Open Issues Need Help
View All on GitHub enhancement good first issue Stellar Wave checks-crate
Document `large-loop` in `docs/checks.md` 8 days ago
documentation good first issue Stellar Wave
documentation good first issue Stellar Wave
documentation good first issue Stellar Wave
documentation good first issue Stellar Wave
documentation good first issue Stellar Wave
documentation good first issue Stellar Wave
Document `missing-nonce` in `docs/checks.md` 8 days ago
documentation good first issue Stellar Wave
documentation good first issue Stellar Wave
documentation good first issue Stellar Wave
documentation good first issue Stellar Wave
documentation good first issue Stellar Wave
documentation good first issue Stellar Wave
documentation good first issue Stellar Wave
[CRITICAL] [build] Root `Cargo.toml` is missing `workspace.package` fields referenced by every crate 10 days ago
bug good first issue critical
good first issue Stellar Wave
documentation help wanted Stellar Wave
documentation good first issue Stellar Wave
documentation good first issue Stellar Wave
good first issue Stellar Wave
good first issue Stellar Wave
Add `docs/checks.md` section for `hardcoded-address` check about 1 month ago
documentation good first issue Stellar Wave
Add `docs/checks.md` section for `panic-in-contract` check about 1 month ago
documentation good first issue Stellar Wave
Add `docs/checks.md` section for `reentrancy-risk` check about 1 month ago
documentation good first issue Stellar Wave
Add CI/license/edition badges to README about 1 month ago
documentation good first issue Stellar Wave
Add `docs/checks.md` section for `mutable-global-state` check about 1 month ago
documentation good first issue Stellar Wave
documentation good first issue Stellar Wave
CLI: add explicit `--no-color` flag as complement to `NO_COLOR` env var about 1 month ago
enhancement good first issue Stellar Wave
Add `docs/false-positives.md` guide on suppressing findings about 1 month ago
documentation good first issue Stellar Wave
Document the `Finding` JSON output schema in docs/ about 1 month ago
documentation good first issue Stellar Wave
Add SECURITY.md with responsible disclosure policy about 1 month ago
documentation good first issue Stellar Wave
analyzer: validate unique check names in `default_checks()` at startup about 1 month ago
enhancement good first issue Stellar Wave
analyzer: add `group_by_severity()` helper to group findings by severity about 1 month ago
enhancement good first issue Stellar Wave
analyzer: add `group_by_file()` helper to group findings by file path about 1 month ago
enhancement good first issue Stellar Wave
analyzer: skip auto-generated files (`// @generated` header) about 1 month ago
enhancement good first issue Stellar Wave
Extend `describe_check()` and `describe_rule()` to cover all registered check names about 1 month ago
enhancement good first issue Stellar Wave
Add `--fail-on-any` flag to exit non-zero for any severity finding about 1 month ago
enhancement good first issue Stellar Wave
CLI: colorize `check_name` column in pretty-print output by severity about 1 month ago
enhancement good first issue Stellar Wave
Add `--verbose` / `-v` flag to print each scanned file path about 1 month ago
enhancement good first issue Stellar Wave
Add `missing-contract-annotation` test fixtures about 1 month ago
good first issue Stellar Wave
good first issue Stellar Wave
good first issue Stellar Wave
Register `mutable-global-state` check in `default_checks()` about 1 month ago
bug help wanted Stellar Wave
Add test fixtures for `unsafe-cross-contract-input` check (safe + vulnerable crates) about 1 month ago
good first issue Stellar Wave
Add `unprotected-upgrade` check — detect upgrade/migrate entrypoints without auth gate about 1 month ago
enhancement help wanted Stellar Wave
Add `unchecked-token-amount` check — detect token transfer calls where amount is not validated > 0 about 1 month ago
enhancement help wanted Stellar Wave
Add `missing-nonce` check — detect state-mutating functions without replay protection about 1 month ago
enhancement help wanted Stellar Wave
Register `reentrancy-risk` check in `default_checks()` about 1 month ago
bug help wanted Stellar Wave
Add `missing-event-for-admin-change` check — detect admin/owner changes without event emission about 1 month ago
enhancement help wanted Stellar Wave
Add `unprotected-token-mint` check — detect `mint`/`burn` entrypoints without auth gate about 1 month ago
