Links
AddPHP dependency community detection.
Detects class communities in a PHP dependency graph by applying the Louvain algorithm (Blondel et al., 2008).
Takes as input the JSON produced by php-dep and outputs groups of tightly coupled classes — useful for identifying cohesive modules, architecture violations, or candidates for package extraction.
Related contents:
Analyze the Git history of your PHP files.
Turn Claude/Codex into geospatial analytics agent.
Claude, Codex, and GitHub Copilot skill for data scientists and analysts working with geospatial data on PostGIS, BigQuery, Snowflake, and Wherobots.
Every game you own, in one fast, tiny launcher.
A native C++/Qt Linux launcher for Windows, Steam, GOG and retro games. 2.3 MB installed. Zero bloat. KDE-first.
Minimal, no-JS web forum software. Agreper is a forum board with a focus on being easy to set up and manage.
Universal File Converter & Image Processor.
a simple web-based tool for processing images and converting documents with a simple interface.
A database backup management and automation tool. Velld provides a user-friendly interface for scheduling, managing, and monitoring database backups, ensuring data security and easy recovery.
An interactive cheatsheet tool for the command-line.
navi allows you to browse through cheatsheets (that you may write yourself or download from maintainers) and execute commands. Suggested values for arguments are dynamically displayed in a list.
AWS Attack Path Scanner. Discover privilege escalation paths across 10+ AWS services.
Heimdall is an AWS security scanner that discovers privilege escalation paths attackers could exploit to gain admin access.
Related contents:
Zeus is a powerful tool for AWS EC2 / S3 / CloudTrail / CloudWatch / KMS best hardening practices. It checks security settings according to the profiles the user creates and changes them to recommended settings based on the CIS AWS Benchmark source at request of the user.
AutoSubSync is a user-friendly Python tool that automatically synchronizes your subtitles with your videos using powerful tools such as ffsubsync and alass. It also lets you manually adjust the subtitle timings. Just drag and drop your files, and let AutoSubSync do the rest, making subtitle alignment both simple and efficient.
UI for Backup automation over SSH, replacing custom shell scripts and cron configurations, as a binary < 50 MB.
BackApp is a Go + React application that lets automatically schedule and inspect backups of remote servers via SSH.
It is a very lightweight server (under 50 MB) that runs locally (or on a dedicated machine) and provides a web interface to manage backup profiles.
Soak test your single page web-app (SPA) for memory leaks at high speed, with Playwright.
Related contents:
A robust message queue system for Rust applications, designed as a Rust alternative to Celery.
Currently Redis-backed, with planned support for RabbitMQ, Kafka, and other message brokers. This is by no means a finished product, but we're actively working on it and would love your feedback and contributions!
Unify is a web app aggregator built with Qt 6, Qt WebEngine, and Kirigami. It organizes "services" (web apps) by "workspaces" and opens each service in a WebView with desktop-friendly integrations (notifications, screen sharing, etc.).
Related contents:
🤖 Dependabot's core logic for creating update PRs.
Related contents:
The PHP deployment tool with support for popular frameworks out of the box.
Recursive and multi-threaded broken link checker. Quickly crawl a whole website for broken links
"Sonarr for YouTube" - a tool to periodically check various YouTube playlists and take actions when new videos are posted.
Subarr is a lightweight YouTube channel/playlist/subscription follower that will take action on new uploads (actions can be a webhook - like Discord - or a process - like downloading through yt-dlp). "Lightweight" means it needs few resources and can run on something like a raspberry pi.
Related contents:
Wifite but USB-only & cross-platform. A standalone USB Wi-Fi auditor for Linux, Windows, and macOS.
automated wireless auditor.
To attack multiple WEP, WPA, and WPS encrypted networks in a row. This tool is customizable to be automated with only a few arguments. Wifite aims to be the "set it and forget it" wireless auditing tool.
It's a Python script for auditing wireless networks. Wifite runs existing wireless-auditing tools for you. Stop memorizing command arguments & switches! Wifite is designed to use all known methods for retrieving the password of a wireless access point (router).
A small jQuery plugin that triggers a callback after all the selected/child images have been loaded. Because you can't do .load() on cached images.
This is the Descent 3 open source engine, licensed under GPL-3.0. It includes the '1.5' patch written by Kevin Bentley and Jeff Slutter several years ago and brought to a stable condition by the Descent community.
Share a single keyboard and mouse between multiple computers.
Deskflow is a free and open source keyboard and mouse sharing app. Use the keyboard, mouse, or trackpad of one computer to control nearby computers, and work seamlessly between them. It's like a software KVM (but without the video). TLS encryption is enabled by default. Wayland is supported. Clipboard sharing is supported.
Related contents:
Captcha solver extension for humans. Buster is a browser extension which helps you to solve difficult captchas by completing reCAPTCHA audio challenges using speech recognition. Challenges are solved by clicking on the extension button at the bottom of the reCAPTCHA widget.
Related contents:
Go toolkit for clean, composable, channel-based concurrency.
