Links
AddAI You Control. The Open-Source, Cross-Platform, Extensible AI Client. Choose your models. Own your data. Eliminate vendor lock-in.
Related contents:
Wolfenstein 3D in Rust
The goal is to have a pixel, mod-friendly perfect recreation of Wolfenstein 3D in Rust.
Related contents:
Workspace manager for macOS. Saved Workspaces for macOS.
SpacePigeon is a native macOS app (powered by Hammerspoon) that lets you define workspaces — which apps open, which desktop spaces they go to, and how windows are arranged.
Effortlessly transition between workflows. SpacePigeon instantly orchestrates your applications, windows, and displays into the perfect environment for any task with a single click or hotkey.
Free, open-source macOS app manager and system cleaner. Uninstall apps completely. Find orphaned files. Clean system junk. No subscriptions. No telemetry. No data collection.
Free, open-source macOS cleaner. CleanMyMac alternative with zero telemetry. Native SwiftUI, scheduled auto-cleaning, Xcode/Homebrew/system cache cleanup. MIT licensed.
BrightBean Studio is an open-source, self-hostable social media management platform built for creators, agencies and SMBs. It does what Sendible, SocialPilot, or ContentStudio do, but free and without per-seat, per-channel, or per-workspace limits. Plan, compose, schedule, approve, publish, and monitor content across Facebook, Instagram, LinkedIn, TikTok, YouTube, Pinterest, Threads, Bluesky, Google Business Profile, and Mastodon from a single multi-workspace dashboard.
Generate beautiful dark-themed system architecture diagrams as standalone HTML/SVG files. Works as a Claude AI skill.
Need an architecture diagram? Get AI to build you one.
Use Claude.ai with this special skill to generate professional architecture diagrams in seconds. Describe your system, and Claude creates a beautiful, dark-themed diagram as a standalone HTML file you can open in any browser.
A collection of DESIGN.md files inspired by popular brand design systems. Drop one into your project and let coding agents generate a matching UI.
Copy a DESIGN.md into your project, tell your AI agent "build me a page that looks like this" and get pixel-perfect UI that actually matches.
a terminal for the coding agents age. A terminal for ur coding agents.
🪇 Minimal terminal spinners for Rust.
Rattles is a minimal, dependency-free terminal spinner library for Rust. It makes no assumptions about how the output will be used.
WhatsApp CLI: sync, search, send.
This is a third-party tool that uses the WhatsApp Web protocol via whatsmeow and is not affiliated with WhatsApp.
A lightweight self-hosted Git server running on Cloudflare Durable Objects. Fast, searchable, yours.
A self-hostable git remote backed by Cloudflare Durable Objects. One DO per repo, SQLite storage, FTS5 search, delta compression via xpatch. Built in Rust with workers-rs.
Related contents:
🐙 untangle complex merges 🐙
mergetopus is a tool that helps teams follow a structured workflow for very large merges by splitting one risky merge into parallelizable tasks
Node.js antivirus scanning.
Minimal Node.js wrapper around ClamAV — scan any file and get Clean, Malicious, or ScanError. Handles installation and database updates automatically.
Local AWS emulator focused on fast integration testing, with SQS support, SQLite-backed state, and a debug-friendly web UI.
Hiraeth is a local AWS emulator focused on fast integration testing. The first release target is SQS: signed AWS SDK requests go through a local HTTP endpoint, state is stored in SQLite, and an optional web UI exposes the local emulator state for debugging.
Mount PostgreSQL as a filesystem. Build apps with files, explore databases with ls and cat. A filesystem backed by PostgreSQL, and a filesystem interface to PostgreSQL.
Every file is a real PostgreSQL row. Directories are tables. File contents are columns. Multiple agents and humans can read and write the same files concurrently with full ACID guarantees. No sync protocols. No coordination layer. The filesystem is the API.
