Links
AddRun GitHub Actions jobs in an ephemeral Cloudflare Containers. A signed GitHub App workflow_job webhook provisions a repository-scoped GitHub just-in-time runner.
AWS Bloodhound OpenGraph Connector.
awshound collects AWS IAM/authorization data and builds a BloodHound OpenGraph.
Proves your PostgreSQL backups actually restore, before you find out the hard way.
Untested backups aren't backups. restoredrill proves your PostgreSQL backups actually restore. It fetches the latest backup, restores it into a throwaway Postgres container, runs checks you define, and writes a JSON report with the restore time. Or, if something else already restored a copy for you, it can just connect and run the same checks against that instead.
Kafka Load Testing & Chaos Engineering. Break Kafka before production does.
Khaos generates realistic Kafka traffic and reproduces the failure and performance conditions that only show up under real load: consumer lag, hot partitions, rebalances, and broker failures.
Self-hosted Code Review Agent on your infrastructure.
A Self-hosted LLM code review agent. Connect it to your Git host, bring your own model, and let it review pull requests and issues on your own infrastructure.
AI-powered virtual executive team — a single coherent executive persona backed by 8 specialist Claude agents (FastAPI + Next.js).
A zero-dep syntax highlighter that uses the CSS Highlights API.
A tiny, dependency-free syntax highlighter for the web.
MicroLighter uses the CSS Custom Highlight API and TextMate grammars. It highlights code without adding a <span> around every token, so your markup stays clean and editable.
Related contents:
Animated UI Components for Svelte. Svelte components for creative developers.
Highly customizable animated components & backgrounds that drop into your project and instantly make it stand out
Serve Markdown to AI Agents with Accept: text/markdown
Your site already has the content. Serving a Markdown variant lets agent AI clients skip nav/scripts/layout markup and read the content directly.
This document outlines the structure and metadata schemas of the datasets released with MajinBook: An open catalogue of digitally mediated world literature published in Journal of Cultural Analytics by Antoine Mazières and Thierry Poibeau.
Reitti is a comprehensive personal location tracking and analysis application that helps you understand your movement patterns and significant places. The name "Reitti" comes from Finnish, meaning "route" or "path".
Your conversations. Your data. Your control.
Open-source chat platform for friends who value privacy. Voice, video, and screen sharing without the bloat or surveillance. Lightweight, self-hosted, open-source chat server with voice, video, text, and screen sharing. Built for small groups who want privacy, simplicity, and full control over their data.
Your Zotero library. Your server.
Self-hosted sync server for Zotero — keep libraries, groups, notes and attachments on your own infrastructure using the unmodified desktop client.
altero is a self-hosted synchronization server for Zotero. Point an unmodified Zotero desktop application at it and keep your libraries, groups, notes, annotations, attachments and full text on infrastructure you control.
It speaks the same Zotero Web API that the desktop client uses and deliberately reproduces upstream behavior where compatibility matters.
An interactive, physically grounded model of the solar system that demonstrates how gravity shapes orbits — built with TypeScript + Three.js + Vite.
It opens with a guided, 24-step walkthrough and then hands you a free-explore mode. Everything is driven by real astronomical data; the only thing the renderer ever fakes is the scale (and that is a toggle you control).
OSINT recon through the Wayback Machine.
OSINT tool for researchers and professionals. Reveal what a domain has exposed over time (emails, subdomains, tech, leaks) from the Wayback Machine archive.
SELF — the Structured Executable & Linkable Format: a program that is a SQLite database instead of an ELF file, and the machinery to actually run it on Linux/NixOS.
Related contents:
rootless container sandbox that starts in 3.5 ms.
A fast, rootless sandbox and virtual resource runtime for any workload, including untrusted and AI-generated code. One 1.52 MB static binary, no daemon, 0 RAM at rest.
One binary that manages resources, of which isolation is the first. That is why there is no single row for kern in a comparison table: it is a container runtime, a sandbox, a resource slicer and a stack runner at once, in 1.52 MB with no daemon.
Durable streams on Amazon S3.
PicoMQ is durable, real-time streams over HTTP, built on S3-compatible object storage.
PicoMQ is a durable stream server. Clients create named streams, append records, and read them back over HTTP. Records are stored on S3-compatible object storage and cluster coordination goes through a SQL database. A node is a single binary with no local state worth backing up.
browser fingerprint bench.
