Search results

Profile view tracking incorrectly records owner's own views when unauthenticated — viewerId !== user.id is always true when viewerId is null

Status: Open.

#203 In Dev-Card/DevCard;

· hariom888 opened on May 20, 2026

OAuth redirect URLs are console.log'd to stdout in production — leaks state tokens to server logs

Status: Open.

#202 In Dev-Card/DevCard;

· hariom888 opened on May 20, 2026

GET /api/events/:slug/attendees returns incorrect total in pagination — reports page size, not real count

Status: Open.

#201 In Dev-Card/DevCard;

· Srejoye opened on May 20, 2026

connect.ts crashes at runtime — randomBytes is used but never imported

Status: Open.

#200 In Dev-Card/DevCard;

· Srejoye opened on May 20, 2026

Improve error handling and type safety in public.ts

backend

cleanupCode cleanup, lint fixes, refactoring, and maintenance-related changes.Code cleanup, lint fixes, refactoring, and maintenance-related changes.

good-first-issueGood for newcomersGood for newcomers

Status: Open.

#196 In Dev-Card/DevCard;

· Harxhit opened on May 20, 2026

Improve error handling consistency in follow.ts

backend

cleanupCode cleanup, lint fixes, refactoring, and maintenance-related changes.Code cleanup, lint fixes, refactoring, and maintenance-related changes.

good-first-issueGood for newcomersGood for newcomers

Status: Open.

#195 In Dev-Card/DevCard;

· Harxhit opened on May 20, 2026

Improve type safety in event attendees mapping

backend

good-first-issueGood for newcomersGood for newcomers

refactor

Status: Open.

#194 In Dev-Card/DevCard;

· Harxhit opened on May 20, 2026

Add Profile Linking and Smart QR Support to DevCard

Status: Open.

#190 In Dev-Card/DevCard;

· yosobanta opened on May 20, 2026

JWT_SECRET falls back to a public default value in production

Status: Open.

#186 In Dev-Card/DevCard;

· Ridanshi opened on May 19, 2026

OAuth state parameter is never validated, enabling login CSRF attacks

Status: Open.

#185 In Dev-Card/DevCard;

· Ridanshi opened on May 19, 2026

Feature: Add vCard (.vcf) Export for Instant Contact Saving (Web & Mobile)

Status: Open.

#179 In Dev-Card/DevCard;

· anshika1179 opened on May 19, 2026

[bug] connect.ts uses randomBytes without importing it, and parseGoogleState is misnamed for a GitHub-only flow

Status: Open.

#178 In Dev-Card/DevCard;

· MehtabSandhu11 opened on May 19, 2026