Good First Issues

This is a list of JavaScript repositories with good first issues for newcomers to open source. Contributions are welcome!

This list gets updated every day at midnight.

carvalho-jefferson/guicu

• Adicionar modo de zoom na pré-visualização do currículo
• Melhorar aparência da barra de rolagem

TryGhost/Ghost

• {{contrast_text_color}} helper returns incorrect text color
• Storage adapters (and possibly other types) placed in the content folder are not detected.
• 🌐 i18n mega-issue
• Editor opening staff settings/profile triggers forbidden API calls and unrelated permission toast
• Incorrect links from Top sources in analytics
• The loader image in the dashboard is not transparent
• Dark mode / light mode transitions are incorrect for most analytics sections/buttons
• Bookmark for YouTube links not populated with video metadata
• a11y: kg-toggle-card not usable properly with a screenreader
• Share profile image generation is broken for some avatars and cover images

Rajath2005/SmartCityApp

• Enhancement: Display total count of places found at the top of search
• Fix: Standardize 'Not Found' error messages
• Improve user experience by retrying invalid input
• ✨ Add: toString() methods to Place.java and User.java
• 🐛 Fix: Hash passwords before storing them in the database
• 📝 Docs: Add Javadoc comments to all methods in SmartCityApp.java
• Enhancement: Add an ASCII Art Banner to the startup menu
• Refactor: Move hardcoded SQL queries to Constant variables

layer5io/docs

• [Docs] SMTP guide layout is misaligned
• [UI] Docs layout breaks when browser zoom is increased
• [Docs] Improve Related Docs Links in Pinning Models to Dock Page

kRamu81/MedTrack_Application

• [Frontend] Implement Registration Page with Role-Based User Registration
• FEATURE: Implement PWA Support
• Add Consistent Error Handling Across API Service Methods

WordPress/gutenberg

• Dependency Extraction Webpack Plugin: Prettify the output of the development asset files
• apiFetch should be able to handle a 200 response code with an empty body
• Scripts: Try using cosmiconf for locating tool configs
• Allow the PanelColorSettings to be visible if no colors and but with children
• Cover Block: Allow Video backgrounds to be 'Fixed'

layer5io/layer5

• Inaccurate: "0" performance tests results being reported
• Enhance or replace the "Star the Repo" button
• [Blog] Fix image visibility issue in dark theme
• [Learn] Learning Paths need enhanced with Meshery/MeshMap walk-throughs
• [SEO] First Contentful Paint (FCP): gatsby-plugin-webpack-bundle-analyser-v2
• Pricing: subscription plans as a sticky row
• [CI] Create or add to existing workflow: a broken link checker

