Convert CSV & Excel to Clean, Structured Data — Instantly

Drop your files in. Get perfect JSON, XML, or CSV in seconds. No code, no setup — just fast, browser-based data conversion.

csvkit is a suite of command-line tools for converting to and working with CSV, the king of tabular file formats.

• csvkit @ GitHub

csvkit is a suite of command-line tools for converting to and working with CSV, the king of tabular file formats.

It is inspired by pdftk, GDAL and the original csvcut tool by Joe Germuska and Aaron Bycoffe.

It provides in2csv to convert xlsx to csv, and csvsql to populate a database with a csv file contents.

• csvkit @ GitHub.

Run SQL queries on CSV files directly in your browser. No data leaves your browser. Fast, private, and easy to use.

Center for Threat-Informed Defense Advancing the state of the art and state of the practice in threat-informed defense globally

The MITRE Fight Fraud Framework™ (F3) is a curated knowledge base of tactics and techniques used by financial fraud actors, derived from real-world observations of cyber fraud incidents. The framework includes behaviors that characterize known fraud TTPs and references existing MITRE ATT&CK® cyber techniques as applicable to financial fraud. F3 provides a common structure and taxonomy to consistently describe and enumerate the material events of a cyber fraud incident, enabling stronger collaboration on fraud prevention, detection, and response across organizational teams. The knowledge base is globally accessible, open, and available at no charge to any person or organization.

Related contents:

• #72 - Microsoft et Adobe corrigent une vulnérabilité déjà exploitée @ Erreur 403 :fr:.

concise commandline monitoring for containers.Top-like interface for container metrics.

ctop provides a concise and condensed overview of real-time metrics for multiple containers.

• ctop @ GitHub.

Related contents:

• CTOP, le htop pour conteneurs ! @ Tips4tech.fr :fr:.

Build, benchmark, and deploy agents that use computers.

Open-source infrastructure for Computer-Use Agents. Sandboxes, SDKs, and benchmarks to train and evaluate AI agents that can control full desktops (macOS, Linux, Windows).

• Cua @ GitHub.

📊 Cube — The Semantic Layer for Building Data Applications. The Universal Semantic Layer.

Build trust with a semantic layer. Connect siloed data, define consistent metrics, and power AI and analytics with context.

Cube is the semantic layer for building data applications. It helps data engineers and application developers access data from modern data stores, organize it into consistent definitions, and deliver it to every application.

Cube was designed to work with all SQL-enabled data sources, including cloud data warehouses like Snowflake or Google BigQuery, query engines like Presto or Amazon Athena, and application databases like Postgres. Cube has a built-in relational caching engine to provide sub-second latency and high concurrency for API requests.

• Cube @ GitHub.
• #264.exe - GraphQL: Votre nouveau BFF par Christophe Blefari @ <ifttd>.
• le semantic layer va vous plaire @ Florent J.'s LinkedIn :fr:.

A Cloud Native Distributed Storage System.

CubeFS is a new generation cloud-native open source storage system that supports access protocols such as S3, HDFS, and POSIX. It is widely applicable in various scenarios such as big data, AI/LLMs, container platforms, separation of storage and computing for databases and middleware, data sharing and protection，etc.

• CubeFS @ GitHub.

Related contents:

• CNCF Announces CubeFS Graduation @ DevOps digest.

CUBE CSS is a CSS methodology that’s orientated towards simplicity, pragmatism and consistency. It’s designed to work with the medium that you’re working in—often the browser—rather than against it.

Empowering your AI Agents. Instant, Concurrent, Secure & Lightweight Sandbox Service for AI Agents.

Cube Sandbox is a high-performance, out-of-the-box secure sandbox service built on RustVMM and KVM. It supports both single-node deployment and easy scaling to multi-node clusters. It is compatible with the E2B SDK and can create a hardware-isolated, fully serviceable sandbox in under 60ms with less than 5MB of memory overhead.

• Cube Sandbox @ GitHub.

Malware analysis tool. Cuckoo3 is a Python 3 open source automated malware analysis system.

Cuckoo3 is an open-source tool to test suspicious files or links in a controlled environment. It will test them in a sandboxed platform emulator(s) and generate a report, showing what the files or websites did during the test.

• Cuckoo3 @ GitHub.

CudaText is a cross-platform text editor, written in Object Pascal. It is open source project and can be used free of charge, even for business. It starts quite fast: ~0.3 sec with ~30 plugins, on Linux on CPU Intel Core i3 3GHz. It is extensible by Python add-ons: plugins, linters, code tree parsers, external tools. Syntax parser is feature-rich, from EControl engine.

• CudaText @ GitHub.
• CudaText @ SourceForge.

Configure Unify Execute. Validate, define, and use dynamic and text‑based data.

