Good First Issues

This is a list of JavaScript repositories with good first issues for newcomers to open source. Contributions are welcome!

This list gets updated every day at midnight.

stdlib-js/stdlib

• Fix JavaScript lint errors
• Fix broken Markdown link: https://bugzilla.mozilla.org/show_bug.cgi?id=892671
• Fix JavaScript lint errors
• Fix JavaScript lint errors
• Fix JavaScript lint errors
• Fix C lint errors
• Fix JavaScript lint errors
• Fix JavaScript lint errors
• Fix JavaScript lint errors
• Fix JavaScript lint errors
• Fix JavaScript lint errors
• [RFC]: Migrate math/base/special packages from relative tolerance testing to ULP difference testing (tracking issue)

neurodesk/webapps

• ci: add noddi, degibbs, dwidenoise and n4 to test:interface-workflows
• shared: one module for BIDS-derivative names and sidecars of the DWI apps

shivenhanda/ExpenseTracker

• Improve Expense Tracker Dashboard UI/UX
• Add Validation to Expense Forms

processing/p5.js

• [p5.js 2.0+ Bug Report]: createRadio().disable(false) does not re-enable radio inputs
• [p5.js 2.0 Bug Report]: Warnings about omitting strokes on high-detail 3D primitives don't use FES
• [2.0] Include w field of p5.Vector in documentation
• [2.x] Fix dimensional quirk in the setHeading() method of p5.Vector
• Update describe function limits and best practices

TMHSDigital/Free-Game-Dev-Assets

• catalog: normalise 12 licence values to SPDX ids and fix a few small data defects
• catalog: only 48 of 414 entries have a credit line, so "Copy credit line" is missing on most CC-BY and OFL pages
• catalog: fill publisher (empty on 59% of entries) and grid_dimensions on the remaining 2D packs
• catalog: re-verify the 54 entries last checked on 2026-07-19/20 (first batch)

biolend83/tubehaus

• Remember the playback speed between visits
• nginx reverse proxy example
• Design a TubeHaus icon
• Translation review: native speakers wanted

happy520ai/unified-ai-system

• No test covers the loopback half of http.js:114 - authRequired is only asserted from the authenticated side
• Our survey pages stated denominators their own tables contradicted (2/19 where the tally says 2/18)
• Add a secure Helm chart for the HTTP gateway (Phase 1)
• docs: extend MCP client matrix with verified client runs

HarperFast/harper

• static file handler should have configurable index.html
• Incorrect logic for matching index.html

vercel/next.js

• @next/next/no-html-link-for-pages rule does not work with pageExtensions
• ISG with GIP in _app overrides cache-control of ISG page

nextcloud/mail

• Change Message-ID format
• Add a CONST for the Oracle Max Chunk size and replace all occurrences
• Show email next to name in Search dropdown

meshery/meshery.io

• Fix mobile spacing and alignment on MeshMates page
• [DevOps] Populate Meshery Catalog with Sample Apps using meshery UI
• Fix mobile responsive layout for GSoC Programs page
• [Bug] Copy Button Flickering on Hover

Jason-Vaughan/TangleClaw

• ui/integration: six v2 palette pairs fall below the 4.5:1 contrast floor
• [feature] Set CLAUDE_CODE_ARTIFACT_AUTO_OPEN=0 for spawned Claude sessions — artifact tabs pile up on a host nobody watches
• wrap: changelog promotion emits headings with no link-reference defs
• [chore] Log when resolveSessionRange downgrades a session SHA to the trunk range

nextcloud/forms

• Replace description fields with NcRichText

neomjs/neo

• Pin Neo.util.Css: how CSS rules reach the main thread
• Docs App: Routes
• examples/calendar/weekview throws on load and renders nothing
• Pin how CountryFlags turns a location into a flag
• config order: add an exception for layout to always be in front of items
• buildScripts/createClass: guessBaseClass() => add container.Viewport
• selection.HelixModel: toggleSelection & select
• tab.Container: Closable tabs
• Pin how the RPC API manager resolves each call's type and URL
• Pin when the toast manager refuses a toast
• Pin the range field's value-in-label display
• Pin the number field's spin-button trigger
• Pin how the progress, country-flag and GitHub-user grid columns map a record
• Pin which events the calendar's getDayRecords returns for a day
• Pin how the currency field parses and renders amounts
• Pin the ways ClassSystem.beforeSetInstance turns a config into an instance

