Links
AddSupply-chain Levels for Software Artifacts, or SLSA ("salsa").
SLSA is a specification for describing and incrementally improving supply chain security, established by industry consensus. It is organized into a series of levels that describe increasing security guarantees.
It’s a security framework, a checklist of standards and controls to prevent tampering, improve integrity, and secure packages and infrastructure. It’s how you get from "safe enough" to being as resilient as possible, at any link in the chain.
Related contents:
Your Persistent Adversary. Real Attack Surface Management, within the watchTowr Platform. The future of Continuous Automated Red Teaming and Attack Surface Management.
The agentic visual editor for React.
Create a page builder for your own components. Now with AI superpowers.
Puck is a modular, open-source visual editor for React.js. You can use Puck to build custom drag-and-drop experiences with your own application and React components.
Because Puck is just a React component, it plays well with all React.js environments, including Next.js. You own your data and there’s no vendor lock-in.
Lightweight volume notification for Linux.
Volnoti is a lightweight volume notification daemon for GNU/Linux and other POSIX operating systems. It is based on GTK+ and D-Bus and should work with any sensible window manager. The original aim was to create a volume notification daemon for lightweight window managers like LXDE or XMonad. It is known to work with a wide range of WMs, including GNOME, KDE, Xfce, LXDE, XMonad, i3 and many others. The source code is heavily based on the GNOME notification-daemon.
An IP based remember-me to allow auth interactions on dumb clients. Targeted at self-hosters who don't want to directly expose things like HomeAssistant or Jellyfin login pages to the open internet but have clients that can't support web auth
This website is designed to help you understand some basic git concepts visually
A general-purpose Claude Code action for GitHub PRs and issues that can answer questions and implement code changes. This action intelligently detects when to activate based on your workflow context—whether responding to @claude mentions, issue assignments, or executing automation tasks with explicit prompts. It supports multiple authentication methods including Anthropic direct API, Amazon Bedrock, and Google Vertex AI.
While JSON is probably the most popular format for exchanging data, JSON Schema is the vocabulary that enables JSON data consistency, validity, and interoperability at scale.
A free, fun platform for learning cryptography.
Learn about modern cryptography by solving a series of interactive puzzles and challenges. Get to know the ciphers and protocols that secure the digital world by breaking them.
Get the main content of any page as Markdown.
Defuddle extracts the main content from web pages. It cleans up web pages by removing clutter like comments, sidebars, headers, footers, and other non-essential elements, leaving only the primary content.
Related contents:
I've always been intrigued by recognition software because I cannot imagine the logic that goes into all of the algorithms. Whether it's voice, face, or other types of detection, people look and sound so different, pictures are shot differently, and from different angles, I cannot fathom how it's all done. Since I already covered booby nudity detection with JavaScript, I thought it would be worth some time to explore face detection. Facebook uses it, so maybe it has application in your websites.
ENV management tool, consolidate and manage .env and env variables.
Related contents:
Idle: The Chillest Container You'll Ever Run 💤.
📦 Idle is a minimalist container designed to do nothing but idle indefinitely.
Idle is written in minimalist C. It includes graceful handling of SIGINT/SIGTERM signals for a clean shutdown, ensuring it's a well-behaved citizen in your Kubernetes cluster.
It's Your Feed.
Tuvix is a modern RSS aggregator that helps you follow all your favorite blogs, podcasts, and news sources in one place. It's not a social network, it's not an algorithmic feed, it's just old-fashioned RSS.
Allows you to purge all reply comments left by a user on a YouTube channel or video. Allows you to filter and search for spammer comments on your channel in many different ways AND delete them all at once (see features below).
mac-Native AWS GUI, enables you to perform some fundamental actions without a CLI mess.
A native macOS app for AWS-compatible endpoints, built in SwiftUI. Vibe-coded, local-first, and SigV4 signing is wired in so pointing at real AWS works for everyday browsing.
Select context for coding agents directly from your website.
