Issues

• No production deployment guide — README "Deployment" is a two-line stub (migrations, worker, secrets, multi-instance caveats undocumented)

  Stellar Wave
  Healthy-Stellar/Healthy-Stellar-backend#1288 · Filter by author chidinma000 opened on Oct 20, 2026
  4

• Research export / de-identification has no documentation (pipelines, k-anonymity, consent revocation, env vars)

  Stellar Wave
  Healthy-Stellar/Healthy-Stellar-backend#1287 · Filter by author chidinma000 opened on Oct 20, 2026
  5

• API versioning is undocumented, and the version-lifecycle policy publishes changelog links to a nonexistent docs/api-versioning.md

  Stellar Wave
  Healthy-Stellar/Healthy-Stellar-backend#1286 · Filter by author chidinma000 opened on Oct 20, 2026
  6

• [Medium] 21 spec files (including the cross-tenant security suites) match no Jest project, and no CI workflow runs any tests

  Stellar Wave
  Healthy-Stellar/Healthy-Stellar-backend#1283 · Filter by author chidinma000 opened on Oct 20, 2026
  5

• [High] AuthController and NotificationsController use I18nContext without importing it, breaking nest build

  Stellar Wave
  Healthy-Stellar/Healthy-Stellar-backend#1280 · Filter by author chidinma000 opened on Oct 20, 2026
  2

  

• [Medium] Login lockout leaks whether the password was correct, and attackers can keep any account locked indefinitely

  Stellar Wave
  Healthy-Stellar/Healthy-Stellar-backend#1279 · Filter by author chidinma000 opened on Oct 20, 2026
  2

• [High] Changing or resetting a password leaves every existing session and refresh token valid

  Stellar Wave
  Healthy-Stellar/Healthy-Stellar-backend#1278 · Filter by author chidinma000 opened on Oct 20, 2026
  2

  

• [Medium] main.ts applies helmet() twice; the second config silently overrides the one under test

  Stellar Wave
  Healthy-Stellar/Healthy-Stellar-backend#1240 · Filter by author emmzy4tech opened on Oct 15, 2026
  2

• [Medium] HIPAA 15-minute inactivity timeout is never enforced — enforceSessionTimeout() has no callers

  Stellar Wave
  Healthy-Stellar/Healthy-Stellar-backend#1191 · Filter by author emmzy4tech opened on Oct 15, 2026
  4

  

• [High] PhiAuditInterceptor records every PHI access with actor 'anonymous' and tenant null

  Stellar Wave
  Healthy-Stellar/Healthy-Stellar-backend#1190 · Filter by author emmzy4tech opened on Oct 15, 2026
  2

• [High] DataResidencyGuard reads request.user.tenantId, which never exists, so strict data residency is never enforced

  Stellar Wave
  Healthy-Stellar/Healthy-Stellar-backend#1189 · Filter by author emmzy4tech opened on Oct 15, 2026
  3

• [Critical] Regression of #1019 — CriticalValuesController still has no authentication guard

  Stellar Wave
  Healthy-Stellar/Healthy-Stellar-backend#1154 · Filter by author emmzy4tech opened on Oct 15, 2026
  6

• [Critical] MultiSigController — no authentication; approve/reject trust a client-supplied signerId and anyone can trigger payments/sweep

  Stellar Wave
  Healthy-Stellar/Healthy-Stellar-backend#1152 · Filter by author emmzy4tech opened on Oct 15, 2026
  4

• Stray working files in repo root (Somzilla.md, TODO.md, PR_DESCRIPTION*.md, verify-*.sh)

  documentationgood first issue
  Healthy-Stellar/Healthy-Stellar-backend#1090 · Filter by author Emeka000 opened on Sep 23, 2026
  2

• Billing: automatically reconcile matched remittances into billing payments and claim status

  enhancementStellar Wave
  Healthy-Stellar/Healthy-Stellar-backend#961 · Filter by author Emeka000 opened on Aug 24, 2026
  5

  

• [Medium] ConsentService.expireConsents() uses the wrong comparison operator, expiring valid consents instead of expired ones

  bugStellar Wave
  Healthy-Stellar/Healthy-Stellar-backend#948 · Filter by author Emeka000 opened on Aug 24, 2026
  8

  

• GraphQL subscription memory leak on stale connections

  bugStellar Wave
  Healthy-Stellar/Healthy-Stellar-backend#625 · Filter by author Emeka000 opened on Jun 23, 2026
  3