nirholas/three.ws

• Money Pulse: compact numbers roll over into the wrong unit ($1000, 1000.0k)
• Tests: lock in the anchored host allowlist in isSafeQueryModelUrl
• Upload check: isValidGlbMagic skips the declared-length check the server enforces
• Rig: map Source engine ValveBiped.Bip01_* skeletons and teach Rig Doctor to name them
• Rig: map 3ds Max Biped finger chains (Bip01 L Finger0, Finger01)

dheerajjha/reviewer

• Open straight into a comparison or a commit from the command line: --range, --base, --commit, --last-commit
• A comment body can forge a file heading in the prompt export, inventing a section for a file nobody reviewed

GoogleChrome/lighthouse

• Audit proposal: Detect if React is development mode
• handling impact of isInputPending on long tasks metrics?

nextcloud/deck

• 'Archive All cards' confirmation madal does not show properly on ultrawide 3440x1440 (21:9 ration) screen

nextcloud/contacts

• [Bug]: Activity shows contact being created in the wrong address book

nextcloud/calendar

• Show proper metadata for when you post the link in social networks or chats

OpenGIS/waymark-wp

• Ascent and descent values too high
• Order of map rendering in collections
• Clustering of multiple waymark types
• Adding youtube videos to the gallery
• Some UI to easily cycle between maps in a collection
• Load the plugin only in pages or articles that use it to increase the speed of the site

SecureBananaLabs/bug-bounty

• upload endpoint accepts empty file submissions as successful uploads
• auth refresh endpoint issues tokens without verifying the requester
• User creation endpoint has no input validation
• Payment endpoint lacks authentication — unauthenticated payment creation
• Automate Bug Detection and Reviews
• POST /api/reviews endpoint missing authentication middleware (reissue via #743)
• registerUser access token can reference a different user id
• CORS configured without origin allowlist in app.js (reissue via #743)
• POST /api/proposals endpoint missing authentication middleware (reissue via #743)
• Benchmark APIs with p50, p95, p99 latency, RPS, error rate and TTFB
• POST /api/users endpoint missing authentication middleware (reissue via #743)
• Technical Poem Generation and Content Creation
• Pixel Art Creation with high Creative Thinking
• Low Handing Fruit Automation
• Implement Secure Payment Gateway and Payment Service
• Job creation endpoint lacks authentication — anyone can post jobs
• Upload endpoint lacks authentication — unauthenticated file uploads allowed
• Registration token subject should match returned user id
• Search endpoint has no input validation or length limit on query
• Job validation should reject inverted budget ranges
• Calculate the exact value of PI #2872
• CORS configured with no origin restrictions — allows any domain
• Admin routes lack role-based access control — any authenticated user can access admin endpoints
• Implement a fully functional Admin Panel
• Reject inverted job budget ranges in job validation
• Freelancer profile route should resolve mock profiles by username
• Calculate the exact value of PI

nextcloud/spreed

• Option to set "Original image quality" as default setting
• Limit to groups in federated target server breaks federation
• Always show filters in conversation search

career-ops-hq/career-ops

• h1b-sponsor: move the duplicated displayClean() into lib/
• i18n(fr): bring the French interview modes (plan/practice/debrief) back to parity with the English ones

louislam/uptime-kuma

• Pausing a group does not pause the individual monitors of that group
• [GDPR] Add cookies consent when Google Analytics is Enabled
• Support URL parameters so we can link directly to filtered dashboard view

morbeo/stick2

• Rework sneeko
• Rework jabbo
• Rework grumbo
• Rework hadoo
• Rework bonko
• Rework clampo
• Rework otkopod
• Rework houndo
• Rework centaur
• Rework gloomo
• Rework honky
• Rework gogili
• Rework noodo
• Rework sarj
• Rework lumpo
• Rework hicco
• Rework zippa
• Rework core roster characters (all except stick)

oktalk/rapscallion

• Add unit tests for Potion and Shield
• Refactor classes to use hooks
• Make the potion indicator readable
• Remove unused state and methods from App.js
• Add alt text to title screen images
• Dying on the last card of a room shows a blank or "You won!" end screen
• Declare prop-types as a direct dependency
• Ace of Hearts room healing can raise HP above 21

