the-dmz

[MEDIUM] sse.handler.ts parseInt returns NaN for non-numeric lastEventId at line 49

#2149 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] endorsement.routes.ts parseInt returns NaN for non-numeric page/pageSize at line 245-246 (getGivenEndorsements)

#2148 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] endorsement.routes.ts parseInt returns NaN for non-numeric page/pageSize at line 188-189

#2147 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] reputation.routes.ts parseInt returns NaN for non-numeric page/pageSize at line 146-147

#2146 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] xapi.routes.ts parseInt returns NaN for non-numeric query params in listXapiStatements at line 157-158

#2145 · Apr 2, 2026

bug audit:testing/edge-cases

[LOW] clampLimit returns NaN when limit is NaN in cursor-pagination.ts:92

#2144 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] extractFeatures throws TypeError when email.body is undefined in feature-extraction.ts:295-296

#2143 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] Quality scorer functions throw TypeError when body is null/undefined in quality-scorer.service.ts

#2142 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] sendMessage throws TypeError when input.content is undefined in chat.service.ts:110

#2141 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] billing.repo.ts uses optional config parameter pattern unique among repos

#2140 · Apr 2, 2026

backend audit:code-quality/pattern-consistency

[MEDIUM] isLevelGatedContent returns false when level or requiredLevel is NaN in level-progression.ts

#2139 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] webhook.errors.ts custom errors extend Error instead of AppError

#2138 · Apr 2, 2026

audit:code-quality/consistency

[MEDIUM] Unchecked type cast of achievement criteria could cause runtime errors in achievement.service.ts

#2137 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] Game module submodules have inconsistent internal structure (repo/routes/service)

#2136 · Apr 2, 2026

backend audit:code-quality/pattern-consistency

[MEDIUM] Route handlers use Object.assign(Error) instead of proper error classes

#2135 · Apr 2, 2026

audit:code-quality/consistency

[MEDIUM] evaluateTimeWindow uses invalid date without validation causing NaN comparisons in achievement.criteria-engine.ts

#2134 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] Unchecked type cast of decaySchedule JSON could cause runtime errors in calculateDecayedImpact

#2133 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] calculateLevelUp lacks validation for negative xpToAdd and could overflow to Infinity

#2132 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] getXPProgress could return Infinity for progressPercentage when xpForNextLevel equals xpForCurrentLevel

#2131 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] computeReputationScore returns NaN when any component is NaN in reputation.service.ts

#2130 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] Data access files mix .repository.ts and .repo.ts naming without convention

#2129 · Apr 2, 2026

audit:code-quality/consistency

[MEDIUM] getReputationTier returns bronze when score is NaN in reputation.service.ts

#2128 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] isTrustAtWarning returns false when trustScore is NaN in trust-score.ts

#2127 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] clampFunds returns NaN when funds is NaN and isFundsAtWarning/isFundsAtGameOver have incorrect behavior with NaN

#2126 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] clampTrustScore returns NaN when trustScore is NaN in trust-score.ts

#2125 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] getTrustTier returns wrong tier when trustScore is NaN or Infinity

#2124 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] DEFAULT_RETENTION_DAYS returns undefined for invalid dataCategory in retention.service.ts

#2123 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] calculateExpiryDate produces invalid date when retentionDays is NaN or Infinity

#2122 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] awardXPForDecision and awardXPForIncidentResolved lack validation for invalid difficulty/severity

#2121 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] parseFloat in sessionCompletionRate could produce NaN in reputation.service.ts

#2120 · Apr 2, 2026

bug audit:testing/edge-cases

[LOW] verification-packet.service.ts line 97 has unparenthesized boolean expression

#2111 · Apr 2, 2026

[HIGH] Pagination offset becomes negative when page=0 in getReputationHistory

#2110 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] calculateBacklogPenalty returns NaN when backlogCount is NaN in trust-score.ts

#2109 · Apr 2, 2026

bug audit:testing/edge-cases

[LOW] theme.ts lines 1001-1015 combine nullish coalescing with nested ternaries

#2108 · Apr 2, 2026

[HIGH] getLevelFromXP infinite loop when XP is NaN in level-progression.ts

#2107 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] xapi.routes.ts POST handler mixes domain object building with HTTP handling

