Links
AddPortable Toolkit for Building Secure Software.
Mantis is a set of skills along with an ADK reference harness for building secure software in the new AI era of software development.
A modular, stack-agnostic toolkit of security review skills for AI coding agents to autonomously find, reproduce, and patch vulnerabilities.
a git server that is one binary in front of an object store.
walgit hosts git repositories with no database, no leader and no local state that matters. You run a single binary, point it at an S3 or GCS bucket, and you have: smart HTTP (v0/v2) fetch and push, Git LFS, a browsing web UI, a JSON API with an SDK, per-repository push policy, webhooks — and a server that scales to repositories larger than the machine it runs on. Every machine that runs walgit is a disposable cache; the bucket is the repository.
Instant chat. Account-free, encrypted, fast and disposable.
Encrypted link-based chat with color identity, no usernames, and room rules you set before anyone joins.
Powerful local Word Processor for docx and odt. Free, Open Source, Private by Design.
EdenText is a web-based, powerful word processor for everything from quick notes to full-length books. No server, no account — processing runs locally and your documents never leave your computer. Just one URL away, or completely offline as a slim browser app — under 2 MB on first load1. The interface comes in English, German, Spanish, French, Portuguese and Russian.
Read what you own.
Open your own comics on iPhone and iPad, from a folder or a Komga, Kavita, or OPDS library. Enlarge small lettering with Bubble Zoom, follow a reading list, or download books for a trip.
Your Jellyfin, at a glance. a dashboard for your Jellyfin.
Jellydash is a dashboard for your Jellyfin server. See who is watching right now, keep full play history, dig into statistics and get a ping on your phone when someone hits play.
Never lose track of a book again. Book Storage, Tracking & Loan App.
Vaultisse keeps a simple, always up-to-date list of every book you own — what you have, who borrowed it, and exactly where it is. No spreadsheets, no sticky notes.
A Compose control plane that does not own your containers.
Windlass gives you projects, Git deployments, HTTPS domains, logs, terminals and backups on your own server. It shells out to the real docker compose rather than replacing it, so removing the panel leaves everything running.
Build complex browser workflows visually. Stack blocks visually to build complex browser workflows and execute them via API.
Figranium is an open-source visual browser automation platform with a block-based editor, built-in scheduling, proxy rotation, and a REST API to run everything.
Review the package artifact before it ships. pre-publish package security. Review the artifact before you publish it: diffs the built npm/PyPI package against the last published version and pins risk signals to the changed lines.
Between your last code review and the public registry sit build scripts, bundler output, and CI credentials. Drydock diffs the exact artifact against the last published version and pins every supply-chain finding to a changed line. Workflow Gate enforces the decision on a configured protected job; Stage Watchtower records an advisory npm review.
Sharded Postgres by PlanetScale.
Neki is sharded Postgres by PlanetScale. Every shard is real Postgres. Neki adds the router, sidecars, and control plane to scale it past a single machine, to hundreds of millions of QPS and petabytes of data, without downtime.
Related contents:
ICSx⁵ is an Android app to subscribe to remote (“Webcal”) or local iCalendar files (like time tables of your school/university or event files of your sports team). It will download each iCalendar file regularly at a given interval and import it into a native read-only calendar, which then can be used with your favorite calendar app.
Linux + iPhone Continuity / iMessage / SMS.
Bridge your iPhone to the Linux Wayland desktop.
Tether aims to support all of the Apple Continuity features on Linux that are technically possible. If you've migrated away from macOS but still carry an iPhone, Tether provides the missing ecosystem integration.
Related contents:
Build Desktop Apps with Go.
Build beautiful, performant applications using Go and modern web technologies. One codebase. Three platforms. No browsers.
The traditional method of providing web interfaces to Go programs is via a built-in web server. Wails offers a different approach: it provides the ability to wrap both Go code and a web frontend into a single binary. Tools are provided to make this easy for you by handling project creation, compilation and bundling. All you have to do is get creative!
Related contents:
A modern Jellyfin frontend.
Pelagica is a fast, modern, and fully customizable open-source web, desktop and TV client for Jellyfin.
