Links
AddCI/CD for every forge.
Crow runs your pipelines in Docker, Podman or Kubernetes, in throwaway Windows and macOS VMs, or on the host, for repositories on GitHub, GitLab, Forgejo, Gitea and Bitbucket.
MicroVM orchestrator for your VPS.
MicroVM orchestrator for your VPS with built-in sleep/wake policies, backups, snapshots, HTTPS, custom image, logs and metrics.
nibrunner runs apps in Firecracker microVMs on one Linux machine. It is a single binary, nibrunnerd. You list the apps you want in a JSON file. The daemon boots each one in its own microVM and keeps it running.
The unified workspace for your company.
Macro is a unified workspace for teams: email, chat, docs, tasks, agents, calls, and CRM — @-linked together with shared AI memory.
Terminal music player with native Spotify, YouTube, local files, radio.
All your music.One queue.In the terminal.
spotatui plays Spotify natively and streams YouTube, your local files, Subsonic or Navidrome, Qobuz and 30,000+ internet radio stations from a single keyboard-driven player. On macOS it also drives Apple Music. Spotify is optional. So is the AI DJ.
Next generation toolkit for web3D and photorealistic graphics.
Threepipe is a modern 3D framework built on top of three.js, written in TypeScript, designed to make creating high-quality, modular, and extensible 3D experiences on the web simple and enjoyable.
Your next app. Built in Python. Build cross-platform apps in Python .
Build beautiful web, desktop, and mobile apps from one Python codebase. Flet is a Python framework for building web, desktop, and mobile apps without prior experience in frontend development.
Browse your GitHub repositories, branches, pull requests, and CI/CD statuses right from your terminal.
Rules for an AI coding agent to filter out generic AI-generated UI designs, text, and code.
A rulebook that stops an AI coding agent shipping generic UI, text, and AI-shaped code.
Cybersecurity Skills Router.
Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients.
When an AI agent (Claude Code, Codex, Cursor, OpenCode, or another compatible client) encounters an APK, a binary, frontend JS encryption, a CTF challenge, or a pentesting target, this package routes it to the right methodology, checks available tools, and executes a repeatable workflow instead of guessing commands.
Ears for coding agents: let AI hear, review and make sound. CPU-only, open source.
AI coding agents can now write the code that renders a film, a product demo or a game. They still cannot hear what they made. They cannot tell a premium key press from a cheap one, notice that a hit lands 80 ms after the cut, or hear that the music swells in the wrong place.
earshot turns sound into evidence an agent can reason about: what a file sounds like in words, how well it fits a description, the best moment inside a long recording, whether it is a real recording or code-synthesized, a second-by-second listening transcript of a whole film, an annotated picture of it, and a scorecard against professional launch films. It runs locally on CPU, as a CLI, a Python API and an MCP server.
Style guides for Google-originated open-source projects.
Every major open-source project has its own style guide: a set of conventions (sometimes arbitrary) about how to write code for that project. It is much easier to understand a large codebase when all the code in it is in a consistent style.
The open-source alternative to Claude Managed Agents.
The open-source managed agent platform. A self-hostable alternative to Claude Managed Agents and OpenAI's Agents API.
Omnara is an open-source managed agent platform. Use the API to run AI agents on any model and any machine, with tools, secrets, permissions, and streaming built in. Self-host it for free under Apache 2.0, or use Omnara Cloud.
Like htop, but for AI coding agents. Monitor Claude Code & Codex CLI sessions, tokens, context window, rate limits, and ports in real-time.
See every Claude Code, Codex CLI, and OpenCode session at a glance — token usage, context window %, rate limits, child processes, open ports, and more. Claude Code, Codex CLI, and OpenCode sessions are discovered from local process/file state, so multiple active profiles are supported across macOS, Linux, and Windows.
A deliberately vulnerable Microsoft Entra ID environment. Learn identity security through hands-on, realistic attack challenges.
EntraGoat is a deliberately vulnerable Microsoft Entra ID infrastructure for security professionals. Deploy real-world identity misconfigurations and privilege escalation paths in your own tenant, then practice exploiting them in a safe, black-box CTF format.
Related contents:
The open standard for agent readiness.
Agents are a new class of user. Many protocols now serve them (MCP, WebMCP, A2A, x402, llms.txt, Web Bot Auth, and more), but there is no shared definition of what it means to be ready for them. AgentReady is an open specification of what a product should implement to be usable by AI agents, from discovery to completion. It does not promote a protocol or a vendor. The practices below are based on measured agent behavior, and are revised as that behavior changes.
Productivity focused desktop environment for Debian and Ubuntu Linux
Recursive Agent Harnessing for an Open World .
A harness is the system around a model that enables it to act as an agent: prompts, tools, memory, skills, orchestration, and more. Harnessing is the process of optimizing that system.
