Help Wanted

Discover open source projects where your contributions truly matter

While large projects overflow with contributions, smaller initiatives eagerly await your expertise and passion

Active filters:Stars: 10+ Stars
Filters trigger API requests for better performance

Showing 30 of 8,102 opportunities to contribute

AI Summary: The user wants to implement an automated system to delete inactive user accounts from Agrodex. This feature aims to optimize database resources by removing data from users who haven't been active for 30 days, 60 days, or 1 year, thereby reducing redundant data and focusing on active users.

Complexity:3/5
enhancementhelp wantedSSoC26Medium

AgroDex fights food fraud in Indonesian by pairing Hedera’s immutable ledger with Gemini 2.5 Flash AI for auditing in real-time food.

TypeScript
#expressjs#gemini#hedera#hedera-hackathon#hedera-hashgraph-sdk#nodejs#react19#supabase#tailwindcss#vite

AI Summary: This issue is a beginner-friendly task to add a new fun fact about Japan to a JSON file. No coding experience is required, and the contribution can be made directly through the browser in under a minute. It's an ideal opportunity for first-time open-source contributors and is tagged for Hacktoberfest.

Complexity:1/5
enhancementhelp wantedgood first issuehacktoberfestcommunitylow hanging fruitup-for-grabsfirst-timers-only

Aesthetic, minimalist platform for learning Japanese inspired by Duolingo and Monkeytype, built with Next.js and sponsored by Vercel. Beginner-friendly with plenty of good first issues - all contributions are welcome!

TypeScript
#beginner#beginner-friendly#contribute#contribution#contributions-welcome#first-contributions#first-timers-only#good-first-contribution#good-first-issue#good-first-pr#hacktoberfest#help-wanted#japanese#japanese-language#language-learning#learn-japanese#nextjs#open-source#react#up-for-grabs

AI Summary: This issue requests the addition of support for Japanese phone numbers, specifically addressing the rule that the leading zero must be removed when dialing from abroad but kept when dialing domestically. The contributor suggests standardizing on the format '+81 3-1234-5678' for international dialing.

Complexity:2/5
enhancementgood first issue

Websites for displaying invalid phone numbers, opening hours and incomplete names in OpenStreetMap data

JavaScript

AI Summary: This issue is a beginner-friendly task to add a new color theme called "Soba Slate" to the KanaDojo project. It requires no coding and can be completed directly in the browser by editing a JSON file. The contribution involves adding specific theme details to a list of community themes.

Complexity:1/5
enhancementhelp wantedgood first issuehacktoberfestcommunitylow hanging fruitup-for-grabsfirst-timers-only

Aesthetic, minimalist platform for learning Japanese inspired by Duolingo and Monkeytype, built with Next.js and sponsored by Vercel. Beginner-friendly with plenty of good first issues - all contributions are welcome!

TypeScript
#beginner#beginner-friendly#contribute#contribution#contributions-welcome#first-contributions#first-timers-only#good-first-contribution#good-first-issue#good-first-pr#hacktoberfest#help-wanted#japanese#japanese-language#language-learning#learn-japanese#nextjs#open-source#react#up-for-grabs
Developer ToolsCommand Line Tools

AI Summary: This issue requests the addition of a CHANGELOG.md file to the repository, following the Keep a Changelog format. The changelog should document existing features and be linked from the README. It also suggests updating CONTRIBUTING.md to encourage future changelog entries.

Complexity:1/5
documentationgood first issue

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go
#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner
Developer ToolsCommand Line Tools

AI Summary: This issue requests the addition of two badges to the project's README file: a CI status badge for the `ci.yml` workflow and a Go Report Card badge. The goal is to visually represent the project's continuous integration status and code quality directly on the repository's homepage.

Complexity:1/5
documentationgood first issue

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go
#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner
Developer ToolsCommand Line Tools

AI Summary: This issue proposes adding support for scanning AWS CloudFormation templates for misconfigurations within the Synapse tool. The goal is to extend Synapse's existing infrastructure-as-code scanning capabilities to include CloudFormation, a widely used IaC format.

