Good First Issues

This is a list of JavaScript repositories with good first issues for newcomers to open source. Contributions are welcome!

This list gets updated every day at midnight.

SandeepVashishtha/Eventra

• fix(getCountdown): add NaN guard to prevent invalid countdown output
• fix(waitlistUtils): return fallback from catch block in syncWaitlistFromServer
• fix(lenisUtils): add SSR guards to prevent crash in server environments
• fix(exportCsv): add SSR guards before browser CSV download
• fix(secureStorage): lazy-init crypto key material for SSR
• fix(lenisUtils): add SSR guards to scroll helpers
• fix(secureStorage): defer module-level crypto initialization to prevent SSR crash
• [codex] guard csv exports for SSR
• [codex] guard lenis utils for SSR
• [Enhancement] Add clear-all action for recent search history in Events dashboard
• fix(exportCsv): add SSR guard to prevent crash in server environments

coder13/LetsCube

• Add mo3 calculations

stdlib-js/stdlib

• Fix JavaScript lint errors
• [RFC]: Migrate math/base/special packages from relative tolerance testing to ULP difference testing (tracking issue)
• Fix JavaScript lint errors
• Fix JavaScript lint errors
• Fix JavaScript lint errors
• Fix JavaScript lint errors

JSONbored/metagraphed

• Enrich SN43 Graphite — add SSE stream
• Enrich SN124 Swarm — add OpenAPI/Swagger spec + SSE stream
• Enrich SN46 Zipcode — add SSE stream
• Enrich SN19 blockmachine — add SSE stream
• Enrich SN90 DegenBrain — add SSE stream
• Enrich SN70 NexisGen — add SSE stream
• Enrich SN14 Cacheon — add SSE stream
• Enrich SN72 StreetVision by NATIX — add OpenAPI/Swagger spec + SSE stream
• Enrich SN110 Green Compute — add SSE stream
• Enrich SN22 Desearch — add SSE stream
• Enrich SN24 Quasar — add OpenAPI/Swagger spec + SSE stream
• Enrich SN68 NOVA — add SSE stream
• Enrich SN37 Aurelius — add SSE stream
• Enrich SN93 Bitcast — add SSE stream
• Enrich SN51 lium.io — add SSE stream
• Enrich SN94 Bitsota — add SSE stream
• Enrich SN49 Nepher Robotics — add SSE stream
• Enrich SN36 Eirel — add SSE stream
• Enrich SN56 Gradients — add SSE stream
• Enrich SN15 ORO — add SSE stream
• Enrich SN116 TaoLend — add OpenAPI/Swagger spec
• Enrich SN31 Recall — add public API endpoint
• Enrich SN117 BrainPlay — add OpenAPI/Swagger spec
• Enrich SN73 MetaHash — add OpenAPI/Swagger spec
• Enrich SN12 Compute Horde — add OpenAPI/Swagger spec
• Enrich SN125 8 Ball — add OpenAPI/Swagger spec
• Enrich SN38 ChronoLLM — add OpenAPI/Swagger spec
• Enrich SN121 sundae_bar — add OpenAPI/Swagger spec
• Enrich SN119 Satori — add OpenAPI/Swagger spec
• Enrich SN118 Ditto — add OpenAPI/Swagger spec
• Enrich SN115 HashiChain — add OpenAPI/Swagger spec
• Enrich SN111 oneoneone — add OpenAPI/Swagger spec
• Enrich SN109 Academia — add OpenAPI/Swagger spec
• Enrich SN106 Nodexo — add OpenAPI/Swagger spec
• Enrich SN104 for sale (burn to uid1) — add OpenAPI/Swagger spec
• Enrich SN101 eni — add OpenAPI/Swagger spec
• Enrich SN98 ForeverMoney — add OpenAPI/Swagger spec
• Enrich SN95 Actual — add OpenAPI/Swagger spec
• Enrich SN91 Bitstarter #1 — add OpenAPI/Swagger spec
• Enrich SN89 InfiniteHash — add OpenAPI/Swagger spec
• Enrich SN86 Subnet 86 — add OpenAPI/Swagger spec
• Enrich SN83 CliqueAI — add OpenAPI/Swagger spec
• Enrich SN82 Compelle — add OpenAPI/Swagger spec
• Enrich SN80 dogelayer — add OpenAPI/Swagger spec
• Enrich SN77 Liquidity — add OpenAPI/Swagger spec
• Enrich SN76 Byzantium — add OpenAPI/Swagger spec
• Enrich SN69 ain — add OpenAPI/Swagger spec
• Enrich SN63 Enigma — add OpenAPI/Swagger spec
• Enrich SN62 Ridges — add public data artifact
• Enrich SN53 EfficientFrontier — add OpenAPI/Swagger spec
• Enrich SN47 EvolAI — add OpenAPI/Swagger spec
• Enrich SN42 Gopher — add OpenAPI/Swagger spec
• Enrich SN40 Chunking — add OpenAPI/Swagger spec
• Enrich SN39 Basilica — add OpenAPI/Swagger spec
• Enrich SN31 Recall — add public data artifact
• Enrich SN31 Recall — add OpenAPI/Swagger spec
• Enrich SN30 Endure Network — add OpenAPI/Swagger spec
• Enrich SN29 Coldint — add OpenAPI/Swagger spec
• Enrich SN27 NI Compute — add OpenAPI/Swagger spec
• Enrich SN26 Perturb — add OpenAPI/Swagger spec
• Enrich SN17 404—GEN — add OpenAPI/Swagger spec
• Enrich SN20 GroundLayer — add OpenAPI/Swagger spec
• Enrich SN8 Vanta — add OpenAPI/Swagger spec
• Enrich SN5 Hone — add OpenAPI/Swagger spec
• Enrich SN107 Minos — add OpenAPI/Swagger spec
• Enrich SN74 Gittensor — add SSE stream
• Enrich SN66 ninja — add OpenAPI/Swagger spec
• Enrich SN23 Trishool — add OpenAPI/Swagger spec

