Links
AddA hook that registers a WebMCP tool with the browser and ties its lifecycle to a React component.
WebMCP lets a page expose JavaScript functions as "tools" that an AI agent (browser-built-in, iframe-hosted, or extension) can discover and call. The site author can expose functionality, and the agent uses this instead of scraping the DOM, a11y tree, or using screenshots.
Automate running Lighthouse for every commit, viewing the changes, and preventing regressions. Lighthouse CI is a suite of tools that make continuously running, saving, retrieving, and asserting against Lighthouse results as easy as possible.
A Kubernetes controller that generates CycloneDX 1.6 ML-BOM documents for AI workloads at runtime — inference services, agent stacks, RAG pipelines, training jobs, evaluation harnesses — with auditor-traceable evidence for every attribute.
Related contents:
A transformative log viewer for Kubernetes.
Kubernetes History Inspector (KHI) is a rich log visualization tool for Kubernetes clusters. KHI transforms vast quantities of logs into an interactive, comprehensive timeline view. This makes it an invaluable tool for troubleshooting complex issues that span multiple components within your Kubernetes clusters.
Related contents:
OKF is a universal, vendor-neutral format for representing knowledge as plain markdown files with YAML frontmatter. It is not tied to any particular agent, framework, model provider, or serving system.
Related contents:
AI powered Kubernetes Assistant.
kubectl-ai acts as an intelligent interface, translating user intent into precise Kubernetes operations, making Kubernetes management more accessible and efficient.
AI powered Kubernetes Assistant.
kubectl-ai acts as an intelligent interface, translating user intent into precise Kubernetes operations, making Kubernetes management more accessible and efficient.
Related contents:
Automatically scale the capacity of your Memorystore Cluster instances based on their utilization.
The Cloud Memorystore Cluster Autoscaler is a companion tool that allows you to automatically increase or reduce the number of nodes/shards in one or more Memorystore Cluster instances, based on their utilization.
Related contents:
Run multiple agents in parallel — each in its own container, with its own workspace, collaborating on your code or project files simultaneously.
Scion is an experimental multi-agent orchestration testbed designed to manage "deep agents" running in containers.
CLI tool to generate terraform files from existing infrastructure (reverse Terraform). Infrastructure to Code.
Related contents:
validate the structure of your container images.
The Container Structure Tests provide a powerful framework to validate the structure of a container image. These tests can be used to check the output of commands in an image, as well as verify metadata and contents of the filesystem.
Related contents:
🥑 Language focused docker images, minus the operating system.
"Distroless" images contain only your application and its runtime dependencies. They do not contain package managers, shells or any other programs you would expect to find in a standard Linux distribution.
Related contents:
A tool for transforming and moving code between repositories.
Copybara is a tool used internally at Google. It transforms and moves code between repositories.
Often, source code needs to exist in multiple repositories, and Copybara allows you to transform and move source code between these repositories. A common case is a project that involves maintaining a confidential repository and a public repository in sync.
Copybara requires you to choose one of the repositories to be the authoritative repository, so that there is always one source of truth. However, the tool allows contributions to any repository, and any repository can be used to cut a release.
A machine learning accelerator core designed for energy-efficient AI at the edge.
Coral NPU is a hardware accelerator for ML inferencing. Coral NPU is an Open Source IP designed by Google Research and is freely available for integration into ultra-low-power System-on-Chips (SoCs) targeting wearable devices such as hearables, augmented reality (AR) glasses and smart watches.
This crate aims to be a robust, ergonomic, high performance library for reading OpenType fonts. It is built on top of the read-fonts low level parsing library and is also part of the oxidize project.
Related contents:
This project aims at hosting tutorials, examples, discussions, research proposals, and other resources related to fuzzing.
Fuzz testing is a well-known technique for uncovering programming errors in software. Many of these detectable errors, like buffer overflow, can have serious security implications. Google has found thousands of security vulnerabilities and stability bugs by deploying guided in-process fuzzing of Chrome components, and we now want to share that service with the open source community.
Distributed code review system for Git repos.
By "distributed", we mean that code reviews are stored inside of the repository as git objects. Every developer on your team has their own copy of the review history that they can push or pull. When pulling, updates from the remote repo are automatically merged by the tool.