Complexity:3/5
enhancementhelp wantedgo

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go
#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner
Developer ToolsCommand Line Tools

AI Summary: This issue proposes adding a new Terraform rule to the security scanner. The rule will identify security groups with egress traffic allowed to `0.0.0.0/0`, which is considered a security risk. The implementation involves adding a new check in the Go code and creating corresponding test fixtures.

Complexity:2/5
enhancementgood first issuego

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go
#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner
Developer ToolsCommand Line Tools

AI Summary: This issue requests the addition of a new Terraform rule to identify S3 buckets that do not have versioning enabled. The implementation involves modifying Terraform scanner logic, defining a new rule, and creating test fixtures to ensure correct flagging of insecure configurations and clean reporting for secure ones.

Complexity:2/5
enhancementgood first issuego

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go
#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner
Developer ToolsCommand Line Tools

AI Summary: This issue proposes adding a new Static Application Security Testing (SAST) rule to detect insecure temporary file creation, specifically when predictable paths are used in world-writable directories (CWE-377). The task involves updating the `patterns.go` file to identify vulnerable patterns and include test cases to ensure correct flagging of insecure code and avoidance of false positives.

Complexity:2/5
enhancementgood first issuego

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go
#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner
Developer ToolsCommand Line Tools

AI Summary: This issue proposes adding a new Static Application Security Testing (SAST) rule to detect Regular Expression Denial of Service (ReDoS) vulnerabilities. The rule should identify regex patterns prone to catastrophic backtracking when applied to untrusted input, with specific examples like nested quantifiers. The goal is to flag these vulnerabilities precisely while minimizing false positives.

Complexity:3/5
enhancementgood first issuego

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go
#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner
Developer ToolsCommand Line Tools

AI Summary: This issue proposes adding a new Static Application Security Testing (SAST) rule to detect XPath injection vulnerabilities (CWE-643). The task involves defining a new rule in the SAST engine, identifying patterns of untrusted input being used in XPath queries, and creating test cases to ensure accurate detection of true positives while avoiding false positives.

Complexity:2/5
enhancementgood first issuego

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go
#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner
Developer ToolsCommand Line Tools

AI Summary: This issue proposes adding a parser for Conan's `conan.lock` file to generate a Software Bill of Materials (SBOM) for C/C++ projects. The task involves creating a Go file to read the JSON lockfile, extract dependency information, and register the new parser. The goal is to integrate Conan dependencies into the project's SBOM generation process.

Complexity:3/5
enhancementgood first issuego

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go
#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner
Developer ToolsCommand Line Tools

AI Summary: This issue proposes adding a parser for Julia's `Manifest.toml` file to generate a first-party Software Bill of Materials (SBOM). The task involves creating a new Go file to parse the TOML format, extract dependency names and versions, and then registering this new parser within the existing SBOM generation system. The goal is to enable SBOM generation for Julia projects.

Complexity:3/5
enhancementgood first issuego

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go
#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner
Developer ToolsCommand Line Tools

AI Summary: This issue proposes adding a new parser to a software composition analysis (SCA) tool to handle R's `renv.lock` files. The goal is to generate a first-party Software Bill of Materials (SBOM) for R projects, replacing the current fallback Syft parser. The implementation involves creating a new Go file to parse the JSON `renv.lock` format, registering it, and adding a test case.

Complexity:2/5
enhancementgood first issuego

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go
#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner
Developer ToolsCommand Line Tools

AI Summary: This issue proposes creating a reusable GitHub Action to simplify the integration of Synapse scans into CI pipelines. The action will handle the installation of necessary tools (syft, grype, synapse-cli) and execute scans with configurable options like failure thresholds and SARIF output, eliminating manual setup for users.

Complexity:3/5
enhancementhelp wanted

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go
#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner
Developer ToolsCommand Line Tools

AI Summary: This issue proposes publishing `synapse-cli` and `synapse-api` container images to GitHub Container Registry (GHCR) on each release. This will enable users to run the CLI without a local Go installation, particularly beneficial for CI environments. The task involves creating a Dockerfile, integrating the build and push into the release workflow, and updating documentation.

