Links
AddTwo-tier hybrid local search for Rust and the fsfs standalone CLI: fast first-pass results, then quality refinement.
Two-tier hybrid search for Rust: sub-millisecond initial results via potion-128M, quality-refined rankings in 150ms via MiniLM-L6-v2. Combines lexical (Tantivy BM25) and semantic (vector cosine) search with Reciprocal Rank Fusion. Progressive iterator API, f16 SIMD vector index, feature-gated compilation.
On December 17, 2025, an AI agent (Claude) ran git checkout -- on multiple files containing hours of uncommitted work from another agent (Codex). This destroyed the work instantly and silently. The files were eventually recovered from a dangling Git object, but this incident revealed a critical gap: AI agents can execute destructive commands without understanding the consequences.
The AGENTS.md file already forbade such commands, but instructions alone don't prevent execution. This hook provides mechanical enforcement - the command is blocked before it can run.
Configuration management tool for Radarr/Sonarr that automates importing and version control of custom formats and quality profiles.
An open source terminology management solution.
An open source terminology management solution. The main goal of this app is to help translators to manage their glossaries in a structured but at the same time highly configurable way. Termbases are a highly valuable resource and require time to be built and validated, they are key for professionals to adapt to their customers' and domain requirements while ensuring consistency and high quality. One of the main concerns of my approach to terminology management is that one's data must always reside on one's own machine, so terminological entries must be stored in a local database and be never sent over the network.
Linux enumeration tool for pentesting and CTFs with verbosity levels.
This shell script will show relevant information about the security of the local Linux system, helping to escalate privileges. From version 2.0 it is mostly POSIX compliant and tested with shellcheck and posh.
It can also monitor processes to discover recurrent program executions. It monitors while it is executing all the other tests so you save some time. By default it monitors during 1 minute but you can choose the watch time with the -p parameter.
He says nothing. He writes one line. It works.
Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
API for generating static map images
docker-staticmaps is an open-source API for rendering static map images. Easily create maps with markers, polygons, circles, polylines or text, making it perfect for embedding map images on websites or apps. Comes with built-in rate limiting and image caching to optimize performance and protect against abuse.
Keep your code spotless.
Spotless can format <A ntlr | c | c# | c++ | css | flow | graphql | groovy | html | java | javascript | json | jsx | kotlin | less | license headers | markdown | objective-c | protobuf | python | scala | scss | shell | sql | typeScript | vue | yaml | anything> using <gradle | maven | sbt | anything>.
<DT> <A HREF="https://github.com/steipete/agent-rules" ADD_DATE="1750075227" PRIVATE="" TAGS="prompt-engineering,ai-agent,claude,cursor,open-source,foss,mit-licensed">Agent Rules</A><DD>Rules and Knowledge to work better with agents such as Claude Code or Cursor.A collection of reusable rules and knowledge documents for AI coding assistants like Claude Code and Cursor.
Scripts and utilities for secure OpenBAO/Vault management, featuring role-based access control, MFA, token lifecycle management, and API integration examples. Implements security best practices for secrets management.
OpenBAO (Open Build, Authenticate, and Operate) is an open-source fork of HashiCorp Vault that remains fully open-source under the MPL 2.0 license. This setup is designed for managing secrets across multiple namespaces, ideal for multi-tenant applications and integrations with various systems like n8n.
Functional HTML templating for Ruby.
P2 is a templating engine for dynamically producing HTML in Ruby apps. P2 templates are expressed as Ruby procs, leading to easier debugging, better protection against HTML injection attacks, and better code reuse.
Related contents:
Data poisoning for your everyday tracking.
Fauxx is an open-source Android privacy tool that poisons data broker and ad-tech profiles by generating continuous, plausible, off-demographic synthetic activity from your device. The goal is simple: make your real behavioral signal statistically indistinguishable from noise.
Related contents:
MCP DigitalOcean Integration is an open-source project that provides a comprehensive interface for managing DigitalOcean resources and performing actions using the DigitalOcean API. Built on top of the godo library and the MCP framework, this project exposes a wide range of tools to simplify cloud infrastructure management.
Related contents:
The quickest way to rename acquired shows and movies for use in your media center.
Title tidy is the quickest way to standardizes your media file names for use in Jellyfin, Plex, and Emby. Title tidy uses intelligent parsing of folder structures and file names to automatically determine exactly how to name media. Whether you need to rename a single episode, a whole season, or any number of shows, Title Tidy does the job in one command. A preview is shown before renaming occurs, and Title Tidy will never overwrite content.
Cod is a completion daemon for {bash,fish,zsh}. It detects usage of --help commands parses their output and generates auto-completions for your shell.
