Good First Issues

This is a list of JavaScript repositories with good first issues for newcomers to open source. Contributions are welcome!

This list gets updated every day at midnight.

SecureBananaLabs/bug-bounty

• Pixel Art Creation with high Creative Thinking
• registerUser access token can reference a different user id
• Reject inverted job budget ranges in job validation
• auth refresh endpoint issues tokens without verifying the requester
• Freelancer profile route should resolve mock profiles by username
• upload endpoint accepts empty file submissions as successful uploads
• Job validation should reject inverted budget ranges
• Low Handing Fruit Automation
• Registration should require fullName to match User model
• Freelancer profile should render matching mock profile and unknown fallback
• fix: prevent admin role self-assignment during registration
• Search endpoint has no input validation or length limit on query
• Notification creation should preserve server-owned id and read state
• Benchmark APIs with p50, p95, p99 latency, RPS, error rate and TTFB
• Technical Poem Generation and Content Creation
• Job detail page should render matching mock job and unknown fallback
• Calculate the exact value of PI #2872
• Job detail route should resolve mock jobs by id
• Calculate the exact value of PI
• Search endpoint has no input validation or length limit on query
• User creation endpoint has no input validation
• Admin routes lack role-based access control — any authenticated user can access admin endpoints
• Payment API should require authentication
• Bug: user creation accepts empty payloads and client-controlled ids
• Bug: Admin role self-assignment via registration endpoint
• fix: prevent DoS on search endpoint via query length limit and input validation
• Bug: Missing admin role authorization check on admin metrics endpoint
• Payment endpoint lacks authentication — unauthenticated payment creation
• Refresh token endpoint ignores the provided refresh token
• Registration token subject should match returned user id
• Bug: Multiple security vulnerabilities in API layer - registerUser() ID mismatch, missing auth, missing validation
• Bug: registerUser signs token with a different generated user id
• Reject inverted job budget ranges in job validation
• Settings page should provide actionable account controls
• Job detail route should resolve mock jobs by id (reissue via #743)
• @freelanceflow/ui package entrypoint should be directly importable (reissue via #743)
• @freelanceflow/ui package entrypoint should be directly importable
• @freelanceflow/db package should expose an importable workspace entrypoint
• Job creation endpoint lacks authentication — anyone can post jobs
• CORS configured with no origin restrictions — allows any domain
• Implement a fully functional Admin Panel
• Bug: Rate limiter should count malformed JSON before body parsing
• Bug: Proposal creation accepts records missing estimated duration
• Upload endpoint lacks authentication — unauthenticated file uploads allowed
• Patch PostCSS audit advisory from Next dependency lockfile
• Implement Secure Payment Gateway and Payment Service
• fix: prevent admin role self-assignment during registration
• Registration token subject can drift from returned user id
• Bug: Refresh endpoint mints tokens without validating a refresh token
• fix: enforce authentication on job creation endpoint
• fix: prevent admin role self-assignment
• Settings page should provide actionable account controls
• Settings page should provide actionable account controls
• fix(auth): prevent admin role self-assignment during registration
• fix: prevent admin role self-assignment

Memact/Schema

• Add AI assistants category schema
• Add learning category schema
• Add creator-tools category schema
• Add news-articles category schema
• Add food-delivery category schema
• Add productivity category schema
• Add travel category schema
• Add shopping category schema
• Add video-streaming category schema
• Add music category schema

JohannesL2/kanban-board

• UI: Enhance task layout to improve readability
• Feature: Allow editing of task description
• UI: Modernize and polish the SettingsModal layout
• Feature: Implement live search suggestions dropdown in SearchFilter
• Feature: Expand search filter to match both Sections and Tasks
• UI: Upgrade app background with responsive gradient glows and smooth ambient animation
• Feature: Add a Task Calendar view to the header menu
• Feature: Add inline editing for Title and Description inside the TaskModal
• Bug: Fix @dnd-kit drag-and-drop animations (laggy/buggy behavior)

