Issues

• Add a lint rule and CI check for unbounded console/debug output leaking into production builds

  accessibilitygood first issuetooling
  SourceXXL/alian_structure-api#290 · Filter by author memplethee-lab opened on Oct 9, 2026
  2

• Ensure every response carries consistent, documented headers that clients and tools can rely on

  accessibilitydocumentationgood first issue
  SourceXXL/alian_structure-api#289 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Add consistent operationId naming so generated SDK method names are stable and predictable

  accessibilitydocumentationhelp wantedintermediate
  SourceXXL/alian_structure-api#287 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Add descriptive summary/description and status codes to all undocumented API operations in the OpenAPI spec

  accessibilitydocumentationhelp wantedintermediate
  SourceXXL/alian_structure-api#286 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Serve machine-readable, structured error responses so assistive technology and clients can interpret failures

  accessibilityhelp wantedintermediate
  SourceXXL/alian_structure-api#285 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Add a CSP for Swagger UI and verify Helmet directives match what the docs UI actually loads

  help wantedintermediatesecurity
  SourceXXL/alian_structure-api#284 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Add dependency-confusion protection: scope internal package names and pin the registry

  advancedsecuritytooling
  SourceXXL/alian_structure-api#282 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Add .env and secret-scanning to CI to prevent credential commits

  good first issuehelp wantedsecuritytooling
  SourceXXL/alian_structure-api#283 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Replace raw console.log and unstructured Logger.log string interpolation with structured, redacted logging

  help wantedintermediaterefactorsecurity
  SourceXXL/alian_structure-api#281 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Constrain webhook subscription URLs to prevent SSRF from user-supplied endpoints

  advancedhelp wantedsecurity
  SourceXXL/alian_structure-api#280 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Enable CSRF protection or document why it is unnecessary given the JWT auth model

  help wantedintermediatesecurity
  SourceXXL/alian_structure-api#278 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Add password complexity validation and lockout policy to the registration and login paths

  help wantedintermediatesecurity
  SourceXXL/alian_structure-api#279 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Add express-mongo-sanitize / operator stripping to the global middleware chain

  help wantedintermediatesecurity
  SourceXXL/alian_structure-api#277 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Remove or wire up unused dependencies: hpp and express-mongo-sanitize are declared but never imported

  good first issuehelp wantedsecuritytooling
  SourceXXL/alian_structure-api#276 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Add a GET /api/v1/alerts/rules endpoint for the authenticated user's alert rules

  enhancementhelp wantedintermediate
  SourceXXL/alian_structure-api#275 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Add a GET /api/v1/modules endpoint to list enabled modules for the authenticated tenant

  enhancementhelp wantedintermediate
  SourceXXL/alian_structure-api#274 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Add a GET /api/v1/billing/usage endpoint for the authenticated user's usage metrics

  enhancementhelp wantedintermediate
  SourceXXL/alian_structure-api#273 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Add a GET /api/v1/notifications/preferences endpoint for the authenticated user's notification settings

  enhancementhelp wantedintermediate
  SourceXXL/alian_structure-api#272 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Add a GET /api/v1/reconciliation/:id endpoint for reconciliation run details

  enhancementhelp wantedintermediate
  SourceXXL/alian_structure-api#271 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Add a GET /api/v1/simulator/scenarios endpoint to list available simulation scenarios

  enhancementgood first issuehelp wanted
  SourceXXL/alian_structure-api#270 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Add a GET /api/v1/agents discovery endpoint with capability filtering

  enhancementhelp wantedintermediate
  SourceXXL/alian_structure-api#268 · Filter by author memplethee-lab opened on Oct 9, 2026
  2

• Add a GET /api/v1/oracles/:id/feeds endpoint for oracle price feed history

  enhancementhelp wantedintermediate
  SourceXXL/alian_structure-api#269 · Filter by author memplethee-lab opened on Oct 9, 2026
  2

• Add a GET /api/v1/queue/jobs list endpoint so clients can discover their own jobs

  enhancementhelp wantedintermediate
  SourceXXL/alian_structure-api#267 · Filter by author memplethee-lab opened on Oct 9, 2026
  2

• Add rate-limit response headers to the CORS exposedHeaders so browser clients can read them

  good first issuehelp wantedsecurity
  SourceXXL/alian_structure-api#266 · Filter by author memplethee-lab opened on Oct 9, 2026
  2

• Add request-level memoization to avoid recomputing identical expensive derivations within a single request

  advancedhelp wantedperformance
  SourceXXL/alian_structure-api#250 · Filter by author memplethee-lab opened on Oct 9, 2026
  1