The Ultimate Express. Fastest http server with full Express compatibility, based on µWebSockets.
This library is a very fast re-implementation of Express.js 4. It is designed to be a drop-in replacement for Express.js, with the same API and functionality, while being much faster. It is not a fork of Express.js.
fast, remote-first, multi-host TUI log viewer with timeline histogram and no central server.
Nerdlog is a fast, remote-first, multi-host TUI log viewer with timeline histogram and no central server. Loosely inspired by Graylog/Kibana, but without the bloat. Pretty much no setup needed, either.
It's laser-focused on being efficient while querying logs from multiple remote machines simultaneously, filtering them by time range and patterns, while also drawing a timeline histogram for quick visual insight:
Allows you to easily execute SQL against structured text like CSV or TSV.
A fast, simple alternative to NextCloud.
☁️ Ultra-fast, secure & lightweight self-hosted cloud storage — your files, photos, calendars & contacts, all in one place. Built in Rust.
NextCloud was too slow on my home server. So I built OxiCloud: a file storage system written in Rust that runs on minimal hardware and stays out of your way.
Mantium is a self-hosted cross-site manga tracker. It can track manga from source sites like Manga Plus, Mangadex, ComicK, etc.
A Patch for GIMP 3+ for Photoshop Users.
PhotoGIMP is a free, community-driven patch that transforms GIMP (GNU Image Manipulation Program) into a layout that feels familiar to Adobe Photoshop users. If you're switching from Photoshop to GIMP and want to feel at home right away, PhotoGIMP is for you.
Custom Claude Code skills for infrastructure as code development.
Related contents:
Docker Sandboxes template + kit: an IaC (Pulumi/Terraform/OpenTofu + AWS/Azure/GCP CLIs) Claude Code workstation with APM baked into the agent home.
Related contents:
(Rogue Office 365 and Azure (active) Directory tools)
A collection of Azure AD/Entra tools for offensive and defensive security purposes.
ROADtools is a framework to interact with Azure AD. It consists of a library (roadlib) with common components, the ROADrecon Azure AD exploration tool and the ROADtools Token eXchange (roadtx) tool.
Related contents:
Your Ultimate IPTV & Stream Management Companion.
Dispatcharr is an open-source powerhouse for managing IPTV streams and EPG data with elegance and control.
Query your data in plain English.
Turn natural language questions into SQL queries with a small, local model that matches cloud LLM accuracy.
We fine-tuned a small language model to convert plain English questions into executable SQL queries. Because it's small, you can run it locally on your own machine, no API keys, no cloud dependencies, full privacy. Load your CSV files, ask questions, get answers.
GPT CLI to auto-generate impressive commits in 1 second 🤯🔫
Stable Diffusion GUI App for MacOS. Diffusion Bee is the easiest way to run Stable Diffusion locally on your Intel / M1 Mac. Comes with a one-click installer. No dependencies or technical knowledge needed.
Enumerate all network shares in the current domain. Also, can resolve names to IP addresses.
Quick and dirty binary to list network share information from all machines in the current domain and if they're readable. Can also translate all computer names to ip addresses.
Self-hostable Docker Compose stack update manager.
PatchPanda is a self-hostable Docker Compose stack update manager built with .NET 10 and Blazor Server. It scans your existing Docker Compose stacks, monitors GitHub releases for new versions, groups related containers, and helps you review and apply updates while keeping you in control.
Why tell Claude what to do when you can tell Claude to tell Claude what to do?
Multiple Claude Code agents. One repo. Controlled chaos.
multiclaude spawns autonomous Claude Code instances that coordinate, compete, and collaborate on your codebase. Each agent gets its own tmux window and git worktree. You watch. They work. PRs appear.
A git diff pager based on delta but with a file tree, à la GitHub.
Grab your DNS logs, detect anomalies, and finally understand what's happening on your network. The missing piece between DNS servers and your data stack.
DNS-collector is a lightweight tool that captures DNS queries and responses from your DNS servers, processes them intelligently, and sends clean data to your monitoring or analytics systems.
Related contents:
Symfony bundle to isolate your app's doctrine database tests and improve the test performance.
This bundle provides features that help you run your Symfony-framework-based App's testsuite more efficiently with isolated tests.
It provides a StaticDriver that will wrap your originally configured Driver class (like DBAL\Driver\PDOMysql\Driver) and keeps a database connection statically in the current php process.
Related contents:
Opinionated Oxlint rules for rejecting low-evidence TypeScript and JavaScript patterns.
Related contents:
ua-parser-php is a PHP-based pseudo-port of the ua-parser project. Developed to be included with browser- & feature-detection library Detector.