Related contents:
Your Logitech mousekeyboardcamera, finally local.
A local-first alternative to Logitech Options+, written in Rust.Remap buttons, drive DPI and SmartShift over HID++.No account, no telemetry.
Related contents:
Insert an optical disc (Blu-ray, DVD, CD) and checks to see if it's audio, video (Movie or TV), or data, then rips it.
Related contents:
photos without a server.
Smriti indexes any drive, recognises faces on-device, and surfaces memories — without leaving your machine. No account, no cloud, no server humming in a closet.
Related contents:
Three.js components, templates and interactive shaders
Browse copy-ready Three.js components, complete website templates, WebGL backgrounds, hero sections, UI effects, and source-backed variants.
Open-source ThreeUI Community catalog with live interactive components and complete Community source.
Free, Open, and Award-Winning Video Editor for Linux, Mac, and Windows! A free, open-source video editor that’s easy to use, quick to learn, and surprisingly powerful.
Fig is a small TypeScript UI runtime for building apps and metaframeworks.
A TypeScript re-implementation of React: fibers, lanes, scheduling, hooks, streaming SSR, and selective hydration — without the legacy cruft.
Vento is the Galician word for wind but also a new JavaScript-based template engine. It's inspired by other engines, such as Nunjucks, Liquid, Eta, and Mustache.
Fediverse bots, as standalone servers. Standalone ActivityPub bots in TypeScript.
BotKit is a TypeScript framework for standalone ActivityPub bots. No Mastodon account and no 500‑character limit: your bot runs as a complete fediverse server, and it fits in a single file.
a lightweight JavaScript runtime.
Ant is a lightweight, high-performance JavaScript runtime built from scratch. It runs real npm packages, starts instantly and ships as a portable 9 MB binary.
No 140 MB download, and no toolchain to set up. Ant Silver is an independent engine, not a wrapper around V8, JSC, or SpiderMonkey.
The WCAG-EM Report tool is an assistant that takes the user through the process of evaluating the accessibility of a website, using the WCAG Evaluation Methodology.
It is developed by the Web Accessibility Initiative (WAI) at the World Wide Web Consortium (W3C). Initially developed with support from the WAI-ACT Project, and updated with support of the WAI-Tools Project, co-funded by the European Commission (EC).
Let Agents Control Your Real Chrome Browser .
A Chrome extension and CLI that let your agents control your actual browser with logins, extensions, and cookies already there. No headless instance, no bot detection, no extra memory.
Build integrations with AI. Integrations for your products & agents
Connect your product & agents to 900+ APIs, on infrastructure built for scale.
Nango is an open-source platform for building product integrations. It supports 900+ APIs and works with any backend language, AI coding tool, and agent SDK.
digital indie toolkit for computer touchers. the open source toolkit for digital creatives
delphitools is a collection of over 80 simple, local-only tools that run in your browser and all solve a problem that I, delphi, have personally had. It is implemented in Ember.js and Crayon CSS for styling.
Local-first AI coding agent desktop: Electron + Rust host core + pi Agent Harness + user-installable plugins
Make Every Team AI Native.
TeamAI manages your team's skills, rules, MCP, and knowledge across Claude Code, Codex, CodeBuddy, WorkBuddy, OpenCode, Cursor, and other AI agents.
Executable architecture specifications for Ruby and Rails Architecture linter for Ruby and Rails.
Guarantee your agents and your team follow your conventions. ArchSpec turns them into static analysis checks that run in CI on every change. No AI involved, just static analysis.
Related contents:
Cursor for circuit boards.
Copperhead is an open-source AI engineering platform that helps hardware teams design, verify and ship circuit boards.
An agent-first decompiler designed to be refined by other agents. Kuna is written in Rust and was originally ported from Ghidra.
Kuna is a self-refining decompiler built to be used by agents. It is based on the Ghidra decompiler, written in Rust, and integrates modern features from other open-source decompilers and research. Kuna is an experiment to see how far agents can take self-refining tools.
Safety for Agents. Agent Detection & Response for AI coding assistants .