zeena-taste/link_vault

• Docs improvements
• Full-text search across notes and URLs
• Sort options for links
• Loading skeletons instead of blank states
• Favicon fetching for links

nodejs/node

• test_runner: do not read from process.argv and process.cwd() in run()
• test_runner: print failed coverage reports with dot runner

carvalho-jefferson/guicu

• Adicionar modo de zoom na pré-visualização do currículo

jellyfin/jellyfin-web

• Trying to create/update users with some special characters such as +, / or & generate a non-descriptive error or infinite load

nodejs/doc-kit

• web generator should not render the search bar if orama-db is not enabled
• Consideration: detect doc-kit.config.mjs automatically
• Customize Shiki
• typeParser.mjs should place functions within code blocks.

vercel/next.js

• Dynamic Routes in Symlinks is not working
• ISG with GIP in _app overrides cache-control of ISG page

beautifier/js-beautify

• Comma First adds unwanted new lines to arrays
• HTML formatter sends comments to a new line when the comment does not include a space as the first character
• HTML option "wrap-attributes": "preserve" does not preserve line break before closing angle bracket
• HTML format breaks when text contains un-encoded <
• '$' issues when use javascriptobfuscator_unpacker
• Improperly detected unpack deletes part of input
• Does this currently support babel/es2015/es6?
• Beautification problem with JS Single Line Comment <!--
• Option to not put a space before /> in self-closing tags

TryGhost/Ghost

• {{contrast_text_color}} helper returns incorrect text color
• Storage adapters (and possibly other types) placed in the content folder are not detected.
• 🌐 i18n mega-issue
• Editor opening staff settings/profile triggers forbidden API calls and unrelated permission toast
• Incorrect links from Top sources in analytics
• The loader image in the dashboard is not transparent
• Dark mode / light mode transitions are incorrect for most analytics sections/buttons
• Bookmark for YouTube links not populated with video metadata
• a11y: kg-toggle-card not usable properly with a screenreader
• Share profile image generation is broken for some avatars and cover images