JSONbored/metagraphed

• Enrich SN125 8 Ball — add OpenAPI/Swagger spec
• Enrich SN38 ChronoLLM — add OpenAPI/Swagger spec
• Enrich SN123 MANTIS — add OpenAPI/Swagger spec
• Enrich SN126 Poker44 — add OpenAPI/Swagger spec
• Enrich SN121 sundae_bar — add OpenAPI/Swagger spec
• Enrich SN119 Satori — add OpenAPI/Swagger spec
• Enrich SN119 Satori — add public API endpoint
• Enrich SN118 Ditto — add OpenAPI/Swagger spec
• Enrich SN117 BrainPlay — add OpenAPI/Swagger spec
• Enrich SN116 TaoLend — add OpenAPI/Swagger spec
• Enrich SN115 HashiChain — add OpenAPI/Swagger spec
• Enrich SN114 SOMA — add OpenAPI/Swagger spec
• Enrich SN111 oneoneone — add OpenAPI/Swagger spec
• Enrich SN109 Academia — add OpenAPI/Swagger spec
• Enrich SN108 TalkHead — add OpenAPI/Swagger spec
• Enrich SN106 Nodexo — add OpenAPI/Swagger spec
• Enrich SN104 for sale (burn to uid1) — add OpenAPI/Swagger spec
• Enrich SN104 for sale (burn to uid1) — add public API endpoint
• Enrich SN101 eni — add OpenAPI/Swagger spec
• Enrich SN98 ForeverMoney — add OpenAPI/Swagger spec
• Enrich SN97 Albedo — add OpenAPI/Swagger spec
• Enrich SN95 Actual — add OpenAPI/Swagger spec
• Enrich SN91 Bitstarter #1 — add OpenAPI/Swagger spec
• Enrich SN89 InfiniteHash — add OpenAPI/Swagger spec
• Enrich SN86 Subnet 86 — add OpenAPI/Swagger spec
• Enrich SN86 Subnet 86 — add public API endpoint
• Enrich SN83 CliqueAI — add OpenAPI/Swagger spec
• Enrich SN82 Compelle — add OpenAPI/Swagger spec
• Enrich SN80 dogelayer — add OpenAPI/Swagger spec
• Enrich SN79 MVTRX — add OpenAPI/Swagger spec
• Enrich SN77 Liquidity — add OpenAPI/Swagger spec
• Enrich SN76 Byzantium — add OpenAPI/Swagger spec
• Enrich SN73 MetaHash — add public data artifact
• Enrich SN73 MetaHash — add OpenAPI/Swagger spec
• Enrich SN69 ain — add OpenAPI/Swagger spec
• Enrich SN67 Harnyx — add OpenAPI/Swagger spec
• Enrich SN63 Enigma — add OpenAPI/Swagger spec
• Enrich SN62 Ridges — add public data artifact
• Enrich SN57 Sparket — add OpenAPI/Swagger spec
• Enrich SN55 NIOME — add OpenAPI/Swagger spec
• Enrich SN53 EfficientFrontier — add OpenAPI/Swagger spec
• Enrich SN47 EvolAI — add OpenAPI/Swagger spec
• Enrich SN42 Gopher — add OpenAPI/Swagger spec
• Enrich SN41 Almanac — add OpenAPI/Swagger spec
• Enrich SN40 Chunking — add OpenAPI/Swagger spec
• Enrich SN39 Basilica — add OpenAPI/Swagger spec
• Enrich SN32 ItsAI — add OpenAPI/Swagger spec
• Enrich SN31 Recall — add public data artifact
• Enrich SN31 Recall — add OpenAPI/Swagger spec
• Enrich SN31 Recall — add public API endpoint
• Enrich SN30 Endure Network — add public data artifact
• Enrich SN30 Endure Network — add OpenAPI/Swagger spec
• Enrich SN29 Coldint — add OpenAPI/Swagger spec
• Enrich SN27 NI Compute — add OpenAPI/Swagger spec
• Enrich SN26 Perturb — add OpenAPI/Swagger spec
• Enrich SN25 Mainframe — add OpenAPI/Swagger spec
• Enrich SN17 404—GEN — add OpenAPI/Swagger spec
• Enrich SN20 GroundLayer — add OpenAPI/Swagger spec
• Enrich SN12 Compute Horde — add public data artifact
• Enrich SN12 Compute Horde — add OpenAPI/Swagger spec
• Enrich SN11 TrajectoryRL — add OpenAPI/Swagger spec
• Enrich SN8 Vanta — add OpenAPI/Swagger spec
• Enrich SN5 Hone — add OpenAPI/Swagger spec
• Enrich SN107 Minos — add OpenAPI/Swagger spec
• Enrich SN74 Gittensor — add SSE stream
• Enrich SN66 ninja — add OpenAPI/Swagger spec
• Enrich SN23 Trishool — add OpenAPI/Swagger spec

WordPress/wordpress-playground

• Show error message when using invalid plugin or theme slugs
• GitHub integration: AI descriptions for Pull Requests

meshery/meshery.io

• [DevOps] Populate Meshery Catalog with Sample Apps using meshery UI
• Website: Consolidate duplicative and unused CSS

open-telemetry/opentelemetry.io

• [es] Spanish folder localization docs/demo
• [es] Spanish folder localization guidance
• [es] Spanish folder localization docs/languages
• [es] Spanish folder localization blogs
• [es] Spanish folder localization zero-code
• [es] Spanish folder localization docs/Platforms
• [pt] Localize content/en/docs/collector pages
• [pt] Localize content/en/docs/platforms pages
• [pt] Localize content/en/docs/languages/js pages

vercel/next.js

• ISG with GIP in _app overrides cache-control of ISG page

nextcloud/spreed

• Talk attachment failure for files from shared folders and local uploads since the last update (Web Version)
• Dashboard widget should show the actual mention message
• Delete messages completely instead of showing "Message deleted by you" in "Note to self"
• Go back to autopilot mode if re-clicking selected participant
• Imprint and privacy links in public talk conversations
• Migrate addParticipantToRoom to InvitationList
• Migrate OCC to InvitationList
• talk couldn't work after install the “talk_matterbridge”
• Write tests for "Team resources" integration
• System message shows "guest added user" to a conversation when adding through circle/team
• Reactions notifications when fully subscribed in federated conversations
• Limit to groups in federated target server breaks federation
• Temporary message added before date separator
• Instant meeting outside of dashboard?
• Recording chunked upload would fail with token length > 13
• Compatibility with Cloudflare Calls (TURN & STUN servers)
• Change participants info button from hover tooltip to popover

louislam/uptime-kuma

• Pausing a group does not pause the individual monitors of that group
• On the maintenance creation form, link start and end times together

nodejs/doc-kit

• web generator should not render the search bar if orama-db is not enabled
• Customize Shiki
• typeParser.mjs should place functions within code blocks.

