Good First Issues

This is a list of JavaScript repositories with good first issues for newcomers to open source. Contributions are welcome!

This list gets updated every day at midnight.

vercel/next.js

• ISG with GIP in _app overrides cache-control of ISG page
• getInitialProps is not running when Router.replace's "href" and "as" contains hash and query params inside "href" change.

WordPress/gutenberg

• Dependency Extraction Webpack Plugin: Prettify the output of the development asset files
• Remove custon job_status ouput in favor of the native needs.<job_id>.result
• apiFetch should be able to handle a 200 response code with an empty body
• Scripts: Try using cosmiconf for locating tool configs
• Allow the PanelColorSettings to be visible if no colors and but with children
• Cover Block: Allow Video backgrounds to be 'Fixed'

AleksaMCode/pnls-data-collector

• Update bulk delete of /stats/ in Firebase [aggregator]

nextcloud/mail

• Hardening IspDbConfigurationDetector.detectImapAndSmtp

layer5io/docs

• [Docs] Improve Related Docs Links in Pinning Models to Dock Page

SecureBananaLabs/bug-bounty

• Low Handing Fruit Automation
• Pixel Art Creation with high Creative Thinking
• Technical Poem Generation and Content Creation
• Refresh token endpoint ignores the provided refresh token
• Registration token subject can drift from returned user id
• fix(auth): prevent admin role self-assignment during registration
• Bug: Proposal creation accepts records missing estimated duration
• Bug: Missing admin role authorization check on admin metrics endpoint
• Bug: Refresh endpoint mints tokens without validating a refresh token
• User creation endpoint has no input validation
• Payment endpoint lacks authentication — unauthenticated payment creation
• Upload endpoint lacks authentication — unauthenticated file uploads allowed
• Admin routes lack role-based access control — any authenticated user can access admin endpoints
• Search endpoint has no input validation or length limit on query
• Benchmark APIs with p50, p95, p99 latency, RPS, error rate and TTFB
• @freelanceflow/ui package entrypoint should be directly importable (reissue via #743)
• Notification creation should preserve server-owned id and read state
• Job validation should reject inverted budget ranges
• Payment API should require authentication
• registerUser access token can reference a different user id
• auth refresh endpoint issues tokens without verifying the requester
• upload endpoint accepts empty file submissions as successful uploads
• fix: prevent admin role self-assignment during registration
• fix: enforce authentication on job creation endpoint
• fix: prevent admin role self-assignment
• fix: prevent admin role self-assignment during registration
• fix: prevent admin role self-assignment
• Bug: Multiple security vulnerabilities in API layer - registerUser() ID mismatch, missing auth, missing validation
• Implement Secure Payment Gateway and Payment Service
• Search endpoint has no input validation or length limit on query
• CORS configured with no origin restrictions — allows any domain
• Job creation endpoint lacks authentication — anyone can post jobs
• Patch PostCSS audit advisory from Next dependency lockfile
• fix: prevent DoS on search endpoint via query length limit and input validation
• Settings page should provide actionable account controls
• Settings page should provide actionable account controls
• Bug: Admin role self-assignment via registration endpoint
• Job detail page should render matching mock job and unknown fallback
• Job detail route should resolve mock jobs by id
• Freelancer profile should render matching mock profile and unknown fallback
• Registration token subject should match returned user id
• Registration should require fullName to match User model
• @freelanceflow/db package should expose an importable workspace entrypoint
• @freelanceflow/ui package entrypoint should be directly importable
• Job detail route should resolve mock jobs by id (reissue via #743)
• Settings page should provide actionable account controls
• Reject inverted job budget ranges in job validation
• Reject inverted job budget ranges in job validation
• Freelancer profile route should resolve mock profiles by username
• Calculate the exact value of PI #2872
• Calculate the exact value of PI
• Implement a fully functional Admin Panel
• Bug: registerUser signs token with a different generated user id
• Bug: user creation accepts empty payloads and client-controlled ids
• Bug: Rate limiter should count malformed JSON before body parsing

nodejs/node

• test_runner: do not read from process.argv and process.cwd() in run()
• test_runner: print failed coverage reports with dot runner
• fs: utf8 fast paths don't accept all valid utf8 values

meshery/meshery.io

• [DevOps] Populate Meshery Catalog with Sample Apps using meshery UI
• Website: Consolidate duplicative and unused CSS

