dataiku/kiji-proxy

Summary ESLint does not cover the Node helper scripts under src/scripts/. The lint script runs eslint . from src/frontend (package.json → "lint": "cd src/frontend && npm run lint"), and the flat config's base path is src/frontend, so any file outside it is reported as "File ignored because outside of base path". As a result, scripts like src/scripts/electron-dev.js, remove-locales.js, notarize.js, and sync-manifest-version.js are never linted in CI. They currently have to be checked by hand, e.g.: node_modules/.bin/eslint --config src/frontend/eslint.config.js --no-config-lookup src/scripts/electron-dev.js Proposal Bring src/scripts/*.js into the lint path with a Node-oriented config block, and make npm run lint cover them automatically so they're checked in CI. Options to consider: A root-level flat config that includes both src/frontend and src/scripts, or A dedicated config block for src/scripts/**/*.js with Node globals and CommonJS sourceType. These scripts are CommonJS Node

src/backend/pii/masking_service.go orchestrates detection + generator lookup + mapping persistence, but lacks a dedicated masking_service_test.go. Sibling files (database.go, generators, detectors) all have tests. What to add Create src/backend/pii/masking_service_test.go covering: A string containing 2–3 PII types — each is masked, original/masked pairs are stored in the mapper Repeated identical PII — should map to the same dummy value within a session No PII in input — output equals input, no mappings stored Mixed-language / unicode input — does not panic and round-trips correctly Hints Stub the detector to return a fixed []Entity rather than running ONNX in tests. Reuse database_test.go patterns. Run go test ./src/backend/pii/.... Difficulty: good first issue, ~1–2 hours.

src/backend/processor/response.go is the only file in the processor package and has no response_test.go. Response post-processing (PII restoration / streaming handling) is on the hot path and worth testing in isolation. What to add Create src/backend/processor/response_test.go with table-driven tests for: Non-streaming JSON response — masked values are restored to originals Streaming/SSE response — chunks are reassembled and restored correctly Empty body / no PII — passes through unchanged Mapping miss (response contains a masked token with no entry in the map) — fallback is documented and tested Hints Mirror the style of src/backend/pii/database_test.go for table-driven tests. Construct mappings manually rather than wiring up the full detector. Run go test ./src/backend/processor/.... Difficulty: good first issue, ~1–2 hours.

src/backend/server/server.go (~28KB) handles HTTP request orchestration but has no server_test.go next to it. The rest of the backend (pii/, proxy/, providers/, config/) has companion test files, so the server is an outlier. What to add Create src/backend/server/server_test.go covering at least: Happy-path request handling for one provider (OpenAI is fine) Malformed JSON body — should return 400 Empty body — should return 400 Missing/invalid Authorization header pass-through Concurrent request handling (table-driven with t.Parallel()) Hints Use httptest.NewRecorder() / httptest.NewServer() — see src/backend/proxy/handler_test.go for the pattern already in use here. Stub or fake the PII detector + provider — you don't need a real ONNX model. Run with make test-all or go test ./src/backend/server/.... Difficulty: good first issue, ~1–2 hours.

The provider files under src/backend/providers/ all start with a bare package providers line. Go convention (and many linters such as revive/golint) want a // Package providers ... doc comment on at least one file, plus a short doc comment on each exported type/function. Files missing package or top-of-file doc comments: src/backend/providers/provider.go src/backend/providers/openai.go src/backend/providers/anthropic.go src/backend/providers/gemini.go src/backend/providers/mistral.go src/backend/providers/custom.go What to do Add a single `// Package providers ...` comment at the top of provider.go describing what the package does (LLM provider adapters: request/response shape per provider, masking integration). For each provider file, add a one-line comment above the file header (e.g. // File openai.go contains the OpenAI provider adapter.). Add short // FunctionName ... doc comments to exported types and functions that currently lack them. Hints Run make check or golangci-lint r