Issues

• package.json exports map has no ./package.json subpath, blocking require('@trustflow/sdk/package.json')

  bugdifficulty: easypriority: lowsdk
  trustflow-protocol/trustflow-sdk#510 · Filter by author meshackyaro opened on Oct 16, 2026
  1

• docs/API.md and README never document IPFSStorage.resolve or the CID validation helpers

  difficulty: easydocumentationpriority: lowsdk
  trustflow-protocol/trustflow-sdk#509 · Filter by author meshackyaro opened on Oct 16, 2026
  1

• Dependabot and npm audit never scan examples/react's separate npm project

  bugdifficulty: easyinfrastructurepriority: mediumsdksecurity
  trustflow-protocol/trustflow-sdk#508 · Filter by author meshackyaro opened on Oct 16, 2026
  1

• npm run test:bundlers (Webpack 5/Rollup/esbuild Node-builtin check) is never run in CI

  bugdifficulty: easyinfrastructurepriority: mediumsdk
  trustflow-protocol/trustflow-sdk#507 · Filter by author meshackyaro opened on Oct 16, 2026
  1

• examples/react sandbox is never built, linted or type-checked in CI

  bugdifficulty: mediuminfrastructurepriority: mediumsdk
  trustflow-protocol/trustflow-sdk#506 · Filter by author meshackyaro opened on Oct 16, 2026
  1

• CID_V1_REGEX is dead code with a looser minimum length than isValidCid's real base32 check

  bugdifficulty: easypriority: lowsdktesting
  trustflow-protocol/trustflow-sdk#505 · Filter by author meshackyaro opened on Oct 16, 2026
  1

• IPFSStorage.upload's returned gateway URL disagrees with resolve's URL construction for custom gateways

  bugdifficulty: easypriority: lowsdk
  trustflow-protocol/trustflow-sdk#504 · Filter by author meshackyaro opened on Oct 16, 2026
  1

• invokeContract collapses every thrown error into an untyped string, unlike readContractState and simulateContractCall

  bugcoredifficulty: mediumpriority: mediumreliabilitysdk
  trustflow-protocol/trustflow-sdk#453 · Filter by author meshackyaro opened on Oct 15, 2026

• scripts/check-doc-coverage.js is unwired from CI and its symbol-extraction regex matches nothing

  bugdifficulty: mediuminfrastructurepriority: mediumsdktesting
  trustflow-protocol/trustflow-sdk#452 · Filter by author meshackyaro opened on Oct 15, 2026

• switchNetwork does not clear the balance cache, leaking stale balances across networks

  bugcoredifficulty: easygood first issuepriority: mediumreliabilitysdk
  trustflow-protocol/trustflow-sdk#449 · Filter by author meshackyaro opened on Oct 15, 2026
  1

• Bound IPFSStorage.resolve's gateway response size to prevent unbounded memory use

  bugdifficulty: mediumpriority: mediumreliabilitysdksecurity
  trustflow-protocol/trustflow-sdk#448 · Filter by author meshackyaro opened on Oct 15, 2026
  3

• buildClaimArgs and buildFundArgs still skip escrow-id and address validation

  bugcoredifficulty: easygood first issuepriority: mediumsdk
  trustflow-protocol/trustflow-sdk#447 · Filter by author meshackyaro opened on Oct 15, 2026
  1

• Add AbortSignal cancellation support to IPFSStorage.upload and resolve

  difficulty: mediumenhancementpriority: mediumsdk
  trustflow-protocol/trustflow-sdk#446 · Filter by author meshackyaro opened on Oct 15, 2026
  1

• isValidCid accepts structurally invalid CIDv1 base58btc strings that its base32 branch would reject

  bugdifficulty: mediumpriority: highsdksecurity
  trustflow-protocol/trustflow-sdk#445 · Filter by author meshackyaro opened on Oct 15, 2026
  1

• SDKLogger's redactContext converts arrays in log context into plain objects

  bugdifficulty: easygood first issuepriority: lowsdk
  trustflow-protocol/trustflow-sdk#444 · Filter by author meshackyaro opened on Oct 15, 2026
  2

• AccountBalanceMonitor polling can overlap and its webhook POST has no timeout

  bugdifficulty: mediumpriority: mediumreliabilitysdk
  trustflow-protocol/trustflow-sdk#441 · Filter by author meshackyaro opened on Oct 15, 2026

• normalizeMilestoneExpiration returns any instead of its actual number | array shape

  difficulty: easyenhancementgood first issuepriority: lowsdk
  trustflow-protocol/trustflow-sdk#440 · Filter by author meshackyaro opened on Oct 15, 2026

• Root package entrypoint does not export the wallet module, breaking docs/API.md's own example

  bugdifficulty: easydocumentationpriority: mediumsdk
  trustflow-protocol/trustflow-sdk#439 · Filter by author meshackyaro opened on Oct 15, 2026

• invokeContract applies no resource-fee safety margin before signAndSubmit

  bugcoredifficulty: mediumpriority: mediumreliabilitysdk
  trustflow-protocol/trustflow-sdk#438 · Filter by author meshackyaro opened on Oct 15, 2026

• ClientConfigSchema in schemas.ts has drifted from TrustFlowClient's actual constructor validation

  bugdifficulty: mediumpriority: mediumsdk
  trustflow-protocol/trustflow-sdk#437 · Filter by author meshackyaro opened on Oct 15, 2026

• Request body size validation utilities are never applied to outgoing SDK requests

  bugdifficulty: mediumhelp wantedpriority: mediumreliabilitysdk
  trustflow-protocol/trustflow-sdk#436 · Filter by author meshackyaro opened on Oct 15, 2026

• WalletAdapter interface in src/wallet/types.ts has no implementation, including its own mock

  difficulty: mediumenhancementpriority: lowsdk
  trustflow-protocol/trustflow-sdk#435 · Filter by author meshackyaro opened on Oct 15, 2026

• MultiSigEscrowClient.importState trusts imported signatures without re-verifying them

  bugdifficulty: hardhelp wantedpriority: highsdksecurity
  trustflow-protocol/trustflow-sdk#434 · Filter by author meshackyaro opened on Oct 15, 2026

• invokeContract loses Soroban authorization entries when reassembling for signAndSubmit

  bugcoredifficulty: hardhelp wantedpriority: highreliabilitysdk
  trustflow-protocol/trustflow-sdk#433 · Filter by author meshackyaro opened on Oct 15, 2026

• Remove duplicate INVALID_CONTRACT_CALL entry in TrustFlowErrorCode union

  bugdifficulty: easygood first issueinfrastructurepriority: lowsdk
  trustflow-protocol/trustflow-sdk#432 · Filter by author meshackyaro opened on Oct 15, 2026