Rill is a toolkit that brings composable concurrency to Go, making it easier to build concurrent programs from simple, reusable parts. It reduces boilerplate while preserving Go's natural channel-based model.
React Native plugin for Apple Intelligence and Foundation Models.
A React Native plugin to access Apple Intelligence Foundation Models using native on-device LLM APIs. This module lets you check model availability, create sessions, generate structured outputs (JSON), and text using Apple's LLMs, all from React Native.
Safe deep property access in 120 bytes. x = dlv(obj, 'a.b.x').
Safely get a dot-notated path within a nested object, with ability to return a default if the full key path does not exist or the value is undefined
Related contents:
Hyperscript Tagged Markup: JSX alternative using standard tagged templates, with compiler support.
htm is JSX-like syntax in plain JavaScript - no transpiler necessary. Develop with React/Preact directly in the browser, then compile htm away for production.
:smirk_cat: A snarky 1kb Markdown parser written in JavaScript. Snarkdown is a dead simple 1kb Markdown parser.
It's designed to be as minimal as possible, for constrained use-cases where a full Markdown parser would be inappropriate.
An experiment in using LLMs to teach you, rather than think for you.
Lathe generates hands-on, multi-part technical tutorials on demand, with skills tuned to make content approachable. Then you work through them yourself, by hand, in a local UI built from the ground up for pleasant learning. (Just like we did it in the stone age 😎)
Terminal-based Docker image layer inspector .
Interactive Docker image layer inspector with CI-friendly efficiency checks. Single binary; no daemon required when reading saved image archives.
Rust implementation of the Microsoft Remote Desktop Protocol (RDP).
A collection of Rust crates providing an implementation of the Microsoft Remote Desktop Protocol, with a focus on security.
This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL
An authoritative list of awesome devsecops tools with the help from community experiments and contributions.
Inspired by the awesome-* trend on GitHub. This is a collection of documents, presentations, videos, training materials, tools, services and general leadership that support the DevSecOps mission. These are the essential building blocks and tidbits that can help you to arrange for a DevSecOps experiment or to help you build out your own DevSecOps program.
To start, or level up, a career in Information Security (aka Cyber) Security you need to be proficient in five key areas of technical skills. You don't have to master each one of them, but you need to have a good understanding of them.
It's a tool that's used for performing queries on streams of records in various formats.
The goal is to make ad-hoc exploration of data sets easy without having to use more heavy-weight tools like SQL/MapReduce/custom programs. rq fills a similar niche as tools like awk or sed, but works with structured (record) data instead of text.
It was created with love out of the best parts of Rust, C and Javascript, and is distributed as a dependency-free binary on many operating systems and architectures.
INSECA is a set of tools to build and manage very secure live Linux based endpoint systems.
It builds on top of Debian's livebuild technology and adds many security oriented features to ensure a high level of security while keeping the overall usage as simple as any system.
Removes final and readonly keywords from source code on-the-fly and allows mocking of final methods and classes. It can be used together with any test tool such as PHPUnit or Mockery.
Anti-scraper challenge for haproxy to stop naughty AI bots.
This is a simple anti-scraper solution for haproxy, using a similar "hashcash" challenge as anubis uses. The goal is to be as simple as possible, so this can be implemented alongside other haproxy rules to control traffic.
Fast key-value DB in Go. BadgerDB is an embeddable, persistent and fast key-value (KV) database written in pure Go. It is the underlying database for Dgraph, a fast, distributed graph database. It's meant to be a performant alternative to non-Go-based key-value stores like RocksDB.
Native GraphQL Database with graph backend. Dgraph is a horizontally scalable and distributed GraphQL database with a graph backend. It provides ACID transactions, consistent replication, and linearizable reads. It's built from the ground up to perform for a rich set of queries. Being a native GraphQL database, it tightly controls how the data is arranged on disk to optimize for query performance and throughput, reducing disk seeks and network calls in a cluster.
A simple web app to help you keep track of your subscriptions and manage your expenses.
A Laravel database analysis tool that inspects schema structure, indexes, and constraints to identify potential issues and enforce best practices.
The DBStan package provides detailed analysis and insights into your database schema for Laravel applications.
It helps identify structural issues, missing indexes, normalization problems, nullable column risks, foreign key inconsistencies, and performance concerns. It is an essential tool for debugging, optimizing, reviewing, and maintaining a healthy database architecture in Laravel projects.
Tames problematic filenames.
detox is a program that renames files to make them easier to work with under Linux and other Unix-like operating systems. Spaces and various other unsafe characters (such as "$") get replaced with "_". The upper portion of ISO-8859-1 (Latin-1) can be transcoded to UTF-8, as can CP-1252.
AdNauseam is a lightweight browser extension that blends software tool and artware intervention to fight back against tracking by advertising networks. AdNauseam works like an ad-blocker (it is built atop uBlock-Origin) to silently simulate clicks on each blocked ad, confusing trackers as to one's real interests. At the same time, AdNauseam serves as a means of amplifying users' discontent with advertising networks that disregard privacy and facilitate bulk surveillance agendas.
