🚀 GSoC 2026 Org Finder

Find your perfect Google Summer of Code 2026 organization

Discover organizations based on tech stack, domains, competition level, GitHub activity, and beginner-friendly issues — all in one place.

✨ What is this?

GSoC 2026 Org Finder is a fast, modern, and beginner-friendly platform for exploring Google Summer of Code organizations based on tech stack, domains, interests, and contribution goals.

Instead of manually browsing through 184+ organizations, users can:

• 🔍 Search by technology, domain, or keyword
• 🏷️ Filter by languages, categories, and competition level
• ⚖️ Compare organizations side-by-side
• 🟢 Discover beginner-friendly Good First Issues
• 📈 Track live GitHub activity and project insights

Built with a responsive and lightweight architecture, the platform delivers a seamless experience across desktop and mobile devices.

No sign-up. No setup. Just explore, compare, and begin your open-source journey 🚀

📈 Flowchart

🎯 Features

🔎 Discovery & Filtering

Easily explore organizations using powerful and beginner-friendly filtering tools designed to simplify the GSoC organization discovery process.

📊 Live GitHub Integration

flowchart TD
    A([🏢 Organization Card])

    A --> B[📖 Tech Stack]
    A --> C[📅 GSoC Timeline]
    A --> D[📈 Competition Metrics]
    A --> E[🟢 Good First Issues]
    A --> F[💡 Ideas Page]
    A --> G[⚖️ Compare System]

    D --> H[⭐ Stars & Forks]
    D --> I[🔥 Activity Badge]

    style A fill:#d4af37,color:#000,stroke:#2c2420,stroke-width:3px
    style B fill:#1f2937,color:#fff
    style C fill:#5d4037,color:#fff
    style D fill:#0f766e,color:#fff
    style E fill:#166534,color:#fff
    style F fill:#7c3aed,color:#fff
    style G fill:#b45309,color:#fff
    style H fill:#374151,color:#fff
    style I fill:#991b1b,color:#fff

⚖️ Comparison System

Easily compare up to 3 organizations side-by-side to identify the best fit for your skills and contribution goals.

✨ User Experience Features

┌─────────────────┐
│ ↑ ↓ ← → Navigate│
│ Enter → Open    │
│ C → Compare     │
│ Esc → Close     │
└─────────────────┘

┌─────────────────┐
│ 👀 Org Views    │
│ 🔎 Searches     │
│ ⏱ Session Time  │
│ 📈 Trends       │
└─────────────────┘

┌─────────────────┐
│ ☀️ Light Mode   │
│        ⇅        │
│ 🌙 Dark Mode    │
└─────────────────┘

┌─────────────────┐
│ 💻 Desktop      │
│ 📟 Tablet       │
│ 📱 Mobile       │
└─────────────────┘

🗂️ All 184 GSoC 2026 Organizations

🛠️ Tech Stack

📁 Project Structure

gsoc-2026-org-finder/
├── index.html                    # Main frontend HTML
├── api/github.js                 # Vercel Edge Function — GitHub API proxy
├── src/
│   ├── assets/og-image.jpeg      # Social preview image
│   ├── js/app.js                 # Application logic
│   ├── js/org.js                 # Organization data source
│   └── styles.css                # Styling
├── agent/
│   ├── scripts/                  # Automation and helper scripts
│   └── tenet_agent/              # TENET PR review agent
├── data/issues.json
└── README.md

No node_modules. No build step. No bundler. Just deploy.

🔍 URL Validation

The project includes a validation script to ensure all organization ideas URLs are safe and properly formatted:

node agent/scripts/validate-ideas-urls.js

This script checks:

• ✅ URL format validity
• ✅ Protocol restrictions (http/https only)
• ⚠️ Placeholder/generic URLs that need updating
• 📊 Summary statistics and protocol distribution

Run this before committing changes to src/js/org.js to catch invalid URLs early.

🔒 Hardened Frontend Architecture

To ensure the GSoC Org Finder is extremely secure, accessible, resilient, and maintainable, the codebase has been hardened with a robust vanilla architecture:

1. Unified Event-Driven Flow & Delegation (100% Programmatic & CSP-Compliant)

All frontend scripting, bookmarking, complexity filtering, modal controls, and dynamic templates have been migrated to a 100% programmatic model:

• Zero Inline Handlers: All scattered onclick and onerror attributes in both static HTML (index.html) and dynamic template strings (app.js, recommendation-ui.js) are completely eliminated.
• Global Capturing Image Error Interceptor: A centralized recapturing error listener registered on document seamlessly intercepts failed image load events and triggers styled initial-based fallbacks.
• Centralized Event Delegation: Dynamic interactive collections (like trending cards, selected language badges, and mentor contact cards) cleanly route clicks via unified delegated listeners on their parent elements (#trendingScroll, #selectedLangsStrip, #mentorsContainer).

2. 🛡️ Safe Rendering & Sanitization (XSS Mitigation)

• HTML Escaping: All dynamic insertions of user-supplied or external API content are safely wrapped via a rigid escapeHtml() text filter to block HTML markup injections.
• Protocol-Restricted Hrefs: External anchor elements (like organization repository pages or ideas boards) are strictly validated via sanitizeHrefUrl() and validateIdeasUrl() to enforce only safe absolute protocols (http: and https:), explicitly rejecting active protocol wrappers (javascript:, data:, vbscript:).

