Links
AddFancy stream processing made operationally mundane. Benthos is a high performance and resilient stream processor, able to connect various sources and sinks in a range of brokering patterns and perform hydration, enrichments, transformations and filters on payloads. It comes with a powerful mapping language, is easy to deploy and monitor, and ready to drop into your pipeline either as a static binary, docker image, or serverless function, making it cloud native as heck. Benthos is declarative, with stream pipelines defined in as few as a single config file, allowing you to specify connectors and a list of processing stages
Operating LLMs in production.
An open platform for operating large language models (LLMs) in production. Fine-tune, serve, deploy, and monitor any LLMs with ease.
Locate a nearby Bluetooth device by signal strength, from the macOS command line — for when Find My isn't available.
Built for the case where Find My is unavailable — for example when a device is enrolled in MDM that disables it — but the device is still within Bluetooth range and you just need to know which corner of the room it is in.
Related contents:
Privacy-first API platform built with Tauri v2. No login, no cloud, ~60 MB RAM. A lightweight Postman alternative.
A Rust web framework that does not use async.
Feather is a lightweight, DX-first web framework for Rust — inspired by the simplicity of Express.js, but designed for Rust’s performance and safety.
Audible feedback on just how much your browsing feeds into Google. Makes a little bit of noise any time your computer sends a packet to a tracker or a Google service, which excludes Google Cloud users.
EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra ID.
The project builds a automatic knowledge base around tools such as AzureHound, AADInternals, O365Enum, PingCastle, and others, with a focus on the UserAgent and API artifacts they generate.
AI teammates for your engineering loop. Broccoli turns Linear tickets into shipped PRs — powered by Claude and Codex, running on your own Google Cloud.
Production-grade Ghidra MCP Server — 132 endpoints, cross-binary documentation transfer, batch analysis, headless mode, and Docker deployment for AI-powered reverse engineering.
A production-ready Model Context Protocol (MCP) server that bridges Ghidra's powerful reverse engineering capabilities with modern AI tools and automation frameworks.
Related contents:
AI-powered icon generation CLI for React Native & Expo developers. Generate stunning app icons in seconds using OpenAI's latest models.
Create stunning app icons in seconds using OpenAI's latest image generation models. Perfect for developers who want professional icons without the design hassle! 🎨
Spotify to Navidrome Playlist Exporter
A Next.js web application that exports playlists from Spotify to Navidrome music server with flexible matching strategies. Transfer your Spotify playlists to your self-hosted Navidrome music library with intelligent track matching.
The Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks. bettercap is a powerful, easily extensible and portable framework written in Go which aims to offer to security researchers, red teamers and reverse engineers an easy to use, all-in-one solution with all the features they might possibly need for performing reconnaissance and attacking WiFi networks, Bluetooth Low Energy devices, wireless HID devices and Ethernet networks.
Betterlockscreen is a fast and sweet looking lock screen for GNU/Linux systems with effects.
Expose the contents of .docx files without leaving your terminal. Fast, safe, and smart — no Office required!
A fast, terminal-native document viewer for Word files. View, search, and export .docx documents without leaving your command line.
Related contents:
Fig is a small TypeScript UI runtime for building apps and metaframeworks.
A TypeScript re-implementation of React: fibers, lanes, scheduling, hooks, streaming SSR, and selective hydration — without the legacy cruft.
🦛 CHONK your texts with Chonkie ✨ - The no-nonsense RAG chunking library. The no-nonsense RAG chunking library that's lightweight, lightning-fast, and ready to CHONK your texts
Global Threat Intercept — Real-Time Geospatial Intelligence Platform.
Open-source intelligence for the global theater. Track everything from the corporate/private jets of the wealthy, and spy satellites, to seismic events in one unified interface. Hook an AI agent up to have it parse through data and find previously unseen correlations. The knowledge is available to all but rarely aggregated in the open, until now.
Related contents:
fixi.js is an experimental, minimalist implementation of generalized hypermedia controls.
The fixi api consists of six HTML attributes, nine events & two properties.
This jQuery plugin is used to fix elements on the page (top, bottom, anywhere); however, it still allows the element to continue to move left or right with the horizontal scroll.
Elastic2025 is a dark Roundcube theme based on the Elastic2022 by Seb1k.
Gmail removed ability to pull messages from other providers as of Jan 2026. This project aim to offer a simple drop in replacement webmail experience in Roundcube (especially on desktop). Please consider donating if you liked it.
A lightweight, browser-based tool for mapping Ethernet connections. Create switches, patch panels, wall ports, routers, etc. Assign ports, connect them, and visualise how your network is wired.
