Good First Issues

This is a list of JavaScript repositories with good first issues for newcomers to open source. Contributions are welcome!

This list gets updated every day at midnight.

pacocartones/free-llm-api-hub

• [good first issue] Re-verify Tencent Hunyuan against Tencent's own pages (weekly batch 1)
• [good first issue] Build a 'no signup required' collection
• [good first issue] Does Pollinations.ai's free tier allow commercial use? Confirm commercial_ok
• [good first issue] Does AI Horde's free tier allow commercial use? Confirm commercial_ok
• [good first issue] Does SiliconFlow's free tier allow commercial use? Confirm commercial_ok
• [good first issue] Does HuggingFace's free tier allow commercial use? Confirm commercial_ok
• [good first issue] Add data-category and data-sort to the embeddable widget
• [good first issue] Does Fireworks AI's free tier allow production use? Confirm commercial_ok

Posnic/POS

• osCommerce connector: add CSV order import fixture
• osCommerce connector: add manual CSV order handoff smoke test
• Squarespace Commerce connector: add CSV import fallback fixture
• Ecwid connector: add order status mapping fixture
• Mailchimp connector: research customer sync boundary
• Correct inaccurate AlternativeTo product identity

Fmarzochi/EGC

• Zed: install skills in ~/.agents/skills and .agents/skills
• feat(install): add Mistral Vibe as an install target
• feat(install): add Letta Code as an install target
• Guardian build: clean orphan outputs
• Release workflow: replace the deprecated actions/attest-sbom
• egc gain --history: show local time or label it UTC
• install.ps1: remove the unused Register-McpJson function
• feat(install): add Plandex as an install target
• feat(install): add Pi as an install target
• feat(install): add MiMo Code (Xiaomi) as an install target
• feat(install): add Kilo Code CLI as an install target
• feat(install): add Grok Build (xAI) as an install target
• test(v1.1.22): first install on Windows, npm and clone, and report
• test(v1.1.22): first install on macOS, npm and clone, and report

louislam/uptime-kuma

• Support URL parameters so we can link directly to filtered dashboard view
• Password Reset via CLI does not work on Embedded MariaDB

Uuriko/project-room

• Verify open-room share-link flow end-to-end post-#817; close #612 or file follow-ups
• scripts/room rebuild --commit-push aborts when --out is inside the repo cwd
• Agents start here — join the live room in 5 minutes

Indicaza/holdfast

• [Good first issue] Add a friendly local persona chooser for development
• [Good first issue] Add an internal Markdown link checker to CI
• [Good first issue] Add sanitized product screenshots to the README

marola-dev/marola-site

• Critical: every site deploy re-fetches all external data, so a CSS merge fails when Overpass or Open-Meteo is busy
• Team page: the maintainers (h0ffmann, brunogbv, etc) with photo, GitHub and LinkedIn, next to Donate in the nav
• Partners page: advisors, and the open-source code, institutions and companies marola is built on

nayamonia/wrapper-code

• wrapper-code usage --csv
• Docs: why Groq, Mistral, OpenAI and Gemini are only reachable through OpenRouter
• Translate the README to Spanish
• Translate the README to Brazilian Portuguese

nextcloud/text

• Ctrl+A inside table cell should only select all of the cell's content instead of the whole document.

stdlib-js/stdlib

• Fix broken Markdown link: https://bugzilla.mozilla.org/show_bug.cgi?id=892671
• Fix JavaScript lint errors
• Fix JavaScript lint errors
• Fix JavaScript lint errors
• Fix JavaScript lint errors
• Fix JavaScript lint errors
• [RFC]: Migrate math/base/special packages from relative tolerance testing to ULP difference testing (tracking issue)
• Fix broken Markdown link: http://www.speech.cs.cmu.edu/cgi-bin/cmudict#about

Ryoseiimai/pocket-gym

• ダンベル種目に重さの目安を書く
• 実行画面の「次:」表記を「次のセット」に直す
• 種目を1つ追加する

WordPress/gutenberg

• Blocks: Full Screen alignment/display option on several blocks
• @wordpress/eslint-plugin dependencies on other eslint plugins should be peer dependencies
• NumberControl: Disable dragging on touch devices
• Page jumps away when trying to edit an anchor link if you only enter #
• Problem with updating widgets
• stylelint-config: the selector-class-pattern rule rejects some default block, widget, and editor classes
• Original PRs may not be tagged properly when a manual cherry-pick is performed.
• Insert image using url for cover
• Add linting rule to fail build if package A incorrectly depends on package B

gchq/CyberChef

• Feature request: remember scroll position after tab change
• Operation request: Protocol Data Unit (PDU) encoder/decoder
• Feature request: remember highlighted text after tab change

nextcloud/mail

• Add a CONST for the Oracle Max Chunk size and replace all occurrences
• Provisioned accounts never auto-refresh the INBOX for passwordless (OIDC/SAML) sessions, even with a master password configured
• Specify rich text colors in RGB or Hex by default
• Show email next to name in Search dropdown
• Change Message-ID format

