Owner

MergeFi

3 indexed repositories · View on GitHub

backend

TypeScript · 2 stars
contracts
https://merge-fi-contracts.vercel.app/

Rust · 1 star
frontend

TypeScript · 1 star

Beginner friendly Everything

Open All

Issues somebody may already be working on are listed last. List everything by date

[Regression on closed #549/#328] main.ts still never calls app.enableShutdownHooks(), so SIGTERM skips all lifecycle cleanup
Open
- Is something wrong?
bug

Difficulty 3/5 1-2 days Newbie friendliness 58/100

MergeFi/backend#747 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
useBountyStatus.test.tsx tests a hook that no longer exists: it mocks fetchBounty, asserts data with enabled:false, and leaks the module-level poller registry between cases
Open
- Is something wrong?
bug testing

Difficulty 3/5 1-2 days Newbie friendliness 57/100

MergeFi/frontend#846 · 1 comment · Opened Nov 11, 2026

Maintainers usually reply within 1 day
ReputationProfileView is marked "use client" but has no client-side behaviour, forcing a static profile page into the client bundle
Open
- Is something wrong?
architecture performance

Difficulty 3/5 1-2 days Newbie friendliness 54/100

MergeFi/frontend#847 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
[Regression on closed #102 / #367] markMergedAndRelease marks a team bounty PAID when the team has no splits or no longer exists, skipping the payout entirely
Open
- Is something wrong?
bug

Difficulty 3/5 1-2 days Newbie friendliness 72/100

MergeFi/backend#746 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
GITHUB_OAUTH_CALLBACK_URL's hardcoded default points at the frontend's port 3000, not the backend's 4000, in two places
Open
- Is something wrong?
bug

Difficulty 2/5 1-3 hours Newbie friendliness 85/100

MergeFi/backend#745 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
StatCard's trend direction is carried only by colour and an aria-hidden arrow, so a -15% decline is announced as "15% vs last period"
Open
- Is something wrong?
accessibility bug

Difficulty 3/5 1-2 days Newbie friendliness 76/100

MergeFi/frontend#845 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
useBountyStatus accepts onStatusChange and fallbackBounty and then ignores both: the status-change callback is never invoked by any code path
Open
- Is something wrong?
bug

Difficulty 3/5 1-2 days Newbie friendliness 72/100

MergeFi/frontend#844 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
Bounty pages have a per-bounty Open Graph image but no twitter-image, so every Twitter/X share falls back to the generic site card
Open
- Is something wrong?
bug

Difficulty 3/5 1-2 days Newbie friendliness 68/100

MergeFi/frontend#843 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
[Regression on closed #293/#127] GithubStrategy still requests the `read:org` OAuth scope, which nothing in the codebase reads
Open
- Is something wrong?
bug security

Difficulty 2/5 1-3 hours Newbie friendliness 74/100

MergeFi/backend#744 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
[Regression on closed #580] FundEscrowDto.deadline again combines @IsDateString with @Type(() => Date), so every POST /escrow/fund that sends a deadline is rejected
Open
- Is something wrong?
bug

Difficulty 2/5 1-3 hours Newbie friendliness 82/100

MergeFi/backend#743 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
CreateTeamDto.createdById is taken from the request body, so a caller can create a team owned by someone else
Open
- Is something wrong?
bug security

Difficulty 3/5 1-2 days Newbie friendliness 75/100

MergeFi/backend#742 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
[Regression on closed #366] all six route-level loading.tsx skeletons have lost their ARIA live region — route changes are silent for screen readers
Open
- Is something wrong?
accessibility bug

Difficulty 3/5 1-2 days Newbie friendliness 72/100

MergeFi/frontend#842 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
Relative links in a bounty description all resolve to github.com/MergeFi/frontend, whatever repository the issue came from (incomplete fix for #651)
Open
- Is something wrong?
bug

Difficulty 2/5 1-3 hours Newbie friendliness 82/100

MergeFi/frontend#841 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
useWalletAction re-checks the network before a money action but never re-checks Freighter's active account, so funds can be sent to an address the user switched away from
Open
- Is something wrong?
bug security

Difficulty 3/5 1-2 days Newbie friendliness 72/100

MergeFi/frontend#840 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
GET /teams/:id has no auth guard and returns every member's user id and payout percentage to anonymous callers
Open
- Is something wrong?
bug security

Difficulty 4/5 3-5 days Newbie friendliness 45/100

MergeFi/backend#740 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
[Regression on closed #550] No `trust proxy` setting — behind a load balancer every client shares the proxy's IP for throttling, logs and handoff auditing
Open
- Is something wrong?
bug security