Lightweight Agent Detection & Response (ADR) layer for AI agents — guards commands, files, and web requests. Part of Gen Agent Trust Hub.
Sage is a lightweight security layer that protects AI agents from executing dangerous actions. It intercepts tool calls — shell commands, URL fetches, file writes — and checks them against multiple threat detection layers before they run.
Offensive security for agentic infrastructure. The red team framework for AI agent infrastructure.
Drop one static collector on a compromised host. One active scan captures configs and raw credentials, discovers MCP, A2A and AI services, reuses compatible secrets, proves concrete access, and checkpoints the evidence before the foothold disappears. Ingest later for full graph analysis.
Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI services. BloodHound for the agentic stack.
A compilation of challenges that aims to provide practice in simple to advanced concepts in the following topics: Digital Forensics, Incident Response, Malware Analysis and Threat Hunting.
This is aimed at Professionals, Security Researchers, Students, CTF Players as well as DFIR & Malware Analysis Enthusiasts in the field of Cyber Security who want to practice or have an interest in the aforementioned topics.
Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow.
Cover is a bidirectional privacy proxy for AI coding agents. It replaces matched sensitive values locally with realistic, deterministic stand-ins before a request leaves your machine, then translates matching fakes in normal and streaming responses back to the originals. The model gets coherent context; your agent and tools keep working with the real environment.
stateless browser running entirely on Workers.
Kitesurf is Cloudflare’s new stateless, highly scalable and cost-effective web browser that runs entirely on top of Workers and was designed specifically for the Agentic Cloud. Use this playground to explore Kitesurf capabilities. We inject Chrome DevTools in the UI, so you can inspect expanded DOM elements, read console messages, and watch network activity while Kitesurf renders pages. The Memory panel reports the WebAssembly footprint of each isolate, including frames, so you can gain a clear understanding of the resources each page is consuming.
Related contents:
Give every agent its own browser.
The headless browser for AI agents and web scraping. Obscura is a headless browser engine written in Rust, built for web scraping and AI agent automation. It runs real JavaScript via V8, supports the Chrome DevTools Protocol, and acts as a drop-in replacement for headless Chrome with Puppeteer and Playwright.
A simple, open-source and easy-to-use Google Analytics alternative for the modern web.
Understand your website traffic, visitors, and conversions without the complexity of Google Analytics.
UI components for AI Agents.
React UI components for AI agent conversations, plus a CLI. Beautifully crafted, copy-paste blocks for everything an agent shows mid-conversation: thinking states, tool calls, streaming text, tables and more.
Related contents:
Local PHP development for Linux and macOS.
Lerd runs Nginx, PHP-FPM and your services as rootless Podman containers. Automatic .test domains, per-project PHP & Node, one-command TLS. No Docker daemon, no sudo, no system pollution.
Related contents:
every AI coding limit, in your menu bar. Show usage stats for OpenAI Codex and Claude Code, without having to login.
Track usage windows, credit balances, and reset countdowns across the AI tools you actually pay for.
Related contents:
Crible Algébrique: Distribution, Optimisation - Number Field Sieve.
CADO-NFS is a complete implementation in C/C++ of the Number Field Sieve (NFS) algorithm for factoring integers and computing discrete logarithms in finite fields. It consists in various programs corresponding to all the phases of the algorithm, and a general script that runs them, possibly in parallel over a network of computers. CADO-NFS is distributed under the Gnu Lesser General Public License (LGPL) version 2.1 (or any later version).
Related contents:
Visual FFmpeg Command Generator.
A web-based GUI for quickly generating common FFmpeg command-line operations.
Related contents:
Execute chDB queries in Postgres.
This library provides PostgreSQL extensions for executing chDB queries in Postgres, and for copying data from external sources into a PostgreSQL table.
Related contents:
The JavaScript Oxidation Compiler.
Oxlint (/oʊ-ɛks-lɪnt/) is a high-performance linter for JavaScript and TypeScript built on the Oxc compiler stack.
Opinionated Oxlint rules for rejecting low-evidence TypeScript and JavaScript patterns.
