mit-licensed
MCP Server for kubernetes management commands.
MCP Server that can connect to a Kubernetes cluster and manage it. Supports loading kubeconfig from multiple sources in priority order.
Related contents:
A unified dashboard for managing multiple Sonarr, Radarr, Prowlarr, Lidarr, Readarr, Plex, Tautulli, Jellyfin, Emby, and Seerr instances. Consolidate your media automation management into a single, secure, and powerful interface.
Related contents:
Your reading list, as a podcast you own. Self-hosted Podcasting 2.0 service that turns saved articles into a personal podcast feed.
Paste a URL or upload a document (PDF, DOCX, Markdown, text, or HTML), wait a few minutes, and get an episode with cloned-voice narration, artwork, an LLM-written episode summary, and a WebVTT transcript. Subscribe in Pocket Casts, Overcast, or Apple Podcasts like any other show.
A Kanban board made of Markdown local-first Kanban board in Markdown, self-hosted.
Boards live in your browser, so the UI is instant and works offline. For anything you want to keep, run the sync server you host yourself.
Local Social Publishing Dashboard.
Free, open-source, self-hosted crossposter — compose once and publish or schedule to X, LinkedIn, Bluesky, Mastodon, Instagram, YouTube, Dev.to, Pinterest, Hacker News, Nostr, and Dribbble from localhost.
Crossposter keeps the publishing workflow close to the app itself: one composer, provider readiness cards, local history, scheduled posts, and warnings only when selected socials would reject a draft.
GitOps for Docker
Deploy and manage your services with ease, directly from your Git repository.
OrcaCD is a simple GitOps tool for Docker. It allows you to deploy your applications using Git as the source of truth. With OrcaCD, you can easily manage your Docker containers and keep them in sync with your Git repository.
The ultimate bridge for cross-platform reading and listening synchronization.
BookBridge is a self-hosted sync engine for audiobooks and ebooks. It keeps your reading and listening position aligned across multiple apps, whether the source is Audiobookshelf, KOReader, BookFusion, Grimmory, BookOrbit, Calibre-Web Automated, or Storyteller. With the current Bridge Sync KOReader plugin, it can also move highlights and notes between supported readers.
Own your book, build your world. A story editor.
Free and open source. Works offline, on every device you own, and every chapter stays a plain text file on your own disk.
Code review in your terminal. terminal UI for code review.
tuicr is a TUI for code review with vim keybindings. Scroll a GitHub-style diff, leave line-level comments, then push a real PR review to GitHub, or copy structured markdown for your coding agent.
Terminal UI to manage AI coding-agent sessions (Claude Code, OpenCode, Codex, Grok Build) in tmux: live status, group tree, live pane preview, resource gauges.
Deployment of an Active Directory Tier Model structure to support Tier 0, Tier 1, and Tier 2 objects.
Declarative PowerShell framework to deploy and audit an Active Directory Tier Model (OUs, Groups, Users, ACL Delegations, GPOs, ADMX, MSA/gMSA/dMSA Permissions, Windows LAPS Permissions) from a single version-controlled JSON configuration file. Supports idempotent re-runs, drift detection, and reproducible builds via pinned dependency versions.
An evolving recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested.
A curated pack of security skills for external reconnaissance, web applications, APIs, authentication, vulnerability validation, attack-path analysis, and reporting.
Unofficial boto3 client for the AWS CloudShell API — reverse-engineered from the AWS Console.
AWS CloudShell has no public SDK. This project injects a custom botocore service model so you can use CloudShell programmatically with the standard boto3 interface — full SigV4 signing, retries, and all.
Two-tier hybrid local search for Rust and the fsfs standalone CLI: fast first-pass results, then quality refinement.
Two-tier hybrid search for Rust: sub-millisecond initial results via potion-128M, quality-refined rankings in 150ms via MiniLM-L6-v2. Combines lexical (Tantivy BM25) and semantic (vector cosine) search with Reciprocal Rank Fusion. Progressive iterator API, f16 SIMD vector index, feature-gated compilation.