Harness² is a plug-and-play framework for recursive agent harnessing in an open world, where agents encounter tasks unseen during harness design. It connects two levels of recursion while keeping model weights fixed:
Real-time network traffic visualizer. Track every hidden flow.
See every connection your computer makes — who it talks to, where they are, and which app is responsible. 100% local. No telemetry. Ever.
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
Capture, inspect, replay and tamper with the traffic between a browser and a web application, then crawl and audit it for real vulnerabilities. One self-contained download, no licence gate, powered by the OWASP ZAP engine.
Web fonts for Nuxt, without the setup. Optimized Custom Web Fonts for your Nuxt Apps.
Write a font-family declaration and Nuxt Fonts finds the font, serves it from your own origin, and generates fallback metrics to reduce layout shift.
Manages Podman containers, networks, pods, etc. on NixOS via Quadlet.
Mermaid diagrams as themeable SVG.
Pele is a lightweight open source library that renders Mermaid diagrams to SVG, themed with CSS variables.
Mac.apk runs Android apps directly on Apple Silicon Macs at full native speed.
Not an emulator. Not a virtual machine. No Linux running underneath, no Docker, no Rosetta, no Wine. Android apps launch the same way a Mac app does, render with the Mac's own graphics stack, and use the CPU at its full native speed.
Whole-disk file search for macOS: names in about 0.1 ms, typo-tolerant, plus indexed search inside files. A CLI with a small daemon, a Rust crate, or an MCP server for coding agents.
A native macOS file browser with fast fuzzy filename search, powered by fsearch.
A native Mac file browser with fast, fuzzy filename search. Browse folders, preview files, and manage your files in a familiar macOS interface.
you can outsource your thinking, but not your understanding.
Sphinx is a Git hook for agent-assisted development. Before your agent’s code ships, it asks you a question about what that code actually does.
Agent-native git platform on Cloudflare.
Humans approve intent. Machines prove conformance. The platform routes each change to the cheapest review that is still safe, and makes changes easy to undo after merge.
Related contents:
Any software. Any codebase. Any Web API. Generate an agent-native CLI and let AI agents operate it — install with a single command.
Self-hosted, Gmail-style mail client. Multi-account IMAP, threaded conversations, real-time push via IMAP IDLE + Mercure. Built with Symfony, FrankenPHP, Hotwire Turbo. Clone and docker compose up.
Self-hosted mail with a calendar beside it. Connect the mailboxes you already have — IMAP, Gmail, Outlook — and read them side by side in one inbox, on a server you own.
Related contents:
Open Source Office suite for users used to MS Office - multi-platform, tuned for performance .
ElixirOffice edits Word, Excel and PowerPoint documents (and their OpenDocument equivalents) with the ribbon, menus, dialogs and keyboard shortcuts of Microsoft Office. It runs as a desktop app that works entirely offline, or in the browser on your own server. It is free software (AGPLv3), private by design, and fast.
Related contents:
The Complete Fediverse Directory & Analytics Platform.
FediDB indexes 41,130 servers across 522 software projects, checks every one of them each day, and publishes all of it through a free public API.
Alternatives to FOSS projects choosing to use and/or support LLMs/AI, as well as tips for requesting better policies or forking.
An open foundation for modern grid planning
OpenGrid brings transparent tools, shared data, and open governance to the people modeling, planning, and modernizing grids worldwide, so new infrastructure moves from plan to power faster.
Related contents:
The refactorable warehouse Verify early, test properly, and refactor safely.
SQL transformation framework with custom compile-time checks, end-to-end testing and safe renames that keep your table history.
Change your warehouse as often as your code. SQLBuild brings compile-time checks, E2E tests and safe renames to your SQL, so change stops being risky.
Quickly sandbox your AI agent.
Launch, control, and snapshot QEMU virtual machines through an async Python API. No root, no Docker, no cloud.
Quicksand is an async Python API to launch, control, and snapshot QEMU virtual machines with a particular focus on sandboxing AI agents. Quicksand provides pre-built Linux VMs for Ubuntu and Alpine distros and supports x86_64 and ARM64 across macOS, Linux, and Windows. Running sandboxes needs no root privileges or Docker; install the QEMU and image extras for a bundled runtime on supported platforms.
Agentic AI security scanner that hunts exploitable vulnerabilities like an adversary, proves them with executable PoCs, and fixes them test-first. A maintained fork of Capital One's VulnHunter, rebuilt for any agent harness.
⚡ Energy consumption metrology agent. Let "scaph" dive and bring back the metrics that will help you make your systems and applications more sustainable !
Scaphandre [skafɑ̃dʁ] is a metrology agent dedicated to electric power and energy consumption metrics. The goal of the project is to permit to any company or individual to measure the power consumption of its tech services and get this data in a convenient form, sending it through any monitoring or data analysis toolchain.
A free office suite where your document is inside the link and easy to share. There's no account and nothing saved unless you choose.