cboard-org/cboard

• Use the real audio format for uploaded tile sound filenames instead of hardcoded .mp3

taskcluster/taskcluster

• Retry yarn --frozen-lockfile in CI in case of network failures
• Highlight whitespace at the beginning and end of scopes and roles
• [UI] Views with the searchbar are not mobile friendly
• [Feature request] Notify on failure/completion in single task view
• [UI] Deep link search in /worker-manager
• [UI] Improve layout of expanded scopes
• [UI] Filter not retained on page reload
• Save filters in worker-manager UI
• Clean up decision task hacks
• [UI] ConnectionDataTable headers prop should allow header names and column fields to be different

billimarie/prosecutor-database

• [HACKTOBER] Add 100 District Attorneys

santifer/career-ops

• docs: add a FAQ entry for custom CV templates (cv-templates.mjs)
• docs: document openai-tailor.mjs in SCRIPTS.md (headless tailoring step)
• i18n: add Spanish (es) locale to the Go dashboard catalog
• i18n: translate the interview modes (plan/practice/debrief) to Chinese (Simplified)
• i18n: translate the interview modes (plan/practice/debrief) to Portuguese (pt-BR)
• i18n: translate the interview modes (plan/practice/debrief) to Japanese
• Sync the tracker's PDF column from data/pdf-index.tsv (❌ stays stale when the PDF is generated later)
• i18n: add Dutch (nl) modes
• doctor: treat missing first-run setup files as warnings, not hard failures

stdlib-js/stdlib

• Fix JavaScript lint errors
• [RFC]: Migrate math/base/special packages from relative tolerance testing to ULP difference testing (tracking issue)
• Fix JavaScript lint errors
• Fix JavaScript lint errors
• Fix JavaScript lint errors
• Fix JavaScript lint errors

SecureBananaLabs/bug-bounty

• Low Handing Fruit Automation
• Implement Secure Payment Gateway and Payment Service
• Pixel Art Creation with high Creative Thinking
• Technical Poem Generation and Content Creation
• Refresh token endpoint ignores the provided refresh token
• Registration token subject can drift from returned user id
• fix(auth): prevent admin role self-assignment during registration
• Bug: Proposal creation accepts records missing estimated duration
• Bug: Missing admin role authorization check on admin metrics endpoint
• Bug: Refresh endpoint mints tokens without validating a refresh token
• User creation endpoint has no input validation
• Payment endpoint lacks authentication — unauthenticated payment creation
• Upload endpoint lacks authentication — unauthenticated file uploads allowed
• Admin routes lack role-based access control — any authenticated user can access admin endpoints
• Search endpoint has no input validation or length limit on query
• Benchmark APIs with p50, p95, p99 latency, RPS, error rate and TTFB
• @freelanceflow/ui package entrypoint should be directly importable (reissue via #743)
• Notification creation should preserve server-owned id and read state
• Job validation should reject inverted budget ranges
• Payment API should require authentication
• registerUser access token can reference a different user id
• auth refresh endpoint issues tokens without verifying the requester
• upload endpoint accepts empty file submissions as successful uploads
• fix: prevent admin role self-assignment during registration
• fix: enforce authentication on job creation endpoint
• fix: prevent admin role self-assignment
• fix: prevent admin role self-assignment during registration
• fix: prevent admin role self-assignment
• Bug: Multiple security vulnerabilities in API layer - registerUser() ID mismatch, missing auth, missing validation
• Search endpoint has no input validation or length limit on query
• CORS configured with no origin restrictions — allows any domain
• Job creation endpoint lacks authentication — anyone can post jobs
• Patch PostCSS audit advisory from Next dependency lockfile
• fix: prevent DoS on search endpoint via query length limit and input validation
• Settings page should provide actionable account controls
• Settings page should provide actionable account controls
• Bug: Admin role self-assignment via registration endpoint
• Job detail page should render matching mock job and unknown fallback
• Job detail route should resolve mock jobs by id
• Freelancer profile should render matching mock profile and unknown fallback
• Registration token subject should match returned user id
• Registration should require fullName to match User model
• @freelanceflow/db package should expose an importable workspace entrypoint
• @freelanceflow/ui package entrypoint should be directly importable
• Job detail route should resolve mock jobs by id (reissue via #743)
• Settings page should provide actionable account controls
• Reject inverted job budget ranges in job validation
• Reject inverted job budget ranges in job validation
• Freelancer profile route should resolve mock profiles by username
• Calculate the exact value of PI #2872
• Calculate the exact value of PI
• Implement a fully functional Admin Panel
• Bug: registerUser signs token with a different generated user id
• Bug: user creation accepts empty payloads and client-controlled ids
• Bug: Rate limiter should count malformed JSON before body parsing