Links
AddReduce the JS Workload with No- or Lo-JS options.
For years, JavaScript has been the web’s workhorse. If HTML or CSS couldn’t do what we wanted, we grabbed JavaScript to do it.
While that has helped push the user’s experience forward, the web is choking on JS. So as HTML and CSS continue to get stronger, we should transfer any JavaScript workload possible to them.
This is an organic collection of common JS patterns that can be replaced with just HTML, CSS, and no, or very low, JS. As HTML and CSS continue to mature, this collection should expand.
CSS 3D Engine for the DOM.
Render textured 3D meshes in the DOM with CSS. No WebGL or <canvas> needed: each polygon is a real DOM element.
Supports OBJ, glTF, GLB, and MagicaVoxel VOX files, including UV textures and material colors. Works with vanilla JS, React, and Vue.
Build forms, collect responses & analyze data effortlessly. The open-source forms platform for effortless data collection and analysis.
the all-in-one repository lifecycle management tool. Checkpoint everything. Sync it back when you are ready.
A pair of CLIs with the same registry-aware, safety-first discipline — one to push, one to pull.
git-fire is one command to checkpoint many repositories: discover, auto-commit dirty work (optional), and push backup branches/remotes with safety rails.
Kafka TUI client.
ktea is a tool designed to simplify and accelerate interactions with Kafka clusters.
A (TUI/CLI) markdown navigator with tree-based structural navigation.
treemd is a modern markdown viewer that combines the structural clarity of the tree command with powerful interactive navigation. Whether you're exploring large documentation files, analyzing markdown structure, or reading comfortably in your terminal, treemd provides both CLI tools for scripting and a beautiful TUI for interactive exploration.
Run React Native in your browser. Write, bundle, and preview with HMR, Expo Router, and npm support — all client-side.
reactnative.run is an open-source, browser-based development environment for React Native apps.
Your ClickHouse, one workspace.
SQL editor, dashboards, pipelines, query analytics, cluster monitoring, governance, and an AI copilot — one single binary, on your infrastructure. Open source at its core. Pro is a license key, not a subscription to someone else's servers.
Open Source ClickHouse Web UI with RBAC. Free & Self-Hosted.
What started as a single-connection console grew into the combination most ClickHouse tools only do a piece of — first-class RBAC, multi-cluster fleet monitoring, and an autonomous AI SRE that finds the root cause and writes the fix. Read-only. On-prem. Yours.
GIMP Patch for Photoshop-Like UI. The Photoshop Like Experience on GIMP.
Transform your GIMP into a powerful, Photoshop-style image editor with one simple patch. PhotoGIMP is an open-source customization patch for GIMP 3.0 and later, designed to bring the look and feel of Adobe Photoshop to the free and powerful GIMP image editor. Developed by the Brazilian blog Diolinux, this patch transforms GIMP’s interface by mimicking Photoshop’s layout, reorganizing tools, adjusting canvas settings, and reassigning keyboard shortcuts to match Adobe’s documentation. It’s perfect for users familiar with Photoshop who want to switch to a cost-free alternative without losing productivity or workflow efficiency.
A better alternative to sudo(-rs)/su • ⚡ Blazing fast • 🛡️ Memory-safe • 🔐 Security-oriented.
RootAsRole is a Linux/Unix privilege delegation tool based on Role-Based Access Control (RBAC). It empowers administrators to assign precise privileges — not full root — to users and commands.
GitHub Actions security scanner: pin actions to SHAs, detect script injection, audit permissions. Fix supply chain vulnerabilities.
Secure your GitHub Actions workflows against supply chain attacks. Detects unpinned actions (the tj-actions attack vector), dangerous permissions, and script injection — all in one scan.
Empowering your AI Agents. Instant, Concurrent, Secure & Lightweight Sandbox Service for AI Agents.
Cube Sandbox is a high-performance, out-of-the-box secure sandbox service built on RustVMM and KVM. It supports both single-node deployment and easy scaling to multi-node clusters. It is compatible with the E2B SDK and can create a hardware-isolated, fully serviceable sandbox in under 60ms with less than 5MB of memory overhead.
Give Claude the ability to watch any video. /watch downloads, extracts frames, transcribes, hands it all to Claude.
Labs 100% Locaux & Dockerisés.
Projet support pour les labs des Mini-classes Ansible, partagé avec tout le monde.
OfficeCLI is the first and best Office suite purpose-built for AI agents to read, edit, and automate Word, Excel, and PowerPoint files. Free, open-source, single binary, no Office installation required.
Otari Gateway is the open-source gateway that puts a single OpenAI-compatible API in front of many LLM providers.
Run it in your own infrastructure. Use it standalone, or connect it to otari.ai for hosted routing, authentication, and usage reporting.