TigerFS turns PostgreSQL into a transactional filesystem, either as the backend for your files or as a filesystem over your data. Agents and humans share state through files instead of sync protocols, merge workflows, or custom coordination code.
See where your AI coding tokens go. Interactive TUI dashboard for Claude Code, Codex, and Cursor cost observability.
A self-hosted, ad-free, privacy-respecting metasearch engine.
Get Google search results, but without any ads, JavaScript, AMP links, cookies, or IP address tracking. Easily deployable in one click as a Docker app, and customizable with a single config file. Quick and simple to implement as a primary search engine replacement on both desktop and mobile.
Create parametric CAD models with Python. A python parametric CAD scripting framework based on OCCT .
CadQuery is an open-source Python library for building 3D CAD models. It lets you describe parts as code, making models easy to version, share, and parameterize - no GUI required.
A lightweight easy to use markdown viewer.
A fast, native markdown viewer for macOS built with Tauri v2, React, and markdown-it. Beautiful rendering of tables, code blocks, task lists, math, and diagrams — with live reload.
Write HTML. Render video. Built for agents.
Hyperframes is an open-source video rendering framework that lets you create, preview, and render HTML-based video compositions — with first-class support for AI agents.
Cal.diy is the open source community edition of Cal.com and it is intended for users who want to self-host their own Cal.diy instance.
Blender Model Context Protocol Integration.
BlenderMCP connects Blender to Claude AI through the Model Context Protocol (MCP), allowing Claude to directly interact with and control Blender. This integration enables prompt assisted 3D modeling, scene creation, and manipulation.
A curated and collaborative list of awesome OpenTofu resources and tools.
OpenTofu allows you to declaratively manage your infrastructure. It’s an open-source, community-driven alternative to Terraform.
Open-Source Design Editor.
Opens Figma files. Built-in AI. Fully programmable. Also a toolkit for building custom editors.
Static and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations.
Static and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations. Analyzes source code, compiled executables (.exe, .dll, .elf), macOS bundles (.app, .dmg, .pkg), mobile apps (.apk, .ipa), and application packages with YARA rules, Docker behavioral sandboxing, MobSF mobile analysis, payload deobfuscation, and multi-format reporting (JSON, HTML, SARIF).
Related contents:
Goauld is a post-exploitation and remote access tool designed for use in restricted environments.
During penetration tests, operators may be required to work from a client-provided laptop behind VPNs, authenticated egress proxies, or restrictive network controls. In other cases, gaining remote code execution on a system still requires establishing a stable and fully interactive access channel.
Goauld solves these problems by providing a tunneling and access framework that allows operators to interact with remote agents through multiple transport protocols while maintaining a secure SSH-based architecture.
Related contents:
Scan your dev machine for AI agents, MCP servers, IDE extensions, and suspicious packages - in seconds.
Developer machines are the new attack surface. They hold high-value assets — GitHub tokens, cloud credentials, SSH keys — and routinely execute untrusted code through dependencies and AI-powered tools. Recent supply chain attacks have shown that malicious VS Code extensions can steal credentials, rogue MCP servers can access your codebase, and compromised npm packages can exfiltrate secrets.
Related contents:
Automated monitoring of the top PyPI and npm packages for supply chain compromise. Polls both registries for new releases, diffs each release against its predecessor, and uses an LLM (via Cursor Agent CLI) to classify diffs as benign or malicious. Malicious findings trigger a Slack alert.
Related contents:
API Discovery and Specification Generation Tool.
API discovery tool that maps attack surfaces from captured traffic and generates specs for REST, GraphQL, SOAP, and WebSocket APIs
Vespasian discovers API endpoints by observing real HTTP traffic and generates API specification files from those observations. It captures traffic through headless browser crawling or imports it from existing sources (Burp Suite XML exports, HAR files, and mitmproxy dumps), then classifies requests, probes discovered endpoints, and outputs specifications in the native format for each API type: OpenAPI 3.0 for REST, GraphQL SDL for GraphQL, and WSDL for SOAP services.
