Issues

• Update <html lang> on language switch and add RTL support for Arabic

  accessibilityi18nintermediate
  SourceXXL/alian_structure-UI#81 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Add focus management and aria-labelledby to ReferralShareModal (no focus trap, no restore)

  accessibilityintermediate
  SourceXXL/alian_structure-UI#80 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Remove role=presentation from interactive elements and add aria-hidden to decorative content

  accessibilitygood first issue
  SourceXXL/alian_structure-UI#79 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Add visible :focus-visible rings — focus:outline-none currently removes focus with no replacement

  accessibilitygood first issue
  SourceXXL/alian_structure-UI#78 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Fix WCAG AA contrast failures: text-zinc-600 / text-gray-500 on the dark cosmic background

  accessibilityintermediate
  SourceXXL/alian_structure-UI#77 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Add aria-live regions and role=alert to async status and error banners

  accessibilityintermediate
  SourceXXL/alian_structure-UI#76 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Add a skip-to-content link and consistent <main> landmark (neither exists)

  accessibilitygood first issue
  SourceXXL/alian_structure-UI#75 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Associate every <label> with its form control (BugReportForm, ScanForm, FilterPanel and 8 more)

  accessibilityintermediate
  SourceXXL/alian_structure-UI#74 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Add aria-label to all icon-only buttons (only 4 exist in the entire codebase)

  accessibilitygood first issue
  SourceXXL/alian_structure-UI#73 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Add keyboard semantics to clickable Box/div elements in ReferralShareModal, AgentCard and SimulationCard

  accessibilityintermediate
  SourceXXL/alian_structure-UI#72 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Make the build ID deterministic and stop using Date.now() in PWA cache keys

  intermediateperformancetooling
  SourceXXL/alian_structure-UI#71 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Fix useEffect dependency bugs: exhaustive-deps warnings, Zustand selectors and useRewardCalculator

  intermediateperformancerefactor
  SourceXXL/alian_structure-UI#70 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Bound the Prometheus series count and point count in GET /api/metrics/panel

  advancedperformance
  SourceXXL/alian_structure-UI#69 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Fix hydration mismatch and per-render DOM churn in the animated starfield background

  bugintermediateperformance
  SourceXXL/alian_structure-UI#68 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Fix Zustand v5 selector returning a new array on every store read (causes re-render on every state change)

  intermediateperformance
  SourceXXL/alian_structure-UI#67 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Code-split Recharts with next/dynamic — there is not a single next/dynamic import in the repo

  intermediateperformance
  SourceXXL/alian_structure-UI#66 · Filter by author memplethee-lab opened on Oct 9, 2026

• Memoize Stellar Horizon and Soroban RPC clients — a new server is constructed on every call

  intermediateperformance
  SourceXXL/alian_structure-UI#65 · Filter by author memplethee-lab opened on Oct 9, 2026

• Replace module-level in-memory stores in API routes with a proper data layer

  advancedrefactorsecurity
  SourceXXL/alian_structure-UI#64 · Filter by author memplethee-lab opened on Oct 9, 2026

• Add rate limiting to POST /api/waitlist, /api/bug-reports and /api/security (no limits exist anywhere)

  good first issueintermediatesecurity
  SourceXXL/alian_structure-UI#63 · Filter by author memplethee-lab opened on Oct 9, 2026

• Stop leaking internal error.message to clients in 6 route handlers

  intermediatesecurity
  SourceXXL/alian_structure-UI#62 · Filter by author memplethee-lab opened on Oct 9, 2026

• Add security headers and a Content Security Policy in next.config.js (there is no headers() function)

  intermediatesecurity
  SourceXXL/alian_structure-UI#61 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Add a shared request-validation layer (zod) to all 18 route handlers under app/api/**

  advancedrefactorsecurity
  SourceXXL/alian_structure-UI#60 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Privilege escalation: /api/telemetry/session trusts the role from the query string and the request body

  advancedsecurity
  SourceXXL/alian_structure-UI#59 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Cap and validate ownedAgentIds in GET /api/analytics — unbounded input drives unbounded Horizon fetches

  intermediatesecurity
  SourceXXL/alian_structure-UI#58 · Filter by author memplethee-lab opened on Oct 9, 2026
  1

• Add middleware.ts with authentication guards and rate limiting for /api/** (none exists)

  advancedsecurity
  SourceXXL/alian_structure-UI#57 · Filter by author memplethee-lab opened on Oct 9, 2026
  1