Finally a Fabioulous & Fast Fuzzy File Finder for neovim.
FFF stands for freakin fast fuzzy file finder (pick 3) and it is an opinionated fuzzy file picker for neovim. Just for files, but we'll try to solve file picking completely.
It comes with a dedicated rust backend runtime that keep tracks of the file index, your file access and modifications, git status, and provides a comprehensive typo-resistant fuzzy search experience.
SponsorBlock client for all YouTube TV clients.
iSponsorBlockTV is a self-hosted application that connects to your YouTube TV app (see compatibility below) and automatically skips segments (like Sponsors or intros) in YouTube videos using the SponsorBlock API. It can also auto mute and press the "Skip Ad" button the moment it becomes available on YouTube ads.
Terminal-based AI coding tool that can use any model that supports the OpenAI-style API.
Chromium OS Universal Chroot Environment.
crouton is a set of scripts that bundle up into an easy-to-use, Chromium OS-centric chroot generator. Currently Ubuntu and Debian are supported (using debootstrap behind the scenes), but "Chromium OS Debian, Ubuntu, and Probably Other Distros Eventually Chroot Environment" doesn't acronymize as well (crodupodece is admittedly pretty fun to say, though).
A fast and secure DoH (DNS-over-HTTPS) and ODoH (Oblivious DoH) server.
Fast, mature, secure DoH and ODoH server proxy written in Rust. Previously known as doh-proxy and rust-doh.
doh-proxy is written in Rust, and has been battle-tested in production since February 2018. It doesn't do DNS resolution on its own, but can sit in front of any DNS resolver in order to augment it with DoH support.
Related contents:
DNS server, in Erlang. Serve DNS authoritative responses... with Erlang.
Related contents:
HTTP microservice for QR Code generation.
An implementation of a simple HTTP microservice that generates QR Code upon request. All the QR heavy lifting is done by the qrcode Go package.
A curated list of Docker Compose samples.
These samples provide a starting point for how to integrate different services using a Compose file and to manage their deployment with Docker Compose.
Docker CLI plugin for extended build capabilities with BuildKit
Agent Builder and Runtime by Docker Engineering.
cagent lets you create and run intelligent AI agents, where each agent has specialized knowledge, tools, and capabilities. Think of it as allowing you to quickly build, share and run a team of virtual experts that collaborate to solve complex problems for you.
A powerful, easy to use, customizable multi-agent runtime that orchestrates AI agents with specialized capabilities and tools, and the interactions between agents.
Related contents:
containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision, low-level storage and network attachments, etc..
Language server for Dockerfiles, Compose files, and Bake files.
The Docker Language Server is a language server for providing language features for file types in the Docker ecosystem (Dockerfiles, Compose files, and Bake files).
Machine management for a container-centric world.
Machine lets you create Docker hosts on your computer, on cloud providers, and inside your own data center. It creates servers, installs Docker on them, then configures the Docker client to talk to them.
Production-ready fullstack but simple mail server (SMTP, IMAP, LDAP, Antispam, Antivirus, etc.) running inside a container. Only configuration files, no SQL database. Keep it simple and versioned. Easy to deploy and upgrade. Documentation via MkDocs.
docker mcp CLI plugin / MCP Gateway.
Related contents:
A visualizer for Docker Swarm Mode using the Docker Remote API, Node.JS, and D3
A Terraform provider for managing Docker services.
Manage Docker-hosted resources (such as repositories, teams, organization settings, and more) using Terraform.
Simple dashboard showing Docker ports with clickable links for multiple hosts.
Dockpeek is a lightweight, self-hosted Docker dashboard that allows you to view and access exposed container ports with a clean, click-to-access interface. It supports both local Docker sockets and remote hosts via socket-proxy, making it easy to manage multiple Docker environments from a single place.
Related contents:
- Deploying Dockpeek with Docker Compose @ Techdox Docs.
- See What Ports Your Containers Use with Dockpeek | Self-Hosted Docker Port Monitor @ Techdox's YouTube.
- Dockpeek: A Docker Port Dashboard for Your Homelab @ DB Tech's YouTube.
- Best Self-Hosted Apps of 2025 | The Top New Containers You Should Know @ ServersatHome's YouTube.
AI-Powered Docker Security Analyzer. AI-powered Docker security scanner that explains vulnerabilities in plain English.
DockSec is an OWASP Incubator Project that combines traditional Docker security scanners (Trivy, Hadolint, Docker Scout) with AI to provide context-aware security analysis.
Related contents:
Windows in a Docker container.
Docker image with QEMU and noVNC web app allowing to run Windows on GNU/Linux hosts.
Related contents: