Issues

• 214 function-level require() calls hide missing modules until a request hits that code path

  code-qualityrefactorreliability
  Manuel1234477/Stellar-Micro-Donation-API#1988 · Filter by author Manuel1234477 opened on Oct 14, 2026

• Duplicate user-facing and admin route modules for API key usage and audit log export

  cleanuprefactorroutes
  Manuel1234477/Stellar-Micro-Donation-API#1987 · Filter by author Manuel1234477 opened on Oct 14, 2026

• Public /tools/decode-transaction parses arbitrary XDR without authentication; three XDR decoders exist

  routessecuritystellar
  Manuel1234477/Stellar-Micro-Donation-API#1986 · Filter by author Manuel1234477 opened on Oct 14, 2026

• Many monetary columns are still REAL (floating point) despite ADR-004

  data-integritydatabasepayments
  Manuel1234477/Stellar-Micro-Donation-API#1985 · Filter by author Manuel1234477 opened on Oct 14, 2026

• Mock Stellar mode in production only logs a warning, and two env var names control it

  configurationreliabilitystellar
  Manuel1234477/Stellar-Micro-Donation-API#1984 · Filter by author Manuel1234477 opened on Oct 14, 2026

• No global cap on concurrent SSE and WebSocket connections

  performancereliabilityserver
  Manuel1234477/Stellar-Micro-Donation-API#1983 · Filter by author Manuel1234477 opened on Oct 14, 2026

• Scraping /metrics requires an admin API key

  configurationobservabilitysecurity
  Manuel1234477/Stellar-Micro-Donation-API#1982 · Filter by author Manuel1234477 opened on Oct 14, 2026

• WebSocket servers accept messages up to 100 MiB (no maxPayload set)

  performancesecurityserver
  Manuel1234477/Stellar-Micro-Donation-API#1981 · Filter by author Manuel1234477 opened on Oct 14, 2026

• GraphQL and balance WebSocket servers abort each other's upgrade requests

  api-designbugserver
  Manuel1234477/Stellar-Micro-Donation-API#1980 · Filter by author Manuel1234477 opened on Oct 14, 2026

• Add a route inventory test that fails on duplicate or unguarded mutating routes

  routessecuritytesting
  Manuel1234477/Stellar-Micro-Donation-API#1979 · Filter by author Manuel1234477 opened on Oct 14, 2026

• Branch protection: require the lint, boot and test checks before merging to main

  ci/cdmaintenancequality
  Manuel1234477/Stellar-Micro-Donation-API#1978 · Filter by author Manuel1234477 opened on Oct 14, 2026

• Contributor onboarding: document how to get from clone to a passing test run

  developer experiencedocumentation
  Manuel1234477/Stellar-Micro-Donation-API#1977 · Filter by author Manuel1234477 opened on Oct 14, 2026

• Add a .nvmrc and align local, CI and container Node versions

  developer experiencedevopsgood first issueStellar Wave
  Manuel1234477/Stellar-Micro-Donation-API#1976 · Filter by author Manuel1234477 opened on Oct 14, 2026
  6

  

• Webhook email notifications and SMTP configuration lack documentation and startup validation

  backendconfigurationdocumentationStellar Wave
  Manuel1234477/Stellar-Micro-Donation-API#1975 · Filter by author Manuel1234477 opened on Oct 14, 2026
  6

  

• Plan major upgrades: express 5, nodemailer 10, csv-parse 7, dotenv 18, pdfkit 0.20, supertest 7

  dependenciesmaintenanceStellar Wave
  Manuel1234477/Stellar-Micro-Donation-API#1974 · Filter by author Manuel1234477 opened on Oct 14, 2026
  4

  

• Apply pending in-range dependency updates (ajv, multer, helmet, ws, express-rate-limit, sql.js)

  dependenciesmaintenanceStellar Wave
  Manuel1234477/Stellar-Micro-Donation-API#1973 · Filter by author Manuel1234477 opened on Oct 14, 2026
  5

  

• Replace the uuid dependency with crypto.randomUUID()

  cleanupdependenciesgood first issueStellar Wave
  Manuel1234477/Stellar-Micro-Donation-API#1972 · Filter by author Manuel1234477 opened on Oct 14, 2026
  4

  

• lint:security runs exactly the same lint as lint

  cleanupgood first issueStellar Wavetooling
  Manuel1234477/Stellar-Micro-Donation-API#1971 · Filter by author Manuel1234477 opened on Oct 14, 2026
  4

  

• Migrate from ESLint 8 (end-of-life) to ESLint 9+ flat config

  dependenciesStellar Wavetooling
  Manuel1234477/Stellar-Micro-Donation-API#1970 · Filter by author Manuel1234477 opened on Oct 14, 2026
  3

  

• Provide a docker-compose observability profile (Prometheus, Grafana, OpenTelemetry collector)

  developer experiencedevopsobservabilityStellar Wave
  Manuel1234477/Stellar-Micro-Donation-API#1969 · Filter by author Manuel1234477 opened on Oct 14, 2026
  3

  

• Emit scheduler lag and transaction sync lag metrics so SLO alerts do not need proxies

  enhancementobservabilityscheduler
  Manuel1234477/Stellar-Micro-Donation-API#1968 · Filter by author Manuel1234477 opened on Oct 14, 2026

• Validate Prometheus alert rules in CI and add unit tests for the alerts

  ci/cdobservability
  Manuel1234477/Stellar-Micro-Donation-API#1967 · Filter by author Manuel1234477 opened on Oct 14, 2026

• Pin GitHub Actions to commit SHAs and declare least-privilege permissions in every workflow

  ci/cdgithub_actionssecurity
  Manuel1234477/Stellar-Micro-Donation-API#1966 · Filter by author Manuel1234477 opened on Oct 14, 2026

• Add static code analysis (CodeQL) and secret scanning to CI

  ci/cdsecurity
  Manuel1234477/Stellar-Micro-Donation-API#1965 · Filter by author Manuel1234477 opened on Oct 14, 2026

• API examples are maintained in three places (docs/API_EXAMPLES.md, examples/API_CURL_EXAMPLES.md, Postman)

  developer experiencedocumentation
  Manuel1234477/Stellar-Micro-Donation-API#1964 · Filter by author Manuel1234477 opened on Oct 14, 2026