PhasoraLabs

Issues somebody may already be working on are listed last. List everything by date

• fix: multisig.ts buildUnsignedTransaction expects a bare Operation XDR but every producer emits a full TransactionEnvelope

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 3/5 1-2 days Newbie friendliness 65/100

  PhasoraLabs/StellarGrantProtocol#1303 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• security: wallet adapters never verify the signed XDR matches the transaction sent for signing

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript security

  Difficulty 3/5 1-2 days Newbie friendliness 78/100

  PhasoraLabs/StellarGrantProtocol#1302 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: useContractEvents.ts fabricates/mislabels the event type for every detected change

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 3/5 1-2 days Newbie friendliness 70/100

  PhasoraLabs/StellarGrantProtocol#1301 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: CSP connect-src blocks every IPFS gateway fetch, breaking the proof viewer entirely

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 2/5 1-3 hours Newbie friendliness 85/100

  PhasoraLabs/StellarGrantProtocol#1300 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: MilestoneSubmitForm re-prompts a second wallet signature after the user rejects the first

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 3/5 Half a day Newbie friendliness 76/100

  PhasoraLabs/StellarGrantProtocol#1299 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• security: useIPFS.ts bundles a Pinata secret JWT into the client bundle via NEXT_PUBLIC_

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript security

  Difficulty 4/5 1-2 days Newbie friendliness 74/100

  PhasoraLabs/StellarGrantProtocol#1298 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: GrantForm.tsx is an empty stub exported from components/grants/index.ts

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 2/5 1-3 hours Newbie friendliness 86/100

  PhasoraLabs/StellarGrantProtocol#1297 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: duplicate filter values make two status pills on the grants page behave as one

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 2/5 1-3 hours Newbie friendliness 82/100

  PhasoraLabs/StellarGrantProtocol#1296 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: leaderboard search only filters the currently loaded page, not the full leaderboard

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 2/5 1-3 hours Newbie friendliness 82/100

  PhasoraLabs/StellarGrantProtocol#1295 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: global-error.tsx shows raw, untruncated error messages, inconsistent with error.tsx

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 2/5 1-3 hours Newbie friendliness 82/100

  PhasoraLabs/StellarGrantProtocol#1294 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: lib/grants/api.ts is missing encodeURIComponent on grant-id path segments

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 1/5 1-3 hours Newbie friendliness 90/100

  PhasoraLabs/StellarGrantProtocol#1293 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: convertTokenDecimals truncates silently with no rounding mode when reducing precision

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 3/5 1-2 days Newbie friendliness 65/100

  PhasoraLabs/StellarGrantProtocol#1292 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: formatTokenAmount loses precision for amounts above Number.MAX_SAFE_INTEGER

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 2/5 1-3 hours Newbie friendliness 84/100

  PhasoraLabs/StellarGrantProtocol#1291 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: GrantStatusBadge has no mapping for the Disputed status used elsewhere in the app

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 1/5 1-3 hours Newbie friendliness 82/100

  PhasoraLabs/StellarGrantProtocol#1290 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: LiveStatsBar.tsx shows fabricated stats indistinguishable from real data when the API fails

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 2/5 1-3 hours Newbie friendliness 84/100

  PhasoraLabs/StellarGrantProtocol#1289 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: FundingProgress.tsx loses precision and shows a falsely precise percentage

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 2/5 1-3 hours Newbie friendliness 83/100

  PhasoraLabs/StellarGrantProtocol#1288 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: mock-server fixtures use a completely different data model than web/types/index.ts, crashing useGrants.ts

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 3/5 1-2 days Newbie friendliness 78/100

  PhasoraLabs/StellarGrantProtocol#1287 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: TokenAmountInput.tsx uses a hardcoded, token-agnostic USD price

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  PhasoraLabs/StellarGrantProtocol#1286 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: client-side Stellar address validation never checks the StrKey checksum

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 2/5 1-3 hours Newbie friendliness 85/100

  PhasoraLabs/StellarGrantProtocol#1285 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: wallet adapters collapse locked/rejected/other failures into the same generic error message

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 3/5 1-2 days Newbie friendliness 68/100

  PhasoraLabs/StellarGrantProtocol#1284 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: AlbedoAdapter.getPublicKey() caches the public key for the adapter's lifetime with no invalidation

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 3/5 1-2 days Newbie friendliness 69/100

  PhasoraLabs/StellarGrantProtocol#1283 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: MultiSigTracker treats raw signature count as equivalent to Stellar's weighted signer threshold

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 4/5 3-5 days Newbie friendliness 58/100

  PhasoraLabs/StellarGrantProtocol#1282 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: parseSorobanError.ts uses an unanchored regex that can misparse contract error codes

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 2/5 1-3 hours Newbie friendliness 79/100

  PhasoraLabs/StellarGrantProtocol#1281 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: the dedicated SSE events route is fully built but dead — its only data source is a stub returning []

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 4/5 1-2 days Newbie friendliness 54/100

  PhasoraLabs/StellarGrantProtocol#1280 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: app/review/page.tsx batch vote execution always reports success without calling the contract

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 4/5 1-2 days Newbie friendliness 52/100

