packages/database/src/realtime/BrowserPollConnection.ts (3 lines):
	- line 64: //TODO: Perf: the maximum length actually differs from browser to browser.
	- line 395: // TODO: This is an annoying perf hit just to track the number of incoming bytes.  Maybe it should be opt-in.
	- line 742: // TODO: we should make this error visible somehow


packages/app-check/src/proactive-refresh.ts (3 lines):
	- line 24: // TODO: move it to @firebase/util?
	- line 25: // TODO: allow to config whether refresh should happen in the background
	- line 73: // TODO: unit test this


packages/database/src/core/view/ViewProcessor.ts (3 lines):
	- line 235: // TODO: figure out how this plays with "sliding ack windows"
	- line 535: // TODO: I consider an item "in view" if cacheHasChild is true, which checks both the server
	- line 605: // TODO: I consider an item "in view" if cacheHasChild is true, which checks both the server


packages/auth/src/core/util/handler.ts (3 lines):
	- line 84: // TODO set additionalParams from the provider as well?
	- line 101: // TODO: maybe set eid as endipointId
	- line 102: // TODO: maybe set fw as Frameworks.join(",")


packages/database/src/core/Repo.ts (3 lines):
	- line 185: // TODO: This should be @private but it's used by test_access.js and internal.js
	- line 409: // TODO: This should be @private but it's used by test_access.js and internal.js
	- line 500: // TODO: Optimize this behavior to either (a) store flag to skip resolving where possible and / or


packages/database/src/core/util/SortedMap.ts (3 lines):
	- line 32: // TODO: There are some improvements I'd like to make to improve memory / perf:
	- line 35: // TODO: It would also be good (and possibly necessary) to create a base
	- line 592: * (TODO: We should perhaps rename this method to 'put')


integration/messaging/download-browsers.js (2 lines):
	- line 21: // TODO: enable firefox testing once figure out how to give notification permission with SE
	- line 22: // webdriver. TODO: Run the integration test against multiple major chrome versions to ensure


packages/auth/src/platform_cordova/popup_redirect/utils.ts (2 lines):
	- line 113: // TODO: Return the inappbrowser ref that's returned from the open call
	- line 281: // TODO: For IE11 crypto has a different name and this operation comes back


packages/auth-compat/src/auth.ts (2 lines):
	- line 55: // TODO: platform needs to be determined using heuristics
	- line 60: // TODO: platform needs to be determined using heuristics


packages/database/src/core/storage/storage.ts (2 lines):
	- line 25: * TODO: Once MemoryStorage and DOMStorageWrapper have a shared interface this method annotation should change
	- line 51: // TODO: log?


packages/database/src/core/util/validation.ts (2 lines):
	- line 162: // TODO = Perf = Consider combining the recursive validation of keys into NodeFromJSON
	- line 389: // TODO = Validate server better.


packages/database/src/core/AuthTokenProvider.ts (2 lines):
	- line 69: // TODO: Need to figure out all the cases this is raised and whether
	- line 81: // TODO: We might want to wrap the listener and call it with no args to


packages/database/src/realtime/Connection.ts (2 lines):
	- line 396: // TODO: do we want to upgrade? when? maybe a delay?
	- line 438: // TODO: if we're already "connected", we need to trigger a disconnect at the next layer up.


packages/database/src/core/util/Tree.ts (2 lines):
	- line 27: // TODO: Consider making accessors that create children and value lazily or
	- line 59: // TODO: Require pathObj to be Path?


packages/auth/src/platform_browser/persistence/indexed_db.ts (2 lines):
	- line 209: // TODO: consider adding exponential backoff
	- line 355: // TODO: check if we need to fallback if getAll is not supported


repo-scripts/prune-dts/prune-dts.ts (2 lines):
	- line 219: // TODO: We really only need to do this when the type that is extended
	- line 412: // TODO: We may need to change this to return a Union type if


packages/component/src/provider.ts (2 lines):
	- line 164: // TODO: Investigate if we need to make it configurable, because some component may want to cause
	- line 199: // TODO: should we mark the provider as deleted?


packages/performance/src/services/remote_config_service.ts (1 line):
	- line 180: // TODO: Change the assignment of loggingEnabled once the received type is


repo-scripts/api-documenter/src/documenters/MarkdownDocumenterHelpers.ts (1 line):
	- line 120: // TODO: handle method overloads and namespace?


packages/storage/src/service.ts (1 line):
	- line 268: // TODO: What do we want to do if there is an error getting the token?