Stream web content through your Jellyfin instance.
Broadcastarr is a service that allows you to broadcast media content retrieved from web pages.
One-Click system reinstallation script for VPS.
- One-click reinstallation to Linux: Supports 19 common distributions.
- One-click reinstallation to Windows: Uses the official original ISO instead of custom images. The script can automatically fetch the ISO link and installs public cloud drivers like VirtIO.
Related contents:
GateJS is a javascript based reverse & forward proxy with high performance & capability.
The Patterns of Scalable, Reliable, and Performant Large-Scale Systems.
An updated and organized reading list for illustrating the patterns of scalable, reliable, and performant large-scale systems. Concepts are explained in the articles of prominent engineers and credible references. Case studies are taken from battle-tested systems that serve millions to billions of users.
ENV management tool, consolidate and manage .env and env variables.
Related contents:
Send push notifications to your phone or desktop using PUT/POST. ntfy (pronounce: notify) is a simple HTTP-based pub-sub notification service. It allows you to send notifications to your phone or desktop via scripts from any computer, entirely without signup or cost. It's also open source (as you can plainly see) if you want to run your own.
Review large Terraform diff to detect any issue. AI-Powered Terraform Plan Reviewer.
Verify your Terraform plan matches your code intent before apply.
tfrev uses Claude AI to review your terraform plan output against your code changes, catching mismatches, security risks, and unexpected side effects before they hit production. Works with any Terraform provider — AWS, Azure, GCP, Kubernetes, and more.
Automating situational awareness for cloud penetration tests.
CloudFox helps you gain situational awareness in unfamiliar cloud environments. It’s an open source command line tool created to help penetration testers and other offensive security professionals find exploitable attack paths in cloud infrastructure.
MDF (Markdown First) — open web architecture proposal for native markdown serving, agent-readable content, and price-as-access-policy.
A proposal for a web content architecture where markdown is the source of truth, agents are first-class citizens, and access policy is expressed through price.
Related contents:
A Kubernetes controller and tool for one-way encrypted Secrets.
Problem: "I can manage all my K8s config in git, except Secrets." Solution: Encrypt your Secret into a SealedSecret, which is safe to store - even inside a public repository. The SealedSecret can be decrypted only by the controller running in the target cluster and nobody else (not even the original author) is able to obtain the original Secret from the SealedSecret.
Related contents:
AgensGraph is a cutting-edge multi-model graph database designed for modern complex data environments. By supporting both relational and graph data models simultaneously, AgensGraph allows developers to seamlessly integrate legacy relational data with the flexible graph data model within a single database. AgensGraph is built on the robust PostgreSQL RDBMS, providing a highly reliable, fully-featured platform ready for enterprise use.
High Availability Vault for Events on Nostr.
HAVEN (High Availability Vault for Events on Nostr) is the most sovereign personal relay for the Nostr protocol, for storing and backing up sensitive notes like eCash, private chats and drafts. It is a relay that is not so dumb, with features like web of trust, inbox relay, cloud backups, blastr and the ability to import old notes. It even includes it's own blossom media server!
Related contents:
MCP server for interaction with the Bitwarden vault.
Model Context Protocol (MCP) server that enables interaction with the Bitwarden password manager vault via the MCP protocol. The server allows AI models to securely communicate with a user's Bitwarden vault through defined tool interfaces.
Related contents:
Run GitHub Actions jobs in an ephemeral Cloudflare Containers. A signed GitHub App workflow_job webhook provisions a repository-scoped GitHub just-in-time runner.
ku is short for KUbernetes. It is also the Norwegian word for cow.
A fast, keyboard-driven Kubernetes TUI. Browse any resource, edit objects, follow logs, and shell into pods.
a swiss-army tool for scraping and extracting data from online assets, made for hackers.
Pipet is a command line based web scraper. It supports 3 modes of operation - HTML parsing, JSON parsing, and client-side JavaScript evaluation. It relies heavily on existing tools like curl, and it uses unix pipes for extending its built-in capabilities.
Gromit-MPX is an on-screen annotation tool that works with any Unix desktop environment under X11 as well as Wayland.
Its main use is for making presentations of some application. Normally, you would have to move the mouse pointer around the point of interest until hopefully everybody noticed it. With Gromit-MPX, you can draw everywhere onto the screen, highlighting some button or area.
DMH will execute action when you will not be able to. Dead-man-switch software with privacy in mind.
Dead-Man-Hand will execute pre-added actions when you will no longer be "available".
