Search results

[Wave 200pts] No pre-commit hooks or lint-staged — unformatted and lint-failing code is committed and discovered only after slow CI runs

backend

Status: Open.

#689 In Nexacore-Org/NexaFx-js;

· portableDD opened on May 30, 2026

[Wave 200pts] No organisation/team account model — business customers cannot have multiple users under one account with shared wallets and consolidated reporting

backend

Status: Open.

#688 In Nexacore-Org/NexaFx-js;

· portableDD opened on May 30, 2026

[Wave 200pts] No index strategy for financial query patterns — high-frequency queries (balance lookup, transaction history, AML pattern matching) will do full table scans

backend

Status: Open.

#687 In Nexacore-Org/NexaFx-js;

· portableDD opened on May 30, 2026

[Wave 200pts] TypeScript strict mode is not confirmed enabled in tsconfig.json — implicit any, null unsafety, and unchecked index access go undetected

backend

Status: Open.

#686 In Nexacore-Org/NexaFx-js;

· portableDD opened on May 30, 2026

[Wave 200pts] migration:dryrun script references src/scripts/migrate-dryrun.ts which does not exist — the safety net for pre-deploy migration checks is broken

backend

Status: Open.

#685 In Nexacore-Org/NexaFx-js;

· portableDD opened on May 30, 2026

[Wave 200pts] No feature flag system — new features (FX trading, referrals, blockchain) cannot be toggled per environment without code changes and redeployment

backend

Status: Open.

#684 In Nexacore-Org/NexaFx-js;

· portableDD opened on May 30, 2026

[Wave 200pts] No automated reconciliation job — wallet balances derived from in-memory state can diverge from transaction records with no detection mechanism

backend

Status: Open.

#683 In Nexacore-Org/NexaFx-js;

· portableDD opened on May 30, 2026

[Wave 200pts] socket.io-client is a production dependency but is only needed for testing — it adds unnecessary bundle weight to the server

backend

Status: Open.

#682 In Nexacore-Org/NexaFx-js;

· portableDD opened on May 30, 2026

[Wave 200pts] No TypeORM entity subscriber for cross-cutting concerns — updatedAt, createdBy, and updatedBy fields must be set manually in every service

backend

Status: Open.

#681 In Nexacore-Org/NexaFx-js;

· portableDD opened on May 30, 2026

[Wave 200pts] TypeORM connection pool uses default settings — no pool size, acquire timeout, or idle timeout configured, risking connection exhaustion under load

backend

Status: Open.

#680 In Nexacore-Org/NexaFx-js;

· portableDD opened on May 30, 2026

[Wave 200pts] No JWT secret rotation mechanism — rotating JWT_SECRET immediately invalidates all active user sessions with no graceful transition period

backend

Status: Open.

#679 In Nexacore-Org/NexaFx-js;

· portableDD opened on May 30, 2026

[Wave 200pts] No TypeORM query result type safety standard — raw query results are typed as 'any', bypassing TypeScript's type system for DB operations

backend

Status: Open.

#678 In Nexacore-Org/NexaFx-js;

· portableDD opened on May 30, 2026