Self-hosted web app that automates downloading, organizing, and scheduling YouTube channel content with support for Plex, Kodi, Emby and Jellyfin
The Destructive Command Guard (dcg) is for blocking dangerous git and shell commands from being executed by agents.
A high-performance hook for AI coding agents that blocks destructive commands before they execute, protecting your work from accidental deletion across Claude Code, Codex CLI, Gemini CLI, Copilot CLI, VS Code Copilot Chat, Cursor, Hermes Agent, Grok (xAI), and related tools.
Two-tier hybrid local search for Rust and the fsfs standalone CLI: fast first-pass results, then quality refinement.
Two-tier hybrid search for Rust: sub-millisecond initial results via potion-128M, quality-refined rankings in 150ms via MiniLM-L6-v2. Combines lexical (Tantivy BM25) and semantic (vector cosine) search with Reciprocal Rank Fusion. Progressive iterator API, f16 SIMD vector index, feature-gated compilation.
On December 17, 2025, an AI agent (Claude) ran git checkout -- on multiple files containing hours of uncommitted work from another agent (Codex). This destroyed the work instantly and silently. The files were eventually recovered from a dangling Git object, but this incident revealed a critical gap: AI agents can execute destructive commands without understanding the consequences.
The AGENTS.md file already forbade such commands, but instructions alone don't prevent execution. This hook provides mechanical enforcement - the command is blocked before it can run.
Configuration management tool for Radarr/Sonarr that automates importing and version control of custom formats and quality profiles.
An open source terminology management solution.
An open source terminology management solution. The main goal of this app is to help translators to manage their glossaries in a structured but at the same time highly configurable way. Termbases are a highly valuable resource and require time to be built and validated, they are key for professionals to adapt to their customers' and domain requirements while ensuring consistency and high quality. One of the main concerns of my approach to terminology management is that one's data must always reside on one's own machine, so terminological entries must be stored in a local database and be never sent over the network.
Linux enumeration tool for pentesting and CTFs with verbosity levels.
This shell script will show relevant information about the security of the local Linux system, helping to escalate privileges. From version 2.0 it is mostly POSIX compliant and tested with shellcheck and posh.
It can also monitor processes to discover recurrent program executions. It monitors while it is executing all the other tests so you save some time. By default it monitors during 1 minute but you can choose the watch time with the -p parameter.
API for generating static map images
docker-staticmaps is an open-source API for rendering static map images. Easily create maps with markers, polygons, circles, polylines or text, making it perfect for embedding map images on websites or apps. Comes with built-in rate limiting and image caching to optimize performance and protect against abuse.
Keep your code spotless.
Spotless can format <A ntlr | c | c# | c++ | css | flow | graphql | groovy | html | java | javascript | json | jsx | kotlin | less | license headers | markdown | objective-c | protobuf | python | scala | scss | shell | sql | typeScript | vue | yaml | anything> using <gradle | maven | sbt | anything>.
<DT> <A HREF="https://github.com/steipete/agent-rules" ADD_DATE="1750075227" PRIVATE="" TAGS="prompt-engineering,ai-agent,claude,cursor,open-source,foss,mit-licensed">Agent Rules</A><DD>Rules and Knowledge to work better with agents such as Claude Code or Cursor.A collection of reusable rules and knowledge documents for AI coding assistants like Claude Code and Cursor.
Scripts and utilities for secure OpenBAO/Vault management, featuring role-based access control, MFA, token lifecycle management, and API integration examples. Implements security best practices for secrets management.
OpenBAO (Open Build, Authenticate, and Operate) is an open-source fork of HashiCorp Vault that remains fully open-source under the MPL 2.0 license. This setup is designed for managing secrets across multiple namespaces, ideal for multi-tenant applications and integrations with various systems like n8n.
Functional HTML templating for Ruby.
P2 is a templating engine for dynamically producing HTML in Ruby apps. P2 templates are expressed as Ruby procs, leading to easier debugging, better protection against HTML injection attacks, and better code reuse.
Related contents:
Data poisoning for your everyday tracking.
Fauxx is an open-source Android privacy tool that poisons data broker and ad-tech profiles by generating continuous, plausible, off-demographic synthetic activity from your device. The goal is simple: make your real behavioral signal statistically indistinguishable from noise.
Related contents:
MCP DigitalOcean Integration is an open-source project that provides a comprehensive interface for managing DigitalOcean resources and performing actions using the DigitalOcean API. Built on top of the godo library and the MCP framework, this project exposes a wide range of tools to simplify cloud infrastructure management.
Related contents:
The quickest way to rename acquired shows and movies for use in your media center.
Title tidy is the quickest way to standardizes your media file names for use in Jellyfin, Plex, and Emby. Title tidy uses intelligent parsing of folder structures and file names to automatically determine exactly how to name media. Whether you need to rename a single episode, a whole season, or any number of shows, Title Tidy does the job in one command. A preview is shown before renaming occurs, and Title Tidy will never overwrite content.