web
The OSTE meta scanner is a comprehensive web vulnerability scanner that combines multiple DAST scanners, including Nikto Scanner, OWASP ZAP, Nuclei, SkipFish, and Wapiti.
Real-time APIs Made Easy.
Mercure is an open protocol for real-time communications designed to be fast, reliable and battery-efficient. It is a modern and convenient replacement for both the Websocket API and the higher-level libraries and services relying on it.
Mercure is a protocol for pushing data updates to web browsers and other HTTP clients in a convenient, fast, reliable, and battery-efficient way. It is especially useful to publish async and real-time updates of resources served through web APIs, to reactive web and mobile apps.
SessionProbe is a multi-threaded tool designed for penetration testing and bug bounty hunting. It evaluates user privileges in web applications by taking a session token and checking access across a list of URLs, highlighting potential authorization issues.
AI Browser Automation. Automate browser based workflows with AI.
Skyvern automates browser-based workflows using LLMs and computer vision. It provides a simple API endpoint to fully automate manual workflows on a large number of websites, replacing brittle or unreliable automation solutions.
Web path scanner. An advanced web path brute-forcer.
Related contents:
The hypermedia framework.
Datastar helps you build reactive web applications with the simplicity of server-side rendering and the power of a full-stack SPA framework.
Related contents:
Daux.io is a documentation generator that uses a simple folder structure and Markdown files to create custom documentation on the fly. It helps you create great looking documentation in a developer friendly way.
The infinite canvas SDK for React developers.
Use the tldraw SDK to add a collaborative whiteboard to your product or create new canvas-based experiences with the SDK's components, APIs, and services.
Related contents:
Next Generation Server Toolkit. Create web servers with everything you need and deploy them wherever you prefer.
SRCL is an open-source React component and style repository that helps you build web applications, desktop applications, and static websites with terminal aesthetics. Its modular, easy-to-use components emphasize precise monospace character spacing and line heights, enabling you to quickly copy and paste implementations while maintaining a clean, efficient codebase.
React hook that persists data in localStorage.
Inject web platform expertise, best practices, and modern API patterns directly into your AI coding agents.
Modern Web Guidance is an agent skill (aka SKILL.md) with a CLI that helps coding agents build better web applications using modern, high-performance, accessible, and secure APIs instead of legacy workarounds.
Make any app. Run it everywhere. Build one project that runs natively on all your users' devices.
An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.
Related contents:
Email parser for browser and serverless environments.
postal-mime is an email parsing library that runs in browser environments (including Web Workers) and serverless functions (like Cloudflare Email Workers). It takes in a raw email message (RFC822 format) and outputs a structured object containing headers, recipients, attachments, and more.
Diagram Visualization Tools for Your Web Applications. A diagramming framework for the web
Eclipse Sprotty is an open source project enabling the creation of powerful diagramming tools and graphical visualizations. Fully customizable · Server and client-side diagramming · Easy integration · Powerful timesaver.
Syntax Highlighting React Server Component.
React Server Component for syntax highlighting.
JavaScript Canvas 2d Library.
Konva.js is an HTML5 Canvas JavaScript framework that extends the 2d context by enabling canvas interactivity for desktop and mobile applications.
Pyramid is a very general open source Python web framework. As a framework, its primary job is to make it easier for a developer to create an arbitrary web application. The type of application being created isn’t really important; it could be a spreadsheet, a corporate intranet, or a social networking platform. Pyramid is general enough that it can be used in a wide variety of circumstances.
A web-app framework that includes everything needed to create database-backed web applications according to the Model-View-Controller (MVC) pattern.
Related contents:
- The Unofficial 37signals/DHH Rails Style Guide @ Marc Köhlbrugge's GitHub Gist.
- Making the case for Rails monoliths over microservices @ thoughtbot.
- Part 1: How We Fell Out of Love with Next.js and Back in Love with Ruby on Rails & Inertia.js @ Hardcover.
- The One-Person Framework in practice @ Bram Jetten.
- Serving Large Files in Rails with a Reverse Proxy Server @ Write Software, Well.
- My puts Debugging Workflow in Rails Apps @ Paweł Urbanek.
- Tip: Put your Rails app on a SQL query diet @ Andrew Atkinson.