All actions are encrypted and when properly configured nobody will be able to get action details till you are alive.
Main goal of DMH is to ensure that actions can be executed only when you are dead. And before that time, every action should be confidential - even for people who have access to DMH.
Songhive is a self-hosted music streaming and sharing platform — think Funkwhale meets Mastodon — where your music library lives on your hardware, but your music can travel across the fediverse.
Claude Code skill that removes signs of AI-generated writing from text.
Related contents:
Corrective lenses for curmudgeonly readars in your life.
This is a drop-in replacement for R——'s (now defunct) metadata service. It works with your existing R—— installation, it's backwards-compatible with your library, and it takes only seconds to enable or disable. You can use it permanently, or temporarily to help you add books the R—— service doesn't have yet. It works equally well with ebooks and audiobooks.
Related contents:
Webhook server for Gitlab, Github and Gitea to run arbitrary commands
A hive mind communication platform.
A workspace where humans and agents build together, on a relay you own.
Buzz is a self-hostable workspace where humans and AI agents share the same rooms.
A Buzz community is the workspace a user reaches by URL. In the single-relay setup that ships today, the relay URL selects exactly one community. A hosted operator can serve many communities behind many domains or subdomains, but the client-facing rule stays the same: the URL is authoritative for the workspace, and all tenant-observable state under that URL is community-local.
jquery.terminal is a jQuery plugin which displays an interactive terminal in your pages
Gow (Gnu On Windows) is the lightweight alternative to Cygwin. It uses a convenient Windows installer that installs about 130 extremely useful open source UNIX applications compiled as native win32 binaries. It is designed to be as small as possible, about 10 MB, as opposed to Cygwin which can run well over 100 MB depending upon options.
Boa is an embeddable Javascript engine written in Rust.
Boa is an experimental JavaScript lexer, parser and interpreter written in Rust 🦀, it has support for more than 90% of the latest ECMAScript specification. We continuously improve the conformance to keep up with the ever-evolving standard.
Free Introduction to Bash Scripting eBook.
This is an open-source introduction to Bash scripting guide/ebook that will help you learn the basics of Bash scripting and start writing awesome Bash scripts that will help you automate your daily SysOps, DevOps, and Dev tasks. No matter if you are a DevOps/SysOps engineer, developer, or just a Linux enthusiast, you can use Bash scripts to combine different Linux commands and automate boring and repetitive daily tasks, so that you can focus on more productive and fun things.
This is a list of different open-source video games and commercial video games open-source remakes.
How to stay safe from NPM supply chain attacks.
The NPM ecosystem is no stranger to compromises, supply-chain attacks, malware, spam, phishing, incidents, or even trolls. In this repository, I have consolidated a list of information you might find useful in securing yourself against these incidents.
A fast tool to read text-based files in a repository or directory, chunk them, and serialize them for LLM consumption.
Agent harness framework for building, running, and verifying LLM workflows.
Gambit helps you build reliable LLM workflows by composing small, typed “decks” with clear inputs/outputs and guardrails. Run decks locally, stream traces, and debug with a built-in UI.
🛡️ Windows Hello™ style facial authentication for Linux.
Howdy provides Windows Hello™ style authentication for Linux. Use your built-in IR emitters and camera in combination with facial recognition to prove who you are.
Using the central authentication system (PAM), this works everywhere you would otherwise need your password: Login, lock screen, sudo, su, etc.
Related contents:
Boost Note is a document driven project management tool that maximizes remote DevOps team velocity.
A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.
SmokedMeat is a post-exploitation framework for CI/CD pipelines. Point it at a GitHub organization, let it find vulnerable workflows, deploy an implant to a compromised runner, then pivot through cloud providers, extract secrets, and map the blast radius - all from a terminal UI.
Related contents:
Deduplicating archiver with compression and authenticated encryption. BorgBackup (short: Borg) is a deduplicating backup program. Optionally, it supports compression and authenticated encryption. The main goal of Borg is to provide an efficient and secure way to back up data. The data deduplication technique used makes Borg suitable for daily backups since only changes are stored. The authenticated encryption technique makes it suitable for backups to targets not fully trusted.
Regression Testing your SQL queries.
The regresql tool implement a regression testing facility for SQL queries, and supports the PostgreSQL database system. A regression test allows to ensure known results when the code is edited.
Related contents:
Boris est un REPL (Read-Eval-Print Loop) PHP proposant une console interactive pour de l'eval et debug PHP.
React Native Godot allows embedding the Godot Engine into React Native applications.