packages/messaging/src/helpers/migrate-old-database.ts (1 line):
	- line 74: // indexedDb.databases() is an IndexedDB v3 API and does not exist in all browsers. TODO: Remove


packages/auth/src/platform_browser/load_js.ts (1 line):
	- line 26: // TODO: consider adding timeout support & cancellation


packages/database/src/core/view/filter/LimitedFilter.ts (1 line):
	- line 208: // TODO: rename all cache stuff etc to general snap terminology


packages/auth/src/mfa/mfa_resolver.ts (1 line):
	- line 84: // TODO: we should collapse this switch statement into UserCredentialImpl._forOperation and have it support the SIGN_IN case


packages/firestore/src/remote/persistent_stream.ts (1 line):
	- line 443: // TODO(mikelehen): Just use dispatchIfNotClosed, but see TODO below.


packages/auth/src/platform_browser/popup_redirect.ts (1 line):
	- line 131: // TODO: Consider splitting redirect and popup events earlier on


packages/firestore/src/platform/node/grpc_connection.ts (1 line):
	- line 37: // TODO: Fetch runtime version from grpc-js/package.json instead


packages/database/src/core/util/ImmutableTree.ts (1 line):
	- line 75: * TODO Do a perf test -- If we're creating a bunch of `{path: value:}`


packages/util/src/subscribe.ts (1 line):
	- line 34: // TODO: Support also Unsubscribe.unsubscribe?


packages/database/src/core/storage/MemoryStorage.ts (1 line):
	- line 22: * (TODO: create interface for both to implement).


packages/auth/src/core/user/user_impl.ts (1 line):
	- line 205: // TODO: Determine if cancellable-promises are necessary to use in this class so that delete()


packages/app-compat/src/firebaseApp.ts (1 line):
	- line 184: // TODO: investigate why the following needs to be commented out


packages/database/src/core/view/EventRegistration.ts (1 line):
	- line 122: * (TODO: Rework this, since it's hacky)


packages/database/src/core/snap/ChildrenNode.ts (1 line):
	- line 45: // TODO: For memory savings, don't store priorityNode_ if it's empty.


packages/database/src/core/snap/indexes/KeyIndex.ts (1 line):
	- line 52: // TODO: This should really be created once and cached in a static property, but


repo-scripts/api-documenter/src/utils/Utilities.ts (1 line):
	- line 44: // TODO: This can introduce naming collisions.


packages/auth/src/platform_browser/recaptcha/recaptcha_verifier.ts (1 line):
	- line 121: // TODO: Figure out if sdk version is needed


packages/database/src/realtime/WebSocketConnection.ts (1 line):
	- line 320: // TODO: The server is only supposed to send up to 9999 frames (i.e. length <= 4), but that isn't being enforced


packages/storage/src/implementation/backoff.ts (1 line):
	- line 42: // TODO: find a way to exclude Node type definition for storage because storage only works in browser


packages/database/src/core/SyncPoint.ts (1 line):
	- line 134: // TODO: make writesCache take flag for complete server node


packages/auth-compat/src/phone_auth_provider.ts (1 line):
	- line 41: // TODO: remove ts-ignore when moving types from auth-types to auth-compat


packages/firestore/src/local/indexeddb_schema.ts (1 line):
	- line 330: // TODO: We are currently storing full document keys almost three times


packages/auth/src/platform_browser/messagechannel/promise.ts (1 line):
	- line 18: /** TODO: remove this once tslib has a polyfill for Promise.allSettled */


packages/auth/src/core/util/browser.ts (1 line):
	- line 145: // TODO: implement getBrowserName equivalent for OS.


repo-scripts/api-documenter/src/cli/BaseAction.ts (1 line):
	- line 111: // TODO: This is a temporary workaround.  The long term plan is for API Extractor's DocCommentEnhancer


packages/auth-compat/src/recaptcha_verifier.ts (1 line):
	- line 44: // TODO: remove ts-ignore when moving types from auth-types to auth-compat


packages/database/src/core/PersistentConnection.ts (1 line):
	- line 606: // TODO: Only keep track of the most recent put for a given path?


packages/app-compat/src/firebaseNamespaceCore.ts (1 line):
	- line 180: // TODO: The eslint disable can be removed and the 'ignoreRestArgs'


scripts/docgen/docgen.ts (1 line):
	- line 87: // TODO: Throw error if path doesn't exist once all packages add markdown support.


packages/messaging/rollup.config.js (1 line):
	- line 94: // TODO: This may no longer be necessary when we can provide ESM Node


scripts/build/create-overloads.ts (1 line):
	- line 260: // TODO: generate the builtin types from externs, similar to packages/firestore/externs.json


packages/app/src/api.ts (1 line):
	- line 249: // TODO: We can use this check to whitelist strings when/if we set up


repo-scripts/api-documenter/src/documenters/MarkdownDocumenter.ts (1 line):
	- line 366: * TODO: generate member references in the same page


packages/util/src/validation.ts (1 line):
	- line 78: //TODO: I should do more validation here. We only allow certain chars in namespaces.