Issues

• [Audit: Low] Missing .env.example for public repo

  auditcode-qualitypriority:low
  mondominator/ferret#20 · Filter by author mondominator opened on Apr 4, 2026

• [Audit: Medium] JellyfinEmby update_user_watched returns early on episode fetch failure

  auditbugpriority:medium
  mondominator/ferret#19 · Filter by author mondominator opened on Apr 4, 2026

• [Audit: Low] ferret-logo.png (27KB) tracked in git but only ferret-icon.png is used

  auditdead-codepriority:low
  mondominator/ferret#18 · Filter by author mondominator opened on Apr 4, 2026

• [Audit: Low] CDN dependency for Tailwind CSS — no offline support

  auditcode-qualitypriority:low
  mondominator/ferret#17 · Filter by author mondominator opened on Apr 4, 2026

• [Audit: Low] 24 unpushed commits on main

  auditpriority:lowtech-debt
  mondominator/ferret#16 · Filter by author mondominator opened on Apr 4, 2026

• [Audit: Medium] Settings page exposes API tokens in HTML source without CSRF protection

  auditpriority:mediumsecurity
  mondominator/ferret#15 · Filter by author mondominator opened on Apr 4, 2026

• [Audit: Low] Minor code quality issues across codebase

  auditcode-qualitypriority:low
  mondominator/ferret#14 · Filter by author mondominator opened on Apr 4, 2026

• [Audit: Medium] Stale .env references to Tautulli after code removal

  auditpriority:mediumtech-debt
  mondominator/ferret#13 · Filter by author mondominator opened on Apr 4, 2026

• [Audit: Medium] JellyfinEmby library dedup check is wrong — compares to users_watched not user's libraries

  auditbugpriority:medium
  mondominator/ferret#12 · Filter by author mondominator opened on Apr 4, 2026

• [Audit: Medium] Redundant code in JellyfinEmby — duplicate get/post logic and list comprehension no-ops

  auditcode-qualitypriority:medium
  mondominator/ferret#11 · Filter by author mondominator opened on Apr 4, 2026

• [Audit: Medium] CI lint job silently passes — ruff errors are piped to true

  auditcode-qualitypriority:medium
  mondominator/ferret#10 · Filter by author mondominator opened on Apr 4, 2026

• [Audit: Medium] settings save doesn't persist new keys and lacks Sonarr/Radarr/Cleanup settings

  auditpriority:mediumtech-debt
  mondominator/ferret#9 · Filter by author mondominator opened on Apr 4, 2026

• [Audit: Medium] protected_count is inflated — counts same item once per rule

  auditcode-qualitypriority:medium
  mondominator/ferret#8 · Filter by author mondominator opened on Apr 4, 2026

• [Audit: Medium] Cleanup engine re-fetches all Sonarr data in _perform_deletions

  auditcode-qualitypriority:medium
  mondominator/ferret#7 · Filter by author mondominator opened on Apr 4, 2026

• [Audit: Medium] No tests exist in the codebase

  auditcode-qualitypriority:medium
  mondominator/ferret#6 · Filter by author mondominator opened on Apr 4, 2026

• [Audit: High] Dead templates, stale .env vars, and orphaned WEB_DASHBOARD.md

  auditdead-codepriority:high
  mondominator/ferret#5 · Filter by author mondominator opened on Apr 4, 2026

• [Audit: High] Dashboard exclude writes to .env which doesn't persist in Docker

  auditbugpriority:high
  mondominator/ferret#4 · Filter by author mondominator opened on Apr 4, 2026

• [Audit: High] Duplicate items flagged across overlapping cleanup rules

  auditbugpriority:high
  mondominator/ferret#3 · Filter by author mondominator opened on Apr 4, 2026

• [Audit: High] Misleading Sonarr method name: get_ended_unmonitored_series returns ended+MONITORED

  auditbugpriority:high
  mondominator/ferret#2 · Filter by author mondominator opened on Apr 4, 2026

• [Audit: Critical] .env contains real API tokens and secrets

  auditpriority:criticalsecurity
  mondominator/ferret#1 · Filter by author mondominator opened on Apr 4, 2026