This design removes the need for any sort of server-side setup. As a result, this tool can work with any git hosting provider, and the only setup required is installing the client on your workstation.
Related contents:
Go library and CLIs for working with container registries.
Performance-portable, length-agnostic SIMD with runtime dispatch. Highway is a C++ library that provides portable SIMD/vector intrinsics.
A Python library for extracting structured information from unstructured text using LLMs with precise source grounding and interactive visualization.
LangExtract is a Python library that uses LLMs to extract structured information from unstructured text documents based on user-defined instructions. It processes materials such as clinical notes or reports, identifying and organizing key details while ensuring the extracted data corresponds to the source text.
Related contents:
LevelDB is a fast key-value storage library written at Google that provides an ordered mapping from string keys to string values.
Google's common Java, C++ and JavaScript library for parsing, formatting, and validating international phone numbers.
Portable Toolkit for Building Secure Software.
Mantis is a set of skills along with an ADK reference harness for building secure software in the new AI era of software development.
A modular, stack-agnostic toolkit of security review skills for AI coding agents to autonomously find, reproduce, and patch vulnerabilities.
Google 💚 MCP.
This repository contains a list of Google's official Model Context Protocol (MCP) servers, guidance on how to deploy MCP servers to Google Cloud, and examples to get started.
Nogotofail is a network security testing tool designed to help developers and security researchers spot and fix weak TLS/SSL connections and sensitive cleartext traffic on devices and applications in a flexible, scalable, powerful way. It includes testing for common SSL certificate verification issues, HTTPS and TLS/SSL library bugs, SSL and STARTTLS stripping issues, cleartext issues, and more.
continuous fuzzing for open source software. Fuzz testing is a well-known technique for uncovering programming errors in software. Many of these detectable errors, like buffer overflow, can have serious security implications. Google has found thousands of security vulnerabilities and stability bugs by deploying guided in-process fuzzing of Chrome components, and we now want to share that service with the open source community.
Securing open-source package ecosystems by originating, validating, and augmenting build attestations.
OSS Rebuild aims to apply reproducible build concepts at low-cost and high-scale for open-source package ecosystems.
Rebuilds are derived by analyzing the published metadata and artifacts and are evaluated against the upstream package versions. When successful, build attestations are published for the upstream artifacts, verifying the integrity of the upstream artifact and eliminating many possible sources of compromise.
Related contents:
Protocol Buffers (a.k.a., protobuf) are Google's language-neutral, platform-neutral, extensible mechanism for serializing structured data. You can find protobuf's documentation on the Google Developers site.
RE2 is a fast, safe, thread-friendly alternative to backtracking regular expression engines like those used in PCRE, Perl, and Python. It is a C++ library.
Related contents:
TimesFM (Time Series Foundation Model) is a pretrained time-series foundation model developed by Google Research for time-series forecasting.
Related contents:
Agent Skills for Google products and technologies
Statistically rigorous benchmark runner for the web.
tachometer is a tool for running benchmarks in web browsers. It uses repeated sampling and statistics to reliably identify even tiny differences in runtime.
Collaborative forensic timeline analysis.
Timesketch is an open-source tool for collaborative forensic timeline analysis. Using sketches you and your collaborators can easily organize your timelines and analyze them all at the same time. Add meaning to your raw data with rich annotations, comments, tags and stars.
Missing Patch Scanner.
Vanir is a source code-based static analysis tool that automatically identifies the list of missing security patches in the target system. By default, Vanir pulls up-to-date CVEs from Open Source Vulnerabilities (OSV) together with their corresponding signatures so that users can transparently scan missing patches for an up-to-date list of CVEs.
Wireit upgrades your npm/pnpm/yarn scripts to make them smarter and more efficient.
one command-line tool for Drive, Gmail, Calendar, Sheets, Docs, Chat, Admin, and more. Dynamically built from Google Discovery Service. Includes AI agent skills.
One CLI for all of Google Workspace — built for humans and AI agents. Drive, Gmail, Calendar, and every Workspace API. Zero boilerplate. Structured JSON output. 40+ agent skills included.
gws doesn't ship a static list of commands. It reads Google's own Discovery Service at runtime and builds its entire command surface dynamically. When Google Workspace adds an API endpoint or method, gws picks it up automatically.