- Ruby on Rails: The Open-Source Blueprint @ The Miners.
- Engineering excellence starts on edge @ David Heinemeier Hansson.
- You're doing Rails wrong @ Banana Curving Machine.
- The Rails developers' guide to mobile app frameworks @ Masilotti.com.
- How I Audit a Legacy Rails Codebase in the First Week @ piechowski.io.
- Returning To Rails in 2026 @ markround.com.
- Different Approaches to Debugging Query Performance in Rails @ Saeloun.
- Rails 8: How to Auto-Generate Social Media Preview Cards @ DevBlog by Zil Norvilis.
- Scaling Rails at Aura Frames: Splitting to 8 Primary DBs and Reaching #1 in the App Store @ Andrew Atkinson.
An open source web scraping framework for Python.
Scrapy is a fast high-level screen scraping and web crawling framework, used to crawl websites and extract structured data from their pages. It can be used for a wide range of purposes, from data mining to monitoring and automated testing.
An open-source headless spreadsheet for business web apps.
HyperFormula is a headless spreadsheet built in TypeScript, serving as both a parser and evaluator of spreadsheet formulas. It can be integrated into your browser or utilized as a service with Node.js as your back-end technology.
The Superset of WASI.
WASIX is the long term stabilization and support of the existing WASI ABI plus additional non-invasive syscall extensions that complete the missing gaps sufficiently enough to enable real, practical and useful applications to be compiled and used now. It aims to speed up the ecosystem around the WASI so that the Wasm’ification of code bases around the world can really start today!
Related contents:
Embeddable Postgres. Run a full Postgres database locally in WASM with reactivity and live sync. Lightweight WASM Postgres with real-time, reactive bindings.
PGlite is a WASM Postgres build packaged into a TypeScript client library that enables you to run Postgres in the browser, Node.js, Bun and Deno, with no need to install any other dependencies. It is only 3mb gzipped and has support for many Postgres extensions, including pgvector.
Related contents:
Smart Edge Databases with Cloud Sync and Intelligence.
SQLiteSync is a local-first SQLite extension using CRDTs for seamless, conflict-free data sync and real-time collaboration across devices.
Related contents:
The most advanced responsive front-end framework in the world.
Foundation is the most advanced responsive front-end framework in the world. Quickly go from prototype to production, building sites or apps that work on any kind of device with Foundation. Includes a fully customizable, responsive grid, a large library of Sass mixins, commonly used JavaScript plugins, and full accessibility support.
A hook that registers a WebMCP tool with the browser and ties its lifecycle to a React component.
WebMCP lets a page expose JavaScript functions as "tools" that an AI agent (browser-built-in, iframe-hosted, or extension) can discover and call. The site author can expose functionality, and the agent uses this instead of scraping the DOM, a11y tree, or using screenshots.
Quartz is a fast, batteries-included static-site generator that transforms Markdown content into fully functional websites. Thousands of students, developers, and teachers are already using Quartz to publish personal notes, wikis, and digital gardens to the web.
Quartz is a set of tools that helps you publish your digital garden and notes as a website for free. Quartz v4 features a from-the-ground rewrite focusing on end-user extensibility and ease-of-use.
The Web Access Layer for AI Agents.
Connect Your Agent to the Web. Powering the Internet of Agents with fast, secure and reliable web access APIs.
Related contents:
CSS voxel engine for the DOM.
A CSS voxel engine. A 3D grid for the DOM. Renders HTML cuboids by stacking CSS grid layers and applying transforms.
Supports colors and textures, interactions and culling, plus shapes, areas and projections. All without </canvas>.
Related contents:
textmode.js is a lightweight creative coding library for creating real-time ASCII art on the web.
Open source Node.js Headless CMS 🚀 Design APIs fast, manage content easily. Strapi is the leading open-source headless CMS. It’s 100% JavaScript, fully customizable and developer-first.
Related contents:
MCP server for fetch web page content using Playwright headless browser.
Radiant is a no-fluff, open source content management system designed for small teams.
Related contents:
Undetectable, Lightning-Fast, and Adaptive Web Scraping for Python.
Dealing with failing web scrapers due to anti-bot protections or website changes? Meet Scrapling.
