SourceXXL

Issues somebody may already be working on are listed last. List everything by date

• Add descriptive `summary`/`description` and status codes to all undocumented API operations in the OpenAPI spec

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  accessibility documentation help wanted intermediate

  Difficulty 4/5 3-5 days Newbie friendliness 50/100

  SourceXXL/alian_structure-api#286 · 1 comment · Opened Oct 9, 2026

• Add `password` complexity validation and lockout policy to the registration and login paths

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  help wanted intermediate security

  Difficulty 4/5 3-5 days Newbie friendliness 38/100

  SourceXXL/alian_structure-api#279 · 1 comment · Opened Oct 9, 2026

• Remove or wire up unused dependencies: `hpp` and `express-mongo-sanitize` are declared but never imported

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  good first issue help wanted security tooling

  Difficulty 3/5 Half a day Newbie friendliness 62/100

  SourceXXL/alian_structure-api#276 · 1 comment · Opened Oct 9, 2026

• Add a `GET /api/v1/simulator/scenarios` endpoint to list available simulation scenarios

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement good first issue help wanted

  Difficulty 3/5 1-2 days Newbie friendliness 55/100

  SourceXXL/alian_structure-api#270 · 1 comment · Opened Oct 9, 2026

• Add a `GET /api/v1/agents` discovery endpoint with capability filtering

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement help wanted intermediate

  Difficulty 3/5 1-2 days Newbie friendliness 45/100

  SourceXXL/alian_structure-api#268 · Opened Oct 9, 2026

• Add rate-limit response headers to the CORS `exposedHeaders` so browser clients can read them

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  good first issue help wanted security

  Difficulty 2/5 1-3 hours Newbie friendliness 72/100

  SourceXXL/alian_structure-api#266 · Opened Oct 9, 2026

• Add focus management and `aria-labelledby` to `ReferralShareModal` (no focus trap, no restore)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  accessibility intermediate

  Difficulty 3/5 1-2 days Newbie friendliness 50/100

  SourceXXL/alian_structure-UI#80 · 1 comment · Opened Oct 9, 2026

• Remove `role=presentation` from interactive elements and add `aria-hidden` to decorative content

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  accessibility good first issue

  Difficulty 3/5 1-2 days Newbie friendliness 55/100

  SourceXXL/alian_structure-UI#79 · 1 comment · Opened Oct 9, 2026

• Fix WCAG AA contrast failures: `text-zinc-600` / `text-gray-500` on the dark cosmic background

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  accessibility intermediate

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  SourceXXL/alian_structure-UI#77 · 1 comment · Opened Oct 9, 2026

• Add keyboard semantics to clickable `Box`/`div` elements in ReferralShareModal, AgentCard and SimulationCard

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  accessibility intermediate

  Difficulty 3/5 1-2 days Newbie friendliness 65/100

  SourceXXL/alian_structure-UI#72 · 1 comment · Opened Oct 9, 2026

• Bound the Prometheus series count and point count in `GET /api/metrics/panel`

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  advanced performance

  Difficulty 4/5 3-5 days Newbie friendliness 45/100

  SourceXXL/alian_structure-UI#69 · 1 comment · Opened Oct 9, 2026

• Bound the WebSocket connection manager's internal maps and clean up on abnormal disconnect

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  intermediate performance

  Difficulty 4/5 3-5 days Newbie friendliness 24/100

  SourceXXL/alian_structure-api#249 · 1 comment · Opened Oct 9, 2026

• Add a performance budget regression check to CI using the existing Prometheus metrics

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  advanced help wanted performance tooling

  Difficulty 4/5 3-5 days Newbie friendliness 25/100

  SourceXXL/alian_structure-api#247 · 1 comment · Opened Oct 9, 2026

• Track memory growth from in-process registries and add bounded eviction with metrics

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  advanced help wanted performance

  Difficulty 4/5 3-5 days Newbie friendliness 22/100

  SourceXXL/alian_structure-api#246 · 1 comment · Opened Oct 9, 2026

• Fix Zustand v5 selector returning a new array on every store read (causes re-render on every state change)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  intermediate performance

  Difficulty 3/5 1-2 days Newbie friendliness 62/100

  SourceXXL/alian_structure-UI#67 · 1 comment · Opened Oct 9, 2026

• Replace `setTimeout` retry delays with cancellable timers so shutdown is not delayed

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  intermediate performance

  Difficulty 3/5 1-2 days Newbie friendliness 45/100

  SourceXXL/alian_structure-api#242 · Opened Oct 9, 2026

• Add `take` limits and indexes to the 20+ unbounded `.find()` repository calls

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  advanced help wanted performance

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  SourceXXL/alian_structure-api#239 · 1 comment · Opened Oct 9, 2026