Varanda-org/varanda

• Adicionar script de teste ao apps/app com regressão das aspas curvas
• Corrigir o limite de --timeout-ms e a gravação de --out do assoc certify
• Atualizar o README da raiz e restaurar os três diagramas no design.md

open-telemetry/opentelemetry.io

• [es] Spanish folder localization zero-code
• [es] Spanish folder localization blogs
• [pt] Localize content/en/docs/collector pages
• [pt] Localize content/en/docs/platforms pages
• [es] Spanish folder localization docs/Platforms
• [pt] Localize content/en/docs/zero-code/agent/configuration.md
• [es] Spanish folder localization docs/demo
• [pt] Localize content/en/docs/zero-code/java/spring-boot-starter/_index.md
• [pt] Localize content/en/docs/zero-code/agent/performance.md

web-platform-tests/wpt.fyi

• Write web tests for Interop Dashboard components

armellarcier/ha-chauffage

• Card: a double click on a slot can merge the new slot with the next one
• More-info dialog: "Eco until midnight" while Eco goes on the next day

code-charity/youtube

• tidy the menu meaningfully?
• 🐞Incomplete settings application (subtitles, audio) during internal YouTube navigation
• 🐞 Race condition on SPA navigation: subtitlesLanguage and disableAutoDubbing fail to apply when player initializes late
• Site is broken in tabs opened a day before🐞
• 🐞youtube is blocked
• 🐞YouTube keeps adding videos to the queue when the extension is enabled
• 💡to remove gifs from comment section
• 💡Option to disable/hide the appearance of the precise seeking bar
• 🐞Volume control with mouse wheel broken?
• 🐞 "Disable Likes Animation" doesn't
• Channel Block list visual bug🐞
• "Add to Blocklist" button no longer working in Nightly (129.0a1 (2024-06-28) (64-bit))
• 🐞 Members Only Videos can be seen
• "Show time remaining with reference to playback speed" -option stopped working🐞
• Ways to add Shorts to the queue list, user saved playlists & watch later list!
• cinema mode not working as expected🐞
• Add "Force stable volume OFF" feature.
• Permanent Disable Of Multiple YouTube Settings
• 💡
• Player buttons to be added </video>
• 💡Remove 'member first' videos
• 💡hide community posts
• Adon View
• 🐞Settings keep resetting
• Migrate to TypeScript
• Block/Hide Games on Netflix

camunda/camunda-modeler

• When I open a DMN without DMNDI, the overview does not display anything until diagram is modified
• XML window doesn't support keyboard binding (Ctrl/Cmd + A) not working as expected

Berserk-hub150/skillhawk

• [Good First Issue] Add a safe-fixture writing tip [MC-007]
• [Good First Issue] Add a suspicious-fixture writing tip [MC-008]
• [Good First Issue] Add a redaction tip [MC-009]
• [Good First Issue] Add an actionable-remediation tip [MC-003]
• [Good First Issue] Add safe defaults guidance for Finding titles [MC-101]
• [Good First Issue] Add clarity guidance for Finding titles [MC-100]
• [Good First Issue] Add a SARIF-result tip [MC-015]
• [Good First Issue] Add an educational-warning tip [MC-016]
• [Good First Issue] Add a false-positive review tip [MC-004]
• [Good First Issue] Add a regression-test tip [MC-014]
• [Good First Issue] Add least privilege guidance for Finding titles [MC-102]
• [Good First Issue] Add a SKILL.md trust-boundary tip [MC-012]

CentreForDigitalHumanities/EDPOP

• Weird overflow when pasting long URL into record comment