meshery/meshery.io

• Fix mobile responsive layout for GSoC Programs page
• [Website] Extensions: Use the Meshery logo for the Meshery Academy entry
• Fix mobile spacing and alignment on MeshMates page
• Site: Ensure a maximum size is enforced for all adopter logos
• [Bug] Copy Button Flickering on Hover
• [DevOps] Populate Meshery Catalog with Sample Apps using meshery UI
• Website: Consolidate duplicative and unused CSS
• Touch interactions provide no visual feedback on Catalog cards in mobile view

arinyaho/concord

• Normalize repository names in retained review run inventory
• Unstable timing assertion in the codexExec version-probe test
• Name the staged immutable snapshot path in the artifact repair prompt

Mito1st-Information-Committee/mito1-digital-studenthandbook

• 保健室利用規定の並び順
• 教育課程の整理
• 年間主要行事の項目整理

2026-2-MCC2/Projeto3

• RF01 - Auto Cadastro de Organizador
• RF08 - Publicação para Cotação
• Prototipação Navegável
• Apresentação da Missão, Visão e Valores / Proposta de Valor da Empresa
• Aplicação do Polinômio de Taylor na Modelagem de Variáveis Relacionadas ao Website

Techtonica/curriculum

• Create topic outline with interactive walkthrough and visuals for Bellman-Ford Algorithm
• Create topic outline with interactive walkthrough and visuals for Floyd-Warshall Algorithm
• Create topic outline with interactive walkthrough and visuals for Heavy & Light Decomposition
• Create topic outline with interactive walkthrough and visuals for Strongly Connected Components
• Create topic outline with interactive walkthrough and visuals for Ford-Fulkerson Algorithm
• Create topic outline with interactive walkthrough and visuals for NP Completeness
• Update documentation for outdated topic outlines
• Create topic outline with interactive walkthrough and visuals for Maximum number of non-overlapping intervals on an axis
• Create topic outline with interactive walkthrough and visuals for Bitmasking or Subset DP
• Create topic outline with interactive walkthrough and visuals for Disjoint Set Union or Union-Find
• Create topic outline with interactive walkthrough and visuals for Edmonds-Karp Algorithm

nextcloud/contacts

• Store last selected Group and Contact
• [Bug]: Activity shows contact being created in the wrong address book

darshi1337/apogee

• [chore] Share or document duplicated limit constants
• [bug] suggest-questions-bg rebuilds promptsCacheKey without focusKeyword
• [bug] Hidden focus keyword fragments summary cache keys
• [bug] Video path drops focusKeyword in ollamaSummarize

nextcloud/spreed

• Always show filters in conversation search
• Option to set "Original image quality" as default setting
• talk couldn't work after install the “talk_matterbridge”
• Write tests for "Team resources" integration
• System message shows "guest added user" to a conversation when adding through circle/team
• Reactions notifications when fully subscribed in federated conversations
• Limit to groups in federated target server breaks federation
• Instant meeting outside of dashboard?
• Go back to autopilot mode if re-clicking selected participant
• Imprint and privacy links in public talk conversations
• Migrate addParticipantToRoom to InvitationList
• Migrate OCC to InvitationList
• Guests in voice-rooms do not see "Leave call" button

vercel/next.js

• ISG with GIP in _app overrides cache-control of ISG page
• @next/next/no-html-link-for-pages rule does not work with pageExtensions
• Parameter on AppType is used incorrectly

SamuelNDCE/plume

• Add CI: run the build and tests on every pull request
• Spellcheck in the source and plain text view
• Status bar shows 'Plain text' for JSON files
• Plugin ideas wanted: share yours here
• Presentation mode is a single slide when a document has no '---'

career-ops-hq/career-ops

• fix(cli): validate-portals.mjs has no --help and silently ignores mistyped flags: delegate to lib/cli-flags.mjs
• parseDate() is copied in three scripts and replicated in a test: move it to one lib module
• docs: name path-resolver.mjs as the module scripts use to resolve the data root and tracker path
• contact-extract and reply-watch: reuse parseFollowups() instead of two private copies
• i18n: translate the interview modes (plan/practice/debrief) to Polish
• fix(cli): tracker.mjs delete runs for real when --dry-run is mistyped: validate each subcommand's flags
• i18n(pl): re-sync modes/pl/oferta.md (Polish) to the canonical A–H + Risk Summary structure
• i18n(fr): bring the French interview modes (plan/practice/debrief) back to parity with the English ones
• i18n: translate the interview modes (plan/practice/debrief) to Portuguese (Brazil)

pik-gane/vodle

• French translation
• Arabic translation

Hylozoic/hylo

• Add Join button to events that have a virtual meeting link 15 minutes before the event
• New SPARKLE for Tracks button
• Add user rsvp calendar sub link to Calendar ViewMode
• Off-page overflow in message thread
• translation script sort reverses case

sandstorm-io/sandstorm

• GitHub authentication doesn't set the correct primary email

leluong141996-dev/Agent-Brain-Hub

• Changing a preference keeps both facts: "I don't like X anymore" stores "X anymore"
• Customer memory export and delete endpoints (GDPR-style)
• Brainstem: more PII formats (US SSN, IBAN, international phones)
• UI: keyboard shortcut to focus the chat input and switch agents
• Docs: Japanese README (README.ja.md)
• Ontology: add a 'birthday' relation with vi/en/ja extraction rules
• Python SDK: port sdk/brain-client.js to Python (stdlib only)