Every measurement a website can take from your browser, run live and shown back to you. This is the same class of signals the tracking and anti-fraud scripts collect — surfaced instead of hidden.
Secure code execution for AI applications.
run executes untrusted JavaScript and type-stripped TypeScript in a hardened QuickJS sandbox. Guest code can access only the host functions you provide.
Related contents:
A project to rapidly extract all email addresses from any files in a given path.
Related contents:
An LLM tool-use loop (bash / read / write / edit / subagent), an interactive bubbletea session, and provider-routable models. One binary, no runtime, config you can read.
A fast coding-agent harness in Go. Tool-use loop, bubbletea TUI, provider-routable models with live catalog discovery, MCP support, background subagents. One binary, no runtime, built for open-source models.
Embedded property-graph database with native vector and full-text indexing. Think SQLite, but for connected data you want to query by relationship, semantics, and text. Embedded single-file knowledge graph database with vector search and full-text search for AI/RAG apps.
One file. Relationship traversal, vector similarity, BM25 full-text search, durable streams, and ACID transactions in one local engine and one query layer.
Gjallar is a modern monitoring and observability platform inspired by Gjallarhorn, the legendary horn of Heimdall in Norse mythology. Built for reliability and speed, Gjallar continuously watches your infrastructure, services, and applications, detecting anomalies and sounding the alarm before issues become incidents. Observe. Detect. Alert.
Local-First AI Agent Workspace.
A local-first Agent workspace built for real work. Maka inspects projects, runs tools under a sandbox boundary, and records model messages and tool calls as recoverable execution facts — on your machine, through one Runtime Host.
Run a team of coding agents.
The open-source AI IDE for Claude Code, Codex, OpenCode, and more. Run agents in parallel, locally or in the cloud, and build reusable workflows.
(Being a Short Treatise on the Nature of Failure; How Failure is Evaluated; How Failure is Attributed to Proximate Cause; and the Resulting New Understanding of Patient Safety)
a tiling window manager for macOS.
An i3-like tiling window manager for macOS. Windows are leaves of a layout tree, workspaces are emulated rather than mapped onto native Spaces, and nothing requires disabling System Integrity Protection.
Pipe your nix-build output through the nix-output-monitor a.k.a nom to get additional information while building.
Free and Open-Source Low-Code log processing solution. Low Code / Visual Scripting log processing software.
FlowG is a log management platform that lets you ingest, transform, and query logs using a visual pipeline builder. It handles structured logs without requiring predefined schemas and relies on BadgerDB as its storage backend.
A dead simple 2D game engine for Go.
Ebitengine (Eh-Bee-Ten-Gin) (formerly known as Ebiten) is an open source game engine for the Go programming language. Ebitengine's simple API allows you to quickly and easily develop 2D games that can be deployed across multiple platforms.
A Nix-based system for configuring consumer wifi routers or IoT device devices, of the kind that OpenWrt or DD-WRT or Gargoyle or Tomato run on. It's a reboot/restart/rewrite of NixWRT.
This is not NixOS-on-your-router: it's aimed at devices that are underpowered for the full NixOS experience. It uses busybox tools, musl instead of GNU libc, and s6-rc instead of systemd.
Declarative system management for any Linux machine using Nix.
System manager is a tool to configure Linux machines. Unlike Chef, Puppet and Ansible, it only controls a small subset, and most of its changes are done in an immutable layer, thanks to the power of Nix.
My useful files for penetration tests, security assessments, bug bounty and other security related stuff.
safe and useful user scripts.
User scripts put you in control of your browsing experience. Once installed, they automatically make the sites you visit better by adding features, making them easier to use, or taking out the annoying bits. The user scripts on Greasy Fork were written by other users and posted to share with the world. They're free to install and easy to use.
Related contents:
Free Open-Source Mac Cleaner & App Uninstaller (CleanMyMac Alternative).
Related contents:
Gadgetbridge is a free and open source Android application that allows you to pair and manage various gadgets such as smart watches, bands, headphones, and more without the need for the vendor application. So in short, you can use Gadgetbridge instead of relying on your gadget's own proprietary app.
Related contents:
When someone asks you something, they want your answer. Not a wall of ChatGPT text. A short answer from a human will always be worth more than one from a robot, even if the robot is right.
Related contents:
noRecognition AI Adversarial Clothing.
Clothing the cameras cannot see.