JSONbored/metagraphed

• Enrich SN123 MANTIS — add OpenAPI/Swagger spec
• Enrich SN127 Astrid — add OpenAPI/Swagger spec
• Enrich SN126 Poker44 — add OpenAPI/Swagger spec
• Enrich SN125 8 Ball — add OpenAPI/Swagger spec
• Enrich SN123 MANTIS — add public API endpoint
• Enrich SN121 sundae_bar — add OpenAPI/Swagger spec
• Enrich SN119 Satori — add public data artifact
• Enrich SN119 Satori — add OpenAPI/Swagger spec
• Enrich SN119 Satori — add public API endpoint
• Enrich SN118 Ditto — add OpenAPI/Swagger spec
• Enrich SN118 Ditto — add public API endpoint
• Enrich SN117 BrainPlay — add OpenAPI/Swagger spec
• Enrich SN116 TaoLend — add public data artifact
• Enrich SN116 TaoLend — add OpenAPI/Swagger spec
• Enrich SN116 TaoLend — add public API endpoint
• Enrich SN115 HashiChain — add public data artifact
• Enrich SN115 HashiChain — add OpenAPI/Swagger spec
• Enrich SN115 HashiChain — add public API endpoint
• Enrich SN114 SOMA — add OpenAPI/Swagger spec
• Enrich SN113 TensorUSD — add OpenAPI/Swagger spec
• Enrich SN112 minotaur — add OpenAPI/Swagger spec
• Enrich SN111 oneoneone — add public data artifact
• Enrich SN111 oneoneone — add OpenAPI/Swagger spec
• Enrich SN111 oneoneone — add public API endpoint
• Enrich SN109 Academia — add OpenAPI/Swagger spec
• Enrich SN109 Academia — add public API endpoint
• Enrich SN108 TalkHead — add public data artifact
• Enrich SN108 TalkHead — add OpenAPI/Swagger spec
• Enrich SN107 Minos — add public data artifact
• Enrich SN106 Nodexo — add OpenAPI/Swagger spec
• Enrich SN104 for sale (burn to uid1) — add public data artifact
• Enrich SN104 for sale (burn to uid1) — add OpenAPI/Swagger spec
• Enrich SN104 for sale (burn to uid1) — add public API endpoint
• Enrich SN103 Djinn — add OpenAPI/Swagger spec
• Enrich SN101 eni — add public data artifact
• Enrich SN101 eni — add OpenAPI/Swagger spec
• Enrich SN101 eni — add public API endpoint
• Enrich SN98 ForeverMoney — add OpenAPI/Swagger spec
• Enrich SN97 Albedo — add OpenAPI/Swagger spec
• Enrich SN95 Actual — add OpenAPI/Swagger spec
• Enrich SN92 Tensorclaw — add public data artifact
• Enrich SN91 Bitstarter #1 — add public data artifact
• Enrich SN91 Bitstarter #1 — add OpenAPI/Swagger spec
• Enrich SN90 DegenBrain — add public data artifact
• Enrich SN89 InfiniteHash — add public data artifact
• Enrich SN89 InfiniteHash — add OpenAPI/Swagger spec
• Enrich SN89 InfiniteHash — add public API endpoint
• Enrich SN88 Investing — add OpenAPI/Swagger spec
• Enrich SN87 Luminar Network — add OpenAPI/Swagger spec
• Enrich SN86 Subnet 86 — add public data artifact
• Enrich SN86 Subnet 86 — add OpenAPI/Swagger spec
• Enrich SN86 Subnet 86 — add public API endpoint
• Enrich SN84 ansuz — add public data artifact
• Enrich SN83 CliqueAI — add public data artifact
• Enrich SN83 CliqueAI — add OpenAPI/Swagger spec
• Enrich SN83 CliqueAI — add public API endpoint
• Enrich SN82 Compelle — add OpenAPI/Swagger spec
• Enrich SN81 Grail — add OpenAPI/Swagger spec
• Enrich SN80 dogelayer — add public data artifact
• Enrich SN80 dogelayer — add OpenAPI/Swagger spec
• Enrich SN80 dogelayer — add public API endpoint
• Enrich SN79 MVTRX — add OpenAPI/Swagger spec
• Enrich SN78 Vocence — add public data artifact
• Enrich SN77 Liquidity — add public data artifact
• Enrich SN77 Liquidity — add OpenAPI/Swagger spec
• Enrich SN76 Byzantium — add OpenAPI/Swagger spec
• Enrich SN76 Byzantium — add public API endpoint
• Enrich SN73 MetaHash — add public data artifact
• Enrich SN73 MetaHash — add OpenAPI/Swagger spec
• Enrich SN73 MetaHash — add public API endpoint
• Enrich SN72 StreetVision by NATIX — add OpenAPI/Swagger spec
• Enrich SN72 StreetVision by NATIX — add public API endpoint
• Enrich SN70 NexisGen — add public data artifact
• Enrich SN70 NexisGen — add OpenAPI/Swagger spec
• Enrich SN69 ain — add public data artifact
• Enrich SN69 ain — add OpenAPI/Swagger spec
• Enrich SN69 ain — add public API endpoint
• Enrich SN67 Harnyx — add public data artifact
• Enrich SN67 Harnyx — add OpenAPI/Swagger spec
• Enrich SN66 ninja — add public data artifact
• Enrich SN65 TAO Private Network — add public data artifact
• Enrich SN63 Enigma — add public data artifact
• Enrich SN63 Enigma — add OpenAPI/Swagger spec
• Enrich SN62 Ridges — add public data artifact
• Enrich SN61 RedTeam — add OpenAPI/Swagger spec
• Enrich SN57 Sparket — add OpenAPI/Swagger spec
• Enrich SN55 NIOME — add public data artifact
• Enrich SN55 NIOME — add OpenAPI/Swagger spec
• Enrich SN53 EfficientFrontier — add public data artifact
• Enrich SN53 EfficientFrontier — add OpenAPI/Swagger spec
• Enrich SN53 EfficientFrontier — add public API endpoint
• Enrich SN52 Dojo — add public API endpoint
• Enrich SN50 Synth — add public data artifact
• Enrich SN48 Quantum Compute — add public data artifact
• Enrich SN48 Quantum Compute — add OpenAPI/Swagger spec
• Enrich SN47 EvolAI — add OpenAPI/Swagger spec
• Enrich SN44 Score — add public data artifact
• Enrich SN42 Gopher — add OpenAPI/Swagger spec
• Enrich SN41 Almanac — add public data artifact
• Enrich SN41 Almanac — add OpenAPI/Swagger spec

