dhananjay-nautiyal/music

CI has no lint, dependency review or secret scanning, and the repo has no issue templates 11 days ago

enhancement help wanted good first issue ci severity: low

0

Music - modern multi-platform music client (YouTube Music, JioSaavn, Spotify import, local, pluggable Hi-Res modules).

Kotlin

Monolithic files and a pinned R8 override work around a dexing failure caused by an oversized composable 15 days ago

enhancement help wanted severity: medium

dhananjay-nautiyal/music

0

Music - modern multi-platform music client (YouTube Music, JioSaavn, Spotify import, local, pluggable Hi-Res modules).

Kotlin

Rebranding is incomplete: BitChord names, versions and log tags still ship 15 days ago

documentation enhancement help wanted good first issue severity: low

dhananjay-nautiyal/music

0

Music - modern multi-platform music client (YouTube Music, JioSaavn, Spotify import, local, pluggable Hi-Res modules).

Kotlin

Desktop CIO HTTP clients have no request timeout; Ktor version is declared inconsistently across modules 15 days ago

bug help wanted good first issue reliability severity: medium

dhananjay-nautiyal/music

0

Music - modern multi-platform music client (YouTube Music, JioSaavn, Spotify import, local, pluggable Hi-Res modules).

Kotlin

Last.fm API secret is compiled into the APK and stored in unencrypted SharedPreferences 15 days ago

enhancement help wanted security severity: high

dhananjay-nautiyal/music

0

Music - modern multi-platform music client (YouTube Music, JioSaavn, Spotify import, local, pluggable Hi-Res modules).

Kotlin

Signed Android APKs are never published to Releases automatically (no Android job in release.yml) 15 days ago

enhancement help wanted ci severity: medium

dhananjay-nautiyal/music

0

Music - modern multi-platform music client (YouTube Music, JioSaavn, Spotify import, local, pluggable Hi-Res modules).

Kotlin

release.yml: the publish job does not wait for the macOS build, so releases can ship without macOS assets 15 days ago

bug help wanted good first issue ci severity: medium

dhananjay-nautiyal/music

0

Music - modern multi-platform music client (YouTube Music, JioSaavn, Spotify import, local, pluggable Hi-Res modules).

Kotlin

The module fetch binding allows requests to any URL (SSRF) and buffers the whole response in memory 15 days ago

bug help wanted security severity: high

dhananjay-nautiyal/music

0

Music - modern multi-platform music client (YouTube Music, JioSaavn, Spotify import, local, pluggable Hi-Res modules).

Kotlin

Module JavaScript has no execution timeout - one hung module permanently wedges its engine pool 15 days ago

bug help wanted reliability severity: high

dhananjay-nautiyal/music

0

Music - modern multi-platform music client (YouTube Music, JioSaavn, Spotify import, local, pluggable Hi-Res modules).

Kotlin

Search queries and module settings are spliced unescaped into the JavaScript executed by the module host 15 days ago

bug help wanted security severity: high

dhananjay-nautiyal/music

0

Music - modern multi-platform music client (YouTube Music, JioSaavn, Spotify import, local, pluggable Hi-Res modules).

Kotlin

Desktop builds default to the upstream version 1.8-beta1, so the in-app update check can never fire 15 days ago

bug help wanted good first issue severity: medium

dhananjay-nautiyal/music

0

Music - modern multi-platform music client (YouTube Music, JioSaavn, Spotify import, local, pluggable Hi-Res modules).

Kotlin

In-app Android updater downloads the wrong APK on non-arm64 devices (asset naming mismatch) 15 days ago

bug help wanted severity: high

dhananjay-nautiyal/music

0

Music - modern multi-platform music client (YouTube Music, JioSaavn, Spotify import, local, pluggable Hi-Res modules).

Kotlin

Open Issues Need Help