Good First Issues

This is a list of JavaScript repositories with good first issues for newcomers to open source. Contributions are welcome!

This list gets updated every day at midnight.

SecureBananaLabs/bug-bounty

• Low Handing Fruit Automation
• Implement Secure Payment Gateway and Payment Service
• Benchmark APIs with p50, p95, p99 latency, RPS, error rate and TTFB
• Pixel Art Creation with high Creative Thinking
• Technical Poem Generation and Content Creation
• Job validation should reject inverted budget ranges
• Admin routes lack role-based access control — any authenticated user can access admin endpoints
• Search endpoint has no input validation or length limit on query
• CORS configured with no origin restrictions — allows any domain
• Refresh token endpoint ignores the provided refresh token
• Job creation endpoint lacks authentication — anyone can post jobs
• Patch PostCSS audit advisory from Next dependency lockfile
• fix: prevent DoS on search endpoint via query length limit and input validation
• fix: enforce authentication on job creation endpoint
• Settings page should provide actionable account controls
• Settings page should provide actionable account controls
• Bug: Admin role self-assignment via registration endpoint
• Job detail page should render matching mock job and unknown fallback
• Payment API should require authentication
• Job detail route should resolve mock jobs by id
• Notification creation should preserve server-owned id and read state
• Freelancer profile should render matching mock profile and unknown fallback
• Registration token subject should match returned user id
• Registration should require fullName to match User model
• @freelanceflow/db package should expose an importable workspace entrypoint
• @freelanceflow/ui package entrypoint should be directly importable
• @freelanceflow/ui package entrypoint should be directly importable (reissue via #743)
• Job detail route should resolve mock jobs by id (reissue via #743)
• Settings page should provide actionable account controls
• Reject inverted job budget ranges in job validation
• fix: prevent admin role self-assignment during registration
• Search endpoint has no input validation or length limit on query
• Reject inverted job budget ranges in job validation
• Freelancer profile route should resolve mock profiles by username
• Calculate the exact value of PI #2872
• Calculate the exact value of PI
• fix: prevent admin role self-assignment
• Implement a fully functional Admin Panel
• fix: prevent admin role self-assignment
• Bug: Proposal creation accepts records missing estimated duration
• fix: prevent admin role self-assignment during registration
• Registration token subject can drift from returned user id
• Bug: Refresh endpoint mints tokens without validating a refresh token
• fix(auth): prevent admin role self-assignment during registration
• Bug: registerUser signs token with a different generated user id
• Bug: Multiple security vulnerabilities in API layer - registerUser() ID mismatch, missing auth, missing validation
• Bug: Missing admin role authorization check on admin metrics endpoint
• Bug: user creation accepts empty payloads and client-controlled ids
• Payment endpoint lacks authentication — unauthenticated payment creation
• Bug: Rate limiter should count malformed JSON before body parsing
• User creation endpoint has no input validation
• Upload endpoint lacks authentication — unauthenticated file uploads allowed

AbdulDevHub/Dev-Mountain

• Useful Terminal Commands
• Make Sure Agent Skills Are Up To Date

TryGhost/Ghost

• Bookmark cards prioritize apple-touch-icon over regular favicons
• Storage adapters (and possibly other types) placed in the content folder are not detected.
• Cannot get posts from the same date (SQLite3-specific?)
• Regression: email toggles
• 🌐 i18n mega-issue
• Input box for editing feature image caption link is inconsistently small
• Creating a tag named "new" is subsequently not editable
• Editor opening staff settings/profile triggers forbidden API calls and unrelated permission toast
• Incorrect links from Top sources in analytics
• The loader image in the dashboard is not transparent
• Dark mode / light mode transitions are incorrect for most analytics sections/buttons
• Bookmark for YouTube links not populated with video metadata
• {{contrast_text_color}} helper returns incorrect text color
• a11y: kg-toggle-card not usable properly with a screenreader
• Share profile image generation is broken for some avatars and cover images

younisdev/dyvix-ui

• [Feature] Add Blade table theme
• [Feature] Add Aurora table theme

nextcloud/spreed

• Talk attachment failure for files from shared folders and local uploads since the last update (Web Version)
• Compatibility with Cloudflare Calls (TURN & STUN servers)
• Change participants info button from hover tooltip to popover
• Go back to autopilot mode if re-clicking selected participant
• Imprint and privacy links in public talk conversations
• Migrate addParticipantToRoom to InvitationList
• Migrate OCC to InvitationList

layer5io/docs

• [Docs] Add missing actions to comment history panel
• [Docs] Improve Related Docs Links in Pinning Models to Dock Page

