Help Wanted

Discover open source projects where your contributions truly matter

While large projects overflow with contributions, smaller initiatives eagerly await your expertise and passion

Active filters:Stars: 10+ Stars
Filters trigger API requests for better performance

Showing 30 of 15,227 opportunities to contribute

AI Summary: This issue proposes adopting changelog fragments to prevent merge conflicts in the CHANGELOG.md file. Each pull request will add its changes to a separate fragment file, and a release process will compile these fragments into the main changelog. This change aims to streamline the release process and avoid common merge conflicts.

Complexity:2/5
enhancementgood first issuelevel-3

Doberman is an AI agent security framework for guardrails, prompt injection defense, runtime policy enforcement, tool-use permissions, agent monitoring, audit logs, LLM safety, autonomous workflow protection and secure AI deployment.

Python

AI Summary: This issue is a beginner-friendly task to add a new Japanese example sentence to a JSON file. No coding is required, and the contribution can be made directly through the GitHub web interface in under a minute. It's an excellent opportunity for new contributors to make their first open-source commit.

Complexity:1/5
enhancementhelp wantedgood first issuehacktoberfestcommunitylow hanging fruitup-for-grabsfirst-timers-only

Aesthetic, minimalist platform for learning Japanese inspired by Duolingo and Monkeytype, built with Next.js and sponsored by Vercel. Beginner-friendly with plenty of good first issues - all contributions are welcome!

TypeScript
#beginner#beginner-friendly#contribute#contribution#contributions-welcome#first-contributions#first-timers-only#good-first-contribution#good-first-issue#good-first-pr#hacktoberfest#help-wanted#japanese#japanese-language#language-learning#learn-japanese#nextjs#open-source#react#up-for-grabs

AI Summary: This issue reports two minor visual bugs in the documentation. The first involves unnecessary line breaks after the header image on the index page, causing it to appear larger than intended. The second concerns extra line breaks within KMIP operation titles on specific pages, leading to wasted space.

Complexity:1/5
documentationgood first issue

A feature-rich, scalable, Key Management System

Rust
#cryptography#free#hsm#key-management#key-management-service#key-management-system

AI Summary: The `TituloEleitoral.generate()` function in the `validate_docbr` library incorrectly limits the generated state identifiers to the range 01-18. This prevents the generation of electoral titles for states with identifiers 19-28, as defined by TSE Resolution 23.659/2021. The proposed solution is to update the range to 1-29 and add tests to ensure all 28 states are covered.

Complexity:2/5
buggood first issue

Pacote Python para validaΓ§Γ£o de documentos brasileiros.

Python
#cnh#cnpj#cns#cpf#nis#nit#pasep#pis#tituloeleitor#validation-library

AI Summary: This issue proposes to refactor the project's import structure to eliminate the need for lazy imports, which are currently used as a workaround for circular dependencies. The goal is to improve the architecture and enforce better import practices using a linter.

Complexity:3/5
help wanted

Wave propagators for seismic domains with application to full waveform inversion.

Python
#firedrake#fwi#wave-propagators

AI Summary: This issue addresses a lack of detail in several emitted events within the escrow contract. Currently, events only prove that an action occurred, not what specific values changed, forcing consumers to rely on full storage snapshots. The fix involves adding relevant changed data (like updated evidence, specific escrow properties, or milestone details) to these events to improve on-chain traceability and reduce repudiation concerns.

Complexity:2/5
enhancementgood first issueexternal-contributorsMaintainer - Armando MurilloMaybe RewardedGrantFox OSSThird Campaign

Trustless Work provides permissionles escrow infrastructure. By using Trustless Work, any platform can integrate escrows in their user flow, it leverages Stellar Soroban Smart Contracts and USDC, a digital version of the dollar.

Rust

AI Summary: This issue describes a visual bug where a temporary red outline appears around the channel subscribers box when users are added very rapidly. This occurs due to a race condition or timing issue in how the UI updates after quick user additions. A related discussion thread is provided with potential solutions.

Complexity:2/5
bughelp wantedarea: channel settings

Zulip server and web application. Open-source team chat that helps teams stay productive and focused.

Python
#apache#chat#collaboration#electron#foss#free#javascript#python#python3#react-native#slack#zulip

AI Summary: The documentation's search button keyboard shortcut '/' is not working as expected in Chrome and conflicts with Firefox's built-in search. The reporter suggests implementing Ctrl+K as a more conventional and user-friendly shortcut for accessing the search bar.

Complexity:2/5
documentationgood first issue

A feature-rich, scalable, Key Management System

Rust
#cryptography#free#hsm#key-management#key-management-service#key-management-system

AI Summary: This issue addresses a warning from the Google Play console regarding "edge-to-edge" support. The goal is to improve how the application handles display areas that extend to the device's edges, likely to prevent content from being obscured by system UI elements like notches or navigation bars.

Complexity:3/5
bugenhancementgood first issuefeaturehigh priority

An android app for viewing, creating and exporting ancient egyptian hieroglyphs.

Java
#ancient-egypt#ancient-history#ancient-languages#ancient-texts#android#egypt#egyptian-writer#egyptology#ewdoc#glyphx#hieroglyph#hieroglyphic#hieroglyphics#hieroglyphs#java#mdc#xml

AI Summary: This issue proposes enhancing the Linear work source to achieve parity with the GitHub work source. Currently, Linear lacks a project dimension for enumeration and scoping, which prevents filtering and routing work based on Linear projects. The proposed solution is to fetch project information per issue and map it to allow for filtering and routing, similar to how GitHub projects function.

Complexity:3/5
help wantedarea/corekind/feature

AI agent orchestration for open and closed source β€” a fully customizable fleet of AI agents covering every level of project maintenance, from brainstorming to full autonomy

Go

AI Summary: This issue describes a correctness bug in Zeek's vector implementation where assigning a value at the maximum possible `UINT32` index (`4294967295`) causes an out-of-bounds heap write due to an integer overflow when resizing the vector. The bug is highly specific and not currently triggered by any existing scripts, but a potential fix involves adding an index check in `VectorVal::Assign` and addressing a narrowing conversion in `AddHoles`.

Complexity:3/5
Good First IssueArea: Scripting

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

C++
#bro#dfir#ndr#network-monitoring#nsm#pcap#security#zeek

AI Summary: This issue proposes adding ETags to user-uploaded files, similar to how static content is handled. The goal is to leverage file checksums (like BLAKE3) to enable clients to avoid re-downloading unchanged files, thereby saving bandwidth and improving performance, especially for large media assets.

Complexity:3/5
type: featuregood first issuearea: webarea: bobashare lib

Simple fast, anonymous, ephemeral file sharing service

Rust
#file-sharing#file-upload#paste#pastebin#pastebin-service#rust-lang#upload

AI Summary: This issue proposes implementing a server-side, streamed CSV export feature for filtered grid data. The goal is to allow users to download the full result set, not just the visible page, by reusing existing query logic and streaming rows to prevent memory issues. Key considerations include RBAC, preventing concurrent exports, CSRF protection, and mitigating formula injection risks.

Complexity:4/5
help wanted

tirreno is a security framework. Event tracking, threat detection, and risk scoring for any product.

PHP
#antispam#application-monitoring#audit-logs#audit-trails#bot-detection#bot-management#cyber-security#cybersecurity-tools#fraud#fraud-detection#fraud-prevention#intelligence#intranet#log-analysis#php-project#php-scripts#runtime-security#security-analytics#security-framework#user-monitoring

AI Summary: The documentation incorrectly advertises a PyPI package 'agent-workspace-fabric' for installation, but this package has never been published. This leads to a 404 error for new users attempting to install the agent, hindering their initial experience. The proposed fix is to update the documentation to reflect that this installation method is not yet available.

Complexity:1/5
bugdocumentationgood first issue

Control plane that runs AI coding agents (Codex, Claude Code, Gemini, OpenCode, Grok, Cursor) as disciplined contributors: each task gets an isolated git worktree + Docker Compose stack, profile-driven validation, a created PR, and an autonomous PR-monitor loop (review, CI fixes, base sync, auto-merge). GitHub & BitBucket. Apache-2.0.

Python
#ai-agents#automation#claude#code-review#codex#coding-agents#developer-tools#devops#docker#fastapi#llm#llm-orchestration#mcp#pull-requests#python

AI Summary: This issue is a "Good First Issue" that asks contributors to add a new Japanese cultural etiquette tip about business card exchange to a JSON file. No coding is required, and the contribution can be made directly from the browser in under a minute.