Complexity:3/5
enhancementhelp wanted

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go
#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner
Developer ToolsCommand Line Tools

AI Summary: This issue aims to automate the creation of GitHub Releases with prebuilt binaries for multiple platforms and architectures using GoReleaser. The goal is to eliminate the need for users to clone and build the project, thereby removing a significant adoption blocker. This involves configuring GoReleaser, setting up a GitHub Actions workflow for tagged releases, and updating the README.

Complexity:3/5
enhancementhelp wanted

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Go
#cyclonedx#go#sast#sbom#sca#security#spdx#vulnerability-scanner

AI Summary: This feature request proposes adding a new Skill plugin to integrate with macOS Mail.app. The goal is to send important WeChat messages to email, reply to WeChat messages using email content, and generate daily WeChat message digests via email. This aims to provide users with a fallback notification channel for critical messages when they are away from their devices.

Complexity:3/5
enhancementhelp wantedskill

基于多模态视觉感知与 LLM Agent 的 macOS 微信自动化框架 | Visual RPA for WeChat

Python
#agent#ai-agent#apple-script#automation#computer-vision#desktop-automation#gui-automation#llm#macos#multimodal-ai#rpa#wechat#wechat-bot

AI Summary: This feature request aims to add multi-language support for AI interaction prompts, which are currently only in Chinese. The goal is to allow users to configure the interaction language, with English as the default for international users and enabling community contributions for other languages. This will improve usability for a global audience.

Complexity:3/5
enhancementgood first issuei18n

基于多模态视觉感知与 LLM Agent 的 macOS 微信自动化框架 | Visual RPA for WeChat

Python
#agent#ai-agent#apple-script#automation#computer-vision#desktop-automation#gui-automation#llm#macos#multimodal-ai#rpa#wechat#wechat-bot

AI Summary: This issue is a beginner-friendly task to add a single markdown line to a community notes file. It requires no coding knowledge and can be completed in under a minute directly from the browser, making it ideal for first-time open-source contributors and Hacktoberfest participants.

Complexity:1/5
documentationenhancementhelp wantedgood first issuehacktoberfestcommunitylow hanging fruitup-for-grabsfirst-timers-only

Aesthetic, minimalist platform for learning Japanese inspired by Duolingo and Monkeytype, built with Next.js and sponsored by Vercel. Beginner-friendly with plenty of good first issues - all contributions are welcome!

TypeScript
#beginner#beginner-friendly#contribute#contribution#contributions-welcome#first-contributions#first-timers-only#good-first-contribution#good-first-issue#good-first-pr#hacktoberfest#help-wanted#japanese#japanese-language#language-learning#learn-japanese#nextjs#open-source#react#up-for-grabs

AI Summary: This issue, automatically generated by Revive Code Bot, flags several `.md` files in the `plans/` directory that have not been updated recently. The bot recommends creating individual issues for each file, reviewing their content for relevance and updates, and then closing this meta-issue once all files are addressed.

Complexity:1/5
help wanted🧹 chore

LuminCore是一款专为女性设计的月经周期追踪和健康管理应用,提供直观的日历视图、智能周期预测和全面的健康数据记录功能。

Kotlin

AI Summary: This issue requests the creation of a short, animated GIF for the project's README file. The GIF should visually demonstrate the bot's functionality, showing it receiving a message, processing it with AI, and then typing a response in WeChat. This aims to enhance user engagement and potentially increase project adoption.

Complexity:2/5
documentationhelp wantedgood first issue

基于多模态视觉感知与 LLM Agent 的 macOS 微信自动化框架 | Visual RPA for WeChat

Python
#agent#ai-agent#apple-script#automation#computer-vision#desktop-automation#gui-automation#llm#macos#multimodal-ai#rpa#wechat#wechat-bot

AI Summary: This issue proposes adding support for several new multimodal LLM providers, including Gemini, Qwen-VL, GLM-4V, and local models via Ollama. The task involves creating a unified interface, implementing provider-specific adapters, updating configuration, and documenting the changes. The recommended starting point is Gemini due to its straightforward API.

Complexity:3/5
enhancementgood first issue

基于多模态视觉感知与 LLM Agent 的 macOS 微信自动化框架 | Visual RPA for WeChat

Python
#agent#ai-agent#apple-script#automation#computer-vision#desktop-automation#gui-automation#llm#macos#multimodal-ai#rpa#wechat#wechat-bot

AI Summary: This issue is a "good first issue" focused on exploring Windows support for the wechat-mac-rpa project. The task involves researching Windows automation libraries like pyautogui and pywinauto, assessing feasibility, and creating a proof-of-concept for screen capture and clicking on Windows. The ultimate goal is to determine if Windows support is viable and to outline a potential roadmap.

Complexity:2/5
enhancementhelp wantedgood first issue

基于多模态视觉感知与 LLM Agent 的 macOS 微信自动化框架 | Visual RPA for WeChat

Python
#agent#ai-agent#apple-script#automation#computer-vision#desktop-automation#gui-automation#llm#macos#multimodal-ai#rpa#wechat#wechat-bot

AI Summary: This issue requests the integration of SDL3 support into the project, which involves enabling a new windowing path via a `waf configure` flag and applying patches for Vulkan compatibility. This is a maintenance task aimed at updating the project to leverage the latest SDL version.

Complexity:3/5
good first issuemaintenance

Vulkan Ray Tracing fork of Xash3D FWGS engine. Intended to be merged into master at some point in the future.

C
#half-life#path-tracing#raytracing#rtx#vulkan

AI Summary: This issue requests the creation of a responsive pricing card demo page within the repository. The demo should showcase how to integrate existing EaseMotion CSS animation classes with a typical pricing section, including three plans, feature lists, badges, and call-to-action buttons, all while maintaining a responsive layout.

Complexity:3/5
enhancementhelp wantedgood first issueanimationGSSoC-26gssoc:approvedlevel:intermediateECSoC26

Animation-first CSS framework with reusable UI components, modern effects, and zero dependencies. Lightweight, beginner-friendly, and open-source.

HTML
#animation-library#animations#css#css-framework#developer-tools#frontend#frontend-framework#good-first-contribution#good-first-issue#good-first-pr#gssoc-2026#hacktoberfest#html-css#open-source#ui-components#web-development

AI Summary: This issue is a call for community members with Fanatec FullForce-capable wheels to help reverse engineer the communication protocol between games and the wheel. The goal is to understand how FullForce haptics work to enable them in games that don't natively support it, similar to a previous project for Logitech wheels.

Complexity:3/5
documentationenhancementhelp wanted

Logitech Trueforce-compatible haptics for any game. Reverse-engineered from the wire protocol; works on all Trueforce-enabled wheels! (G923, G PRO, RS50)

C#
#assetto-corsa#direct-drive#force-feedback#haptics#logitech-g-pro#logitech-rs50#logitech-trueforce#reverse-engineering#sim-racing#simhub#simhub-plugin#simracing#usbpcap

AI Summary: This issue is a "Good First Issue" requesting the addition of a new Japanese cultural etiquette tip to a JSON file. No coding is required, and the contribution can be made directly in the browser within a minute. The task involves adding a specific etiquette object to the `japanese-cultural-etiquette.json` file.

Complexity:1/5
enhancementhelp wantedgood first issuehacktoberfestcommunitylow hanging fruitup-for-grabsfirst-timers-only

Aesthetic, minimalist platform for learning Japanese inspired by Duolingo and Monkeytype, built with Next.js and sponsored by Vercel. Beginner-friendly with plenty of good first issues - all contributions are welcome!

TypeScript
#beginner#beginner-friendly#contribute#contribution#contributions-welcome#first-contributions#first-timers-only#good-first-contribution#good-first-issue#good-first-pr#hacktoberfest#help-wanted#japanese#japanese-language#language-learning#learn-japanese#nextjs#open-source#react#up-for-grabs