Difficulty 4/5 3-5 days Newbie friendliness 53/100

MergeFi/backend#741 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
/issues/create is ungated and indexable: any anonymous visitor gets the bounty-creation form, and crawlers index it with the homepage's title
Open
- Is something wrong?
bug security

Difficulty 4/5 3-5 days Newbie friendliness 48/100

MergeFi/frontend#839 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
[Regression on closed #463] TtlCache.invalidate() is still lost when it lands during an in-flight load, and the spec that covers it asserts nothing
Open
- Is something wrong?
bug testing

Difficulty 2/5 1-3 hours Newbie friendliness 85/100

MergeFi/backend#739 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
DataSourceNotice.tsx declares two different `DataSourceNotice` components with incompatible props in one file — duplicate export fails the build and the test suite tests the dead one
Open
- Is something wrong?
bug testing

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

MergeFi/frontend#838 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
EscrowService.refund and poolWithdraw bypass withLockedEscrow, so a concurrent refund and release both pass the LOCKED check and both move funds
Open
- Is something wrong?
bug

Difficulty 4/5 3-5 days Newbie friendliness 58/100

MergeFi/backend#738 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
[Regression on closed #553] Still no logout endpoint — the httpOnly `access_token` cookie cannot be cleared by any client
Open
- Is something wrong?
bug security

Difficulty 3/5 1-2 days Newbie friendliness 59/100

MergeFi/backend#737 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
[Regression on closed #570 / #318] Still no initial-schema migration — migration:run on a fresh database fails on the first ALTER TABLE
Open
- Is something wrong?
bug

Difficulty 4/5 3-5 days Newbie friendliness 45/100

MergeFi/backend#736 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
apiRequest assumes every non-204 success has a JSON body, so a successful wallet link is reported to the user as a failed link
Open
- Is something wrong?
bug

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

MergeFi/frontend#837 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
Maintainer dashboard's "Connect repository" empty-state CTA links to /settings, a route that does not exist — it 404s
Open
- Is something wrong?
bug

Difficulty 2/5 1-3 hours Newbie friendliness 84/100

MergeFi/frontend#836 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
[Regression on closed #548] Webhook deliveries with an invalid signature are still persisted with their full payload before the signature is checked
Open
- Is something wrong?
bug security

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

MergeFi/backend#735 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
[Regression on closed #498] Three migrations share the timestamp 1785200000000 again, so their run order depends on filename sorting
Open
- Is something wrong?
bug

Difficulty 3/5 1-2 days Newbie friendliness 65/100

MergeFi/backend#734 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
Duplicate JSX attributes in BountyCard and Avatar break the build and silently revert the #654 and #653 accessibility fixes
Open
- Is something wrong?
accessibility bug

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

MergeFi/frontend#835 · 1 comment · Opened Nov 11, 2026

Maintainers usually reply within 1 day
[Regression on closed #522] EscrowService.poolWithdraw still passes the pool key as a bare bigint, and the spec now pins that wrong encoding
Open
- Is something wrong?
bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

MergeFi/backend#733 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
Switching accounts in another tab leaves the previous account's wallet address connected and usable (the logout-clear effect only fires on user === null)
Open
- Is something wrong?
bug security

Difficulty 3/5 1-2 days Newbie friendliness 73/100

MergeFi/frontend#834 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
RootLayout's CSP nonce is always undefined: middleware sets x-nonce on the response, but headers() reads the request — the theme/locale init scripts are blocked
Open
- Is something wrong?
bug security

Difficulty 4/5 3-5 days Newbie friendliness 48/100

MergeFi/frontend#833 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
[Regression on closed #585] ReputationService.history orders computedAt ASC again, so the default page returns the oldest 50 snapshots
Open
- Is something wrong?
bug

Difficulty 2/5 1-3 hours Newbie friendliness 79/100

MergeFi/backend#732 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
The production boot guard for GITHUB_CLIENT_ID/GITHUB_CLIENT_SECRET is dead code — hardcoded `mock_*` fallbacks make both values permanently non-empty
Open
- Is something wrong?
bug security

Difficulty 3/5 1-2 days Newbie friendliness 55/100

MergeFi/backend#731 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
Navbar declares `const roles` twice in the same scope — the component cannot compile, and the Dashboards trigger renders its label, chevron and role badge twice
Open
- Is something wrong?
accessibility bug

Difficulty 2/5 1-3 hours Newbie friendliness 85/100

MergeFi/frontend#832 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
[Regression on closed #541] TeamsService.create and updateSplits are back to one SELECT per member to check existence
Open
- Is something wrong?
bug performance