The MapLibre Organization is an umbrella for open-source mapping libraries.
Beautiful map components. 100% Free, Zero config, one command setup.
Ready to use, customizable map components for React. Built on MapLibre. Styled with Tailwind.
Simple CLI tool for deterministic routing of queries between local and hosted LLM models.
A fast, offline hard-or-easy call on every prompt — scored deterministically, with no model call. Route the easy ones to your small/local model and the hard ones to your big one, or compose any model-router behind it.
performant, safer npm package alternatives.
type a package name. we'll tell you what you don't need. The module replacements project is a community-driven effort to map replaceable npm packages to their native or more performant alternatives.
This website serves as a searchable, interactive catalog of these module replacements, allowing you to easily find and adopt better alternatives for your projects.
Related contents:
Low level control GUI for PipeWire.
coppwr displays and provides control over many aspects of PipeWire as directly as possible in an organized and visual way. It can help with debugging and diagnosing a PipeWire setup or with developing software that interacts with PipeWire.
OpenPrinter is a repairable, compact, and robust printer designed to last.
Fully repairable and equipped with a refillable ink system, it adapts to your needs while reducing your printing costs.
Easy to maintain, it offers a sustainable, economical, and eco-friendly alternative to traditional printers.
Malicious traffic detection system.
Maltrail is a malicious traffic detection system, utilizing publicly available (black)lists containing malicious and/or generally suspicious trails, along with static trails compiled from various AV reports and custom user defined lists, where a trail can be anything from a domain name (e.g. zvpprsensinaix.com for Banjori malware), URL (e.g. hXXp://109.162.38.120/harsh02.exe for known malicious executable), IP address (e.g. 185.130.5.231 for known attacker) or HTTP User-Agent header value (e.g. sqlmap for automatic SQL injection and database takeover tool). Also, it uses (optional) advanced heuristic mechanisms that can help in the discovery of unknown threats (e.g. new malware).
A Fun, Live View of Multi-Protocol Internet Break-in Attempts.
Live Honeypot Dashboard for SSH, Telnet, FTP, RDP, SMB, SIP, HTTP, and SMTP Attacks.
Thundering Herd replication and Thanos Snap durability, together at last.
Thundersnap is a collection of new and old ideas in distributed filesystem design. It’s named after the primary two ways this early version is likely to fail: the thundering herd (its mesh replication protocol) and the Thanos Snap (which is likely to lose roughly half your data).
Related contents:
The Agent Client Protocol (ACP) standardizes communication between code editors/IDEs and coding agents and is suitable for both local and remote scenarios.
Related contents:
Persistent file-based planning for AI coding agents and long-running agentic tasks. Crash-proof markdown plans that survive context loss and /clear, plus a deterministic completion gate and multi-agent shared state on disk. Manus-style. Works with Claude Code, Codex CLI, Cursor, Kiro, OpenCode and 60+ agents via the SKILL.md standard.
Providing the building blocks for creating modern, cloud-based applications.
The easiest way to build and run serverless workloads on Kubernetes. Built by the community, for modern cloud-native teams
Related contents:
Embeddable, replicated and fault-tolerant SQL engine.
Dqlite is a fast, embedded, persistent SQL database with Raft consensus that is perfect for fault-tolerant IoT and Edge devices.
Related contents:
autonomous red teaming platform; multi-agent offensive-security meta-harness.
A multi-agent offensive-security framework, built to turn the AI coding agent you already run into a zero-day hunter.
Let Claude (or any LLM) actually watch a video — scene-aware, deduplicated frames + transcript, from a URL or local file. Runs locally, MIT.
Everything I know about running LLMs locally
GPU worker client for the Talos network. Pairs with your Talos account, serves open-model inference jobs over a WebSocket, and reports uptime for payouts.
Control HermesFrom your iPhone
A native iPhone client for your self-hosted Hermes agent. Open sessions, stream responses, steer model / profile / reasoning, attach files, and browse your workspace — all from your phone. The agent runs on your server, not your iPhone.
Founded in 2015, this upstream Linux kernel project starts with the premise that kernel bugs have a very long lifetime, and that the kernel must be designed in ways to protect against these flaws. We must think of security beyond fixing bugs. As a community, we already find and fix individual bugs via static checkers (compiler flags, smatch, coccinelle, coverity, CodeQL) and dynamic checkers (kernel configs, syzkaller, KASan, trinity). Those efforts are important and on-going, but if we want to protect our billion Android phones, our cars, the International Space Station, and everything else running Linux, we must get proactive defensive technologies built into the upstream Linux kernel. We need the kernel to fail safely, instead of just running safely.
Related contents:
Application-Level Face Recognition Lock for macOS.