Scrapling is a high-performance, intelligent web scraping library for Python that automatically adapts to website changes while significantly outperforming popular alternatives. For both beginners and experts, Scrapling provides powerful features while maintaining simplicity.
snapDOM captures DOM nodes as images with exceptional speed avoiding bottlenecks and long tasks.
snapDOM is a high-fidelity DOM capture tool, developed as part of the animation engine I'm developing for Zumly — a framework for creating smooth zoom-based view transitions.
Develop full-stack web apps faster.
Wasp is a compiler-driven full-stack web framework; it takes configuration and source files with your unique logic, and it generates the complete source code your the web app. Think of a Rails-like framework for React, Node.js and Prisma. Build your app in a day and deploy it with a single CLI command.
Related contents:
interactive, collaborative html elements with a single data attribute.
playhtml is an open-source library for designing communal web experiences by enhancing web elements with real-time, collaborative interactivity.
Why does the internet feel lonely when we increasingly spend much of our time on it? I think it's because most of the internet is a solitary experience, by design: personal algorithmic feeds, content-focused websites, no indicator of who else is here with us right now.
Related contents:
Digital Library of Free & Borrowable Texts, Movies, Music & Wayback Machine.
Internet Archive is a non-profit library of millions of free texts, movies, software, music, websites, and more.
Related contents:
A browser extension to check compliance with the RGAA standard
Automated PWA health check tool to make sure your PWA looks, feels, and behaves like a real app.
This is an experimental MCP server that provides access to MDN's search, documentation, and browser compatibility data.
Our goal is to give LLMs and coding agents a reliable and up-to-date source of web platform documentation - so developers can get accurate information instead of potentially outdated content their LLMs were trained on.
Related contents:
The fastest way to create an HTML app.
Modern web applications in pure Python. Built on solid web foundations, not the latest fads - with FastHTML you can get started on anything from simple dashboards to scalable web applications in minutes.
FastHTML is a new next-generation web framework for fast, scalable web applications with minimal, compact code.
The Web Platform Framework. Build web applications with speed and simplicity.
Brisa is an experimental web framework inspired by the others, taking the best of each one.
ryde is a single person, single file web framework for rust.
The goal of ryde is to destroy all boilerplate. Every keystroke you write should mean something. This goal is achieved through pervasive use of the science of macro-ology to define a web development DSL on top of axum, tokio and sqlite.
The UnifiedToolchain for the Web.
dev, build, test, lint, format, monorepo caching & more in a single dependency, built for scale, speed, and sanity.
Related contents:
3,591 Terms and Concepts for Web Professionals.
The Web Development Glossary is the largest of its kind. With more than 3,000 terms and explanations (“3K”), it is the book to try and extend your web development and web platform knowledge.
The glossary covers key terms and concepts of the Web, beginning with HTML, CSS, JavaScript, accessibility, security, performance, code quality and testing, internationalization, localization, frameworks and editors and tooling.
The visual website builder for developers. The visual website builder for Next.js & Tailwind.
Build at the speed of no-code. Export a Next.js, Tailwind and Shadcn UI app. Customize without limits.
Deliver instant apps at scale. Build instantly-interactive web apps without effort.
Qwik is a new kind of web framework that can deliver instant loading web applications at any size or complexity. Your sites and apps can boot with about 1kb of JS (regardless of application complexity), and achieve consistent performance at scale.
Qwik offers the fastest possible page load times - regardless of the complexity of your website. Qwik is so fast because it allows fully interactive sites to load with almost no JavaScript and pickup from where the server left off.
As users interact with the site, only the necessary parts of the site load on-demand. This precision lazy-loading is what makes Qwik so quick.
The current sky at your approximate location, rendered as a CSS gradient.
The single or multi-repository documentation site generator for tech writers who writing in AsciiDoc.
A documentation toolchain that helps technical writing teams create, manage, collaborate on, remix, and publish documentation sites sourced from a variety of versioned content repositories.
Relocate resource intensive third-party scripts off of the main thread and into a web worker. 🎉
Partytown is a lazy-loaded library to help relocate resource-intensive scripts into a web worker, and off of the main thread. Its goal is to help speed up sites by dedicating the main thread to your code, and offloading third-party scripts to a web worker.
Related contents: