mit-licensed
Open-Source Design Editor.
Opens Figma files. Built-in AI. Fully programmable. Also a toolkit for building custom editors.
Static and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations.
Static and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations. Analyzes source code, compiled executables (.exe, .dll, .elf), macOS bundles (.app, .dmg, .pkg), mobile apps (.apk, .ipa), and application packages with YARA rules, Docker behavioral sandboxing, MobSF mobile analysis, payload deobfuscation, and multi-format reporting (JSON, HTML, SARIF).
Related contents:
Goauld is a post-exploitation and remote access tool designed for use in restricted environments.
During penetration tests, operators may be required to work from a client-provided laptop behind VPNs, authenticated egress proxies, or restrictive network controls. In other cases, gaining remote code execution on a system still requires establishing a stable and fully interactive access channel.
Goauld solves these problems by providing a tunneling and access framework that allows operators to interact with remote agents through multiple transport protocols while maintaining a secure SSH-based architecture.
Related contents:
Automated monitoring of the top PyPI and npm packages for supply chain compromise. Polls both registries for new releases, diffs each release against its predecessor, and uses an LLM (via Cursor Agent CLI) to classify diffs as benign or malicious. Malicious findings trigger a Slack alert.
Related contents:
Check your AWS CLI commands for security risks before you run them.
Security linter for AWS CLI commands. Catches misconfigurations before they hit your cloud.
703 security checks across 91 AWS services. Findings include severity ratings and a remediated command.
Related contents:
Sécurix is a NixOS-based secure operating system tailored for small to medium-sized teams. It provides a minimal, hardened environment with strong isolation, reproducibility, and policy-driven configurations to ensure operational security and compliance.
Related contents:
Headless browser automation server for AI agents to visit sites that are usually blocked. Anti-detection browser server for AI agents, powered by Camoufox.
Standing on the mighty shoulders of Camoufox - a Firefox fork with fingerprint spoofing at the C++ level.
A beautiful, minimal desktop shell for Wayland. A sleek and minimal desktop shell thoughtfully crafted for Wayland.
Built on Quickshell with a warm lavender aesthetic that you can easily customize to match your vibe.
LLM-native spec language. Velocity through clarity.
Give your AI agents something more useful than a prompt.
Related contents:
🇫🇷 Skills pour agents IA spécialisés dans la bureaucratie française : Comptable, Notaire, ...
Paperasse est une collection de skills pour agents IA (Claude Code, Claude Cowork, Codex, Mistral Vibe, Cursor, Windsurf, Cline, Aider) spécialisés dans la comptabilité, la fiscalité, le notariat et l'audit des entreprises françaises.
Chaque skill transforme votre agent en copilote expert d'un métier de la paperasse : comptabilité (PCG, TVA, IS, clôture annuelle, FEC, liasse fiscale), contrôle fiscal, audit CAC, droit notarial (immobilier, succession, donation), et gestion de copropriété (AG, charges, travaux, impayés). Il connaît les textes (CGI, BOFiP, NEP, loi 1965), les formulaires, les échéances, et ne se trompe pas de case dans la liasse fiscale.
Related contents:
Kubernetes Orphaned Resources Finder.
A Golang Tool to discover unused Kubernetes Resources.
like virtualenv, for every language. Per project developer environments.
The goal of this project is to simplify per-project developer environments.
Imagine, a new employee joins the company, or somebody transfers teams, or somebody wants to contribute to one of your Open Source projects. It should take them 10 minutes to clone the repo and get all of the development dependencies.
A fast, async-native Django cache backend for Valkey (and Redis). Opinionated and secure by default.
Related contents:
Garry's Opinionated OpenClaw/Hermes Agent Brain.
Your AI agent is smart but it doesn't know anything about your life. GBrain fixes that. Meetings, emails, tweets, calendar events, voice calls, original ideas... all of it flows into a searchable knowledge base that your agent reads before every response and writes to after every conversation. The agent gets smarter every day.
A random collection of accessibility-focused tools that you might find at least partially useful
Related contents:
Simple Secure Keeper for Secrets.
Keeper is a cryptographic secret store for Go. It encrypts arbitrary byte payloads at rest using Argon2id key derivation and XChaCha20-Poly1305 (default) authenticated encryption, and stores them in an embedded bbolt database.
PentAGI: Advanced AI-Powered Penetration Testing
Fully autonomous AI Agent that performs complicated penetration testing tasks using terminal, browser, editor, and external search system.
Like BrowserUse, but for the terminal.
tui-use lets agents interact with programs that expect a human at the keyboard — REPLs, debuggers, TUI apps, and anything else bash can't reach.
A sliding, tiling window manager for MacOS.
Paneru is a MacOS window manager that arranges windows on an infinite strip, extending to the right. A core principle is that opening a new window will never cause existing windows to resize, maintaining your layout stability.