How? Point at any element and press ⌘C (Mac) or Ctrl+C (Windows/Linux) to copy the file name, React component, and HTML source code.
It makes tools like Cursor, Claude Code, Copilot run up to 3× faster and more accurate.
Competitor Price Tracking & Monitoring Software
Prisync is a competitor price tracking and monitoring software for all sizes of e‑commerce companies.
The best free and paid software architecture diagramming and design tools.
Related contents:
GlusterFS is a scale-out network-attached storage file system. It has found applications including cloud computing, streaming media services, and content delivery networks. GlusterFS was developed originally by Gluster, Inc. and then by Red Hat, Inc., as a result of Red Hat acquiring Gluster in 2011.
Related contents:
etter alternative to git worktrees
- copy on write (saves space)
- instant (< 0.1s on 10gb folder)
- fast cli
- use as FFI lib with bun or node
mac and linux with btrfs or native reflinks for now more support soon.
Related contents:
Automated tests for your infrastructure code.
Terratest is a Go library that provides patterns and helper functions for testing infrastructure, with 1st-class support for Terraform, Packer, Docker, Kubernetes, AWS, GCP, and more.
Related contents:
Duress password trigger.
Tiny app to listen for a duress password on the lockscreen. When found, it can send a broadcast message or wipe the device.
Related contents:
dashwise is an all-in-one homelab dashboard
A lightweight alternative to Clawdbot / OpenClaw that runs in Apple containers for security. Connects to WhatsApp, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK.
My personal Claude assistant that runs securely in containers. Lightweight and built to be understood and customized for your own needs.
Related contents:
A Prompt Manager that focuses on On-Premise and developer experience.
A collection of tiny, reusable, UI components — wrapped in a helpful app layout with header, side bar, dark mode, and more.
TinyWidgets uses React for DOM manipulation, Vanilla-Extract at build-time for styling, Lucide for icons, and TinyBase for state management. Its philosophy is all about simplicity, decent defaults, a streamlined DOM, and concise styling.
A peer-to-peer chat app that is serverless, decentralized, and ephemeral. Chitchatter is a free (as in both price and freedom) communication tool. It is designed with security and privacy in mind.
Insight into everything, Website Analytics + Uptime Monitor + Server Status. not only another GA alternatives.
Related contents:
BetaSeries est le premier site dédié à vos séries. Ajoutez, partagez, découvrez de nouvelles séries avec simplicité.
Framework for orchestrating role-playing, autonomous AI agents. By fostering collaborative intelligence, CrewAI empowers agents to work together seamlessly, tackling complex tasks.
Related contents:
Codiad is a web-based IDE framework with a small footprint and minimal requirements.
Hurl, run and test HTTP requests with plain text.
Hurl is a command line tool that runs HTTP requests defined in a simple plain text format.
It can chain requests, capture values and evaluate queries on headers and body response. Hurl is very versatile: it can be used for both fetching data and testing HTTP sessions.
Hurl makes it easy to work with HTML content, REST / SOAP / GraphQL APIs, or any other XML / JSON based APIs.
Hunt Smarter, Hunt Harder.
Active Directory Security Analysis Platform.
ADTrapper is a comprehensive security analysis platform designed for cybersecurity professionals to analyze Windows Active Directory authentication logs. The platform provides advanced threat detection, anomaly analysis, and interactive visualizations to help identify and investigate security incidents.
When hacking up Bash scripts, there are often things such as logging or command-line argument parsing that:
You need every time
Come with a number of pitfalls you want to avoid
Keep you from your actual work
Here’s an attempt to bundle those things in a generalized way so that they are reusable as-is in most scripts.
We call it “BASH3 Boilerplate” or b3bp for short.
ONNX Runtime: cross-platform, high performance ML inferencing and training accelerator.
ONNX Runtime inference can enable faster customer experiences and lower costs, supporting models from deep learning frameworks such as PyTorch and TensorFlow/Keras as well as classical machine learning libraries such as scikit-learn, LightGBM, XGBoost, etc.