CUE makes it easy to validate data, write schemas, and ensure configurations align with policies.

CUE works with a wide range of tools and formats that you're already using such as Go, JSON, YAML, TOML, OpenAPI, Protobuf, and JSON Schema.

• CUE - Configure, Unify, Execute @ GitHub.

Related contents:

• Abstraction, not syntax @ Ruud van Asseldonk.
• Schema validation for Terraform input configuration @ Brendan Thompson.

The easiest way to manage your container updates. Cup is a small utility with a big impact. Simplify your container management workflow with fast and efficient update checking, a full-featured CLI and web interface, and more.

• Cup @ GitHub.

NumPy & SciPy for GPU.

CuPy is a NumPy/SciPy-compatible array library for GPU-accelerated computing with Python. CuPy acts as a drop-in replacement to run existing NumPy/SciPy code on NVIDIA CUDA or AMD ROCm platforms.

• CuPy @ GitHub.

a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, SVG and MathML. DOMPurify works with a secure default, but offers a lot of configurability and hooks.

• DOMPurify @ GitHub.
• Exploring the DOMPurify library: Bypasses and Fixes (1/2) @ /mizu.re.

Convert curl commands to code. Convert curl commands to Python, JavaScript, PHP, R, Go, C#, Ruby, Rust, Elixir, Java, MATLAB, Dart, CFML, Ansible URI or JSON.

curlconverter @ GitHub.

Curlew is an easy to use, Free and Open-Source Multimedia converter for Linux.

Curl wrapper for an open-source API testing client for open minds. If you like the interface of HTTPie but miss the features of curl, curlie is what you are searching for. Curlie is a frontend to curl that adds the ease of use of httpie, without compromising on features and performance. All curl options are exposed with syntax sugar and output formatting inspired from httpie.

URL to markdown for agents.

Turn websites into optimized, low token output to supercharge your context. Works with every agent.

• curl.md @ GitHub.

A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, POP3, POP3S, RTMP, RTMPS, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, TELNET, TFTP, WS and WSS. libcurl offers a myriad of powerful features.

curl is used in command lines or scripts to transfer data. curl is also libcurl, used in cars, television sets, routers, printers, audio equipment, mobile phones, tablets, medical devices, settop boxes, computer games, media players and is the Internet transfer engine for countless software applications in over twenty billion installations.

• curl @ GitHub.

Related contents:

• Just use cURL.
• Convenient 'Copy as cURL': explicit, executable, editable request replays @ Huon on the internet.
• The challenge of maintaining curl @ LWN.net.

The Mozilla CA certificate store in PEM format (around 200KB uncompressed):

Related contents:

• How to properly set up WAMP stack with multiple PHP versions in parallel @ Andrej Rypo's dev.to.

trurl is a tool in a similar spirit of tr but for URLs. Here, 'tr' stands for translate or transpose.

trurl is a command line tool that parses and manipulates URLs, designed to help shell script authors everywhere.

• trurl @ GitHub.

Related contents:

• Trurl, un outil super pratique pour manipuler les URL@ Korben :fr:.

Tailwind Utility Generator. No-build Tailwind. Get the CSS utilities you want. Nothing you don't.

Curlwind allows you to generate Tailwind stylesheets on demand to get only the CSS utilities you need. Generated stylesheets are cached indefinitely so your site stays fast.

• Curlwind @ GitHub.

The AI Code Editor.

Related contents:

• Les meilleures pratiques pour utiliser Cursor efficacement 🚀 (Guide complet) @ Camille Roux :fr:.
• Inside Cursor @ Colossus.

Edit videos, right in your browser

An AI-native, open-source video editor and free alternative to CapCut. No uploads, no tracking — your media stays on your device.

• Cutia @ GitHub.

Related contents:

• Cutia - Montage vidéo open source, direct dans le navigateur @ Korben :fr:.

Raspberry Pi, Untethered. CutiePi is a Raspberry Pi 4 tablet that turns your project into an untethered adventure. Build and create wherever an idea strikes you. No wires, no external power, and no strings attached.

Free and Open Source RE Platform powered by Rizin. Cutter's goal is to be an advanced FREE and open-source reverse-engineering platform while keeping the user experience at mind. Cutter is created by reverse engineers for reverse engineers.

• Cutter @ GitHub.

Top 10 Trending CVEs, Latest Insights & Analysis.

cvemon is a free vulnerability intelligence platform developed by Intruder to help businesses stay ahead of the latest threats.

By aggregating data from trusted sources, it provides the latest intelligence on CVEs and tracks what’s trending over the last 24 hours, complete with a hype score to contextualize the buzz.

A simple application that extracts your Indicators of Compromise (IoCs) from garbage input and checks their reputation using multiple CTI services.

This project aims to provide a simple and efficient way to check the reputation of your observables using multiple services, without having to deploy a complex solution.