• Add rate limiting to `POST /api/waitlist`, `/api/bug-reports` and `/api/security` (no limits exist anywhere)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  good first issue intermediate security

  Difficulty 3/5 1-2 days Newbie friendliness 58/100

  SourceXXL/alian_structure-UI#63 · 1 comment · Opened Oct 9, 2026

• Memoize repeated metric computations in `performance-analytics.service.ts` — same series fetched up to 6 times per request

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  help wanted intermediate performance

  Difficulty 4/5 3-5 days Newbie friendliness 28/100

  SourceXXL/alian_structure-api#236 · Opened Oct 9, 2026

• Stop leaking internal `error.message` to clients in 6 route handlers

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  intermediate security

  Difficulty 4/5 3-5 days Newbie friendliness 52/100

  SourceXXL/alian_structure-UI#62 · Opened Oct 9, 2026

• Add security headers and a Content Security Policy in `next.config.js` (there is no `headers()` function)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  intermediate security

  Difficulty 4/5 3-5 days Newbie friendliness 45/100

  SourceXXL/alian_structure-UI#61 · 1 comment · Opened Oct 9, 2026

• Add a shared request-validation layer (zod) to all 18 route handlers under `app/api/**`

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  advanced refactor security

  Difficulty 4/5 3-5 days Newbie friendliness 25/100

  SourceXXL/alian_structure-UI#60 · 1 comment · Opened Oct 9, 2026

• Resolve the double service-worker registration (`next-pwa` auto-register vs manual `/sw.js`)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  advanced bug tooling

  Difficulty 4/5 3-5 days Newbie friendliness 24/100

  SourceXXL/alian_structure-UI#55 · 1 comment · Opened Oct 9, 2026

• Consolidate the two divergent `AgentCard` components into one with a single prop API

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  intermediate refactor

  Difficulty 4/5 3-5 days Newbie friendliness 42/100

  SourceXXL/alian_structure-UI#39 · Opened Oct 9, 2026

• Remove `types/mui-compat.d.ts` — it declares every MUI component as `any` and disables type checking app-wide

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  advanced dependencies refactor

  Difficulty 4/5 3-5 days Newbie friendliness 22/100

  SourceXXL/alian_structure-UI#38 · Opened Oct 9, 2026

• Add `coverageThreshold` and `collectCoverageFrom` to `jest.config.cjs`

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  good first issue tests tooling

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  SourceXXL/alian_structure-UI#32 · Opened Oct 9, 2026

• Add component tests for `Navigation` and `ConnectWallet` (mobile drawer, network switcher, wallet states)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  accessibility intermediate tests

  Difficulty 3/5 1-2 days Newbie friendliness 75/100

  SourceXXL/alian_structure-UI#31 · Opened Oct 9, 2026

• Add unit tests for `lib/stellar.ts` — address validation, truncation and XLM formatting

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  good first issue security tests

  Difficulty 2/5 Half a day Newbie friendliness 72/100

  SourceXXL/alian_structure-UI#30 · Opened Oct 9, 2026

• Add route-handler tests for all 18 endpoints under `app/api/**`

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  advanced tests

  Difficulty 3/5 1-2 days Newbie friendliness 70/100

  SourceXXL/alian_structure-UI#29 · Opened Oct 9, 2026

• Add unit tests for `lib/simulations.ts` — run lifecycle, log streaming and version bumping

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  intermediate tests

  Difficulty 3/5 1-2 days Newbie friendliness 50/100

  SourceXXL/alian_structure-UI#28 · Opened Oct 9, 2026

• Add unit tests for `lib/api.ts` request cache, TTL expiry and in-flight de-duplication

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  intermediate tests

  Difficulty 3/5 1-2 days Newbie friendliness 62/100

  SourceXXL/alian_structure-UI#27 · Opened Oct 9, 2026

• Return 404 (not 500) from `/api/simulations/run/[id]` when the simulation id is unknown or missing

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug good first issue

  Difficulty 2/5 1-3 hours Newbie friendliness 82/100

  SourceXXL/alian_structure-UI#26 · Opened Oct 9, 2026

• Marketplace agent cards show a pressed/clickable affordance but have no click handler

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  accessibility bug good first issue

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  SourceXXL/alian_structure-UI#25 · Opened Oct 9, 2026

• Fix defeated debounce in `SearchBar` — unstable `onSearch` prop in the `useEffect` dependency array

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug intermediate performance

  Difficulty 3/5 Half a day Newbie friendliness 62/100

  SourceXXL/alian_structure-UI#24 · Opened Oct 9, 2026

• Fix permanent 5s interval leak in `useNotifications` — cleanup is returned from inside a `.catch()` and never runs