nextcloud/spreed

• Dashboard widget should show the actual mention message
• Talk attachment failure for files from shared folders and local uploads since the last update (Web Version)
• Delete messages completely instead of showing "Message deleted by you" in "Note to self"
• Go back to autopilot mode if re-clicking selected participant
• Imprint and privacy links in public talk conversations
• Migrate addParticipantToRoom to InvitationList
• Migrate OCC to InvitationList
• talk couldn't work after install the “talk_matterbridge”
• Write tests for "Team resources" integration
• System message shows "guest added user" to a conversation when adding through circle/team
• Reactions notifications when fully subscribed in federated conversations
• Limit to groups in federated target server breaks federation
• Temporary message added before date separator
• Instant meeting outside of dashboard?
• Recording chunked upload would fail with token length > 13
• Compatibility with Cloudflare Calls (TURN & STUN servers)
• Change participants info button from hover tooltip to popover

jellyfin/jellyfin-web

• Trying to create/update users with some special characters such as +, / or & generate a non-descriptive error or infinite load

louislam/uptime-kuma

• Pausing a group does not pause the individual monitors of that group
• On the maintenance creation form, link start and end times together

younisdev/dyvix-ui

• [Feature] Add Blade select theme
• [Feature] Add Obsidian file theme
• [Feature] Add Obsidian button theme
• [Docs] Add swing to the animations list
• [Docs] Add Obsidian to the themes list
• [Feature] Add the missing props for DyvixSelect JSDOCS
• Add New Modal Theme.
• Add new Animations.
• [Feature] Add Frost select theme