• Cyberbro @ GitHub.

The Cyber Citizen initiative will produce a model for cybersecurity learning and a learning portal based on that model. The learning portal will have content for all citizens, and this content, such as a cyber citizen skills learning game, will take into account different target groups. Citizens’ abilities to act in a safe and secure manner in the digital world are improved with educational and communicative elements in the learning portal.

Communicate & Survive. When the Grid Goes Down. Offline Knowledge & Survival Platform.

CyberDeck is an offline-first communication and knowledge platform. Transform any device into a decentralized mesh node to chat, share, and learn without internet.

Portable offline knowledge, AI, and mesh communication platform. Run local LLMs, Wikipedia, and decentralized networking without internet.

• CyberDeck @ GitHub.

Unix operating systems and derivatives, including GNU/Linux, are playing an important role in the ecosystem of equipments, systems, networks and telecommunications. They are widely deployed in several equipments. This guide focuses mainly on generic system configuration guidelines and on common sense principles that need to be applied during the deployment of hosted services.

Cyber is a new language for fast, efficient, and concurrent scripting.

Cyber is a fast, efficient, and concurrent scripting language. You can embed it into your applications, games, or engines on desktop or web. Cyber also comes with a CLI so you can do scripting on your computer.

• Cyber @ GitHub.

Implementing Open Source Security Tooling into your CI/CD Pipeline

Securing your Continuous Integration and Continuous Deployment (CI/CD) pipeline is no longer optional—it’s essential. This guide is your go-to resource for building, implementing, and optimizing secure CI/CD workflows. Whether you’re a developer, DevOps engineer, or security professional, we provide information on the open-source tools and guidance you need to model security at every stage of your pipeline. From securing code and builds to monitoring post-deployment environments, our hub empowers teams to integrate security seamlessly into their workflows without sacrificing speed or agility. Explore, learn, and transform your CI/CD processes into a fortress of innovation and resilience.

• CI/CD Cybersecurity Guide @ GitHub.

Related contents:

• Blueprinting Security in CI/CD: Building Trust Through Open Source @ CD Foundation.

A tracker of publicly reported prompt-injection techniques, broken down by delivery method, encoding, and propagation behavior, with the models each was confirmed against, the reporting source, and (where known) the attack source. Fields are left blank when a report does not state them; techniques whose details are vague or unconfirmed are marked Not fully vetted. Nothing here is guessed.

• Prompt Injection in the Wild @ GitHub.

CycloneDX Bill of Materials Standard.

CycloneDX is a modern standard for the software supply chain.

The International Standard for Bill of Materials (ECMA-424) The OWASP Foundation and Ecma International Technical Committee for Software & System Transparency (TC54) drive the continued advancement of the specification.

• CycloneDX BOM Standard @ GitHub.

Related contents:

• CycloneDX PHP Composer Plugin @ GitHub.

Developer Friendly Kubernetes 👁️ .

Cyclops is an open-source dev tool that simplifies Kubernetes with an easy-to-use UI, making it less intimidating. Instead of creating and configuring your Kubernetes manifests with YAML, use Cyclops to painlessly configure and deploy your applications - validations included!

• Cyclops @ GitHub.

Claw back your data from Big Tech with Cyd.

Tech platforms can't be trusted. It's time to regain control of your data. Backup and delete all of your tweets for free with Cyd (formerly Semiphemeral).

• Cyd @ GitHub.

Related contents:

• What My Privacy and Security Stack Actually Looks Like @ String Literal.

Agents can edit logs. They can't hide the edit.

Tamper-evident tracing, policy gates and cross-checks for AI agents: see what the agent did, and why.

Tracekit checks every tool call your agent makes before it runs, signs each call and decision into a hash chain, and gives you one .tkb file per run that anyone can verify offline.

• Tracekit @ GitHub.

Cynefin® is at its heart a decision support framework, not a method or model. It is based on the principle of ‘bounded applicability’; there are few if any context-free solutions, but many valid context-specific ones.

• S05E03 : Des itération Product(ives) en livre avec Colin Damon @ PunkinDev :fr:.

A Kubernetes Query Language.

Cyphernetes is a Cypher-inspired query language for Kubernetes. Cypher is a mixture of ASCII-art, SQL and JSON that lets us express graph operations in an efficient way that is also fun and creative. Cyphernetes extends Cypher with Kubernetes-specific syntax and features. It allows you to query and mutate Kubernetes resources in a natural way, works out-of-the-box with your CRDs, supports multi-cluster queries, and more.

• Cyphernetes @ GitHub.

D2 is a diagram scripting language that turns text to diagrams. It stands for Declarative Diagramming. Declarative, as in, you describe what you want diagrammed, it generates the image.

D2 @ GitHub.