Difficulty 3/5 1-2 days Newbie friendliness 75/100

MergeFi/backend#730 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
AuthContext.refresh() has no staleness guard: an in-flight resolve can resurrect a signed-out session or restore the previous account after a cross-tab switch
Open
- Is something wrong?
bug security

Difficulty 3/5 1-2 days Newbie friendliness 76/100

MergeFi/frontend#830 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
Maintainer repository sync always fails: GitHubSyncPanel POSTs to /api/github/sync/:owner/:repo, which this app does not serve
Open
- Is something wrong?
bug

Difficulty 4/5 3-5 days Newbie friendliness 45/100

MergeFi/frontend#831 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
MilestonesService.close swallows a failed escrow refund in an empty catch and still marks the milestone CLOSED, stranding the funds
Open
- Is something wrong?
bug

Difficulty 3/5 1-2 days Newbie friendliness 72/100

MergeFi/backend#729 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
[Regression on closed #536 / #375] TeamsService.updateSplits still deletes and re-inserts splits outside a transaction, so a failed insert leaves the team with zero splits
Open
- Is something wrong?
bug

Difficulty 4/5 3-5 days Newbie friendliness 48/100

MergeFi/backend#728 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
[Regression on closed #559] syncRepository still writes lastSyncedAt=now before syncIssues uses it as `since`, so every sync imports zero issues
Open
- Is something wrong?
bug

Difficulty 3/5 1-2 days Newbie friendliness 67/100

MergeFi/backend#727 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
Homepage fails to compile: the hero's contributor count references an undefined `platformStats`, and would show the mock value even once it resolves
Open
- Is something wrong?
bug

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

MergeFi/frontend#829 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
bountyPoller calls fetchBounty(id) with no fallback argument: wrong arity, and a backend outage silently blanks the bounty instead of surfacing an error
Open
- Is something wrong?
bug

Difficulty 3/5 1-2 days Newbie friendliness 65/100

MergeFi/frontend#828 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
[Regression on closed #537] PATCH /teams/:id/splits still has no ownership check — any SPONSOR or MAINTAINER can rewrite any team's payout percentages
Open
- Is something wrong?
bug security

Difficulty 4/5 3-5 days Newbie friendliness 55/100

MergeFi/backend#726 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
MilestonesService.close ignores its userId argument — any SPONSOR or MAINTAINER can close and refund another sponsor's funded milestone
Open
- Is something wrong?
bug security

Difficulty 3/5 1-2 days Newbie friendliness 75/100

MergeFi/backend#725 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
GitHub OAuth login can never succeed: GithubStrategy.validate emits `username` but UsersService.upsertFromGithub reads `input.login`
Open
- Is something wrong?
bug security

Difficulty 3/5 1-2 days Newbie friendliness 58/100

MergeFi/backend#724 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
milestones/page.tsx does not compile: an unresolved merge left two milestone-render blocks, a stray `) : (`, and an unimported formatPercent
Open
- Is something wrong?
architecture bug

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

MergeFi/frontend#827 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
bountyPoller never restarts a stopped poller: after the last subscriber leaves, revisiting a bounty shows a frozen snapshot and never polls again
Open
- Is something wrong?
bug

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

MergeFi/frontend#826 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
ReputationService.getLatest and computeAndSave call each other with no base case — a contributor with no snapshot sends the request into an infinite DB loop
Open
- Is something wrong?
bug performance

Difficulty 3/5 1-2 days Newbie friendliness 78/100

MergeFi/backend#723 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
POST /milestones/:id/close refunds the whole escrow on a partially-distributed milestone, double-counting budget already paid to contributors
Open
- Is something wrong?
bug

Difficulty 4/5 3-5 days Newbie friendliness 55/100

MergeFi/backend#722 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
GitHub sign-in can still never complete: CallbackClient POSTs the handoff code to /api/auth/handoff, a route that does not exist in this app
Open
- Is something wrong?
bug security

Difficulty 3/5 1-2 days Newbie friendliness 70/100

MergeFi/frontend#825 · Opened Nov 11, 2026

Maintainers usually reply within 1 day
src/lib/api.ts does not parse: fetchIndexableReputationHandles has two function signatures stacked on top of each other
Open
- Is something wrong?
architecture bug

Difficulty 1/5 Under an hour Newbie friendliness 95/100

MergeFi/frontend#824 · Opened Nov 11, 2026

Maintainers usually reply within 1 day

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

MergeFi

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Showing the newest 100

Get new issues in your inbox