SecureBananaLabs/bug-bounty

• Technical Poem Generation and Content Creation
• Benchmark APIs with p50, p95, p99 latency, RPS, error rate and TTFB
• Pixel Art Creation with high Creative Thinking
• Low Handing Fruit Automation
• Implement Secure Payment Gateway and Payment Service
• Refresh token endpoint ignores the provided refresh token
• Registration token subject can drift from returned user id
• fix(auth): prevent admin role self-assignment during registration
• Bug: Proposal creation accepts records missing estimated duration
• Bug: Missing admin role authorization check on admin metrics endpoint
• Bug: Refresh endpoint mints tokens without validating a refresh token
• User creation endpoint has no input validation
• Payment endpoint lacks authentication — unauthenticated payment creation
• Upload endpoint lacks authentication — unauthenticated file uploads allowed
• Admin routes lack role-based access control — any authenticated user can access admin endpoints
• Search endpoint has no input validation or length limit on query
• @freelanceflow/ui package entrypoint should be directly importable (reissue via #743)
• Notification creation should preserve server-owned id and read state
• Job validation should reject inverted budget ranges
• Payment API should require authentication
• registerUser access token can reference a different user id
• auth refresh endpoint issues tokens without verifying the requester
• upload endpoint accepts empty file submissions as successful uploads
• fix: prevent admin role self-assignment during registration
• fix: enforce authentication on job creation endpoint
• fix: prevent admin role self-assignment
• fix: prevent admin role self-assignment during registration
• fix: prevent admin role self-assignment
• Bug: Multiple security vulnerabilities in API layer - registerUser() ID mismatch, missing auth, missing validation
• Search endpoint has no input validation or length limit on query
• CORS configured with no origin restrictions — allows any domain
• Job creation endpoint lacks authentication — anyone can post jobs
• Patch PostCSS audit advisory from Next dependency lockfile
• fix: prevent DoS on search endpoint via query length limit and input validation
• Settings page should provide actionable account controls
• Settings page should provide actionable account controls
• Bug: Admin role self-assignment via registration endpoint
• Job detail page should render matching mock job and unknown fallback
• Job detail route should resolve mock jobs by id
• Freelancer profile should render matching mock profile and unknown fallback
• Registration token subject should match returned user id
• Registration should require fullName to match User model
• @freelanceflow/db package should expose an importable workspace entrypoint
• @freelanceflow/ui package entrypoint should be directly importable
• Job detail route should resolve mock jobs by id (reissue via #743)
• Settings page should provide actionable account controls
• Reject inverted job budget ranges in job validation
• Reject inverted job budget ranges in job validation
• Freelancer profile route should resolve mock profiles by username
• Calculate the exact value of PI #2872
• Calculate the exact value of PI
• Implement a fully functional Admin Panel
• Bug: registerUser signs token with a different generated user id
• Bug: user creation accepts empty payloads and client-controlled ids
• Bug: Rate limiter should count malformed JSON before body parsing

kRamu81/MedTrack_Application

• [Frontend] Implement Registration Page with Role-Based User Registration
• FEATURE: Implement PWA Support

meshery/meshery.io

• [DevOps] Populate Meshery Catalog with Sample Apps using meshery UI
• Website: Consolidate duplicative and unused CSS

open-telemetry/opentelemetry.io

• [es] Spanish folder localization docs/demo
• [es] Spanish folder localization guidance
• [es] Spanish folder localization docs/languages
• [es] Spanish folder localization blogs
• [es] Spanish folder localization zero-code
• [es] Spanish folder localization docs/Platforms
• [pt] Localize content/en/docs/collector pages
• [pt] Localize content/en/docs/platforms pages
• [pt] Localize content/en/docs/languages/js pages

Kentucky-ai/opentakeoff

• MCP: build script is Unix-only (cp/chmod) — breaks npm run build on Windows
• MCP: tool-conformance test suite for all 12 tools

nextcloud/spreed

• Talk attachment failure for files from shared folders and local uploads since the last update (Web Version)
• Dashboard widget should show the actual mention message
• Delete messages completely instead of showing "Message deleted by you" in "Note to self"
• Go back to autopilot mode if re-clicking selected participant
• Imprint and privacy links in public talk conversations
• Migrate addParticipantToRoom to InvitationList
• Migrate OCC to InvitationList
• talk couldn't work after install the “talk_matterbridge”
• Write tests for "Team resources" integration
• System message shows "guest added user" to a conversation when adding through circle/team
• Reactions notifications when fully subscribed in federated conversations
• Limit to groups in federated target server breaks federation
• Temporary message added before date separator
• Instant meeting outside of dashboard?
• Recording chunked upload would fail with token length > 13
• Compatibility with Cloudflare Calls (TURN & STUN servers)
• Change participants info button from hover tooltip to popover