  PhasoraLabs/StellarGrantProtocol#1279 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: app/review/page.tsx hardcodes "of 5 approved" regardless of the grant's actual reviewer count

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 1/5 1-3 hours Newbie friendliness 90/100

  PhasoraLabs/StellarGrantProtocol#1278 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: CSP frame-src 'none' blocks ProofViewer's own PDF/YouTube iframe embeds

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 2/5 1-3 hours Newbie friendliness 82/100

  PhasoraLabs/StellarGrantProtocol#1277 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: useMilestone.ts crashes on every load by calling .includes() on a field the API doesn't return

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 2/5 1-3 hours Newbie friendliness 86/100

  PhasoraLabs/StellarGrantProtocol#1276 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: mock-server/index.ts hardcodes port 4001, ignoring process.env.PORT and contradicting CONTRIBUTING.md

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 1/5 1-3 hours Newbie friendliness 90/100

  PhasoraLabs/StellarGrantProtocol#1275 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: useGrant.ts calls notFound() inside a TanStack Query queryFn, which never triggers Next's 404 UI

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  PhasoraLabs/StellarGrantProtocol#1274 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: env-validation.ts never flags secret-shaped NEXT_PUBLIC_ variables

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript security

  Difficulty 2/5 1-3 hours Newbie friendliness 86/100

  PhasoraLabs/StellarGrantProtocol#1273 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: useSocket.tsx has untracked setTimeout races on rapid wallet-address changes

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 2/5 1-3 hours Newbie friendliness 84/100

  PhasoraLabs/StellarGrantProtocol#1272 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: useGrantHistory.ts has the same unguarded race-condition class as useFunders.ts

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 2/5 1-3 hours Newbie friendliness 80/100

  PhasoraLabs/StellarGrantProtocol#1271 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: useFunders.ts has no cancellation guard — a race condition on rapid grantId changes

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 2/5 1-3 hours Newbie friendliness 82/100

  PhasoraLabs/StellarGrantProtocol#1270 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• security: next.config.ts CSP allows both unsafe-inline and unsafe-eval in script-src

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript security

  Difficulty 4/5 3-5 days Newbie friendliness 58/100

  PhasoraLabs/StellarGrantProtocol#1269 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• security: logger.ts's sensitive-key masking is shallow and exact-match only

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript security

  Difficulty 3/5 1-3 hours Newbie friendliness 78/100

  PhasoraLabs/StellarGrantProtocol#1268 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: a single hardcoded dummy account is used for every read-only contract simulation

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 3/5 1-2 days Newbie friendliness 65/100

  PhasoraLabs/StellarGrantProtocol#1267 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: ContractClient's rpcUrl constructor option is accepted but never used

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 4/5 1-2 days Newbie friendliness 65/100

  PhasoraLabs/StellarGrantProtocol#1266 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: Step4ReviewSubmit.tsx sends a uniform milestone amount on-chain, discarding per-milestone budgets

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 4/5 3-5 days Newbie friendliness 57/100

  PhasoraLabs/StellarGrantProtocol#1265 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: transaction history always reports unknown_contract_call — the function-name lookup table is dead code

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 3/5 1-2 days Newbie friendliness 67/100

  PhasoraLabs/StellarGrantProtocol#1264 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: grant detail payload hardcodes the funding token to native, discarding the actual token

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  PhasoraLabs/StellarGrantProtocol#1263 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: client-side funding-cap validation never re-fetches before submit, enabling a stale-data race

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 2/5 1-3 hours Newbie friendliness 82/100

  PhasoraLabs/StellarGrantProtocol#1262 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: two different pages show two different required-approval counts for the same grant

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 4/5 1-2 days Newbie friendliness 58/100

  PhasoraLabs/StellarGrantProtocol#1261 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• security: several client components bypass the API proxy's internal-secret design and hit the backend directly

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript security

  Difficulty 3/5 1-2 days Newbie friendliness 65/100

  PhasoraLabs/StellarGrantProtocol#1260 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: the real DOMPurify sanitization path has zero test coverage — all tests use a fake sanitizer

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  PhasoraLabs/StellarGrantProtocol#1259 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• security: reverse-tabnabbing via user-supplied links — sanitize.ts allows target=_blank without forcing rel=noopener

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript security

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  PhasoraLabs/StellarGrantProtocol#1258 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: no detection of a wallet account switch while connected; stale address persists

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 3/5 1-2 days Newbie friendliness 72/100

  PhasoraLabs/StellarGrantProtocol#1257 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: MilestoneTimeline.tsx hardcodes the vote progress bar to 0 approved regardless of actual votes

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 2/5 1-3 hours Newbie friendliness 80/100

  PhasoraLabs/StellarGrantProtocol#1256 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: DisputePanel/DisputeHistory mislabel currency and apply the wrong decimals for non-native tokens

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 2/5 1-3 hours Newbie friendliness 82/100

  PhasoraLabs/StellarGrantProtocol#1255 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day

• fix: useFundGrant.ts never submits a real transaction; fabricates a success UI

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug javascript

  Difficulty 4/5 1-2 days Newbie friendliness 35/100

  PhasoraLabs/StellarGrantProtocol#1254 · Opened Oct 12, 2026

  Maintainers usually reply within 1 day