Curated issues

Node.js Good First Issues for JavaScript

Browse JavaScript issues that involve Node.js: the repository is tagged with it, or the issue itself names it.

Node.js

What this list is like

Average annotated difficulty: 3.7/5 across 85,027 issues.
11% of 85,027 time estimates are one day or less.

Beginner friendly Everything

Open All

Previews are built in development mode, so clicking a contributor card 404s Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

jenkins-infra/contributor-spotlight#719 · Opened Sep 23, 2026
`npm audit signatures` does not report how many packages it skipped for want of registry keys Open

Difficulty 2/5 1-3 hours Newbie friendliness 70/100

npm/cli#10018 · Opened Sep 23, 2026
[Bug]: lazy proxy disposal resends activation requests and triggers redundant rebuilds Open

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

web-infra-dev/rspack#15847 · Opened Sep 23, 2026
[Bug]: Missing ESM HMR manifests fall through to SSR instead of returning 404 Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

web-infra-dev/rsbuild#8532 · Opened Sep 23, 2026
Fix JavaScript lint errors Open

Good First Issue

Difficulty 1/5 Under an hour Newbie friendliness 95/100

stdlib-js/stdlib#15438 · 1 comment · Opened Sep 23, 2026
Upgrade multer to 2.3.0 in platform-express 11 Open

needs triage

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

nestjs/nest#17847 · Opened Sep 22, 2026
react-1.116.0.tgz: 1 vulnerabilities (highest severity is: 7.5) Open

Mend: dependency security vulnerability

Difficulty 2/5 1-3 hours Newbie friendliness 65/100

carbon-design-system/carbon-react-router-starter#911 · Opened Sep 22, 2026
bug(richtext-lexical): pasting an <hr> into the editor throws "Create node: Type horizontalrule ... does not match registered node ... with the same type" Open

Bug

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

payloadcms/payload#18262 · Opened Sep 22, 2026
deliver reports false 'artifact/check-failed' on dense diagrams: spawnSync default maxBuffer (1 MiB) truncates the check receipt (ENOBUFS/SIGTERM) Open

Difficulty 2/5 1-3 hours Newbie friendliness 84/100

tt-a1i/archify#525 · 2 comments · Opened Sep 22, 2026
[BUG] @mastra/inngest: errors thrown inside durable steps lose their original stack (and error type) — Inngest only sees the wrapper frame Open

bug customer-eng Durable Agents Inngest status: needs triage

Difficulty 2/5 1-3 hours Newbie friendliness 82/100

mastra-ai/mastra#24748 · 1 comment · Opened Sep 22, 2026
Shut down clients in client-routes integration tests Open

Tests

Difficulty 2/5 1-3 hours Newbie friendliness 70/100

scylladb/nodejs-rs-driver#552 · Opened Sep 22, 2026
opencode: `deja install opencode-auto` writes a V1 plugin (named export); 2.x refuses to load it — no auto-recall on OpenCode 2 Open

Difficulty 2/5 1-3 hours Newbie friendliness 70/100

vshulcz/deja-vu#3929 · Opened Sep 22, 2026
lingui compile crashes when NODE_ENV=test Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

lingui/js-lingui#2681 · Opened Sep 22, 2026
Manual test run on Android Tab for 1.96.x - Release Open

ARM OS/Android QA/Yes release-notes/exclude tests

Difficulty 1/5 Under an hour Newbie friendliness 85/100

brave/brave-browser#59241 · Opened Sep 22, 2026
FF Tables: create-table endpoint hangs on a partial body and accepts invalid input Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

FlowFuse/flowfuse#8640 · Opened Sep 22, 2026
FF Tables: deleting a database logs a created audit event instead of deleted Open

Difficulty 1/5 Under an hour Newbie friendliness 85/100

FlowFuse/flowfuse#8639 · Opened Sep 22, 2026
FF Tables: unsupported column type returns a 500 on table creation Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

FlowFuse/flowfuse#8634 · Opened Sep 22, 2026
[BUG] E401 error message does not use the configured registry Open

Bug Needs Triage

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

npm/cli#10014 · Opened Sep 22, 2026
ci: run the Cube JS tests on pull requests Open

ci cube github_actions security

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

TEAMSchools/teamster#5477 · Opened Sep 22, 2026
npm install strips 30 libc fields from package-lock.json, so any contributor can commit lockfile noise Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 70/100

newrelic-experimental/preflight#796 · Opened Sep 22, 2026
Bun: indexed queries silently truncate at the first non-ASCII key (ordered-binary readString ReferenceError) Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

HarperFast/harper#2750 · Opened Sep 22, 2026
Sync the Introduction to Loops in JavaScript superblock Open

help wanted js v9 cert scope: curriculum

Difficulty 2/5 1-3 hours Newbie friendliness 90/100

freeCodeCamp/freeCodeCamp#70281 · 2 comments · Opened Sep 22, 2026
V8 Crash on Tier-up with WASM That Uses WASM exceptions Open

42-x-y 43-x-y bug :beetle: platform/windows

Difficulty 2/5 1-3 hours Newbie friendliness 82/100

electron/electron#54203 · Opened Sep 22, 2026
HTTPS SNI callback references an undefined path module Open

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

yegor256/apex2www#89 · Opened Sep 22, 2026
updateMany ignores _q and filters Open

issue: bug scope: backend scope:relations severity: medium source: core:database status: confirmed version: 5