Accessibility before any prompt.
A context system for building accessible software by default — for developers and AI, with enforceable rules aligned to WCAG.
A file that teaches the AI you use — Cursor, Claude, Copilot — to build accessible interfaces from the very first line, following the international WCAG 2.2 standard. Nothing to install: one sentence in the right place and you're set.
Local PHP, without the friction. Local PHP development environment for macOS & Linux.
Serve your projects on .test domains over HTTP and HTTPS, run a different PHP version per site, and manage it all from one tiny daemon. No Docker, no sudo for everyday work, no subscription.
A high-performance document search engine built in Rust with WebAssembly support.
A high-performance document search engine built in Rust with WebAssembly support. Combines full-text search using FST (Finite State Transducers) with FSST compression for efficient storage and fast fuzzy matching capabilities.
Access your docker socket safely as read-only, rootless and distroless.
What can I do with this? This image will run a proxy to access your docker socket as read-only. The exposed proxy socket is run as 1000:1000, not as root, although the image starts the proxy process as root to interact with the actual docker socket. There is also a TCP endpoint started at 2375 that will also proxy to the actual docker socket if needed.
The local merge queue for parallel Claude Code agents.
The local, zero-cost merge queue for parallel Claude Code agents. Several agents land, build, and test at the same time — this serializes it so push races, redundant heavy builds, and shared-resource test flakiness can't happen.
tusd is the official reference implementation of the tus resumable upload protocol:
tus is a protocol based on HTTP for resumable file uploads. Resumable means that an upload can be interrupted at any moment and can be resumed without re-uploading the previous data again. An interruption may happen willingly, if the user wants to pause, or by accident in case of a network issue or server outage.
Tool for easy backup and restore for ClickHouse® using object storage for backup files.
A lightweight, cloud-native GIS platform for visualizing, exploring, and analyzing geospatial data. It runs in the web browser, on the desktop, on mobile, and inside Jupyter notebooks.
A free and open-source, lightweight, cloud-native GIS platform for visualizing, exploring, and analyzing geospatial data. It runs everywhere you do, in the web browser, on the desktop, on mobile, and inside Jupyter notebooks, all while keeping your data local and private.
GeoLibre is built with Tauri v2, React, TypeScript, MapLibre GL JS, DuckDB-WASM Spatial, and deck.gl. The same workspace runs as a native desktop app, a native Android app, in any modern web browser, and adapts responsively to mobile and small screens.
etter alternative to git worktrees
- copy on write (saves space)
- instant (< 0.1s on 10gb folder)
- fast cli
- use as FFI lib with bun or node
mac and linux with btrfs or native reflinks for now more support soon.
Related contents:
React’s programming model, compiled. Octane is an incredibly efficient React replacement UI library with improved developer ergonomics.
The successor to Inferno, carrying its performance-first goal forward: React’s hooks, Suspense and actions, compiled ahead of time. No virtual DOM. No rules of hooks. No hand-maintained dependency arrays — the compiler works out what your code captures for you.
An organic glow that hugs the edge of your screen — zero-dependency Canvas 2D engine + React adapter
An organic glow that hugs the edge of your screen.
the Git client that actually resolves conflicts.
10 deterministic patterns auto-resolve the trivial 95%, full trace on the rest. Native (Tauri 2 + Rust), free, MIT.
Related contents:
A lightweight Node.js private proxy registry.
Verdaccio is a simple, zero-config-required local private npm registry. No need for an entire database just to get started! Verdaccio comes out of the box with its own tiny database, and the ability to proxy other registries (eg. npmjs.org), caching the downloaded modules along the way. For those looking to extend their storage capabilities, Verdaccio supports various community-made plugins to hook into services such as Amazon's s3, Google Cloud Storage or create your own plugin.
Find and fix problems in your JavaScript code. Pluggable JavaScript Linter.
