Issues

• [SECURITY] Update koa, @hapi/wreck and related HTTP framework deps in neo4j and appsync examples

  dependenciesexampleshelp wantedresearchsecurity
  nanlabs/devops-reference#335 · Filter by author ulises-jeremias opened on Jul 27, 2026

• [SECURITY] Audit and update lodash across all examples to >= 4.17.23 (prototype pollution)

  dependenciesexamplesgood first issueHacktoberfesthelp wantedsecurity
  nanlabs/devops-reference#334 · Filter by author ulises-jeremias opened on Jul 27, 2026

• [GOOD FIRST ISSUE] Update form-data to >= 4.0.4 to fix critical vulnerability in multiple examples

  dependenciesexamplesgood first issueHacktoberfesthelp wantedsecurity
  nanlabs/devops-reference#333 · Filter by author ulises-jeremias opened on Jul 27, 2026

• [GOOD FIRST ISSUE] Update mysql2 to >= 3.9.7 to fix critical RCE vulnerability in appsync examples

  dependenciesexamplesgood first issueHacktoberfesthelp wantedsecurity
  nanlabs/devops-reference#332 · Filter by author ulises-jeremias opened on Jul 27, 2026

• [GOOD FIRST ISSUE] Update velocityjs to >= 2.1.7 to fix critical prototype pollution

  dependenciesexamplesgood first issueHacktoberfesthelp wantedsecurity
  nanlabs/devops-reference#331 · Filter by author ulises-jeremias opened on Jul 27, 2026

• [GOOD FIRST ISSUE] Update simple-git to >= 3.36.0 to fix command injection vulnerability

  dependenciesexamplesgood first issueHacktoberfesthelp wantedsecurity
  nanlabs/devops-reference#330 · Filter by author ulises-jeremias opened on Jul 27, 2026

• [GOOD FIRST ISSUE] Update jsonpath-plus to >= 10.2.0 to fix RCE vulnerability

  dependenciesexamplesgood first issueHacktoberfesthelp wantedsecurity
  nanlabs/devops-reference#329 · Filter by author ulises-jeremias opened on Jul 27, 2026

• [SECURITY] Replace (unfixable path traversal) with a maintained alternative

  exampleshelp wantedpractices:devsecopsresearchsecurity
  nanlabs/devops-reference#328 · Filter by author ulises-jeremias opened on Jul 27, 2026

• [SECURITY] Replace abandoned sandbox with a maintained alternative in serverless-appsync-python

  exampleshelp wantedpractices:devsecopsresearchsecurity
  nanlabs/devops-reference#327 · Filter by author ulises-jeremias opened on Jul 27, 2026

• [SECURITY] Migrate Serverless Framework from v3 to v4 across all example projects

  exampleshelp wantedpractices:devsecopsresearchsecurity
  nanlabs/devops-reference#326 · Filter by author ulises-jeremias opened on Jul 27, 2026

• Replace Super-Linter with MegaLinter

  cigood first issueHacktoberfestmaintenance
  nanlabs/devops-reference#244 · Filter by author ulises-jeremias opened on Jul 15, 2026

• Update Danger to validate the standard pull request template

  cihelp wantedmaintenance
  nanlabs/devops-reference#243 · Filter by author ulises-jeremias opened on Jul 15, 2026

• Refresh the package manager comparison with Bun

  documentationgood first issueHacktoberfestresearch
  nanlabs/devops-reference#232 · Filter by author ulises-jeremias opened on Jul 15, 2026

• Document GitHub Actions matrix sharding for large test suites

  cidocumentationexamplesgood first issueHacktoberfest
  nanlabs/devops-reference#231 · Filter by author ulises-jeremias opened on Jul 15, 2026

• Add a local Kafka development example

  documentationexamplesgood first issueHacktoberfestpractices:devsecops
  nanlabs/devops-reference#230 · Filter by author ulises-jeremias opened on Jul 15, 2026

• Get rid of the explicit partial type middy.MiddyfiedHandler

  todo
  nanlabs/devops-reference#162 · Filter by author github-actions opened on Nov 1, 2023

• Setup Snyk in devops-reference

  Hacktoberfestpractices:devsecops
  nanlabs/devops-reference#112 · Filter by author ulises-jeremias opened on Jun 6, 2023

• Setup Code Climate in devops-reference

  Hacktoberfestpractices:devsecops
  nanlabs/devops-reference#111 · Filter by author ulises-jeremias opened on Jun 6, 2023

• Setup Trivy in devops-reference

  Hacktoberfestpractices:devsecops
  nanlabs/devops-reference#110 · Filter by author ulises-jeremias opened on Jun 6, 2023

• Setup SonarQube in devops-reference

  Hacktoberfestpractices:devsecops
  nanlabs/devops-reference#109 · Filter by author ulises-jeremias opened on Jun 1, 2023

• infrastructure: Setup code analysis tools on reference repositories

  Hacktoberfestpractices:devsecops
  nanlabs/devops-reference#108 · Filter by author ulises-jeremias opened on Jun 1, 2023

• examples: Create AWS Cognito resources using Terraform

  Hacktoberfestpractices:devsecops
  nanlabs/devops-reference#73 · Filter by author ulises-jeremias opened on May 3, 2023
  

• examples: Create AWS Cognito resources using Serverless Framework

  Hacktoberfestpractices:devsecops
  nanlabs/devops-reference#72 · Filter by author ulises-jeremias opened on May 3, 2023
  

• examples: AWS Cognito resources using IaC

  Hacktoberfestpractices:devsecops
  nanlabs/devops-reference#71 · Filter by author ulises-jeremias opened on May 3, 2023

• Deployment of NextJs - Self hosting strategy

  Hacktoberfestpractices:devsecopspractices:frontend
  nanlabs/devops-reference#69 · Filter by author rpmolina opened on Apr 25, 2023