sugarlabs/musicblocks

• Custom Pitch block's pie menu is reversed, no rotation, and no pitch preview

louislam/uptime-kuma

• On the maintenance creation form, link start and end times together

stdlib-js/stdlib

• Fix JavaScript lint errors
• Fix JavaScript lint errors
• Fix JavaScript lint errors
• Fix JavaScript lint errors
• Fix JavaScript lint errors
• [RFC]: Improve doctests for ndarray instances in documentation examples (tracking issue)
• Fix JavaScript lint errors
• Fix EditorConfig lint errors
• Fix JavaScript lint errors
• [RFC]: replace inline NaN generation with stdlib NaN constants in C source files (tracking issue)
• Fix broken Markdown link: http://www.speech.cs.cmu.edu/cgi-bin/cmudict#about

matrix-org/matrix.org

• Add Synod.im Client
• Add Neo Client

anubhavxdev/Event-management-system-main

• [FEAT] : Improve navbar responsiveness across all devices
• Add client-side form validation for Login and Registration pages
• [A11Y] Missing aria-label on interactive buttons across multiple files
• Add Hover Feedback for Navbar Navigation Links
• [Bug]: Event creation allows end date/time earlier than start date/time
• fix: Rate Limiting on Auth Endpoints
• Docs: Add a proper SETUP.md guide for local development
• Fix: Unknown routes redirect to Home instead of a 404 page
• Signup page shows generic "Something went wrong" error without meaningful feedback
• [FEAT] No Rate Limiting on Auth Endpoints — Vulnerable to Brute Force Attacks
• Feature: Add phone number field to Signup form (field exists in backend but missing in UI)
• [FEAT] Set Up GitHub Actions CI Pipeline for Automated Testing & Linting

vercel/next.js

• @next/next/no-html-link-for-pages rule does not work with pageExtensions
• Misleading "next-head-count is missing" error for invalid head tags
• Parameter on AppType is used incorrectly

MistWeatherMedia/weatherscan-v2

• [BUG] Avoid BUOY observation stations
• [BUG] Travel Destination, Extra Cities, Nearby Cities and Regional Map locations are using non-existent locationID instead of geocode

Simon3995/ParliamentViewer

• Need more data for "Netherlands - Eerste Kamer"
• Need more data for "New Zealand - House of Representatives"
• Need more data for "United States - Senate"
• Need more data for "United States - House of Representatives"
• Need more data for "United Kingdom - House of Commons"
• Need more data for "Germany - Bundestag"
• Need more data for "Sweden - Riksdag"
• Need more data for "Norway - Storting"
• Need more data for "Hungary - Országgyűlés"
• Need more data for "Finland - Eduskunta"
• Need more data for "European Union - European Parliament"
• Need more data for "Denmark - Folketing"
• Need more data for "Belgium - Federaal Parlement/Parlement Fédéral"

danielersen/dashboard

• API structure
• Create services
• Site design

varshneydevansh/FilterTube

• Shorts are hidden on whitelisted channels even though "Hide Shorts" filter is disabled

SamXop123/samdev-pulse

• UI Scaling Feels Oversized on Desktop
• Title: Add TROUBLESHOOTING.md for Common Installation and Runtime Issues
• [A11y] Implement Semantic SVG Accessibility Standards

jellyfin/jellyfin-web

• Trying to create/update users with some special characters such as +, / or & generate a non-descriptive error or infinite load

layer5io/layer5

• Pricing: subscription plans as a sticky row
• [Sistent] Add Menu component to the sistent components page
• [Animation] Animate Meshery Architecture
• Update the structure of pages based on the latest sitemap revision available in Figma
• [UX] Visual Design needed for incorporation of Writing Program into Internship Programs page
• [Screenshots] Flagger under 'How it Works See It in Action' section
• Improve styling of categories of models
• [SEO] First Contentful Paint (FCP): gatsby-plugin-webpack-bundle-analyser-v2

nodejs/node

• Runtime-deprecate calling digest() on HMAC more than once
• test_runner: node:coverage ignore comments exclude DA but leave BRDA in lcov output