Related contents:
Using this tool, you can extract your Mastodon archive and create a static site that can be hosted anywhere.
Once you press "Upload and Extract" you'll be given a chance to view your archive and decide if you want to turn it into a static HTML website or not.
Related contents:
cost control for AI agent loops. Your AI agent loops don't know when to stop. LoopGain does.
When an agent keeps checking and revising its own work, it often spins on a problem it can't solve — or talks itself into an answer worse than one it already had. LoopGain watches the loop as it runs, stops it at the right iteration, and keeps the best version, not the last.
Scalable PaaS (automated Docker+nginx) - aka Heroku on Steroids. Scalable, Free and Self-hosted PaaS!.
CapRover is an extremely easy to use app/database deployment & web server manager for your NodeJS, Python, PHP, ASP.NET, Ruby, MySQL, MongoDB, Postgres, WordPress (and etc...) applications!
A modal state manager for React. This is a small, zero dependency utility to manage modals in a natural way for React. It uses context to persist state of modals globally so that you can show/hide a modal easily either by the modal component or id.
The Fullstack Framework in Deno. Aleph.js gives you the best developer experience for building web applications.
CLI tool that can execute SQL queries on CSV, LTSV, JSON and TBLN. Can output to various formats.
The sovereign cloud partner for strategic and sensitive sectors.
Guarantee the highest standards of security to ensure the protection of their data and that of their citizens.
Related contents:
onak is an OpenPGP compatible keyserver. It was originally written concentrating on providing real time path finding between 2 keys, but over time has moved to concentrating on providing standard keyserver storage and retrieval functionality.
DX-focused control plane for Postgres dedicated to non-critical workloads. Your postgres:latest replacement 🐘
NeonD is an open-source Neon-based control plane daemon for PostgreSQL. It offers S3-based layer durability, instant branching, precise Point-in-time recovery in seconds. Runs as a single Docker container, handles multi-tenant PostgreSQL instances seamlessly.
superglue is an open-source server that sits as a layer between complex APIs and your application. With superglue, you always get the data that you want in the format that you expect. Fetch data from JSON and XML APIs, as well as CSV and Excel files in seconds.
Opt Out from Data Brokers. Get your personal data off the market.
Thousands of companies are collecting, aggregating and trading your personal data without you knowing anything about it. We make them remove it.
GestureX: Control Linux-based operating systems using hand gestures. Built using Mediapipe, OpenCV and PyGTK.
GestureX enables you to control your Linux PC using hand gestures. You can assign specific commands or functionalities to different hand gestures, allowing for hands-free interaction with your computer.
Simple command-line snippet manager.
pet is a command-line snippet manager (inspired by memo).
it allows to save, tag, search, and execute command-line snippets.
- Veterinarian 🩺 @ GitHub
is a powerful browser-based editor for
petsnippet files.
MongoDB Easy Change Management.
mongeez allows you to manage changes of your mongo documents and propagate these changes in sync with your code changes when you perform deployments.
Optimizer and compiler/toolchain library for WebAssembly.
Binaryen is a compiler and toolchain infrastructure library for WebAssembly, written in C++. It aims to make compiling to WebAssembly easy, fast, and effective.
Related contents:
HyperJump - simple and quick bookmark tool for bash shell. I found similar projects, but nothing that was both fast, easy to use, and simple enough. I really needed a location bookmarking app because I am working on a high latency connection, and switching between directories is a pain.
Orbitiny Desktop Environment for Linux.
Built from the ground up using Qt and coded in C++, Orbitiny Desktop is a new, 100% portable, innovative and traditional but modern looking desktop environment for Linux. Innovative because it has features not seen in any other desktop environment before while keeping traditional aspects of computing alive (desktop icons, menus etc).
Related contents:
🔗 A federated network to bookmark, organize, share and discover good web pages. 🪢Federated website aggregator.
It's getting harder and harder to find good web pages. When you do find good ones, it's worth hanging onto them. ties is your own small corner of the web, where you can keep your favorite pages, and share them with your friends to help them find good web pages too.