#2106 · Apr 2, 2026

[LOW] Some modules export routes from index.ts barrel while others do not

#2105 · Apr 2, 2026

audit:code-quality/consistency

[MEDIUM] xapi.service.ts reads XAPI_ENCRYPTION_KEY from process.env instead of loadConfig()

#2103 · Apr 2, 2026

audit:code-quality/consistency

[CRITICAL] DIFFICULTY_MULTIPLIERS undefined access causes NaN in calculateTrustFromDecisionEvaluation

#2104 · Apr 2, 2026

bug audit:testing/edge-cases

[LOW] facility-handlers.ts dense inline reduce obscures max-finder logic

#2102 · Apr 2, 2026

[MEDIUM] sso-session.service.ts uses process.env directly instead of loadConfig() like cookies.ts

#2101 · Apr 2, 2026

audit:code-quality/consistency

[CRITICAL] CLIENT_TIER_REVENUE returns undefined for invalid clientTier causing downstream NaN

#2100 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] decision-quality.service.ts nested reduce pattern obscures calculation logic

#2099 · Apr 2, 2026

[MEDIUM] Some modules throw plain Error while others use custom errors inconsistently

#2098 · Apr 2, 2026

audit:code-quality/consistency

[MEDIUM] sso-saml.service.ts displayNameValue has confusing boolean expression

#2097 · Apr 2, 2026

[MEDIUM] admin/ module is flat with 50+ files unlike other large modules

#2096 · Apr 2, 2026

audit:code-quality/consistency

[MEDIUM] ai-pipeline.service.ts uses exception-driven control flow for expected conditions

#2095 · Apr 2, 2026

[MEDIUM] notification/ module lacks plugin file unlike other API modules

#2094 · Apr 2, 2026

audit:code-quality/consistency

[MEDIUM] game/ module lacks root index.ts barrel unlike other API modules

#2093 · Apr 2, 2026

audit:code-quality/consistency

[MEDIUM] game/services/ files mix / alias with relative paths inconsistently

#2092 · Apr 2, 2026

audit:code-quality/consistency

[MEDIUM] ai-pipeline.service.ts mixes async/await with .catch() in same module

#2091 · Apr 2, 2026

audit:code-quality/consistency

[MEDIUM] analytics.service.ts mixes async/await with .then()/.catch() in same module

#2090 · Apr 2, 2026

audit:code-quality/consistency

[HIGH] email module uses in-memory Maps instead of database unlike all other modules

#2089 · Apr 2, 2026

backend audit:code-quality/pattern-consistency

[HIGH] parseInt returns NaN without validation in webhook signature check

#2088 · Apr 2, 2026

bug audit:testing/edge-cases

[CRITICAL] Race condition in email quota service causes lost quota counts

#2087 · Apr 2, 2026

bug audit:testing/edge-cases

[LOW] Name field schema z.string().min(1).max(255) duplicated 32 times

#2086 · Apr 2, 2026

backend audit:code-quality/duplication

[MEDIUM] setFullYear() on Feb 29 causes March 1 in non-leap years

#2085 · Apr 2, 2026

bug audit:testing/edge-cases

[MEDIUM] UUID validation regex /^[0-9a-f]{8}-[0-9a-f]{4}-[1-9][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i duplicated 4 times

#2084 · Apr 2, 2026

backend audit:code-quality/duplication

[MEDIUM] Missing edge case tests for achievement service

#2083 · Apr 2, 2026

enhancement testing audit:testing/edge-cases

[HIGH] Content routes boilerplate (chapters, seasons, scenarios, etc.) share 90%+ identical code

#2082 · Apr 2, 2026

backend audit:code-quality/duplication

[MEDIUM] EmailProviderType enum members mix underscore conventions within same enum

#1720 · Apr 2, 2026

backend audit:code-quality/naming

[HIGH] Service layer returns non-standard error format bypassing global error handler

#1719 · Apr 2, 2026

backend audit:maintainability/error-traceability

[LOW] Pagination default constants duplicated with different values across codebase

#1718 · Apr 2, 2026

backend audit:maintainability/config-patterns

[MEDIUM] E2E Test Gap: SAML SSO provider configuration CRUD untested

#1717 · Apr 2, 2026

testing audit:testing/e2e-test-gaps

[MEDIUM] applyEffectivePreferences (82 lines) in theme.ts has 15+ branching paths violating complexity threshold

