Dreamstick9

Dreamstick9/filedrop

6 stars 7 forks 6 watchers JavaScript MIT License
View on GitHub Website
80 Open Issues Need Help Last updated: Jul 2, 2026

Open Issues Need Help

View All on GitHub
Insecure Randomness Fallback for Transfer ID about 2 months ago
enhancement help wanted
Dreamstick9/filedrop
6

JavaScript
[Medium] Decryption key is wiped from the URL before the browser confirms the download succeeded about 2 months ago
bug help wanted triage ECSoC26 possible-duplicate
Dreamstick9/filedrop
6

JavaScript
[Easy] index.js/server.js: mDNS transfer id and X-Transfer-ID are generated separately and diverge about 2 months ago
bug help wanted good first issue area/server triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] package.json: npm test never runs test/integration/* suite about 2 months ago
enhancement help wanted good first issue kind/tests triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] mdns.js: Windows mDNS registration timeout is hardcoded to 1000ms about 2 months ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
Rate Limit Memory Leak via Unbounded Map about 2 months ago
bug good first issue
Dreamstick9/filedrop
6

JavaScript
Missing Content-Security-Policy (CSP) Header about 2 months ago
bug help wanted good first issue
Dreamstick9/filedrop
6

JavaScript
Sequential Port Availability Checking about 2 months ago
enhancement help wanted good first issue
Dreamstick9/filedrop
6

JavaScript
Synchronous File Stat in Loop about 2 months ago
good first issue
Dreamstick9/filedrop
6

JavaScript
Deprecated crypto.randomUUID fallback about 2 months ago
help wanted good first issue
Dreamstick9/filedrop
6

JavaScript
[Easy] server.js: validate AES key fragment is 64 hex chars before decrypt about 2 months ago
bug help wanted good first issue area/server triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
filedrop-mesh: cross-network file transfer over WebRTC (epic) about 2 months ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] Add 6-character mesh room code generator and receiver-side entry page about 2 months ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] Extend QR/URL format to carry both LAN URL and mesh room code about 2 months ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] End-to-end integration test + manual dogfood script for mesh paths about 2 months ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] network.js: Docker bridge filtering only blocks `172.17.0.*` (the d… about 2 months ago
bug help wanted good first issue ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] server.js: Hardcoded `Cache-Control: max-age=31536000` for forge.min.js about 2 months ago
help wanted good first issue triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] cli.js: `fs.statSync` is called up to three times on the same `… about 2 months ago
help wanted good first issue triage/triaged
Dreamstick9/filedrop
6

JavaScript
[Easy] lifecycle.js: Empty catch block silently swallows server.shutdown() e… about 2 months ago
bug good first issue ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] index.js: Empty catch block suppresses errors during httpAppShutd… about 2 months ago
bug help wanted good first issue ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] index.js: Empty catch block suppresses errors during mdns.teardow… about 2 months ago
bug help wanted good first issue ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] server.js: Empty catch block suppresses errors during onShutdown c… about 2 months ago
bug help wanted good first issue ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] index.js: Empty catch block suppresses errors during httpAppShutd… about 2 months ago
bug help wanted good first issue ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] index.js: Empty catch block suppresses errors during mdns.teardow… about 2 months ago
bug help wanted good first issue ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] lifecycle.js: Empty catch block silently swallows stdout flush errors… about 2 months ago
bug good first issue ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] lifecycle.js: Empty catch block silently swallows mdns.deregister() e… about 2 months ago
bug good first issue
Dreamstick9/filedrop
6

JavaScript
[Easy] server.js: Shared ipRequestCounts Map is accessed without synchron… about 2 months ago
bug help wanted good first issue
Dreamstick9/filedrop
6

JavaScript
[Medium] Download does not start if the key is added to the URL after the page has already loaded about 2 months ago
enhancement help wanted triage ECSoC26 possible-duplicate
Dreamstick9/filedrop
6

JavaScript
[Medium] Add Transport interface in src/transport.js and refactor server.js + index.js to use it about 2 months ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] Build @dreamstick/filedrop-signal companion package (WebSocket signaling server) about 2 months ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] index.js: negative download-limit input blocks all downloads (0 >= -N) about 2 months ago
bug help wanted good first issue triage area/cli ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Hard] server.js: document.execCommand('copy') is deprecated and should u… about 2 months ago
help wanted good first issue triage/triaged
Dreamstick9/filedrop
6