World's first Face Authentication enabled MacOS App-locker. Unlock your Mac apps using Face , TouchID or password. Completely local and encrypted - your data never leaves your Mac.
Related contents:
A simple, pretty terminal tool that lets you browse and download files from GitHub, GitLab, Codeberg, Gitea, and Forgejo without leaving your CLI.
ghgrab is a terminal-first tool for browsing repositories across GitHub, GitLab, Codeberg, Gitea, and Forgejo, and for downloading only the files, folders, or release assets you need.
Guard rail for your commit messages for sustainable development.
Reusable GitHub Action that reviews Terraform PRs for security, cost, and style using a LangGraph multi-agent system, posting a single severity-ranked comment.
This project is an AI-Native SAST tool. Unlike traditional SAST tools that rely solely on parsing and analysis rules, this project uses LLM (e.g. Claude from Anthropic, GPT from OpenAI or Gemini from Google) to find vulnerabilities.
Real-time data synchronization from PostgreSQL, MySQL, and MariaDB to Elasticsearch and OpenSearch—continuously and transactionally.
PGSync is a lightweight middleware that captures changes from your relational database and writes structured, denormalized documents to your search cluster.
Define your document schema once in JSON, and PGSync handles change capture, ordering, and delivery automatically—no custom ETL code required.
Automated Kubernetes workload resource tracking and adjustment.
Ballast is a Kubernetes operator that automatically right-sizes workload resource requests and limits based on real operational history. It is a more active alternative to Fairwinds Goldilocks: rather than suggesting changes, it applies them — at admission time and on running pods via in-place resize (Kubernetes 1.35+).
Basilisk II is an Open Source 68k Macintosh emulator. That is, it allows you to run 68k MacOS software on your computer, even if you are using a different operating system. However, you still need a copy of MacOS and a Macintosh ROM image to use Basilisk II.
Related contents:
Local-first, encrypted password manager.
A password manager that keeps your secrets on your own devices. No account, no server holding your vault, no company to get breached and leak everything. You hold the vault, you hold the password, and that's it.
Related contents:
Reimplementation of Christian Mueller's hd-idle with some extra features.
hd-idle is a utility program for spinning-down external disks after a period of idle time. Since most external IDE disk enclosures don't support setting the IDE idle timer, a program like hd-idle is required to spin down idle disks automatically.
Related contents:
Persistent memory for AI coding agents One brain. Local or cloud. Agent-agnostic, single binary, zero dependencies.
Agent-agnostic Go binary with SQLite + FTS5, MCP server, HTTP API, CLI, and TUI.
Related contents:
mcp-beam is a MCP server (stdio transport) for casting local files and media URLs to Chromecast and DLNA/UPnP devices on your LAN.
Related contents:
Media Casting Made Easy.
Cast media files to Smart TVs and Chromecast devices. Now with optional on-the-fly transcoding via FFmpeg.
Related contents:
A DIY-friendly, low-voltage, portable media server that creates its own Wi-Fi hotspot. Stream your media to any device without internet access using a simple, polished web UI. Built on the ESP32-S3 platform, the MK3 brings enhanced performance, expanded format support, and a modern theming system.
Your Self-Hosted Knowledge Base.
NoteDiscovery is a lightweight, self-hosted note-taking application that puts you in complete control of your knowledge base. Write, organize, and discover your notes with a beautiful, modern interface—all running on your own server.
Music. Like it used to be.
A tactile music player inspired by classic devices. No subscription. No ads. No cloud. Your music. Your device.
An open source registry and proxy that federates MCP, A2A, and REST/gRPC APIs with centralized governance, discovery, and observability. Optimizes Agent & Tool calling, and supports plugins.
ContextForge is an open source registry and proxy that federates tools, agents, and APIs into one clean endpoint for your AI clients. It provides centralized governance, discovery, and observability across your AI infrastructure.
MCP server that turns the full ticket lifecycle into a guided conversation — no portal, no context switch, no re-typing the resource ID Azure already knows about.
Automate Kubernetes Configuration Editing.
kpt is a package-centric toolchain that enables a WYSIWYG configuration authoring, automation, and delivery experience, which simplifies managing Kubernetes platforms and KRM-driven infrastructure at scale by manipulating declarative Configuration as Data.
Related contents:
the open source, distributed, transactional key-value store.
FoundationDB is a distributed database designed to handle large volumes of structured data across clusters of commodity servers. It organizes data as an ordered key-value store and employs ACID transactions for all operations. It is especially well-suited for read/write workloads but also has excellent performance for write-intensive workloads. Users interact with the database using a API language binding.
A log-structured filesystem for S3.
ZeroFS serves S3-compatible buckets as POSIX filesystems over NFS and 9P, or as raw block devices over NBD.