Difficulty 2/5 1-3 hours Newbie friendliness 70/100

strapi/strapi#27768 · 1 comment · Opened Sep 22, 2026
Installed only `code-review-and-quality` skill, but "references" not found Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

addyosmani/agent-skills#597 · 1 comment · Opened Sep 22, 2026
[Bug] The API error fallbacks and the home build stamp stay Chinese in the English UI Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

apache/rocketmq-dashboard#4972 · Opened Sep 22, 2026
Fix: Enforce authentication middleware on review, notification, and message routes Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

SecureBananaLabs/bug-bounty#12688 · Opened Sep 22, 2026
Fix: Proposal endpoints lack authentication middleware Open

Difficulty 2/5 1-3 hours Newbie friendliness 70/100

SecureBananaLabs/bug-bounty#12686 · Opened Sep 22, 2026
Add: Jev by Example — ten runnable agent-decision examples Open

Difficulty 2/5 1-3 hours Newbie friendliness 74/100

AbdelStark/awesome-typesafe#93 · 1 comment · Opened Sep 22, 2026
Bug: /api/auth/refresh endpoint issues tokens without verifying the requesting user Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

SecureBananaLabs/bug-bounty#12680 · Opened Sep 22, 2026
[BUG] S3Vectors `deleteVectors()` throws even when `ids` is provided Open

bug status: needs triage

Difficulty 2/5 1-3 hours Newbie friendliness 84/100

mastra-ai/mastra#24668 · 1 comment · Opened Sep 22, 2026
[BUG] Experiment score save serializes raw RequestContext via entries(), bypassing toJSON / auth-token exclusion Open

@mastra/core effort:low Evals impact:high status: auto-triaged

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

mastra-ai/mastra#24664 · 4 comments · Opened Sep 22, 2026
`no-floating-promises` conflicts with `node:test` Open

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

xojs/eslint-config-xo#128 · Opened Sep 22, 2026
Use version ranges for dependencies Open

Difficulty 1/5 1-3 hours Newbie friendliness 86/100

DavidAnson/markdownlint-cli2#940 · Opened Sep 22, 2026
Team broker status is hardcoded, so agent state cannot be read Open

area:api type:bug

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

FlowFuse/flowfuse#8618 · Opened Sep 22, 2026
[Bug]: dsh-memory-plugin 注入消息 source 仍为退役的 {kind:"plugin"}，host 0.1.7-alpha.1 的 format v4 准入直接拒收，整轮运行失败 Open

Difficulty 2/5 1-3 hours Newbie friendliness 65/100

volcengine/OpenViking#5291 · 2 reactions · Opened Sep 22, 2026
[BUG] RequestContext.toJSON() lets primitive BigInts break JSON serialization Open

bug status: needs triage

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

mastra-ai/mastra#24655 · 2 comments · Opened Sep 22, 2026
Desktop SSH: execFile('ssh -G') hangs on Windows OpenSSH when stdin is ended — connect loop never completes Open

backend/ssh comp/desktop P2 platform/windows sweeper:risk-platform-windows type/bug

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

NousResearch/hermes-agent#118983 · 1 comment · Opened Sep 22, 2026
Malformed multipart upload still crashes the server on multer 1.4.5-lts.2 (follow-up to #2510) Open

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

juice-shop/juice-shop#3641 · Opened Sep 22, 2026
[workshop-sim] Repair: Move Copilot access verification earlier in the first-workflow step Closed

feedback simulation workshop

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

githubnext/gh-aw-workshop#3686 · Opened Sep 22, 2026
deps: refresh transitive Axios lockfile entry to >=1.20.0 Open

comp/desktop P3 type/security

Difficulty 2/5 1-3 hours Newbie friendliness 65/100

NousResearch/hermes-agent#118940 · 1 comment · Opened Sep 22, 2026
Root packageManager declares yarn@1.22.22 while all CI installs with npm ci — deliberate for the RN scripts? Open

Difficulty 2/5 1-3 hours Newbie friendliness 70/100

streetwriters/notesnook#10417 · Opened Sep 22, 2026
🔒 [IBM OSPO Security Notification] — IBM/secrets-manager-management-node-sdk Open

security

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

IBM/secrets-manager-management-node-sdk#44 · Opened Sep 22, 2026
[dependabot:update-planner] Dependency update task for github/gh-aw-firewall: compatible GitHub Actions batch (Docker + Ruby setup actions) Open

dependabot

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

githubnext/gh-aw-cao#13349 · Opened Sep 22, 2026
[dependabot:update-planner] Dependency update task for github/gh-aw-firewall: compatible npm dev-dependency batch (js-yaml, babel, typescript-eslint, `@type Open

dependabot

Difficulty 2/5 1-3 hours Newbie friendliness 85/100

githubnext/gh-aw-cao#13348 · Opened Sep 22, 2026
[quality] node_modules is committed as a symlink to an absolute developer path, so every fresh clone starts dirty Closed

agent/quality hive/hosted-available-lke648397-260827-5n31 quality testing

Difficulty 2/5 1-3 hours Newbie friendliness 85/100

cncf/endusers#447 · Opened Sep 22, 2026
OAuthConsent shows an empty permissions list when only offline_access is requested Closed

Difficulty 2/5 1-3 hours Newbie friendliness 86/100

clerk/javascript#9852 · Opened Sep 22, 2026
[Small Rock] Test Save and Reload Open

small-rock

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

oss-slu/DigitalBoneBox#482 · Opened Sep 22, 2026
[Small Rock] Test Image Manipulation Open

small-rock

Difficulty 2/5 1-3 hours Newbie friendliness 64/100

oss-slu/DigitalBoneBox#479 · Opened Sep 22, 2026

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

Node.js Good First Issues for JavaScript

What this list is like

Showing the newest 100

Get new issues in your inbox