JavaScript
[Hard] Add relay fallback for symmetric NAT (ciphertext-only, opt-in) 2 months ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Hard] Implement MeshTransport (WebRTC + DataChannel) for cross-network file transfer 2 months ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] index.js: Assumed module interfaces suggest incomplete implementa… 2 months ago
help wanted good first issue ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] security.js: `src/security.js` has no corresponding test file; `vali… 2 months ago
help wanted triage/triaged ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] port.js: `firewallWarningPrinted` is module-level mutable state;… 2 months ago
help wanted triage/triaged ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Hard] Stream existing AES-256-GCM ciphertext over RTCDataChannel with backpressure 2 months ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] lifecycle.js: Transfer timeout is hardcoded to 60 seconds instead of … 2 months ago
help wanted good first issue triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] server.js: resolve forge.min.js via require.resolve (hardcoded node_modules path breaks hoist/pkg) 2 months ago
bug help wanted good first issue area/server triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] server.js: set Referrer-Policy: no-referrer on decryptor HTML to protect ?t= tokens 2 months ago
enhancement help wanted good first issue area/server triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] server.js: `--bind` only picks the QR IP — HTTP still listens on 0.0.0.0 (docs wrong) 2 months ago
bug help wanted area/server triage area/network ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] server.js: stream setup failure after activeIPs.add leaks slot and can hang the client 2 months ago
bug help wanted area/server triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] index.js: add --download-limit flag; non-interactive mode hangs on device-count prompt 2 months ago
enhancement help wanted triage area/cli ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] server.js: sanitize fileName for Content-Disposition (CR/LF header injection) 2 months ago
bug help wanted area/server triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] errors.js: The comment "Clear any in-progress terminal state (rest… 2 months ago
bug help wanted good first issue triage/triaged ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] Implement pickTransport() policy: prefer mDNS, fall back to WebRTC + signaling 2 months ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] server.js: completedIPs Set is shared mutable state modified witho… 2 months ago
bug help wanted good first issue triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] /download rejects HTTP Range requests with 416, breaking Safari and resumable downloads 2 months ago
bug help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] server.js: Shutdown force-timeout is hardcoded to `3000`ms 2 months ago
enhancement help wanted ¯\_(ツ)_/¯ triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] server.js: Magic number `chunk = 10000` in client-side `u8ToBinaryString` 2 months ago
help wanted good first issue triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Hard] security.js: Exported helpers (validateToken, createConnectionLimiter, isSensitiveFile, confirmSensitiveFile) are never used 2 months ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] port.js: Port range constants `1024`/`65535` are magic numbers duplicated across port.js and cli.js 2 months ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] Document the --qr flag in --help (it works but is undocumented) 2 months ago
help wanted good first issue triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] Remove dead `if (false) { window.close(); }` branch in download client 2 months ago
help wanted good first issue triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] server.js: Default timeout is hardcoded to 60000ms instead of bein… 2 months ago
help wanted triage ECoSC26
Dreamstick9/filedrop
6

JavaScript
[Easy] qr.js: Default box width `43` is a magic number duplicated in renderMetadataBox and updateStatus 2 months ago
help wanted good first issue triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] cli.js: Help text links to placeholder URL `https://github.com/<org>/filedrop` 2 months ago
help wanted good first issue triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] mdns.js: Six module-level mutable variables (`mdnsInstance`, `cu… 2 months ago
help wanted good first issue ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] server.js: Default version is hardcoded to '1.0.0' instead of bein… 2 months ago
help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Hard] server.js: Client-side download blob uses hardcoded `application/octet-stream` 2 months ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] server.js: activeIPs Set is shared mutable state modified without … 2 months ago
bug help wanted good first issue triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] index.js: SIGINT force-exit timeout is hardcoded to 10000ms 2 months ago
enhancement help wanted triage ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Easy] platform.js: `src/platform.js` has no corresponding test file; `supp… 2 months ago
help wanted good first issue triage
Dreamstick9/filedrop
6

JavaScript
[Easy] safe-run.js: `src/safe-run.js` has no corresponding test file; the `… 2 months ago
help wanted good first issue triage
Dreamstick9/filedrop
6

JavaScript
[Medium] lifecycle.js: Failsafe exit timeout is hardcoded to 1000ms instead of… 2 months ago
help wanted good first issue triage/triaged ECSoC26
Dreamstick9/filedrop
6

JavaScript
[Medium] qr.js: `lastBoxWidth` is module-level mutable state written by… 2 months ago
help wanted good first issue triage
Dreamstick9/filedrop
6

JavaScript
[Easy] server.js: ipRequestCounts Map is shared mutable state modified wi… 2 months ago
bug help wanted good first issue triage
Dreamstick9/filedrop
6

JavaScript
[Easy] network.js: `wmicOutput.split('\\n')` splits on the literal two-cha… 3 months ago
bug help wanted good first issue triage
Dreamstick9/filedrop
6

JavaScript
[Medium] test2.js: `createTempFile` writes a `temp.txt` file to the projec… 3 months ago
help wanted good first issue triage
Dreamstick9/filedrop
6

JavaScript
[Easy] lifecycle.js: fileStreams Set is shared mutable state modified withou… 3 months ago
bug help wanted good first issue
Dreamstick9/filedrop
6

JavaScript
[Medium] lifecycle.js: Stdout flush timeout is hardcoded to 500ms instead of b… 3 months ago
help wanted good first issue triage
Dreamstick9/filedrop
6

JavaScript
[Medium] server.js: Rate limit max requests is hardcoded to 30 instead of b… 3 months ago
help wanted good first issue triage
Dreamstick9/filedrop
6

JavaScript
[Medium] server.js: Rate limit window is hardcoded to 10000ms instead of be… 3 months ago
help wanted good first issue triage
Dreamstick9/filedrop
6

JavaScript
[Easy] mdns.js: Empty catch block silently ignores query failures durin… 3 months ago
bug help wanted good first issue triage
Dreamstick9/filedrop
6

JavaScript
[Easy] mdns.js: Empty catch block in deregister() swallows mdnsInstance… 3 months ago
bug good first issue
Dreamstick9/filedrop
6

JavaScript
[Easy] index.js: Empty catch block suppresses errors during httpAppShutd… 3 months ago
bug help wanted good first issue
Dreamstick9/filedrop
6

JavaScript
[Easy] mdns.js: Empty catch block in onQuery silently swallows mdnsInst… 3 months ago
bug good first issue
Dreamstick9/filedrop
6

JavaScript
Swallowed Error in Catch Block 3 months ago
enhancement good first issue
Dreamstick9/filedrop
6

JavaScript
Swallowed Error in Catch Block 3 months ago
good first issue
Dreamstick9/filedrop
6

JavaScript