Related contents:
AI-built automation platform. Deterministic Automation for AI Agents. Makes AI repeatable, shareable, and auditable.
Your AI solves a problem, then forgets how it got there. Your team never sees the solution. Nobody can prove what happened. Swamp fixes all three.
Swamp is a CLI that supercharges AI agents to create operational workflows that are reviewable, shareable, and accurate. Built for agents, there to empower humans. All the data lives in the .swamp/ (the swamp).
A chart grammar you don't have to outgrow.
A typed, tree-shakable chart grammar for SVG and Canvas. Compose marks, views, scales, transforms, interactions, and motion with compact primitives or D3-compatible inputs.
Router that virtually distributes inference across connected devices in the home.
NVIDIA Personal AI Router (PAIR) is a local inference router for a group of compatible computers on the same network. It discovers participating nodes, manages supported inference engines, and presents Ollama-compatible and OpenAI-compatible proxy endpoints to applications and agents. Independent requests can be routed to eligible nodes according to engine availability, model availability, and current workload.
PAIR is useful for concurrent local workloads such as multi-agent applications. Prompts and responses are intended to remain on the local network when every configured client, model source, engine, and node is local.
Every ad account.One command line. Free PPC & Google Ads Audit Tool.
12 platforms, 33 skills, one /ads command. Read-only by default, every finding backed by evidence.
Claude-first paid-media operations skill for Claude Code across 12 ad platforms (Google, Meta, YouTube, LinkedIn, TikTok, Microsoft, Apple, Amazon, Reddit, Pinterest, Snapchat, X): source-grounded audits, deterministic scoring, versioned JSON reports, and capability-gated account changes.
Claude Ads turns authorized exports or account reads into source-grounded audits, plans, creative workflows, experiments, monitoring, and reports. It is read-only by default. Live changes stay disabled until the exact platform and operation pass approval, idempotency, verification, audit, and rollback gates.
27 Security Intelligence Tools for Claude.
Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.
A free, open-source screen recorder and video editor Native capture, local AI, no paywall.
Record your screen, ship a demo. Free and open-source, GPU-accelerated, no watermarks, no subscriptions. Windows, macOS, Linux. Actively maintained.
Semantic Versioning for Nix Flakes.
Thaw works by operating directly on the ref specified for your flake's inputs. If a ref exists on the input and is a valid SemVer version, thaw will attempt to upgrade it to the latest version. Both url querey param and object configuration syntax are supported.
By default, non-major upgrades are allowed, but this can be changed with the --major flag. No additional tools or components are required.
Professional email for individuals and teams. Mailflare is a self-hosted email inbox for custom domains, built on Cloudflare.
Receive, send, search and organize email for your own domains from one fast, private workspace. No ad profiles. No mystery servers.
A tiny, self-hosted notification inbox for developers. Something happened in one of your apps; Boop tells you on your phone.
One Go binary, one SQLite file, one Docker container. Pushes go straight from your server to Apple's APNs. There is no hosted relay, account system, or telemetry.
Boop speaks the Sentry ingest protocol, so any existing server-side Sentry SDK (Python, Node, Go, Ruby, PHP, …) can report to Boop with no code changes — just point the DSN at your Boop host and use a project API key as the public key:
Generative art skill for Claude Code — deterministic, hash-seeded, onchain-ready.
Create long-form generative art with AI assistance — deterministic, hash-seeded, ready for onchain platforms like Art Blocks, 256ART, Verse, Highlight, Plottables and bootloader.art — or for screens, via Artpoint.
Motorola 680x0 emulator written in C.
Musashi is a Motorola 68000, 68010, 68EC020, 68020, 68EC030, 68030, 68EC040 and 68040 emulator written in C. This emulator was written with two goals in mind: portability and speed.
Run classic After Dark screen savers on modern macOS.
In the ’90s, Berkeley Systems’ After Dark screen savers brought Flying Toasters, Fish, and Starry Skylines to Macintosh screens everywhere. They served a practical purpose in preventing burn-in on CRT monitors, but also entertained, with animations that could be funny, surreal, beautiful -- sometimes gross.