ESLint is a tool for identifying and reporting on patterns found in ECMAScript/JavaScript code. In many ways, it is similar to JSLint and JSHint with a few exceptions:
Related contents:
The open-source alternative to Webflow, Framer and WordPress. Agentic self-hosted visual CMS outputting clean static pages. Users, roles, plugins, content, database, it's all there.
A self-hosted CMS where the visual editor, content engine, and publisher all live in one Bun server — and the pages it ships are clean enough to read in view-source.
Pi-hole-class DNS ad-blocker on a $2 ESP32-C3 (no PSRAM): 537k domains as 40-bit FNV-1a hashes in flash, binary-searched. UDP DNS sinkhole + web dashboard.
Related contents:
-Un demi-million de domaines anti-pub stockés dans 50 Ko de RAM @ Korben :fr:.
Bootable Model As System (BMASS) – an offline-first AI operating environment.
BMASS is an open-source experiment that treats a local language model as the primary interface to a computer rather than another application running inside one.
Related contents:
a dockerfile linter that actually has opinions 🔥. 85 Rules, Instant Results.
a dockerfile linter that actually has opinions. it catches bad practices and tells you about them in the least diplomatic way possible.
think of it as code review from a senior dev who's seen too many prod incidents and has stopped being polite about it.
Related contents:
Mission Control: Take Control of your Projects. Agents that Ship.
A focused desktop surface for launching, organizing, and repeating the agentic workflows that help you ship software faster.
Related contents:
Give the agent a cage, not your keys.
Give the agent a cage, not your keys. One-command Docker sandbox for AI coding agents: full autonomous permissions, per-project isolation, your host stays untouched.
The Web Without JavaScript. A programming language that compiles to WebAssembly, built for the next era of web development.
Nectar compiles to WebAssembly. One language, one binary, zero dependencies. Your entire app — logic, state, rendering — runs in WASM. JavaScript is reduced to a 10 KB syscall layer.
A Visualization Language for the AI Era.
Flint is a visualization intermediate language that lets AI agents reliably create expressive, good-looking charts from simple, human-editable chart specs. Instead of requiring verbose low-level parameters such as scales, axes, spacing, and layout, the Flint compiler derives optimized chart settings from the data, semantic types, chart type, and encodings. Flint supports 46 chart types, and it supports rendering in Vega-Lite, ECharts, and Chart.js.
Your LLM bill is leaking.
Free, local, open-source LLM cost analyzer - see where your LLM bill leaks, on your machine.
Most teams run every call on their most expensive model. Frugon reads your real logs locally and shows which calls a cheaper model handles just as well, and which to leave alone. No upload. No telemetry.
a native macOS UI for Apple containers.
A fully native macOS app for Apple's container platform. Run Linux containers on Apple silicon; no Docker Desktop required.
It's okay to be a little jelly. Soft Web Components
Jelly UI is a dependency-free Web Components library for soft, tactile product interfaces. Real form controls meet soft-body physics, with dark mode, right-to-left support and WCAG AA color tokens built in.
Keeps your Claude session warm for you.
Stop paying to rebuild your Claude Code cache. When your main agent waits on a subagent for more than 5 minutes, its prompt cache silently expires, and the next turn re-encodes your entire conversation at the write rate instead of reading it back cheap. On long sessions with many subagents that's roughly 20% of your bill. claude-thermos keeps the cache warm so you never pay that tax.
Local code intelligence for MCP.
Local-first code intelligence graph for MCP and CLI. Builds a persistent map of your codebase so AI coding tools read only what matters, with benchmarked context reductions on reviews and large-repo workflows.
Not just a mock server. Turn an OpenAPI spec into TypeScript-based simulation, with state management, hot reload, and a REPL.
Point Counterfact at an OpenAPI spec and get a live, stateful API in seconds — with TypeScript safety, hot reload, shared state, and a programmable REPL.
Lightweight & Fast Security Scanner for React Native & Expo.