Related contents:
An efficient blocker for Chromium and Firefox. Fast and lean.
Related contents:
Checks for signature requirements over LDAP. The script will establish a connection to the target host(s) and request authentication without signature capability. If this is accepted, it means that the target hosts allows unsigned LDAP sessions and NTLM relay attacks are possible to this LDAP service (whenever signing is not requested by the client).
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact. PyRDP is a Python Remote Desktop Protocol (RDP) Monster-in-the-Middle (MITM) tool and library.
Simple bookmark manager built with Go.
Shiori is a simple bookmarks manager written in the Go language. Intended as a simple clone of Pocket. You can use it as a command line application or as a web application. This application is distributed as a single binary, which means it can be installed and used easily.
Related contents:
Modern web interface for aMule with real-time updates via EC protocol.
A modern, real-time web interface for controlling aMule via the EC (External Connection) protocol. Built with Node.js, WebSockets, and React.
Slideshow companion.
Write your talk/presentation in a simplified language (SliDeskFormat), generate it and visualize it in Web.
SliDesk is a new talk engine like RevealJS developped with Bun.
The policy-and-trust layer for MCP tool servers. Turn YAML configs into validated, policy-enforced MCP tools.
Heddle turns declarative configs into Model Context Protocol servers with trust enforcement, credential brokering, and tamper-evident audit logging built in.
This repository contains the code and resources used in the article "Stop Wasting Time, Automate Your Presentation with Python" published on Medium.
GPU Accelerated JavaScript.
GPU.js is a JavaScript Acceleration library for GPGPU (General purpose computing on GPUs) in JavaScript for Web and Node. GPU.js automatically transpiles simple JavaScript functions into shader language and compiles them so they run on your GPU. In case a GPU is not available, the functions will still run in regular JavaScript.
A small Python library created to help developers protect their applications from Server Side Request Forgery (SSRF) attacks. It implements an asynchronous GET method called safehttpx.get(), which is a wrapper around httpx.AsyncClient.get() while performing DNS validation on the supplied URL using Google DNS.
This educational game demonstrates distributed tracing concepts through an interactive strategy game built with OpenTelemetry and Grafana Alloy. Players learn about trace sampling, service graphs, and observability while competing for territory control.
Related contents:
Prometheus Exporter for Cloud Provider agnostic cost metrics.
Cloud Cost exporter is a designed to collect cost data from cloud providers and export the data in Prometheus format. The cost data can then be combined with usage data from tools such as stackdriver, yace, and promitor to measure the spend of resources at a granular level.
grafana/otel-lgtm bundles Grafana's open source stack for OpenTelemetry monitoring in a single Docker image.
The Kubernetes Monitoring Helm chart makes it easy to start gathering telemetry data from your Kubernetes clusters. With one deployment, you can capture all of the metrics, logs, traces, and profiles from your cluster and the applications running on it!
Related contents:
An honest CLI for openrouter.ai. Fast and tmux-aware. ort sends your prompts to AI models on openrouter.ai.
It is built the old fashioned way, in solid Rust. It doesn't slow you down with Python interpreters. This is a modest 2 MiB ELF binary.
Related contents:
wishthis is a simple, intuitive and modern wishlist platform to create, manage and view your wishes for any kind of occasion (demo). Currently, wishthis is available in 99 different locales!
A GraphQL.js validation rule for limiting the depth (including list depth) of GraphQL operations
An auditing tool for detecting vulnerabilities, powered by advisory databases that follow the OSV specification.
Telescope allows you to create a collaborative documentation that will be generated as a static site with an interactive graph to explore the content.
Hide .env secrets from prAIng eyes.
secrets live in local encrypted stores (per project) and are injected directly into apps at runtime, never touching disk as plaintext.
Related contents:
Reduce the environmental footprint of your software programs with SonarQube.
creedengo is a collective project aiming to reduce environmental footprint of software at the code level. The goal of the project is to provide a list of static code analyzers to highlight code structures that may have a negative ecological impact: energy and resources over-consumption, "fatware", shortening terminals' lifespan, etc.
Sympli RSS Fusion is a self-hosted PHP application that merges multiple RSS/Atom feeds into a single master feed. Lite version of RSS Fusion