#1716 · Apr 2, 2026

frontend audit:code-quality/complexity

[MEDIUM] E2E Test Gap: SCIM provisioning token and group mapping management untested

#1715 · Apr 2, 2026

testing audit:testing/e2e-test-gaps

[MEDIUM] Settings routes (GDPR compliance) lack HTTP integration tests

#1714 · Apr 2, 2026

audit:testing/integration-test-gaps

[MEDIUM] Party status strings used as magic literals instead of partyStatuses constants in party.service.ts

#1713 · Apr 2, 2026

backend audit:code-quality/magic-values

[HIGH] E2E Test Gap: Billing subscription and seat management untested

#1712 · Apr 2, 2026

testing audit:testing/e2e-test-gaps

[CRITICAL] generateContent function (400+ lines) in ai-pipeline.service.ts exceeds all complexity thresholds

#1711 · Apr 2, 2026

backend audit:code-quality/complexity

[HIGH] E2E Test Gap: Enterprise onboarding wizard multi-step flow untested

#1710 · Apr 2, 2026

testing audit:testing/e2e-test-gaps

[MEDIUM] SCORM module routes lack HTTP integration tests

#1709 · Apr 2, 2026

audit:testing/integration-test-gaps

[HIGH] E2E Test Gap: Admin user management CRUD operations untested

#1708 · Apr 2, 2026

testing audit:testing/e2e-test-gaps

[MEDIUM] Invalid response error pattern duplicated 78+ times across API client files

#1707 · Apr 2, 2026

audit:maintainability/modularity

[MEDIUM] Unused @anthropic-ai/sdk dependency adds bloat and potential attack surface

#1706 · Apr 2, 2026

audit:maintainability/dependency-management

[HIGH] secretlint configured but not integrated into CI pipeline

#1705 · Apr 2, 2026

audit:code-quality/linting

[MEDIUM] game-session.service.ts violates dependency injection by instantiating database directly

#1704 · Apr 2, 2026

backend audit:architecture/dependency-direction

[MEDIUM] Magic values: Raw string action types instead of GAME_ACTIONS constants across multiple handler files

#1703 · Apr 2, 2026

audit:code-quality/magic-values

[HIGH] E2E Test Gap: Game dashboard core interactions untested

#1702 · Apr 2, 2026

testing audit:testing/e2e-test-gaps

[HIGH] E2E Test Gap: User registration flow end-to-end path untested

#1701 · Apr 2, 2026

testing audit:testing/e2e-test-gaps

[MEDIUM] Redis client singleton in redis.ts makes per-test mocking impossible

#1700 · Apr 2, 2026

backend audit:architecture/coupling audit:testing/test-anti-patterns

[MEDIUM] auth.events.ts (2089 lines) monolithically defines all auth event factories

#1699 · Apr 2, 2026

backend audit:maintainability/modularity

[MEDIUM] Complexity and complexity-related rules set to warning instead of error

#1698 · Apr 2, 2026

audit:code-quality/linting

[LOW] Game state configuration imports UI store creating domain coupling

#1697 · Apr 2, 2026

frontend audit:architecture/dependency-direction

[MEDIUM] svelte-check major version behind: v3.6 vs v4.4

#1696 · Apr 2, 2026

frontend audit:maintainability/upgrade-paths

[MEDIUM] Database connection pool uses module-level Maps preventing per-test isolation

#1695 · Apr 2, 2026

backend audit:architecture/coupling audit:testing/test-anti-patterns

[HIGH] Anthropic AI SDK 58+ minor versions behind: v0.24 vs v0.82

#1694 · Apr 2, 2026

backend audit:maintainability/upgrade-paths

[MEDIUM] Game stores mix state management with API calls violating single responsibility

#1693 · Apr 2, 2026

frontend audit:architecture/coupling

[HIGH] Shared services layer imports Fastify framework internals

#1692 · Apr 2, 2026

backend audit:architecture/dependency-direction

[MEDIUM] Chat and Social modules have bidirectional coupling violating modularity

#1691 · Apr 2, 2026

backend audit:architecture/coupling

Beginner-Friendly Issues 90