Each monitor operates with its own independent window strip, ensuring that windows remain confined to their respective displays and do not "overflow" onto adjacent monitors.
Claude Code orchestrator in one window.
Orchestrate multiple Claude Code sessions across projects. Review diffs, annotate code, send instructions — all from one window.
Related contents:
🔗 A federated network to bookmark, organize, share and discover good web pages. 🪢Federated website aggregator.
It's getting harder and harder to find good web pages. When you do find good ones, it's worth hanging onto them. ties is your own small corner of the web, where you can keep your favorite pages, and share them with your friends to help them find good web pages too.
Manage CrowdSec, Traefik integration, decisions, scenarios, logs, backups, and updates from a single web interface.
A web-based management interface for CrowdSec security stack with Pangolin integration. This project replaces the bash script with a modern, user-friendly ShadcnUI built with Go and React.
Package your AI coding workflows as YAML. Run them anywhere — CLI, Web, Slack, Telegram, GitHub, Discord.
The first open-source harness builder for AI coding. Make AI coding deterministic and repeatable.
Virtual desktop pet cats for macOS — pixel art cats that live on your dock and chat with you via Ollama LLM.
Related contents:
Sync and store locally all of your X / Twitter bookmarks.
An open source, free CLI tool for collecting and categorizing your personal X/Twitter bookmarks. Makes your bookmarks locally available to Claude Code, Codex, or any other agent with shell access.
Related contents:
A new developer platform is coming. Every commit tells a story. Now you can read it.
Entire CLI hooks into your git workflow to capture AI agent sessions on every push. Sessions are indexed alongside commits, a searchable record of how code was written.
Related contents:
A Man-in-the-Middle proxy written in Rust. Intercept, inspect, and modify HTTP/HTTPS traffic with Lua scripting, a TUI, and a web interface.
A programmable MITM proxy that intercepts HTTP/HTTPS traffic so you don't have to guess what your app is doing. Forward & reverse modes, TLS interception, TUI, terminal, and web GUI.
Related contents:
Personal News Reader with Intelligence Training. RSS and web feeds, synced on every platform you use.
A production-grade, zero-configuration preset for
Ultracite is a zero-config preset for ESLint, Biome, and Oxlint that helps teams and AI write consistent, type-safe code.
The Universal Documentation Engine.
The minimalist, zero-config engine for professional documentation. No React, no heavy frameworks. Generate minimal, fast & beautiful docs from Markdown. No React, no bloat, just content. Built for developers.
⚡️ Superpowers for your Openclaw. Powerful prebuilt agent workflows. Including 113 prebuilt workflows you can enable in 1 click 🎉
Build your own component library.
Accessible components for Astro and Tailwind CSS. Components are added to your project with the CLI. You own and control the code.
Deploy any Agent Skill as an API via POST /run. Multi-model, stateful, open source.
Turn any Agent Skill (SKILL.md) into a callable API via POST /run. Multi-model, stateful, open source.
A language designed for machines to write. A programming language designed for LLMs to write, not humans.
Vera (v-ERR-a) is a programming language designed for large language models to write. The name comes from the Latin veritas (truth). Programs compile to WebAssembly and run at the command line or in the browser.
A fully featured React components library.
Build fully functional accessible web applications faster than ever – Mantine includes more than 120 customizable components and 70 hooks to cover you in any situation.
Components in Markdown.
A fast, streaming-ready markdown parser with component support for Vue, React, Svelte, HTML and ANSI terminal.
skeleton screens for your UI. Auto generated skeleton loading framework.
Pixel-perfect skeleton loading screens, extracted from your real UI. No manual measurement, no hand-tuned placeholders. boneyardsnapshots your real UI and captures a flat list of skeleton “bones” — positioned, sized rectangles that mirror the page exactly.
No manual measurement. No hand-tuned placeholders. Wrap your component in <Skeleton> and get pixel-perfect skeleton screens that stay in sync with your actual layout.
Turns any HTML page into clean markdown.
Mozilla Readability algorithm + hickory-to-markdown converter for Babashka.
Turns any HTML page into clean markdown by parsing it with jsoup, scoring content using the Mozilla Readability algorithm, extracting the main article body, and converting the hickory tree to markdown.
Related contents:
AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
Runtime governance for AI agents — the only toolkit covering all 10 OWASP Agentic risks with 9,500+ tests. Governs what agents do, not just what they say — deterministic policy enforcement, zero-trust identity, execution sandboxing, and SRE — Python · TypeScript · .NET · Rust · Go
Related contents:
Open Agent Harness.
OpenHarness delivers core lightweight agent infrastructure: tool-use, skills, memory, and multi-agent coordination.
Related contents:
The Agent Operating System.
LibreFang is a production-grade runtime for autonomous AI agents. Single binary, 15 built-in capability units, 44 channel adapters. Built in Rust for the workloads that can't afford to go down. LibreFang is an Agent Operating System — a full platform for running autonomous AI agents, built from scratch in Rust. Not a chatbot framework, not a Python wrapper.