Related contents:
Local-first Markdown notes for Linux, Windows and Android. Plain .md folders, optional end-to-end encrypted sync to a server you run yourself.
Build 3D games in Ruby.
With Ruby, the most human-friendly language. RedGem is a game engine with its own editor. Build your levels, write the gameplay in Ruby, press Play, ship it for Linux, Windows and Android.
Screenshots and screen recordings that look polished. Free Screen Recorder & Screenshot App for Mac.
Take screenshots you can scroll, annotate, and search. Record your screen with your voice and camera, and Shotnix opens it already edited: a zoom on every click, a smooth cursor, and captions made on your Mac.
Related contents:
Security through scrutiny.
A local tool for scanning open source repositories for security vulnerabilities and managing the disclosure process. You add a repo by URL, scrutineer runs a pipeline of agent skills against it inside a container, and presents the results in a web UI where you can triage findings, identify maintainers, and track disclosures. The agent CLI is pluggable: claude-code by default, or codex, opencode, or GitHub Copilot CLI with -backend.
Related contents:
Dependency free PHP library that helps to map any input into a strongly-typed structure.
Valinor takes care of the construction and validation of raw inputs (JSON, plain arrays, etc.) into objects, ensuring a perfectly valid state. It allows the objects to be used without having to worry about their integrity during the whole application lifecycle.
Wifite but USB-only & cross-platform. A standalone USB Wi-Fi auditor for Linux, Windows, and macOS.
Combination of wifite + crunch to help you Crack Wifi Passwords. This repo is a complete re-write of wifite2, a Python script for auditing wireless networks.
Wifite runs existing wireless-auditing tools for you. Stop memorizing command arguments & switches! Wifite is designed to use all known methods for retrieving the password of a wireless access point (router). These methods include:
Animated Architecture Diagrams as Code. Animated architecture diagrams from plain text.
Declare semantic nodes, flows, and timed beats in reviewable text. Markdy compiles browser-native motion graphics that stay version-controlled, PR-friendly, and AI-native.
Your workflow QA workbook. Write the check. Keep the behavior.
Give your n8n workflow fixture inputs and an explicit expectation. Take the same check from this workbook to Docker or CI.
Real n8n workflow regression checks: JSON fixtures, local HTTP mocks, exact request/output assertions and JUnit reports.
Pure JavaScript DOM-to-PDF Engine.
dompdf.js is a pure-frontend DOM-to-PDF engine powered by TypeScript, Web Workers, Rust, and WebAssembly. It reads the layout already computed by the browser and generates primarily vector-based PDFs directly in the browser, without a server, jsPDF, or a screenshot-based PDF pipeline.
The Complete Reference. Every CSS unit, explained.
From the everyday px and rem to the fine print ofsvh, dvh and cqi: all 63 of them, with live examples wherever seeing beats reading.
Dark-web intelligence, structured. Free Dark Web OSINT Tool.
Turn research queries into collection, enrichment, relationship mapping, and export — in one workflow.
VoidAccess automates dark web OSINT investigations end to end — scraping Tor, clearnet sources, and paste sites, then extracting indicators and building a structured intelligence graph without a subscription or vendor lock-in.
Birdbrain is a local-first desktop app for capturing, organizing, and verifying web evidence.
Birdbrain is an open-source desktop app with a companion Chromium extension for capturing, organizing, and verifying web evidence. Captures include MHTML, a full-page screenshot, and extracted page text, sent to the desktop app over 127.0.0.1 and stored locally in per-case archives. Birdbrain has no cloud account and no telemetry; captures stay on your machine unless you export them.
wolfSSL's Embeddable SSH Server.
wolfSSH is a small, fast, portable SSH implementation, including support for SCP and SFTP.
High-performance vector search for PostgreSQL.
A PostgreSQL extension for high-performance approximate nearest neighbor (ANN) search.
Enterprise AI Gateway Built for Scale.
Open-source, high-performance AI gateway that works as your LLM gateway, MCP gateway and agent gateway. One OpenAI-compatible API for 10,000+ models, with failover, load balancing, semantic caching, virtual keys, budgets and MCP Code Mode. Works with any SDK or agent and adds under 200µs of overhead at 5k RPS.
Local-first orchestration that just works.
Self-hostable workflow orchestrator for teams whose main work isn't orchestration. Declarative YAML over your scripts, SSH commands, containers, etc; keep workflows separate from business logic. One binary, no database, runs on limited H/W resources. Alternative to Airflow / Cron / Job Scheduler.
Define workflows in declarative YAML; one open-source binary runs them, locally or over SSH, with schedules, retries, human tasks, logs, and a Web UI. Your scripts, containers, and AI agents stay untouched. No external database, no framework.
Free Open-Source AI Voice Cloning & Dubbing.
fully-local voice cloning, voice design, video dubbing, dictation, transcription & audiobook creation in 646 languages.