Good First Issues

This is a list of JavaScript repositories with good first issues for newcomers to open source. Contributions are welcome!

This list gets updated every day at midnight.

SecureBananaLabs/bug-bounty

• Low Handing Fruit Automation
• Pixel Art Creation with high Creative Thinking
• Technical Poem Generation and Content Creation
• CORS configured with no origin restrictions — allows any domain
• Refresh token endpoint ignores the provided refresh token
• Job creation endpoint lacks authentication — anyone can post jobs
• Search endpoint has no input validation or length limit on query
• Patch PostCSS audit advisory from Next dependency lockfile
• fix: prevent DoS on search endpoint via query length limit and input validation
• fix: enforce authentication on job creation endpoint
• Settings page should provide actionable account controls
• Settings page should provide actionable account controls
• Bug: Admin role self-assignment via registration endpoint
• Job detail page should render matching mock job and unknown fallback
• Payment API should require authentication
• Job detail route should resolve mock jobs by id
• Notification creation should preserve server-owned id and read state
• Freelancer profile should render matching mock profile and unknown fallback
• Registration token subject should match returned user id
• Registration should require fullName to match User model
• @freelanceflow/db package should expose an importable workspace entrypoint
• @freelanceflow/ui package entrypoint should be directly importable
• @freelanceflow/ui package entrypoint should be directly importable (reissue via #743)
• Job detail route should resolve mock jobs by id (reissue via #743)
• Settings page should provide actionable account controls
• Reject inverted job budget ranges in job validation
• fix: prevent admin role self-assignment during registration
• Search endpoint has no input validation or length limit on query
• Reject inverted job budget ranges in job validation
• Freelancer profile route should resolve mock profiles by username
• Job validation should reject inverted budget ranges
• Calculate the exact value of PI #2872
• Calculate the exact value of PI
• Benchmark APIs with p50, p95, p99 latency, RPS, error rate and TTFB
• Implement Secure Payment Gateway and Payment Service
• fix: prevent admin role self-assignment
• Implement a fully functional Admin Panel
• fix: prevent admin role self-assignment
• Bug: Proposal creation accepts records missing estimated duration
• fix: prevent admin role self-assignment during registration
• Registration token subject can drift from returned user id
• Bug: Refresh endpoint mints tokens without validating a refresh token
• fix(auth): prevent admin role self-assignment during registration
• Bug: registerUser signs token with a different generated user id
• Bug: Multiple security vulnerabilities in API layer - registerUser() ID mismatch, missing auth, missing validation
• Bug: Missing admin role authorization check on admin metrics endpoint
• Bug: user creation accepts empty payloads and client-controlled ids
• Payment endpoint lacks authentication — unauthenticated payment creation
• Bug: Rate limiter should count malformed JSON before body parsing
• User creation endpoint has no input validation
• Admin routes lack role-based access control — any authenticated user can access admin endpoints
• Upload endpoint lacks authentication — unauthenticated file uploads allowed

medic/cht-core

• Investigate loading externally hosted media into forms
• Add constant for 'person' document type

younisdev/dyvix-ui

• [Feature] Add Aurora label theme

nextcloud/spreed

• Go back to autopilot mode if re-clicking selected participant
• Imprint and privacy links in public talk conversations
• Migrate addParticipantToRoom to InvitationList
• Migrate OCC to InvitationList

vercel/next.js

• getInitialProps is not running when Router.replace's "href" and "as" contains hash and query params inside "href" change.
• @next/next/no-html-link-for-pages rule does not work with pageExtensions