Traditional agent frameworks wait for you to type something. LibreFang runs agents that work for you — on schedules, 24/7, monitoring targets, generating leads, managing social media, and reporting to your dashboard.
Related contents:
Motion animations as Tailwind classes.
Write Motion animations as Tailwind-like classes. Zero imports, zero boilerplate, zero runtime overhead. Write Framer Motion animations as Tailwind-style utility classes – Motionwind transforms animate-* classes into motion props at build time with zero imports and zero boilerplate. Motion animations as Tailwind classes. A Babel plugin that transforms animate-hover:scale-110 into whileHover={{ scale: 1.1 }} at build time. Zero imports, zero boilerplate.
Related contents:
Run JavaScript anywhere. Safely. Run Node.js safely, anywhere, with any JS engine. Edge.js is a secure JavaScript runtime, designed for Edge computing and AI workloads.
Edge.js reimagines Node.js: fully sandboxed via --safe mode, engine-agnostic, and built for AI and serverless workloads. Ubiquitous by design.
Related contents:
Use Obsidian as a CMS for Astro.
The open-source headless content management system that turns Obsidian into a publishing platform for your Astro website.
Related contents:
A fast, persistent use_nix/use_flake implementation for direnv.
A faster, persistent implementation of direnv's use_nix and use_flake, to replace the built-in one.
Non-blocking direnv integration daemon with tmux/zellij support that provides instant shell prompts by running direnv asynchronously in the background.
Better configuration for less. Manage complex configurations. Modular, correct and boilerplate-free.
Nickel is the universal configuration language. Nickel is configuration templating, but done right. Modular, correct and concise.
Its purpose is to automate the generation of static configuration files - think JSON, YAML, XML, or your favorite data representation language - that are then fed to another system. It is designed to have a simple, well-understood core: it is in essence JSON with functions.
Control all your tooling from a single console.
Managing a project's development environment involves configuring a lot of tools and occasionally getting to communicate with each other: one (or several) package managers, a CI system, a service manager (to run that local postgresql database without which you can't test anything), custom utility scripts that end up spawning everywhere, etc. Organist aims at being your main entrypoint for managaing all these different tools.
Related contents:
Type-Safe Errors for JS & TypeScript. Encode failure into your program.
This package contains a Result type that represents either success (Ok) or failure (Err).
Related contents:
It's an AI teacher that lives as a buddy next to your cursor. It can see your screen, talk to you, and even point at stuff. Kinda like having a real teacher next to you.
Full autonomy. Controlled environment. OS-level containment for AI coding agents on macOS.
macOS containment for AI agents — user isolation, kernel sandbox, pf firewall, DNS blocklist, backup/rollback. TLA+ verified.
AI coding agents are most useful when you let them work autonomously. But full autonomy means the agent runs with your full privileges, your credentials, your files.
Hazmat makes that safe.
Related contents:
The highest-scoring AI memory system ever benchmarked. And it's free.
Every conversation you have with an AI — every decision, every debugging session, every architecture debate — disappears when the session ends. Six months of work, gone. You start over every time.
Related contents:
The secret to good memory isn't remembering more. It's knowing what to forget.
Biologically-inspired memory for AI agents. Decay, retrieval strengthening, consolidation. Zero dependencies.
Hold-to-talk speech-to-text for macOS. 100% local, powered by WhisperKit and local LLM cleanup. Hold Control to record, release to transcribe and paste.
Breakthrough Method for Agile Ai Driven Development .
The BMad Method (Build More Architect Dreams) is an AI-driven development framework module within the BMad Method Ecosystem that helps you build software through the whole process from ideation and planning all the way through agentic implementation. It provides specialized AI agents, guided workflows, and intelligent planning that adapts to your project’s complexity, whether you’re fixing a bug or building an enterprise platform.
Beautiful and understandable static analysis tool for PHP. Set up in 5 minutes.
PhpMetrics provides metrics about PHP project and classes, with beautiful and readable HTML report.
Related contents:
Skills, agents, and security for your coding agent. Open Agent Harness System for GitHub App Automation and Security.
Pick a profile. Install the skills and agents your team needs. AgentShield scans every session. The GitHub App turns repo history into reusable defaults. 140K+ stars on GitHub. Start free, scale to enterprise.
Real-time network diagnostics in your terminal. One command, zero config, instant visibility.
Launch → see every interface, connection, and health probe instantly. Arm the flight recorder before an incident disappears.
A ~9M parameter LLM that talks like a small fish.
This project exists to show that training your own language model is not magic. No PhD required. No massive GPU cluster. One Colab notebook, 5 minutes, and you have a working LLM that you built from scratch — data generation, tokenizer, model architecture, training loop, and inference. If you can run a notebook, you can train a language model.