Links
AddStop burning tokens. Start reviewing smarter.
Local knowledge graph for Claude Code. Builds a persistent map of your codebase so Claude reads only what matters — 6.8× fewer tokens on reviews and up to 49× on daily coding tasks.
Claude Code re-reads your entire codebase on every task. code-review-graph fixes that. It builds a structural map of your code with Tree-sitter, tracks changes incrementally, and gives Claude precise context so it reads only what matters.
A 2FA TUI for your shell.
andcli lets you work with 2FA tokens directly in your shell, using encrypted backups exported out of your favourite 2FA apps. All the data is held in memory only and will never leave your machine.
node.js command-line interfaces made easy.
The complete solution for node.js command-line interfaces.
An modular asset discovery framework written in python to automate the repeating manual work.
Cygor is a modular asset discovery framework that brings scanning, parsing, and service enumeration together in one workflow. It replaces the patchwork of separate tools with an automated process that handles discovery, enrichment, and targeted enumeration seamlessly — reducing manual overhead and letting you focus on results instead of tool management.
Related contents:
A macOS app that blurs your screen when you slouch.
Dorso monitors your posture in real-time using either your Mac's camera or AirPods motion sensors. When it detects that you're slouching, it progressively blurs your screen to remind you to sit up straight. Maintain good posture, and the blur clears instantly.
Related contents:
A tiny little drawing app. Allow to easily create simple diagrams.
jQuery plugin, to calculate the position of an element relative to another element or event. Tries to find a collision free position within the viewport of a given container.
a sampling call-stack profiler for ruby 2.2+.
Related contents:
A collection of loading indicators animated with CSS. Simple loading spinners animated with CSS. See demo. SpinKit only uses (transform and opacity) CSS animations to create smooth and easily customizable animations.
Daemon that sends local hardware information to Home Assistant.
This is an unofficial Desktop Companion App for Home Assistant written in Go.
The companion is running as a background process and sends local hardware information to your Home Assistant instance. Additionally, you can send notifications from Home Assistant to your Computer and display them using notify-send.
mini cli search engine for your docs, knowledge bases, meeting notes, whatever. Tracking current sota approaches while being all local.
An on-device search engine for everything you need to remember. Index your markdown notes, meeting transcripts, documentation, and knowledge bases. Search with keywords or natural language. Ideal for your agentic flows.
QMD combines BM25 full-text search, vector semantic search, and LLM re-ranking—all running locally via node-llama-cpp with GGUF models.
Related contents:
fresh directories for every vibe.
Your experiments deserve a home. 🏠
For everyone who constantly creates new projects for little experiments, a one-file Ruby script to quickly manage and navigate to keep them somewhat organized
Ever find yourself with 50 directories named test, test2, new-test, actually-working-test, scattered across your filesystem? Or worse, just coding in /tmp and losing everything?
try is here for your beautifully chaotic mind.
Related contents:
a git server that is one binary in front of an object store.
walgit hosts git repositories with no database, no leader and no local state that matters. You run a single binary, point it at an S3 or GCS bucket, and you have: smart HTTP (v0/v2) fetch and push, Git LFS, a browsing web UI, a JSON API with an SDK, per-repository push policy, webhooks — and a server that scales to repositories larger than the machine it runs on. Every machine that runs walgit is a disposable cache; the bucket is the repository.
An open source Flash™ runtime written in pure JavaScript
A RISC-V instruction set extension for privacy-oriented programming. Mojo-V allows programmers to write software that computes on data that no software or person can see, except the data owner. Mojo-V implements this novel form of secret computation using simple extensions to a RISC-V CPU.
A simple cli for logs splitting.
A simple command line tool that helps you visualize an input stream of text.
An open source program office (OSPO) serves as the center of competency for an organization's open source operations and structure. It is responsible for defining and implementing strategies and policies to guide these efforts.
OpenChatKit provides a powerful, open-source base to create both specialized and general purpose chatbots for various applications. The kit includes an instruction-tuned 20 billion parameter language model, a 6 billion parameter moderation model, and an extensible retrieval system for including up-to-date responses from custom repositories. It was trained on the OIG-43M training dataset, which was a collaboration between Together, LAION, and Ontocord.ai. Much more than a model release, this is the beginning of an open source project. We are releasing a set of tools and processes for ongoing improvement with community contributions.
The RedPajama-Data repository contains code for preparing large datasets for training large language models. RedPajama-Data: An Open Source Recipe to Reproduce LLaMA training dataset.
Ergonomic and modular web framework built with Tokio, Tower, and Hyper.
Topcoat is a modular, batteries-included Rust framework for building fullstack apps. It prioritizes simplicity and productivity.
TUI viewer for docker-compose.
DCV is a TUI (Terminal User Interface) tool for monitoring Docker containers and Docker Compose applications.
Related contents:
PHPStan rules to measure cognitive complexity of your classes and methods.
Cognitive complexity tells us, how difficult code is to understand by a reader.
Lightweight web UI for managing Caddy reverse proxy. Wildcard SSL • Auto-detection • One-click migration.
Logitech Mouse Remapper.
A lightweight, open-source, fully local alternative to Logitech Options+ for remapping Logitech HID++ mice.
Related contents:
Malcom is a tool designed to analyze a system's network communication using graphical representations of network traffic, and cross-reference them with known malware sources. This comes handy when analyzing how certain malware species try to communicate with the outside world.
SVG animation from multiple SVGs or single GIF using tracer. svgasm is a proof-of-concept SVG assembler to generate a self-contained animated SVG file from multiple still SVG files with CSS keyframes animation to play frames in sequence. Steps listed in reverse order of execution:
This plugin is a small implementation of a fail2ban instance as a middleware plugin for Traefik.
Make JSON greppable!
gron transforms JSON into discrete assignments to make it easier to grep for what you want and see the absolute 'path' to it. It eases the exploration of APIs that return large blobs of JSON but have terrible documentation.
This repository is all about tips on ethical hacking and penetration testing!
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
A light theme with minimal amount of highlighting for Visual Studio Code.
Related contents:
Integrates the Trix Editor with Laravel. Inspired by the Action Text gem from Rails.
Lightweight React SVG pie charts, with versatile options and CSS animation included. ~2kB gzipped.
Upgrade all the things.
Keeping your system up to date usually involves invoking multiple package managers. This results in big, non-portable shell one-liners saved in your shell. To remedy this, topgrade detects which tools you use and runs the appropriate commands to update them.
YISP is a Lisp-inspired evaluation engine for YAML – useful for generating Kubernetes manifests, configuration files, and more.
YISP (suggested pronunciation: /ˈjɪsp/) is a lightweight evaluation engine for YAML, inspired by Lisp. It allows you to embed logic, expressions, and includes within YAML files. This is useful for generating structured configuration such as Kubernetes manifests, Ansible playbooks, and more.
Related contents:
A Control Mechanism for AI Agent.
This document introduces .agentignore, a simple yet powerful way designed to give you precise control over which parts of your codebase AI agents and code assistants can access.
A command line utility to display dependency tree of the installed Python packages.
pipdeptree is a command line utility for displaying the installed python packages in form of a dependency tree. It works for packages installed globally on a machine as well as in a virtualenv. Since pip freeze shows all dependencies as a flat list, finding out which are the top level packages and which packages do they depend on requires some effort. It's also tedious to resolve conflicting dependencies that could have been installed because older version of pip didn't have true dependency resolution1. pipdeptree can help here by identifying conflicting dependencies installed in the environment.
Get MySQL EXPLAIN plans that are understandable for humans.
MySQL Query optimization with the EXPLAIN command is unnecessarily complicated: The output contains a lot of cryptic information that is incomprehensible or entirely misleading.
This Laravel package collects many query metrics that will be sent to explainmysql.com and transformed to be much easier to understand.
Realtime BirdNET soundscape analyzer.