A knowledge graph of cybersecurity countermeasures

Interactive SVG maps toolkit for React 19 and Vue 3. Choropleths, markers, routes, bubble and zoomable maps with components powered by d3.js.

• d3-maps @ GitHub.

Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native Computing Foundation (CNCF) as an Incubating Level Project.

• Dragonfly @ GitHub.

Related contents:

• Dragonfly v2.3.0 has been released @ CNCF.
• Peer-to-Peer acceleration for AI model distribution with Dragonfly @ CNCF.

Build real iPhoneiPhone apps just by describing them

Native iPhone, iPad, and Android apps, built live in your browser, and installed on your device.

Related contents:

• Introducing Dactyl @ Ryan Dahl's X.

Transform your Messy CI Scripts into Clean Code. Develop Your CI/CD Pipelines as Code and Run Them Anywhere.

Powerful, programmable open source CI/CD engine that runs your pipelines in containers — pre-push on your local machine and/or post-push in CI. Dagger is a tool that lets you replace your software project's artisanal scripts with a modern API and cross-language scripting engine.

• dagger @ GitHub.

Related contents:

• Introducing the Daggerverse @ Dagger Blog.
• Dagger: la pièce manquante de l'expérience développeur? @ Ogenki :fr:.
• Débuter avec Dagger @ DevSecOps :fr:.
• How Engineers are Automating More with Less: Trends in DevOps Tooling @ DevOps.

Cloud-native orchestration of data pipelines. Ship data pipelines with extraordinary velocity. An orchestration platform for the development, production, and observation of data assets.

The cloud-native orchestrator for the whole development lifecycle, with integrated lineage and observability, a declarative programming model, and best-in-class testability.

Dagster is a cloud-native data pipeline orchestrator for the whole development lifecycle, with integrated lineage and observability, a declarative programming model, and best-in-class testability.

It is designed for developing and maintaining data assets, such as tables, data sets, machine learning models, and reports.

• Dagster @ GitHub.

Dagu is a powerful Cron alternative that comes with a Web UI. It allows you to define dependencies between commands as a Directed Acyclic Graph (DAG) in a declarative Writing DAGs. Additionally, Dagu natively supports running Docker containers, making HTTP requests, and executing commands over SSH. Dagu was designed to be easy to use, self-contained, and require no coding, making it ideal for small projects.

• Dagu @ GitHub.

Related contents:

• This Week in Self-Hosted (4 October 2024) @ selfh.st.
• Dagu - L'orchestrateur de workflows qui va faire oublier vos crontabs pourries @ Korben :fr:.

Local-first orchestration that just works.

Self-hostable workflow orchestrator for teams whose main work isn't orchestration. Declarative YAML over your scripts, SSH commands, containers, etc; keep workflows separate from business logic. One binary, no database, runs on limited H/W resources. Alternative to Airflow / Cron / Job Scheduler.

Define workflows in declarative YAML; one open-source binary runs them, locally or over SSH, with schedules, retries, human tasks, logs, and a Web UI. Your scripts, containers, and AI agents stay untouched. No external database, no framework.

• Dagu @ GitHub.

A Markdown formatter that enforces Hong Minhee's Markdown style conventions.

Hongdown is a Markdown formatter that enforces Hong Minhee's Markdown style conventions. The formatter is implemented in Rust using the Comrak library for parsing. It produces consistently formatted Markdown output following a distinctive style used across multiple projects including Fedify, LogTape, and Optique.

• Hongdown @ GitHub.

Ace, the Accessibility Checker for EPUB, is a tool developed by the DAISY Consortium to assist with the evaluation of accessibility features of EPUB publications.

Ace is a tool to run automated accessibility checks for EPUB Publications, in order to assist in the evaluation of conformance to the EPUB Accessibility specification.

• Ace @ GitHub.

Tailwind CSS Components. The most popular component library component library for Tailwind CSS.

daisyUI adds component class names to Tailwind CSS so you can make beautiful websites faster than ever.

daisyUI @ GitHub.

Generate, Edit & Filter images using the DALL-E 2 API

dallecli is a command line app designed to provide users with the ability to generate, edit and filter images using the DALL-E 2 API provided by OpenAI.

DalleCLI @ GitHub.

the missing audit log library. auditor's purpose is to provide an easy and standardized way to collect and persists audit logs.

• Auditor @ GitHub.

Oh, these damn good tools:

• Privacy Policy Generator
• Screenshots
• Full Page Screenshots
• Detect Fonts
• Chat With Any PDF
• Summarize Any URL
• Grammar Fixer
• Damn Good Chat
• Scrolling Screenshots

Make clean PDF and EPUB docs from web pages

Percollate lets you turn web pages into readable PDF, EPUB, HTML, or Markdown files from the command line.

• Percollate @ GitHub.