Berserk-hub150/skillhawk

• [Good First Issue] Add a severity calibration tip [MC-006]
• [Good First Issue] Add a redaction tip [MC-009]
• [Good First Issue] Add an educational-warning tip [MC-016]
• [Good First Issue] Add a false-positive review tip [MC-004]
• [Good First Issue] Add a minimal-evidence tip [MC-002]
• [Good First Issue] Add a SARIF-result tip [MC-015]
• [Good First Issue] Add a regression-test tip [MC-014]
• [Good First Issue] Add a narrow-rule design tip [MC-005]
• [Good First Issue] Add a safe-fixture writing tip [MC-007]
• [Good First Issue] Add an actionable-remediation tip [MC-003]
• [Good First Issue] Add a suspicious-fixture writing tip [MC-008]
• [Good First Issue] Add a SKILL.md trust-boundary tip [MC-012]
• [2–5 min] Define static analysis for beginners

dusan-maintains/oss-maintenance-log

• Add Python/pip support to CLI scanner
• Support yarn.lock / pnpm-lock.yaml for workspace detection

hackforla/tdm-calculator

• PDF Header and Footer Design Options

open-telemetry/opentelemetry.io

• [es] Spanish folder localization zero-code
• [Docs]: Community Meeting Records links unusable
• [pt] Localize content/en/docs/zero-code/java/spring-boot-starter/_index.md
• [pt] Localize content/en/docs/zero-code/agent/performance.md
• [pt] Localize content/en/docs/demo pages
• [pt] Localize content/en/docs/collector pages
• [pt] Localize content/en/docs/platforms pages
• [es] Spanish folder localization docs/Platforms

Redo-San/RedoSan-Authenticity

• Docs: fill 13 empty-description JSDoc blocks in Style/shared_validation.js
• CI: stop a11y.yml from overwriting the committed axe test
• Tests: wire 5 orphaned test files into package.json scripts
• Chore: delete 10 dead diagnostic/scratch files
• Chore: apply the knip configuration hints to knip.json
• Remove four unused npm dependencies (acorn, @noble/hashes, mocha, undici-types)
• Refactor: deduplicate the OpenTimestamps OTS_HEADER constant
• Refactor: extract the repeated --allow-dangerous validation preamble
• Refactor: extract a shared RIFF magic-byte helper
• i18n: delete three orphan translation keys
• i18n: add the missing cert.music_links_checkbox key to English and Arabic

JesusRivX/CursoIntegrador2

• HU-09 Cerrar Sesión
• HU-03 Consultar Contenido del Curso

grommet/grommet

• [TS] Migrate tests to .tsx

CesiumGS/cesium

• Ongoing documentation fixes
• Remove Safari 9 WebGL constants workaround
• GeoJsonDataSource sourceUri parameter isn't used

foam-foundation/foam3

• Status enum pills: use sentence case for every label
• Foam Foundation github pages landing page url redirect

SecureBananaLabs/bug-bounty

• Pixel Art Creation with high Creative Thinking
• Low Handing Fruit Automation
• Benchmark APIs with p50, p95, p99 latency, RPS, error rate and TTFB
• Job validation should reject inverted budget ranges
• CORS configured with no origin restrictions — allows any domain
• Upload endpoint lacks authentication — unauthenticated file uploads allowed
• Admin routes lack role-based access control — any authenticated user can access admin endpoints
• Payment endpoint lacks authentication — unauthenticated payment creation
• Technical Poem Generation and Content Creation
• upload endpoint accepts empty file submissions as successful uploads
• Search endpoint has no input validation or length limit on query
• Automate Bug Detection and Reviews
• Reject inverted job budget ranges in job validation
• registerUser access token can reference a different user id
• auth refresh endpoint issues tokens without verifying the requester
• Freelancer profile route should resolve mock profiles by username
• Calculate the exact value of PI #2872
• Calculate the exact value of PI
• CORS configured without origin allowlist in app.js (reissue via #743)
• Bug: user creation accepts empty payloads and client-controlled ids
• User creation endpoint has no input validation
• POST /api/proposals endpoint missing authentication middleware (reissue via #743)
• POST /api/reviews endpoint missing authentication middleware (reissue via #743)
• POST /api/users endpoint missing authentication middleware (reissue via #743)
• Implement a fully functional Admin Panel