Backlog

Next up

In Progress

Done

Main Roadmap

In Review

Build a dedicated backend

talentblocks-sd

<h2></h2><h2>Phase 1: Security Assessments (Story #2834)</h2>Objective: Complete security audit and establish testing framework<ul><li>Audit and document 14 active dependency vulnerabilities</li><li>Review and secure encryption key management</li><li>Create pre-update validation test checklist for critical paths</li></ul><h2>Phase 2: Critical Fixes (Story #2835)</h2>Objective: Resolve high-priority security vulnerabilities<ul><li>Update form-data package (critical vulnerability)</li><li>Update PrismJS and react-syntax-highlighter dependencies</li><li>Validate file upload/download functionality post-updates</li></ul>Impact: Addresses identified security vulnerabilities in TalentBlocks platform dependencies, ensuring compliance and reducing security risk before implementing new payment features like Stripe Connect.

High Priority

Security Vulnerability Remediation

<h2>What is it?</h2>Stripe Connect enables platforms to facilitate payments between multiple parties - allowing TalentBlocks to process payments from clients to freelancers while automatically collecting platform fees.<h2>Why we need it</h2><ul><li>Automated fee collection - Capture platform commission on every transaction without manual processing</li><li>Compliance handled - Stripe manages KYC, identity verification, and tax reporting</li><li>Scalability - Support growing transaction volume without building payment infrastructure</li></ul><h2>Key features to implement</h2><ul><li>Express Accounts - Quick onboarding for talent providers with Stripe handling verification</li><li>Payment splitting - Automatic routing of funds to providers while collecting platform fees</li><li>Integrated dashboard - Transaction monitoring and reporting within TalentBlocks</li></ul>This positions TalentBlocks as a payment facilitator without the complexity of building our own payment infrastructure.

Talentblocks

Main Roadmap