viru0909-dev/nyay-setu-working

• [FEAT]: Add Hearing Reminder Feature
• [BUG]: WebSocket connection fails on production , Nyay Saarthi permanently broken on live site
• [DOCS]: Add ARCHITECTURE.md for new contributors
• [FEAT]: Add keyboard shortcuts and accessibility navigation support
• [FEAT]: Add Kannada Language Support for Better Regional Accessibility
• [BUG]: Profile edit fields are static text and "Save Changes" button is non-functional
• [FEAT]: Add Hover Effects to Navbar Items
• Fix Mobile Responsiveness of Login and Signup Pages
• Add LICENSE File to Repository
• [UI/Bug] Document Generation dark mode broken & Forensic Analysis reappeared in sidebar
• [CLEANUP]: Remove Duplicate Comments in api.js
• [FEAT]: # Feature Request: Add Proper Validation for Signup Form
• [DOCS]: LOCAL_RUN.md , Multiple Small Errors Blocking Local Setup
• [FEAT]: Add Legal Rights Learning Hub for Citizen Awareness
• [CLEANUP] Add frontend lint configuration and CI lint check for consistent code quality
• AI Assistant returns generic fallback response for legal queries
• [FEAT]: Add Eligibility Navigator
• [Enhancement/Bug]: UI Improvements - Animated Steps, Carousel Manual Scroll & Mobile Responsiveness Fix
• [SECURITY]: Restrict Actuator health detail exposure in default backend configuration
• [TESTING] Add meaningful backend unit/integration tests for Spring Boot APIs and security flows
• [BUG]: Low text contrast / invisible text in Case Progress tooltip box
• [FEAT]: Smart Court Date & Case Progress Predictor
• [ENHANCEMENT] : Platform features section
• [CLEANUP]: Remove .DS_Store Files from Repository
• [CLEANUP]: Remove console.log Statements from Production Frontend
• ### Issue Title: [Feature] Replace simulated delay with actual Backend API Sync logic for Offline Drafts
• [BUG]:Chat/Message Box UI Not Properly Responsive on Mobile Screens
• [BUG]: Fix email input field alignment issue on signup and Sign In page
• [BUG]: Notification Bell Shows Duplicate "Connected" System Events Instead of User Notifications
• [FEAT]: Improve Mobile Responsiveness of Case Filing Form
• ### Issue Title: [Feature] Implement Profile Update and Password Change API Integration in ProfilePage
• [SECURITY]: All Endpoints Publicly Accessible Due to permitAll() Configuration
• [BUG]: /unauthorized Route Uses Inline HTML Instead of Proper Component
• Add Dark/Light Mode Toggle to the Navbar
• [BUG]: Duplicate and Conflicting Environment Variables in Root .env
• Add a 404 Page Not Found Route
• Add Request Rate Limiting to Auth Endpoints
• Feature: Implement Direct Access for Vakil Friend AI Chat without Mandatory Login
• Navbar shifts down and partially shows footer when clicked
• Contributor Onboarding and Documentation Portal

kanak227/RepoReaper

• Refactor console.log usage into environment-aware logger
• Feature : Bulk export button addition
• Enhancement: Implement Rate Limit Handling and UI Feedback for GitHub API Bulk Operations
• Add Copy Repository URL Button
• Add empty state illustrations and messages for no repositories found
• Add loading skeletons for repository and starred repository cards

JafetCHVDev/soroban-quest

• Add keyboard shortcuts for code editor actions
• Implement scroll-to-top on route navigation
• Fix toast notification progress bar animation and add exit transition
• Replace raw <a> tags with React Router <Link> in Footer

SamXop123/Paraline

• fix(ui): resolve navigation collision and button design inconsistencies
• Create Comprehensive Build & Distribution Documentation
• [type:bug] Vite is installed as a runtime dependency instead of a development dependency
• [type:bug] Invalid helper output permanently switches audio bridge to simulated mode
• [type:bug] Missing validation for audio helper executable during application packaging
• [type:bug] Windows-only build scripts prevent packaging on non-Windows development environments
• [Feature]: Add Duplicate / Clone Theme Profile
• [Feature] : Add Modern Light Mode Toggle and Theme Switching Support
• UI Enhancement Proposal — Modernize and Improve Overall User Experience

CircuitVerse/CircuitVerse

• 🐞 Bug: 'Getting Started' dropdown does not close when clicked again
• Migrate Trumbowyg Text Editor to ViewComponent
• Migrate Pagination To View Component
• Feature - Migrate Team Section Card to View Component
• 🐞 Bug : Image upload in simulator fails due to Imgur API error
• Google OAuth: email-only lookup in from_omniauth creates duplicate accounts after Gmail rename
• The Welcome Email has broken UI elements