JSONbored/metagraphed

• Enrich SN49 Nepher Robotics — add SSE stream
• Enrich SN43 Graphite — add public API endpoint + public data artifact
• Enrich SN42 Gopher — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN47 EvolAI — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN33 ReadyAI — add public API endpoint + SSE stream
• Enrich SN85 Vidaio — add public API endpoint + public data artifact
• Enrich SN15 ORO — add public API endpoint + public data artifact
• Enrich SN58 Handshake58 — add SSE stream
• Enrich SN19 blockmachine — add public API endpoint + public data artifact
• Enrich SN75 Hippius — add public API endpoint + public data artifact
• Enrich SN14 Cacheon — add OpenAPI/Swagger spec + public data artifact
• Enrich SN74 Gittensor — add SSE stream
• Enrich SN56 Gradients — add SSE stream
• Enrich SN64 Chutes — add SSE stream
• Enrich SN111 oneoneone — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN44 Score — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN96 Verathos — add public data artifact + SSE stream
• Enrich SN125 8 Ball — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN122 Bitrecs — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN92 Tensorclaw — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN57 Sparket — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN84 ansuz — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN12 Compute Horde — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN52 Dojo — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN29 Coldint — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN62 Ridges — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN16 BitAds — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN10 Swap — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN102 ConnitoAI — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN61 RedTeam — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN8 Vanta — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN91 Bitstarter #1 — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN5 Hone — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN11 TrajectoryRL — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN3 Templar — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN113 TensorUSD — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN100 Plaτform — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN88 Investing — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN2 DSperse — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN117 BrainPlay — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN39 Basilica — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN1 Apex — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN98 ForeverMoney — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN121 sundae_bar — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN114 SOMA — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN103 Djinn — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN32 ItsAI — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN21 AdTAO — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN45 Talisman AI — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN25 Mainframe — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN9 iota — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN63 Enigma — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN48 Quantum Compute — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN82 Compelle — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN79 MVTRX — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN4 Targon — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN72 StreetVision by NATIX — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN13 Data Universe — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN97 Albedo — add public API endpoint + public data artifact
• Enrich SN110 Green Compute — add SSE stream
• Enrich SN120 Affine — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN83 CliqueAI — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN77 Liquidity — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN71 Leadpoet — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN128 ByteLeap — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN124 Swarm — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN105 Beam — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN50 Synth — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN41 Almanac — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN35 OxMarkets — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN127 Astrid — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN80 dogelayer — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN67 Harnyx — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN54 Yanez MIID — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN78 Vocence — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN46 Zipcode — add public API endpoint + public data artifact
• Enrich SN94 Bitsota — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN60 Bitsec.ai — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN126 Poker44 — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN99 Leoma — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN55 NIOME — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN112 minotaur — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN36 Eirel — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN26 Perturb — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN37 Aurelius — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN18 Zeus — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN108 TalkHead — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN70 NexisGen — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN68 NOVA — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN24 Quasar — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN65 TAO Private Network — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN17 404—GEN — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN93 Bitcast — add public API endpoint + OpenAPI/Swagger spec
• Enrich SN66 ninja — add OpenAPI/Swagger spec
• Enrich SN23 Trishool — add OpenAPI/Swagger spec
• Enrich SN59 Babelbit — add OpenAPI/Swagger spec
• Enrich SN107 Minos — add OpenAPI/Swagger spec
• Enrich SN51 lium.io — add OpenAPI/Swagger spec
• Enrich SN109 Academia — add official website
• Enrich SN95 Actual — add source repository

TryGhost/Ghost

• Regression: email toggles
• 🌐 i18n mega-issue
• Input box for editing feature image caption link is inconsistently small
• Creating a tag named "new" is subsequently not editable
• "Unsubscribe" link should make it easy to cancel a paid subscription, too
• Editor opening staff settings/profile triggers forbidden API calls and unrelated permission toast
• Incorrect links from Top sources in analytics
• The loader image in the dashboard is not transparent
• Dark mode / light mode transitions are incorrect for most analytics sections/buttons
• Bookmark for YouTube links not populated with video metadata
• {{contrast_text_color}} helper returns incorrect text color
• a11y: kg-toggle-card not usable properly with a screenreader
• Storage adapters (and possibly other types) placed in the content folder are not detected.
• Cannot get posts from the same date (SQLite3-specific?)
• Share profile image generation is broken for some avatars and cover images