A year of research becomes something you can wear. Presented on stage at Black Hat and DEF CON, and dropping at the same moment.
Related contents:
SPL driver for UNIX.
SpliX is a set of CUPS printer drivers for SPL (Samsung Printer Language) printers. If you have such a printer, you need to use SpliX. Moreover you will find documentation about this proprietary language here.
Related contents:
Bobcat is a modern, feature-rich terminal emulator that works across all major operating systems. It's built using the U++ framework and TerminalCtrl widget to create a powerful yet user-friendly command-line experience.
A Neovim configuration system for nix.
Nixvim is a Neovim distribution built around Nix modules. It is distributed as a Nix flake, and configured through Nix, all while leaving room for your plugins and your vimrc.
A Self-Hosted & Modern Roleplaying Platform.
Foundry Virtual Tabletop is software that provides an innovative online role-playing experience. The software supports Windows, Mac, and Linux and allows you to self-host a game server that players connect to for free directly through a web browser.
A spreadsheet built like a code editor. A fast, keyboard-first, local-only spreadsheet for people who care about flow.
Command palette, vim mode, split panes, a built-in terminal, and a CLI. Native Rust. under 30 MB. Opens instantly. Works entirely offline.
Offline-first SQL sync with Typescript and Rust cores.
Syncular keeps an SQLite database on each client and synchronizes it through a server-owned commit log. Apps read from local SQLite and continue to work offline. A write updates local state immediately, enters an outbox, and is checked by the server when it syncs.
the context layer for large codebases.
Turbocharge Claude Code, Cursor, Codex, Gemini & every coding agent: faster, cheaper, with contextual understanding specific to your codebase.
Control your coding agents (Claude Code, Codex, Cursor, Grok, Hermes, Pi) locally by default, with optional multi-device sync.
Every device runs a small engine that stores sessions on that device. A new installation starts in local-only mode without an account or a network connection.
Self-hostable Calendly + Zoom alternative.
Replace Calendly and Zoom with one binary you own.
Calnode self-hosts the whole meeting — the booking, the video call, and the recording — on your own infrastructure. AI-native, ~30¢/month, and small enough to audit yourself.
Related contents:
Self-hosted all-in-one media tracker and Trakt alternative for movies, TV, anime, books, games, music, and podcasts.
Floppy is a self-hosted, all-in-one media tracker and personal media diary, a broader alternative to Trakt, Letterboxd, and TV Time for people who want one place for everything they watch, read, play, or listen to. It gives you a real progress view that tells you what to watch next, a unified history you can actually scan, recap-style statistics, shareable lists, owned-media collections, and integrations that sync instead of asking you to upload a file every few months.
Visual Homelab Mapper & Monitor.
Self-hosted visual canvas for your network. Drag, document and watch every device live — now native in Home Assistant.
A small self-hosted web UI to manage an HAProxy configuration, obtain Let's Encrypt certificates, and run an active-passive cluster with Keepalived on a shared virtual IP.
Open-source feedback & roadmap tool — feedback boards, public roadmap, AI-assisted changelog. Self-host on Cloudflare Workers, Vercel, or Docker.
the Lidarr companion for self-hosted music discovery.
Aurral is the Lidarr companion for self-hosted music discovery. Best-in-class recommendations, rotating flows, and playlist downloads, built on Lidarr instead of replacing it.
The ActivityPub protocol is a decentralized social networking protocol based upon the [[activitystreams-core]] 2.0 data format. It provides a client to server API for creating, updating and deleting content, as well as a federated server to server API for delivering notifications and content.
Related contents:
A.I.G (AI-Infra-Guard) is a comprehensive, intelligent, and user-friendly AI Red Teaming security testing platform developed by Tencent Zhuque Lab.
An experimental interface for building software by editing persistent pseudocode and synchronizing it with an AI-generated implementation.
Related contents:
A mise plugin providing a zero-dependency PHP toolchain built on FrankenPHP. No system PHP required. It's like npx, uvx, bunx but for modern PHP (8.3+) 😎.
Cut the noise. Keep the signal.
One install wires Claude Code, Codex, Cursor, and 11 more. ctx-wire runs their commands, compresses the noisy output, scrubs secrets fail-closed, and hands back a short result. The full log stays on disk for when something actually fails.
A multi-model AI agent desktop client — connect any AI provider, extend with MCP & skills, control from your phone. Built with Electron + Next.js.