Related contents:
Check your AWS CLI commands for security risks before you run them.
Security linter for AWS CLI commands. Catches misconfigurations before they hit your cloud.
703 security checks across 91 AWS services. Findings include severity ratings and a remediated command.
Related contents:
The MITRE Fight Fraud Framework™ (F3) is a curated knowledge base of tactics and techniques used by financial fraud actors, derived from real-world observations of cyber fraud incidents. The framework includes behaviors that characterize known fraud TTPs and references existing MITRE ATT&CK® cyber techniques as applicable to financial fraud. F3 provides a common structure and taxonomy to consistently describe and enumerate the material events of a cyber fraud incident, enabling stronger collaboration on fraud prevention, detection, and response across organizational teams. The knowledge base is globally accessible, open, and available at no charge to any person or organization.
Related contents:
How to disable JavaScript in your browser.
Nowadays almost all web pages contain JavaScript, a scripting programming language that runs arbitrary code, through the web browser, on the visitor's computer. It is supposed to make web pages functional for specific purposes but it has proven its potential to cause significant harm to users time and time again:
Sécurix is a NixOS-based secure operating system tailored for small to medium-sized teams. It provides a minimal, hardened environment with strong isolation, reproducibility, and policy-driven configurations to ensure operational security and compliance.
Related contents:
The Python web framework for building apps.
A familiar foundation, reimagined for humans and agents. Plain is a fork of Django, driven by ongoing development at PullApprove — with the freedom to reimagine it for the agentic era.
check for a database transaction that silently leaked operations outside its boundary in go.
Related contents:
The Origami Store is a Devops Learning App created by School of Devops.
a Polyglot, Micro-Services based application, built with the Modern Tech stack, specially designed to be used as a learning app to buid Devops Projects with.
Related contents:
Headless browser automation server for AI agents to visit sites that are usually blocked. Anti-detection browser server for AI agents, powered by Camoufox.
Standing on the mighty shoulders of Camoufox - a Firefox fork with fingerprint spoofing at the C++ level.
A beautiful, minimal desktop shell for Wayland. A sleek and minimal desktop shell thoughtfully crafted for Wayland.
Built on Quickshell with a warm lavender aesthetic that you can easily customize to match your vibe.
Self-hosted client for your data. 📁 File Management Platform / Universal Data Access Layer (without FUSE) .
It started as a storage agnostic Dropbox-like file manager that works with every storage protocol: FTP, SFTP, S3, SMB, WebDAV, IPFS, and about 20 more.
Related contents:
Lightweight fuzzy-search library, with zero dependencies.
Fuse.js is a lightweight, zero-dependency fuzzy-search library written in TypeScript. It works in the browser and on the server, and is designed for searching small-to-medium datasets on the client side where you can't rely on a dedicated search backend.
LLM-native spec language. Velocity through clarity.
Give your AI agents something more useful than a prompt.
Related contents:
🇫🇷 Skills pour agents IA spécialisés dans la bureaucratie française : Comptable, Notaire, ...
Paperasse est une collection de skills pour agents IA (Claude Code, Claude Cowork, Codex, Mistral Vibe, Cursor, Windsurf, Cline, Aider) spécialisés dans la comptabilité, la fiscalité, le notariat et l'audit des entreprises françaises.
Chaque skill transforme votre agent en copilote expert d'un métier de la paperasse : comptabilité (PCG, TVA, IS, clôture annuelle, FEC, liasse fiscale), contrôle fiscal, audit CAC, droit notarial (immobilier, succession, donation), et gestion de copropriété (AG, charges, travaux, impayés). Il connaît les textes (CGI, BOFiP, NEP, loi 1965), les formulaires, les échéances, et ne se trompe pas de case dans la liasse fiscale.
Related contents:
Kubernetes Orphaned Resources Finder.