hackforla/website

• Update docker-compose.yml: Remove top-level version element
• Add ESlint VS Code installation instructions
• Epic: Create issues to add false positives to cspell.json
• Design System Audit: Text Elements: Toolkit Page
• Mobile Responsiveness on toolkit
• ER: Find all the places that Github should be GitHub and fix
• Update Donate page in Figma to reflect changes on site
• ER: Rationalizing the sponsors and partners info in code base
• Add github-handle for Bonnie Wolfe in guides-teams.md
• Add github-handle for Hunter Owens in work-for-la.md
• Add github-handle for Kate Rose in hellogov.md
• Add github-handle for Bonnie Wolfe in open-community-survey.md
• Add github-handle for Kalyani Raman in open-community-survey.md
• Add github-handle for Ambareen Sultana in open-community-survey.md
• Add github-handle for Snow in open-community-survey.md
• Add github-handle for Tugba Metinyurt in open-community-survey.md
• Add github-handle for Ben Swerdlow in new-schools-today.md
• Add github-handle for Joshua Bubar in new-schools-today.md
• Add github-handle for Jacob Zwang in new-schools-today.md
• Add github-handle for Mya Stark in not-today.md
• Add github-handle for Isabelle Wagenvoord in public-tree-map.md
• Add github-handle for Mark Jackson in public-tree-map.md
• Add github-handle for Greg Pawin in lucky-parking.md
• Add github-handle for Michael Morgan in lucky-parking.md
• Add additional repo(s) for project: Access the Data
• Update Project Profile: Food Oasis Add Bonnie Wolfe
• Update Project Profile: Food Oasis Add Jelena Karanovic
• Update Project Profile: Food Oasis Add Shienny Sutanto
• Update Project Profile: Food Oasis Add Whitney Gould
• Update Project Profile: Food Oasis Add Ling Dong
• Update Project Profile: Food Oasis Add Luigi Olianas
• Update Project Profile: Food Oasis Add Alexa Ray
• Update Project Profile: Food Oasis Add Caitlin Jimenez
• Update Project Profile: Food Oasis Add Christina Nguyen
• Update Project Profile: Food Oasis Add Zainab Adenaike
• Update Project Profile: Food Oasis Add Jaclyn Chin
• Update Project Profile: Food Oasis Remove Andy Arensman
• Update Project Profile: Food Oasis Remove Belen Garcia Martinez
• Update Project Profile: Food Oasis Remove Krista Strucke
• Update Project Profile: Food Oasis Remove Qiqi Zheng
• Design System Audit: Text Elements: Join Us Page
• Correct Oxford Comma in Communities of Practice Page
• Update Project Profile: Lucky Parking (Add Tech: Docker)
• Update Project Profile: Heart Project (Add Tech: Docker)
• Update Project Profile: HelloGOV (Add Tech: Docker)
• Update Project Profile: Railstats LA (Add Tech: Docker)
• Update Project Profile: Civic Tech Index (Add Tech: Docker)
• Update Project Profile: Spare(Add Tech: Docker)
• Update Project Profile: VRMS (Update Project's Description)
• Update Project Profile: GreenEarthOS (Update Project's Description)
• Update Project Profile: Open Community Survey (Update Project's Description)
• Prep Website Project Board for Migration
• EXAMPLE: Update Project Profile: [INSERT PROJECT'S NAME] (Update [INSERT VARIABLE NAME])
• Fix Name Inconsistency in food-oasis.md file
• Update the Date Format for the Site Map
• Remove unused file current-projects-check.html
• Replace Github with GitHub in assets/js/utility/api-events.js
• Replace Github with GitHub in github-actions/trigger-issue/add-missing-labels-to-issues/add-labels-template.md
• Replace Github with GitHub in _sass/components/_guides.scss
• Epic: Fix Name Inconsistencies in the Tools Filter