BirdNET-Go is an AI solution for continuous avian monitoring and identification. 24/7 realtime bird song analysis of soundcard capture, analysis output to log file, SQLite or MySQL
Related contents:
Threads, files and pages with status and full history. All in the same place. Tracim is a collaborative platform software intended for (not only technical) team collaboration. It is simple to use, offers a user-friendly interface and runs on every computer. It is very valuable for R&D teams, assocations, remote collaboration.
Set up a personal VPN in the cloud.
Algo VPN is a set of Ansible scripts that simplify the setup of a personal WireGuard and IPsec VPN. It uses the most secure defaults available and works with common cloud providers.
Buttercup is a Cyber Reasoning System (CRS) developed by Trail of Bits for the DARPA AIxCC (AI Cyber Challenge). Buttercup finds and patches software vulnerabilities in open-source code repositories like example-libpng. It starts by running an AI/ML-assisted fuzzing campaign (built on oss-fuzz) for the program. When vulnerabilities are found, Buttercup analyzes them and uses a multi-agent AI-driven patcher to repair the vulnerability.
Related contents:
mquire, a play on the memory and inquire words, is a memory querying tool inspired by osquery.
Zero-dependency Linux memory forensics PoC — leverages kernel-embedded BTF and kallsyms for type-aware memory analysis without external debug info.
Related contents:
Fast SNMP Scanner.
onesixtyone takes a different approach to SNMP scanning. It takes advantage of the fact that SNMP is a connectionless protocol and sends all SNMP requests as fast as it can. Then the scanner waits for responses to come back and logs them, in a fashion similar to Nmap ping sweeps. By default onesixtyone waits for 10 milliseconds between sending packets, which is adequate for 100MBs switched networks. The user can adjust this value via the -w command line option. If set to 0, the scanner will send packets as fast as the kernel would accept them, which may lead to packet drop.
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows.
A Claude Code plugin marketplace from Trail of Bits providing skills to enhance AI-assisted security analysis, testing, and development workflows.
Related contents:
Curated, community-vetted Claude Code plugin marketplace.
Trail of Bits' reviewed and approved Claude Code plugins. Every skill and marketplace here has been vetted for quality and safety.
Build and query a graph database representation of source code.
Parse source code into queryable graphs of functions, classes, calls, and semantic annotations for security analysis.
Trailmark uses tree-sitter for language-agnostic AST parsing and rustworkx for high-performance graph traversal. The long-term vision is to combine this graph with mutation testing and coverage-guided fuzzing to identify gaps between assumptions and test coverage that are reachable from user input.
Security scanner for VS Code extensions.
Security scanner for VS Code extensions. Detects malicious extensions before installation by analyzing code patterns, indicators of compromise, and known malware signatures.
Terminal Music and Podcast Player written in Rust Listen to music and podcasts freely as both in freedom and free of charge!
A user-friendly server to manage your Slack Nebula mesh network.
Clients (hosts) can easily download Nebula Tower generated configuration files and connect to the Nebula network using either a simple script or a Menubar application.
Related contents:
TypeScript client for OpenAI's realtime voice API.
This widget is used for transforming a hierarchy HTML lists with input's into a hierarchial tree select tool. You can also call this widget with a structured JSON list and it will convert it to an HTML hierarchy select tool of those items.
A jQuery library for working with seamless iframes.
📝 Algorithms and data structures implemented in JavaScript with explanations and links to further readings.
Related contents:
The react library to build dashboards fast. Tremor lets you create simple and modular components to build insightful dashboards in a breeze. Fully open-source, made by data scientists and software engineers with a sweet spot for design.
A fast and complete implementation of Markdown in Python.
Related contents:
Add real-user performance data to your Lighthouse report. Google Lighthouse plugin that adds field data to your report. It uses real-user data from Chrome UX Report and Core Web Vitals logic to estimate the score.
A highly customizable way to play chess in your terminal / command line. Play online (via Lichess.org) and offline against the Fairy-Stockfish engine. All Lichess variants are supported.