A zero-configuration security scanner for React Native and Expo applications that detects vulnerabilities, hardcoded secrets, and security misconfigurations with a single command.
A fast, lightweight HTTP client focused on .http file support
A lightweight, fast, and offline-first HTTP debugging tool with first-class support for .http files. No account required. No telemetry. Just you and your APIs.
Run LLMs at home, BitTorrent-style.
You load a part of the model, then join a network of people serving its other parts. Single‑batch inference runs at up to 6 tokens/sec for Llama 2 (70B) and up to 4 tokens/sec for Falcon (180B) — enough for chatbots and interactive apps.
Wireshark for MCP. A transparent proxy that shows every real tool call between your AI client and your MCP servers, live in your terminal.
Git worktree manager for the terminal: CLI + TUI in Rust. Creates the worktree, runs your project setup, links the GitHub issue. Single binary, no git CLI needed.
Seemingly normal USB drive with a hidden security feature.
Phantomdrive is open source encrypted USB drive with a stealth mechanism to hide its second partition. To decrypt it you must create a file containing your password in the format password:addpasswordhere, this is used to derive AES-XTS keys. The drive automatically unmounts itself, remounts the remaining disk and encrypts and decrypts in place. It uses CH569W SoC, which has USB3, SDIO and an AES hardware block. It is programmable over USB using the wch-ch56x-isp library.
Related contents:
Real-time router/firewall traffic visualizer TUI for Linux (interfaces, conntrack, firewall drops).
Where a host monitor shows your machine's own traffic, fwtop is built for the box that sits between networks — an edge router or firewall. It reads kernel state directly (near-zero overhead, no packet capture) to show per-interface throughput (split into WAN/LAN zones), the live connection-tracking table (including NAT), and firewall rule counters with a smoke→fire drops heatmap that surfaces spikes at a glance.
Related contents:
Dusseldorf is an out-of-band security tool to help in security research.
Dusseldorf is a private, customizable out-of-band application security testing (OAST) platform. It captures inbound network traffic across multiple protocols and lets you craft automated responses for security validation workflows.
It is designed for security professionals who need controlled infrastructure to detect and validate out-of-band vulnerabilities such as SSRF, XSS, SSTI, XXE, and related classes of defects.
Run AI locally on your Mac.
Local AI, native to your Mac. Chat, serve, monitor, and connect MLX models from one macOS app.
Global DNS propagation checker TUI — watch a DNS record propagate across 34 public resolvers worldwide, on a world map in your terminal
Stop console.log()-ing every request. reqlog gives you a live dashboard of every HTTP request hitting your server — zero config.
A Cloudflare-based email service.
A simple, responsive email service designed to run on Cloudflare Workers 🎉. With only one domain, you can create multiple different email addresses, similar to major email platforms. This project can be deployed on Cloudflare Workers to reduce server costs and build your own email service.
Universal, model-agnostic operating harness for AI agents (Claude, Codex, Gemini, …) — a lean core + work-type profiles assembled by one setup script.
Your agents already solved this. deja finds it.
Memory tools start empty and record forward. deja starts full: it indexes the sessions your agents already wrote to disk — months of history from before you installed it — hands it back over MCP so any agent recalls what any other solved, and follows you between machines over SSH.
🎨 Create beautiful code screenshots with customizable styles .
Goshot is a Go library and CLI for creating beautiful screenshots of code and terminal output, with syntax highlighting, window chrome, and rich backgrounds. Similar to Carbon and Silicon.
See and Manage Open Ports on Mac.
When you're working on multiple projects at the same time, it's easy to lose track of what's running. A database here, a dev server there, an API you forgot was still open... before long, your ports become a mess.
Portero gives you a clear view of everything running on your machine, so you always know what's using each port, can stop what you don't need, and get back to building instead of debugging port conflicts.
Point it at any web page and it finds the video, extracts the stream, transcodes it and casts in real time to your TV. It even burns subtitles….
Related contents: