened Apr 20, 2026
Security: Strengthen OSC_ACCESS_TOKEN validation in /reauth and /share endpoints Open

Low

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

Eyevinn/intercom-manager#226 · Opened Apr 20, 2026
Security: Require DB_CONNECTION_STRING env var — remove hardcoded localhost MongoDB fallback Open

Low

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

Eyevinn/intercom-manager#225 · Opened Apr 20, 2026
Security: Add CSRF protection to state-mutating API endpoints Open

Low

Difficulty 4/5 3-5 days Newbie friendliness 48/100

Eyevinn/intercom-manager#224 · Opened Apr 20, 2026
Security: WHIP/WHEP authentication bypassed when WHIP_AUTH_KEY env var is not set Open

Urgent

Difficulty 4/5 3-5 days Newbie friendliness 48/100

Eyevinn/intercom-manager#223 · Opened Apr 20, 2026
Security: Add authentication to production/session/preset management API endpoints Open

High

Difficulty 4/5 3-5 days Newbie friendliness 45/100

Eyevinn/intercom-manager#222 · Opened Apr 20, 2026
Manager: Save Ingest-IO to DB Open

I/O Low

Eyevinn/intercom-manager#133 · 1 assignee · Opened Jun 18, 2025
Manager: /devices endpoint Open

Low

Eyevinn/intercom-manager#132 · 1 assignee · Opened Jun 18, 2025
Manager: Ingests Open

I/O Low

Eyevinn/intercom-manager#124 · 11 comments · 3 assignees · Opened Jun 3, 2025
Manager: Roles Open

Low role management

Eyevinn/intercom-manager#123 · 1 assignee · Opened Jun 3, 2025

A short digest of beginner-friendly GitHub issues.