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug intermediate performance

  Difficulty 3/5 1-2 days Newbie friendliness 82/100

  SourceXXL/alian_structure-UI#23 · Opened Oct 9, 2026

• Waitlist page imports `useTranslation` from `next-i18next` and uses a namespace that does not exist — every `t()` renders a raw key

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug good first issue i18n

  Difficulty 3/5 Half a day Newbie friendliness 72/100

  SourceXXL/alian_structure-UI#22 · Opened Oct 9, 2026

• Fix affiliate service calling four API routes that do not exist (all writes silently 404)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug intermediate

  Difficulty 3/5 1-2 days Newbie friendliness 62/100

  SourceXXL/alian_structure-UI#21 · Opened Oct 9, 2026

• Simulation run polling never terminates: `/api/simulations/logs/${runId}` does not exist

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug intermediate refactor

  Difficulty 3/5 1-2 days Newbie friendliness 58/100

  SourceXXL/alian_structure-UI#20 · Opened Oct 9, 2026

• Add a o-console ESLint rule enforcement and migrate existing console calls to a logger

  Possibly taken @maxx-GENIUS claimed this 1 day ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 45/100

  SourceXXL/alian_structure-UI#84 · 2 comments · Opened Oct 10, 2026

• Add a lint rule and CI check for unbounded `console`/debug output leaking into production builds

  Possibly taken @shobhamerabacha-star claimed this 3 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  accessibility good first issue tooling

  Difficulty 3/5 Half a day Newbie friendliness 55/100

  SourceXXL/alian_structure-api#290 · 2 comments · Opened Oct 9, 2026

• Ensure every response carries consistent, documented headers that clients and tools can rely on

  Possibly taken @ranjeet150 claimed this 3 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  accessibility documentation good first issue

  Difficulty 4/5 3-5 days Newbie friendliness 25/100

  SourceXXL/alian_structure-api#289 · 1 comment · Opened Oct 9, 2026

• Add consistent `operationId` naming so generated SDK method names are stable and predictable

  Possibly taken @ravimahatonp claimed this 3 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  accessibility documentation help wanted intermediate

  Difficulty 4/5 3-5 days Newbie friendliness 25/100

  SourceXXL/alian_structure-api#287 · 1 comment · Opened Oct 9, 2026

• Serve machine-readable, structured error responses so assistive technology and clients can interpret failures

  Possibly taken @guptakumarranjeet150 claimed this 3 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  accessibility help wanted intermediate

  Difficulty 5/5 Over a week Newbie friendliness 30/100

  SourceXXL/alian_structure-api#285 · 1 comment · Opened Oct 9, 2026

• Add a CSP for Swagger UI and verify Helmet directives match what the docs UI actually loads

  Possibly taken @shobhamerabacha-star claimed this 3 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  help wanted intermediate security

  Difficulty 4/5 3-5 days Newbie friendliness 32/100

  SourceXXL/alian_structure-api#284 · 1 comment · Opened Oct 9, 2026

• Add dependency-confusion protection: scope internal package names and pin the registry

  Possibly taken @rupesh-kumar-sah claimed this 3 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  advanced security tooling

  Difficulty 4/5 3-5 days Newbie friendliness 32/100

  SourceXXL/alian_structure-api#282 · 1 comment · Opened Oct 9, 2026

• Add `.env` and secret-scanning to CI to prevent credential commits

  Possibly taken @ranjeet150 claimed this 3 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  good first issue help wanted security tooling

  Difficulty 3/5 Half a day Newbie friendliness 42/100

  SourceXXL/alian_structure-api#283 · 1 comment · Opened Oct 9, 2026

• Replace raw `console.log` and unstructured `Logger.log` string interpolation with structured, redacted logging

  Possibly taken @ravimahatonp claimed this 3 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  help wanted intermediate refactor security

  Difficulty 4/5 3-5 days Newbie friendliness 30/100

  SourceXXL/alian_structure-api#281 · 1 comment · Opened Oct 9, 2026

• Constrain webhook subscription URLs to prevent SSRF from user-supplied endpoints

  Possibly taken @Ranjeet2063 claimed this 3 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  advanced help wanted security

  Difficulty 4/5 3-5 days Newbie friendliness 22/100

  SourceXXL/alian_structure-api#280 · 1 comment · Opened Oct 9, 2026

• Enable CSRF protection or document why it is unnecessary given the JWT auth model

  Possibly taken @guptakumarranjeet150 claimed this 3 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  help wanted intermediate security

  Difficulty 4/5 3-5 days Newbie friendliness 25/100

  SourceXXL/alian_structure-api#278 · 1 comment · Opened Oct 9, 2026

• Add `express-mongo-sanitize` / operator stripping to the global middleware chain

  Possibly taken @shobhamerabacha-star claimed this 3 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  help wanted intermediate security

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  SourceXXL/alian_structure-api#277 · 1 comment · Opened Oct 9, 2026