3. ♿ Accessible Modal Management

All overlays (orgModal, compareModal, and helpModal) implement full semantic accessibility matching the WAI-ARIA standard:

• Modals are marked up using role="dialog", aria-modal="true", and mapped with specific label headers via aria-labelledby.
• Open/close interactions trigger strict focus restoration (returning focus to the activating button upon closing).
• Modals implement dynamic focus trapping ensuring Tab/Shift+Tab operations cycle exclusively within dialog controls.

4. 🛜 Offline Resilience (Service Worker Caching)

• Static Manifest: A robust cache list (sw.js) collects and version-controls all essential UI assets, scripts, stylesheets, and custom Google Fonts.
• Dual Caching Interceptors: Intercepted requests deploy Stale-While-Revalidate patterns for static assets (for zero-latency responsiveness) and Network-First strategies for Edge proxy stats and JSON issue lists (for high data reliability).

5. 🧪 Zero-Dependency Testing Suite

A modular test bed under /tests utilizes Node.js's built-in node:test framework and mock DOM stubs, covering:

• tests/sanitization.test.js: Validates escaping and URL sanitizers.
• tests/skills.test.js: Validates language aliases and technical context matching for single-letter tags.
• tests/recommendation.test.js: Validates recommender scores and veteran status bonuses.
• tests/filtering.test.js: Validates tag matching.
• tests/modal.test.js: Upgraded interactive test suite validating focus traps, focus restorations, and API fetching.
• tests/browser.test.js: Simulated browser DOM smoke test dry-running page load event bindings.
• tests/cache.test.js: Service Worker offline caching strategy fetch intercept test.

Run the test suite locally:

npm test

🚀 Deploy Your Own

1. Fork & Clone

git clone https://github.com/your-username/gsoc-2026-org-finder.git
cd gsoc-2026-org-finder

2. Add GitHub Token (for live stats + Good First Issues)

In your Vercel dashboard → Project Settings → Environment Variables:

GITHUB_TOKEN = ghp_your_token_here

Generate a token at github.com/settings/tokens — only public_repo scope needed.

3. Deploy

vercel --prod

Or connect the repo to Vercel and it deploys automatically on every push.

4. Run Locally

open index.html   # macOS — works without API (GitHub stats won't load)

For full functionality locally, run vercel dev to start the Edge Function.

🐛 Troubleshooting

GitHub stats not loading?

• Set GITHUB_TOKEN environment variable
• Check rate limits: curl -H "Authorization: token YOUR_TOKEN" https://api.github.com/rate_limit

Ideas link not working?

• Run node agent/scripts/validate-ideas-urls.js to check all URLs

Issues page empty?

• GitHub API might be rate-limited; wait 1 hour and refresh

🤝 Contributing

Found a missing org, wrong category, or incorrect tags? PRs are very welcome!

Read the guide for your contribution track before getting started:

For the full contributing reference (architecture, rules, PR workflow), see CONTRIBUTING.md.

Assignment Process

This repo uses a maintainer-verified assignment system:

1. Find an issue and comment /assign gssoc or /assign nsoc
2. Your request is queued (not immediately assigned)
3. A maintainer verifies the issue and runs /approve-assignment
4. You get notified and can begin work

Do not start working before you are assigned.

Quick Start

1. Fork the repo
2. Edit the ORGS array in index.html
3. Open a pull request using the appropriate template

Each org entry looks like this:

{
  name: "Organization Name",
  cat: "science",           // science | programming | data | web | os | security | media | infra | dev | other
  years: 5,                 // number of GSoC years participated
  firstYear: 2021,          // first year they participated
  competition: "moderate",  // hot | moderate | chill
  github: "owner/repo",     // main repo (or just "owner" for umbrella orgs)
  ideas: "https://github.com/org/repo/wiki/Ideas",  // project ideas page URL (optional)
  tags: ["python", "c++", "machine learning"],
  desc: "Short description of what the org does.",
  fit: ["Python devs", "ML researchers"]
}

Ideas URL Requirements:

• Must use http:// or https:// protocol (or protocol will be added automatically)
• Should link to the organization's specific project ideas page
• Generic GSoC organization pages are acceptable as placeholders but should be updated when possible
• Run node agent/scripts/validate-ideas-urls.js to check all URLs before submitting

Competition levels (subjective, based on org popularity + slot count):

• hot — high applicant volume, very competitive (Django, LLVM, Git, KDE…)
• moderate — good balance of applicants and slots
• chill — fewer applicants, easier to stand out

PR Review Pipeline

All PRs pass through a 3-stage pipeline:

Stage 2 unlocks only after Stage 1 passes. The pipeline status comment on your PR updates only when the stage actually changes (no spam).

📅 GSoC 2026 Key Dates

🔌 API Reference (/api/github.js)

The Edge Function proxies GitHub API calls so your token never hits the client.

All responses are cached in-memory for 1 hour on the Edge runtime.

🚀 Official Open Source Program Project

🔑 Project Admin

@S3DFX-CYBER — Project Admin (PA) for GSSoC'26 and NSoC'26. Responsible for final merge decisions, mentor coordination, repository maintenance, and ensuring contribution quality across all programs.

👥 GSSoC Mentors

These mentors help guide and review contributions for the GSSoC program:

We thank all our Contributors for improving this project

💡 Tips for Users

1. New to GSoC? Start with "Newcomers First" filter + sort by Good First Issues
2. Experienced? Check "Veterans" filter + sort by Competition for challenges
3. Building a comparison? Use keyboard shortcut C to quickly add orgs
4. Mobile browsing? Try portrait mode — everything scrolls smoothly

✨ Contributors

Star History

📄 License

Apache 2.0 — made for GSoC beginners, by people who've been there. Share it with anyone applying! Applications open March 16, 2026. 🙌