Complexity:1/5
enhancementhelp wantedgood first issuehacktoberfestcommunitylow hanging fruitup-for-grabsfirst-timers-only

Aesthetic, minimalist platform for learning Japanese inspired by Duolingo and Monkeytype, built with Next.js and sponsored by Vercel. Beginner-friendly with plenty of good first issues - all contributions are welcome!

TypeScript
#beginner#beginner-friendly#contribute#contribution#contributions-welcome#first-contributions#first-timers-only#good-first-contribution#good-first-issue#good-first-pr#hacktoberfest#help-wanted#japanese#japanese-language#language-learning#learn-japanese#nextjs#open-source#react#up-for-grabs

AI Summary: The user reports a bug with the Border Tool where it generates inconsistent borders based on the adjacent ground types. This suggests a potential issue with how the tool handles different tile interactions or rendering logic.

Complexity:2/5
Priority: LowArea: BrushesGood First Issue

Remere's Map Editor

C++

AI Summary: This issue proposes a "tweak" to always use the full-screen messaging interface on Tumblr, rather than the traditional bubble system. The user believes this is a power-user feature suitable for an XKit tweak, as the full-screen messaging is generally preferred and the underlying route is accessible even if the "labs" toggle isn't enabled. The edit notes that opening messages from blog cards or modals still uses the bubble version, which could be mentioned in an announcement.

Complexity:2/5
enhancementhelp wanted

🧰 The enhancement suite for Tumblr's new web interface

JavaScript
#addon#tumblr#webextension

AI Summary: This issue proposes reducing the privilege granted to several GitHub reusable workflows. Six workflows are currently passing `secrets: inherit` to workflows that don't declare any secrets, exposing unnecessary secrets. Additionally, the `scorecard.yml` workflow is granting `id-token: write` which is not utilized, and this privilege can be removed.

Complexity:2/5
help wantedsecurityagent/scanneragent/securityhive/hosted-kubestellar-console-4vkt

World's first fully integrated and fully Automated Kubernetes management and orchestration solution

TypeScript

AI Summary: This issue proposes adding comprehensive table-driven tests to verify the controller and dependency wiring for each independent operation in Gatekeeper. The current tests are insufficient, leading to undetected behavior gaps and inefficient resource usage. The goal is to ensure that each operation is correctly set up with its necessary components and that unused systems are not initialized.

Complexity:3/5
good first issuecleanuptriaged

🐊 Policy Controller for Kubernetes

Go
#admission#cncf#gatekeeper#hacktoberfest#kubernetes#mutation#opa#policy#policy-engine#security#validation

AI Summary: This issue is a beginner-friendly task to add a new regional Japanese dialect entry to a JSON file. It requires no coding and can be completed in under a minute by directly editing the file in the browser, forking the repository, and submitting a pull request.

Complexity:1/5
enhancementhelp wantedgood first issuehacktoberfestcommunitylow hanging fruitup-for-grabsfirst-timers-only

Aesthetic, minimalist platform for learning Japanese inspired by Duolingo and Monkeytype, built with Next.js and sponsored by Vercel. Beginner-friendly with plenty of good first issues - all contributions are welcome!

TypeScript
#beginner#beginner-friendly#contribute#contribution#contributions-welcome#first-contributions#first-timers-only#good-first-contribution#good-first-issue#good-first-pr#hacktoberfest#help-wanted#japanese#japanese-language#language-learning#learn-japanese#nextjs#open-source#react#up-for-grabs

AI Summary: This issue identifies four critical functions within the `pkg/github` package that have 0% test coverage. These functions are responsible for important tasks like minting installation tokens, probing write capabilities for issues, checking for failing required checks on pull requests, and verifying the existence of a path at a specific Git reference. The lack of tests means these functionalities are unverified, posing a risk of regressions or silent failures.

Complexity:2/5
help wantedqualitytestinghive/hosted-available-oke-11-placeholder-r05xagent/quality

AI agent orchestration for open and closed source β€” a fully customizable fleet of AI agents covering every level of project maintenance, from brainstorming to full autonomy

Go

AI Summary: This issue proposes to optimize Gatekeeper's initialization process by decoupling the setup of validation data synchronization components from operations that don't require them. The goal is to prevent mutation-only or unrelated pods from unnecessarily starting validation data sync infrastructure, improving resource utilization and startup times.