A Golang Tool to discover unused Kubernetes Resources.
like virtualenv, for every language. Per project developer environments.
The goal of this project is to simplify per-project developer environments.
Imagine, a new employee joins the company, or somebody transfers teams, or somebody wants to contribute to one of your Open Source projects. It should take them 10 minutes to clone the repo and get all of the development dependencies.
A fast, async-native Django cache backend for Valkey (and Redis). Opinionated and secure by default.
Related contents:
Scripts and utilities for secure OpenBAO/Vault management, featuring role-based access control, MFA, token lifecycle management, and API integration examples. Implements security best practices for secrets management.
OpenBAO (Open Build, Authenticate, and Operate) is an open-source fork of HashiCorp Vault that remains fully open-source under the MPL 2.0 license. This setup is designed for managing secrets across multiple namespaces, ideal for multi-tenant applications and integrations with various systems like n8n.
OpenAPI Breaking Change Detection & PR Review. Know exactly what changed in your API — and who approved it. Command-line and Go package to compare and detect breaking changes in OpenAPI specs.
oasdiff posts a breaking change report on every pull request, with one-click approve/reject for each change. The CI gate updates automatically.
Related contents:
Datadog Static AI Security Testing (SAIST) tool.
Code Security scans your first-party code and open source libraries used in your applications in both your repositories and running services, providing end-to-end visibility from development to production.
Related contents:
Garry's Opinionated OpenClaw/Hermes Agent Brain.
Your AI agent is smart but it doesn't know anything about your life. GBrain fixes that. Meetings, emails, tweets, calendar events, voice calls, original ideas... all of it flows into a searchable knowledge base that your agent reads before every response and writes to after every conversation. The agent gets smarter every day.
The open source, no-code MCP Server for AI-Native API Access
Build a uniform API value chain for AI agents with secure, no-code endpoint translation across your existing API services.
reShapr is the open source, no-code MCP Server for AI-Native API Access. It bridges the gap between traditional REST/GraphQL/gRPC services and LLMs by transforming complex services into discoverable, optimized MCP tools.
Related contents:
Schedule automated simulations of actions you would perform on your PC.
Related contents:
Aidge is an innovative, open-source framework designed to streamline and accelerate the deployment of Deep Neural Networks onto diverse hardware targets. In today’s rapidly evolving AI landscape, moving from a trained model to a high-performance, production-ready application can be a complex and time-consuming process.
Related contents:
A random collection of accessibility-focused tools that you might find at least partially useful
Related contents:
Offline Hike, Bike, Trails and Navigation.
Organic Maps is a privacy-focused offline maps & GPS app for hiking, cycling, biking, and driving. Absolutely free. No ads. No tracking. Developed with love by the open-source community and the same people, who created MapsWithMe/Maps.Me app. Powered by OpenStreetMap data.
Related contents:
Simple Secure Keeper for Secrets.
Keeper is a cryptographic secret store for Go. It encrypts arbitrary byte payloads at rest using Argon2id key derivation and XChaCha20-Poly1305 (default) authenticated encryption, and stores them in an embedded bbolt database.
Collection of npm package manager Security Best Practices.
Shai-Hulud, Nx and other incidents are a growing concern of supply chain security attacks and compromised npm packages. Follow these developer security best practices around npm, package maintenance and secure local development to mitigate security risks.
PentAGI: Advanced AI-Powered Penetration Testing
Fully autonomous AI Agent that performs complicated penetration testing tasks using terminal, browser, editor, and external search system.
Like BrowserUse, but for the terminal.
tui-use lets agents interact with programs that expect a human at the keyboard — REPLs, debuggers, TUI apps, and anything else bash can't reach.
A Watchdog for Your Infrastructure State. Continuous infrastructure drift detection with historical tracking and notifications.
Monitor infrastructure drift for Terraform, OpenTofu, and Terragrunt. Real-time drift detection with automated alerting.