JSONbored/metagraphed

• Enrich SN14 Cacheon — add OpenAPI/Swagger spec + public data artifact
• Enrich SN75 Hippius — add public API endpoint + public data artifact
• Enrich SN85 Vidaio — add public API endpoint + public data artifact
• Enrich SN33 ReadyAI — add public API endpoint + SSE stream
• Enrich SN47 EvolAI — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN42 Gopher — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN93 Bitcast — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN65 TAO Private Network — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN17 404—GEN — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN68 NOVA — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN24 Quasar — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN108 TalkHead — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN70 NexisGen — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN18 Zeus — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN37 Aurelius — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN26 Perturb — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN36 Eirel — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN55 NIOME — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN112 minotaur — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN99 Leoma — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN126 Poker44 — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN60 Bitsec.ai — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN94 Bitsota — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN46 Zipcode — add public API endpoint + public data artifact
• Enrich SN78 Vocence — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN54 Yanez MIID — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN67 Harnyx — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN80 dogelayer — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN127 Astrid — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN35 OxMarkets — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN41 Almanac — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN50 Synth — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN105 Beam — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN124 Swarm — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN128 ByteLeap — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN77 Liquidity — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN71 Leadpoet — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN83 CliqueAI — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN120 Affine — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN110 Green Compute — add SSE stream
• Enrich SN97 Albedo — add public API endpoint + public data artifact
• Enrich SN72 StreetVision by NATIX — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN79 MVTRX — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN48 Quantum Compute — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN82 Compelle — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN63 Enigma — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN9 iota — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN25 Mainframe — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN45 Talisman AI — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN21 AdTAO — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN32 ItsAI — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN103 Djinn — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN114 SOMA — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN121 sundae_bar — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN98 ForeverMoney — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN1 Apex — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN117 BrainPlay — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN2 DSperse — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN88 Investing — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN100 Plaτform — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN113 TensorUSD — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN3 Templar — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN11 TrajectoryRL — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN5 Hone — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN91 Bitstarter #1 — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN8 Vanta — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN61 RedTeam — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN102 ConnitoAI — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN16 BitAds — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN10 Swap — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN62 Ridges — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN29 Coldint — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN52 Dojo — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN12 Compute Horde — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN84 ansuz — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN57 Sparket — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN92 Tensorclaw — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN122 Bitrecs — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN44 Score — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN111 oneoneone — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN64 Chutes — add SSE stream
• Enrich SN56 Gradients — add SSE stream
• Enrich SN74 Gittensor — add SSE stream
• Enrich SN58 Handshake58 — add SSE stream
• Enrich SN49 Nepher Robotics — add SSE stream
• Enrich SN51 lium.io — add OpenAPI/Swagger spec
• Enrich SN107 Minos — add OpenAPI/Swagger spec
• Enrich SN59 Babelbit — add OpenAPI/Swagger spec
• Enrich SN23 Trishool — add OpenAPI/Swagger spec
• Enrich SN66 ninja — add OpenAPI/Swagger spec

vercel/next.js

• ISG with GIP in _app overrides cache-control of ISG page
• getInitialProps is not running when Router.replace's "href" and "as" contains hash and query params inside "href" change.
• @next/next/no-html-link-for-pages rule does not work with pageExtensions

FinesseStudioLab/Trivela

• Frontend: Add QR code generation for campaign share links
• Backend: Add campaign metrics CSV/JSON export endpoint
• DevOps: Add GitHub Codespaces / dev container configuration
• Frontend: Add print and PDF export for campaign details
• Frontend: Add connection indicator and latency display for Soroban RPC
• Frontend: Add campaign urgency indicators (ending soon, filling fast, just launched)
• Frontend: Add transaction pending state with blockchain explorer deep link
• Frontend: Add XLM wallet balance display in header
• Frontend: Add dark mode persistence and system preference detection
• Backend: Add request ID tracing (X-Request-ID propagated through all log lines)

facundobma/IS3-Gestion-Calidad

• [Mantenibilidad] Eliminar ceros decimales innecesarios en literal numérico
• [Mantenibilidad] Evitar uso redundante de literal booleano en condición
• [Mantenibilidad] Eliminar declaración de la variable local sin uso 'descuentoOculto'

Flamki/stellarmind

• Add small UX note for mobile limitations in README until full responsive pass
• Add task checklist template section to issue descriptions guide
• Document environment variables in a structured table
• Create docs/API_EXAMPLES.md with request/response samples
• Add security checklist before push section to CONTRIBUTING
• Add .nvmrc and document Node version pinning for contributors
• Add basic repository map section for new contributors
• Add CODEOWNERS file for predictable review routing

PipedreamHQ/pipedream

• [TRIGGER] Sunshine conversations
• [ACTION] Shopify refund and cancellation
• Job sites
• [TRIGGER] Trusted Shops / eTrusted — New Review (Polling)
• [ACTION] Everstox create fulfillment update request
• [TRIGGER] Facebook Pages webhooks
• [ACTION] Zendesk - dynamic content
• Yotpo Loyalty & Referrals — New Actions: Adjust Points, Record Action, Set Birthday, Get/Add Customer Tags, Create Refund
• [ACTION] Shopify order, giftcard, return, and fulfillment actions
• [ACTION]
• [ACTION] Need more tools for the ServiceNow MCP
• [ACTION] Simplify Notion upload image affordance
• [ACTION] [App] Ringba — request for additional pre-built components
• Sms8 - SMS GATEWAY: OTP & webhook
• [ACTION] Add MCP Tools to Superdocu
• [Get Rows]
• Pull a whatsapp conversation
• NEED A NEW TOOL FOR FINNHUB VIA PIPEDREAM[ACTION]
• vapi: add cursor-based pagination to phoneNumberId, assistantId, and squadId propDefinitions
• Meta Ads
• [TRIGGER]
• [ACTION]
• Tools for nexudus mcp
• [ACTION]Add admin actions to retrieve Zoom meeting summaries (single, multiple, and user-specific)
• [ACTION] WorkFlowy new actions
• ACTION Returnista