Issues

• No audit trail for state-changing admin actions

  backendenhancementpriority: mediumsecurity
  stellXpress/backend#43 · Filter by author boluwacodes opened on Sep 3, 2026

• Transaction status polling does not back off on repeated failures

  backendbugpriority: mediumreliability
  stellXpress/backend#41 · Filter by author boluwacodes opened on Sep 3, 2026

• Service starts successfully even with missing required environment variables

  backendbugchorepriority: medium
  stellXpress/backend#39 · Filter by author boluwacodes opened on Sep 3, 2026

• Database migrations lack a documented rollback path

  backendchoredatabasepriority: low
  stellXpress/backend#37 · Filter by author boluwacodes opened on Sep 3, 2026

• Background job failures are silently swallowed

  backendbugpriority: highreliability
  stellXpress/backend#35 · Filter by author boluwacodes opened on Sep 3, 2026

• API schema/docs are out of date relative to actual endpoints

  backendchoredocumentationgood first issue
  stellXpress/backend#33 · Filter by author boluwacodes opened on Sep 3, 2026

• Outbound requests to third-party services have no timeout configured

  backendbugpriority: mediumreliability
  stellXpress/backend#31 · Filter by author boluwacodes opened on Sep 3, 2026

• N+1 query pattern when loading related records

  backenddatabaseperformancepriority: medium
  stellXpress/backend#29 · Filter by author boluwacodes opened on Sep 3, 2026

• Health check endpoint does not verify downstream dependencies

  backendenhancementobservabilitypriority: medium
  stellXpress/backend#27 · Filter by author boluwacodes opened on Sep 3, 2026

• Webhook handlers are not idempotent and can double-process events

  backendbugpriority: highreliability
  stellXpress/backend#25 · Filter by author boluwacodes opened on Sep 3, 2026

• Hot read paths have no caching layer

  backendenhancementperformancepriority: low
  stellXpress/backend#23 · Filter by author boluwacodes opened on Sep 3, 2026

• List endpoints return unbounded result sets

  backendenhancementperformancepriority: medium
  stellXpress/backend#21 · Filter by author boluwacodes opened on Sep 3, 2026

• Expired auth tokens are not refreshed transparently

  authbackendbugpriority: medium
  stellXpress/backend#19 · Filter by author boluwacodes opened on Sep 3, 2026

• Core services have little to no integration test coverage

  backendchorepriority: mediumtesting
  stellXpress/backend#17 · Filter by author boluwacodes opened on Sep 3, 2026

• Structured logging is missing on critical request paths

  backendenhancementobservabilitypriority: medium
  stellXpress/backend#15 · Filter by author boluwacodes opened on Sep 3, 2026

• Frequent list queries are missing database indexes

  backenddatabaseperformancepriority: medium
  stellXpress/backend#13 · Filter by author boluwacodes opened on Sep 3, 2026

• No rate limiting on public-facing endpoints

  backendenhancementpriority: mediumsecurity
  stellXpress/backend#11 · Filter by author boluwacodes opened on Sep 3, 2026

• Unhandled exceptions leak internal stack traces in API responses

  backendbugpriority: highsecurity
  stellXpress/backend#9 · Filter by author boluwacodes opened on Sep 3, 2026

• API endpoints accept unvalidated request bodies

  backendbugpriority: highsecurity
  stellXpress/backend#7 · Filter by author boluwacodes opened on Sep 3, 2026

• CreateShipmentInput.deliveryDeadlineAt accepts dates in the past with no validation

  buggood first issue
  stellXpress/backend#6 · Filter by author boluwacodes opened on Aug 23, 2026

• StellarController.resolveArgs doesn't validate args array length, causing 500s instead of clean 400s

  buggood first issue
  stellXpress/backend#5 · Filter by author boluwacodes opened on Aug 23, 2026

• AuthService.linkStellarAddress has no GraphQL mutation, making dispute resolution permanently unreachable

  bughelp wanted
  stellXpress/backend#4 · Filter by author boluwacodes opened on Aug 23, 2026

• Duplicate createReview submission throws an unhandled Prisma error instead of a clean ConflictException

  bug
  stellXpress/backend#3 · Filter by author boluwacodes opened on Aug 23, 2026

• JWT_SECRET silently falls back to a hardcoded default in two places with no startup validation

  bughelp wanted
  stellXpress/backend#2 · Filter by author boluwacodes opened on Aug 23, 2026

• confirmDelivery lets a carrier self-confirm their own delivery, enabling fabricated DELIVERED status and rating manipulation

  bug
  stellXpress/backend#1 · Filter by author boluwacodes opened on Aug 23, 2026