All issues

Issues

Search Issues

Search results

Open

Closed

Memory cache TTL reset on Redis miss uses hardcoded DEFAULT_TTL_SECONDS instead of remaining Redis TTL

Status: Open.

#359 In xthxr/piik.me;

· Poojax21 opened

on Aug 30, 2026

Add Troubleshooting Guide and FAQ to Documentation

Status: Open.

#348 In xthxr/piik.me;

· Dippp10-ally opened

on Aug 10, 2026

Visual Improvement for price container

GSSoC'26

level:intermediate

mentor:xthxr

Status: Open.

#344 In xthxr/piik.me;

· shahabuddinwebdev opened

on Aug 7, 2026

Improve Pricing Card UI for Better Readability in Dark Mode

GSSoC'26

level:beginner

mentor:xthxr

Status: Open.

#336 In xthxr/piik.me;

· shahabuddinwebdev opened

on Jul 31, 2026

[Feature]: Add a GitHub Actions CI workflow for Node.js linting and a basic server smoke test since the project currently has no automated quality checks on PRs

Status: Open.

#306 In xthxr/piik.me;

· divyanshim27 opened

on Jul 22, 2026

[Feature]: Add link expiration support — allow users to set an optional TTL (time-to-live) when creating a short link so expired links automatically return 410 Gone

Status: Open.

#305 In xthxr/piik.me;

· divyanshim27 opened

on Jul 22, 2026

[Security]: Add rate limiting via express-rate-limit to the /api/shorten and /api/track endpoints — currently any unauthenticated caller can create unlimited short links and flood analytics

Status: Open.

#304 In xthxr/piik.me;

· divyanshim27 opened

on Jul 22, 2026

security: `POST /api/shorten` accepts any destination URL including `javascript:`, `data:`, and `file:` protocol URLs — these can be weaponized for phishing or XSS via redirect

Status: Open.

#282 In xthxr/piik.me;

· prince-pokharna opened

on Jul 19, 2026

feat: bio link page (`/username`) has no Open Graph meta tags — when shared on Twitter, WhatsApp, or LinkedIn, the link shows a blank preview with no name, bio, or profile image

Status: Open.

#281 In xthxr/piik.me;

· prince-pokharna opened

on Jul 19, 2026

bug: `image-1.png` through `image-5.png` and `image.png` are committed as binary blobs at the repository root — these screenshot images inflate clone size and have no place in version-controlled source code

Status: Open.

#280 In xthxr/piik.me;

· prince-pokharna opened

on Jul 19, 2026

security: short link redirect endpoint `/:shortCode` has no click validation — the same client can inflate click counts by hitting a redirect URL in a loop, making all analytics data unreliable

Status: Open.

#279 In xthxr/piik.me;

· prince-pokharna opened

on Jul 19, 2026

feat: bio link pages (`piik.me/username`) have no `og:` Open Graph meta tags — sharing a bio link on WhatsApp, Twitter, or LinkedIn shows a blank preview with no title, description, or image, reducing click-through rate significantly

Status: Open.

#277 In xthxr/piik.me;

· divyanshim27 opened

on Jul 15, 2026

Navigation Menu

Uh oh!

All issues

Issues

Search results

Memory cache TTL reset on Redis miss uses hardcoded DEFAULT_TTL_SECONDS instead of remaining Redis TTL

Add Troubleshooting Guide and FAQ to Documentation

Visual Improvement for price container

Improve Pricing Card UI for Better Readability in Dark Mode

[Feature]: Add a GitHub Actions CI workflow for Node.js linting and a basic server smoke test since the project currently has no automated quality checks on PRs

[Feature]: Add link expiration support — allow users to set an optional TTL (time-to-live) when creating a short link so expired links automatically return 410 Gone

[Security]: Add rate limiting via express-rate-limit to the /api/shorten and /api/track endpoints — currently any unauthenticated caller can create unlimited short links and flood analytics

security: `POST /api/shorten` accepts any destination URL including `javascript:`, `data:`, and `file:` protocol URLs — these can be weaponized for phishing or XSS via redirect

feat: bio link page (`/username`) has no Open Graph meta tags — when shared on Twitter, WhatsApp, or LinkedIn, the link shows a blank preview with no name, bio, or profile image

bug: `image-1.png` through `image-5.png` and `image.png` are committed as binary blobs at the repository root — these screenshot images inflate clone size and have no place in version-controlled source code

security: short link redirect endpoint `/:shortCode` has no click validation — the same client can inflate click counts by hitting a redirect URL in a loop, making all analytics data unreliable

feat: bio link pages (`piik.me/username`) have no `og:` Open Graph meta tags — sharing a bio link on WhatsApp, Twitter, or LinkedIn shows a blank preview with no title, description, or image, reducing click-through rate significantly