All issues

Search results

EventCard uses native alert() for errors and silently swallows exceptions in catch block

Status: Open.

#243 In arzoo0511/ecoplay;

· Siddh2024 opened on Jul 19, 2026

ErrorBoundary lacks retry mechanism, uses inline styles, and exposes raw error objects to end users

Status: Open.

#242 In arzoo0511/ecoplay;

· Siddh2024 opened on Jul 19, 2026

[CRITICAL] Real Supabase Secret Key and database credentials committed to .env and .env.example -- immediate rotation required

Status: Open.

#241 In arzoo0511/ecoplay;

· Siddh2024 opened on Jul 19, 2026

feat: add global leaderboard page at /leaderboard with top 50 players by points, filterable by weekly/monthly/all-time — the README promises global leaderboards but only the Ocean Cleanup game has a game-specific one

Status: Open.

#238 In arzoo0511/ecoplay;

· prince-pokharna opened on Jul 11, 2026

feat: add persistent daily challenge system with Supabase integration and streak tracking — challenge progress currently resets on every page reload as it is stored only in local React state

Status: Open.

#237 In arzoo0511/ecoplay;

· prince-pokharna opened on Jul 11, 2026

docs: add CONTRIBUTING.md with full local setup guide, Supabase environment walkthrough, branch strategy, and PR process — the project currently has no contributor documentation making GSSOC onboarding impossible

Status: Open.

#236 In arzoo0511/ecoplay;

· prince-pokharna opened on Jul 11, 2026

bug: database/schema.sql referenced in README setup instructions does not exist in the repository — this is a P0 blocker that makes the project impossible to set up for any contributor

Status: Open.

#235 In arzoo0511/ecoplay;

· prince-pokharna opened on Jul 11, 2026

Bug: Auth flicker — getSession sets null before getUser resolves

Status: Open.

#230 In arzoo0511/ecoplay;

· Siddh2024 opened on Jul 11, 2026

Security: Hardcoded Supabase service_role key exposed in git history

Status: Open.

#229 In arzoo0511/ecoplay;

· Siddh2024 opened on Jul 11, 2026

[Data-integrity] Community post likes can be inflated indefinitely — client-only dedup + RPC has no per-user check

Status: Open.

#224 In arzoo0511/ecoplay;

· vedant7007 opened on Jul 11, 2026

[Bug] AuthContext getSession handler overwrites session-derived user with null on every load

Status: Open.

#223 In arzoo0511/ecoplay;

· vedant7007 opened on Jul 11, 2026

[Data-integrity] SDG Bingo missions award XP under wrong activityType — pollutes xp_ledger and inflates daily_challenge counter

Status: Open.

#221 In arzoo0511/ecoplay;

· vedant7007 opened on Jul 7, 2026