Complexity:3/5
good first issuecleanuptriaged

🐊 Policy Controller for Kubernetes

Go
#admission#cncf#gatekeeper#hacktoberfest#kubernetes#mutation#opa#policy#policy-engine#security#validation

AI Summary: This issue proposes to optimize Gatekeeper by initializing the violation export system and its dependencies only when the `--enable-violation-export` flag is set to true. Currently, these components are initialized unconditionally, leading to unused dependencies when export is disabled. The goal is to gate the construction and injection of these components based on the flag, ensuring cleaner resource utilization and clearer failure modes.

Complexity:2/5
good first issuecleanuptriaged

🐊 Policy Controller for Kubernetes

Go
#admission#cncf#gatekeeper#hacktoberfest#kubernetes#mutation#opa#policy#policy-engine#security#validation

AI Summary: This issue addresses a security concern by pinning all 10 references to the `kubestellar/infra` reusable workflows to a specific commit SHA. This prevents unexpected code changes from being introduced into the console's workflows, especially those running on `pull_request_target` before human review.

Complexity:2/5
help wantedsecurityagent/scanneragent/securityhive/hosted-kubestellar-console-4vkt

World's first fully integrated and fully Automated Kubernetes management and orchestration solution

TypeScript

AI Summary: This issue proposes to optimize the execution of resource expansion controllers by ensuring they only run in processes that actively consume expanded resources, specifically the validating webhook and audit paths. The goal is to prevent unnecessary controller registration and `expansion.System` construction in operations that don't require expansion evaluation, improving efficiency and preventing potential issues.

Complexity:3/5
good first issuecleanuptriaged

🐊 Policy Controller for Kubernetes

Go
#admission#cncf#gatekeeper#hacktoberfest#kubernetes#mutation#opa#policy#policy-engine#security#validation

AI Summary: This issue proposes optimizing the Gatekeeper system by deferring the initialization of the mutation system and related components until they are actually needed for mutation operations. Currently, the mutation system is always constructed, even for non-mutation tasks, leading to unnecessary resource allocation. The solution involves conditionally creating and injecting the mutation system based on whether a mutation operation is assigned, ensuring it's only active when required.

Complexity:2/5
good first issuecleanuptriaged

🐊 Policy Controller for Kubernetes

Go
#admission#cncf#gatekeeper#hacktoberfest#kubernetes#mutation#opa#policy#policy-engine#security#validation

AI Summary: This issue aims to enable the `generate` operation in Gatekeeper to function independently without requiring audit or webhook components. Currently, the `generate` operation fails to start the necessary reconciliation loops for CRDs, ValidatingAdmissionPolicies, and Bindings because it's incorrectly excluded from validation operations. The goal is to decouple generation from enforcement points and ensure it starts correctly on its own.

Complexity:3/5
buggood first issuetriagedVAP

🐊 Policy Controller for Kubernetes

Go
#admission#cncf#gatekeeper#hacktoberfest#kubernetes#mutation#opa#policy#policy-engine#security#validation

AI Summary: This issue addresses a bug where starting Gatekeeper with only the status operation fails because it incorrectly initializes the constraint client. The fix involves separating the logic for status aggregation from constraint evaluation and ingestion, ensuring that only necessary controllers are started for a status-only deployment.

Complexity:3/5
buggood first issuetriaged

🐊 Policy Controller for Kubernetes

Go
#admission#cncf#gatekeeper#hacktoberfest#kubernetes#mutation#opa#policy#policy-engine#security#validation

AI Summary: This issue requests the addition of unit tests for seven pure helper functions within `pkg/api/handlers/lima.go`. These functions, responsible for tasks like node identification, status mapping, and resource parsing, are currently only indirectly tested through HTTP handler tests, which fail to cover edge cases. Adding dedicated tests will improve code quality and prevent regressions.

Complexity:2/5
help wantedqualitytestinghive/hosted-kubestellar-console-4vktagent/quality

World's first fully integrated and fully Automated Kubernetes management and orchestration solution

TypeScript

AI Summary: This issue serves as a meta-tracker for the upcoming v1.0 release of a package. The developer outlines several key goals to achieve before the v1 release, including improving API testing, increasing API usage through personal experience or user feedback, and enhancing documentation. The developer is also open to suggestions for other improvements.

Complexity:2/5
help wantedmeta

Typescript library for the Patreon V2 API

TypeScript
#oauth#patreon#patreon-api#patreon-client#patreon-wrapper#typescript#webhook-server