enhancement help wanted Stellar Wave
Add `unprotected-contract-deployment` check — detect contract deployment patterns without auth about 1 month ago
enhancement help wanted Stellar Wave
Register `panic-in-contract` check in `default_checks()` about 1 month ago
bug help wanted Stellar Wave
Add `unsafe-randomness` check — detect use of ledger timestamp/sequence as randomness source about 1 month ago
enhancement help wanted Stellar Wave
Add `missing-input-length-bound` check — detect `Bytes`/`Vec` parameters without length validation about 1 month ago
enhancement help wanted Stellar Wave
enhancement help wanted Stellar Wave
Add `unchecked-divisor` check — detect integer divisions where divisor is not validated > 0 about 1 month ago
enhancement help wanted Stellar Wave
Add `missing-balance-check` check about 1 month ago
enhancement help wanted Stellar Wave
Add `unbounded-vec-growth` check about 1 month ago
enhancement help wanted Stellar Wave
Add `auth-after-storage-write` check about 1 month ago
enhancement help wanted Stellar Wave
CLI: print a warning when no `.rs` files are found in the scanned path about 1 month ago
enhancement good first issue Stellar Wave
Add `docs/checks.md` sections for unregistered checks (delegate, events, key-collision, transfer) about 1 month ago
documentation good first issue Stellar Wave
Add `unchecked-invoke-return` check about 1 month ago
enhancement help wanted Stellar Wave
Add `re-initialization-risk` check about 1 month ago
enhancement help wanted Stellar Wave
Register `transfer` check in `default_checks()` about 1 month ago
bug help wanted Stellar Wave
Register `key-collision` check in `default_checks()` about 1 month ago
bug help wanted Stellar Wave
Register `missing-event-emission` check in `default_checks()` about 1 month ago
bug help wanted Stellar Wave
Register `delegate-call-risk` check in `default_checks()` about 1 month ago
bug help wanted Stellar Wave
help wanted Stellar Wave
Add test fixtures for `delegate-call-risk` check about 1 month ago
good first issue Stellar Wave
Add test fixtures for `missing-event-emission` check about 1 month ago
good first issue Stellar Wave
Sort findings by file path then line number in all output formats about 1 month ago
enhancement good first issue Stellar Wave
Add `docs/architecture.md` describing crate boundaries and data flow about 1 month ago
documentation good first issue Stellar Wave
Add `rule_url` field to all built-in `Finding` structs about 1 month ago
enhancement good first issue Stellar Wave
Add `unsafe-cross-contract-input` check about 1 month ago
help wanted Stellar Wave
Add `missing-contract-annotation` check about 1 month ago
help wanted Stellar Wave
Add `mutable-global-state` check about 1 month ago
help wanted Stellar Wave
auth check: recognize `require_auth_for_args` as valid auth gate about 1 month ago
help wanted Stellar Wave
Add `missing-zero-address-check` check about 1 month ago
help wanted Stellar Wave
Add `panic-in-contract` check about 1 month ago
help wanted Stellar Wave
Add `reentrancy-risk` check about 1 month ago
help wanted Stellar Wave
Add `integer-division-truncation` check about 1 month ago
help wanted Stellar Wave
Add `large-data-in-instance-storage` check about 1 month ago
help wanted Stellar Wave
Add `public-constructor` check about 1 month ago
help wanted Stellar Wave
analyzer: parallel file scanning with `rayon` about 1 month ago
help wanted Stellar Wave
Add `delegate-call-risk` check about 1 month ago
help wanted Stellar Wave
Add `self-transfer` check about 1 month ago
help wanted Stellar Wave
Add `symbol-key-collision` check about 1 month ago
help wanted Stellar Wave
Add `missing-event-emission` check about 1 month ago
help wanted Stellar Wave
CLI: show summary line after pretty-print output about 1 month ago
good first issue Stellar Wave
CLI: use distinct colour for Medium severity in pretty-print output about 1 month ago
good first issue Stellar Wave
Add `--quiet` flag to suppress output on success about 1 month ago
good first issue Stellar Wave
Add `missing-ttl-extension` check about 1 month ago
help wanted Stellar Wave
Add `forbidden-std-imports` check about 1 month ago
help wanted Stellar Wave
Add `hardcoded-address` check about 1 month ago
help wanted Stellar Wave
Add `uninitialized-storage-read` check about 1 month ago
help wanted Stellar Wave
analyzer: support scanning a single `.rs` file about 1 month ago
help wanted Stellar Wave