open-source
Safety for Agents. Agent Detection & Response for AI coding assistants .
Lightweight Agent Detection & Response (ADR) layer for AI agents — guards commands, files, and web requests. Part of Gen Agent Trust Hub.
Sage is a lightweight security layer that protects AI agents from executing dangerous actions. It intercepts tool calls — shell commands, URL fetches, file writes — and checks them against multiple threat detection layers before they run.
Offensive security for agentic infrastructure. The red team framework for AI agent infrastructure.
Drop one static collector on a compromised host. One active scan captures configs and raw credentials, discovers MCP, A2A and AI services, reuses compatible secrets, proves concrete access, and checkpoints the evidence before the foothold disappears. Ingest later for full graph analysis.
Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI services. BloodHound for the agentic stack.
A compilation of challenges that aims to provide practice in simple to advanced concepts in the following topics: Digital Forensics, Incident Response, Malware Analysis and Threat Hunting.
This is aimed at Professionals, Security Researchers, Students, CTF Players as well as DFIR & Malware Analysis Enthusiasts in the field of Cyber Security who want to practice or have an interest in the aforementioned topics.
Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow.
Cover is a bidirectional privacy proxy for AI coding agents. It replaces matched sensitive values locally with realistic, deterministic stand-ins before a request leaves your machine, then translates matching fakes in normal and streaming responses back to the originals. The model gets coherent context; your agent and tools keep working with the real environment.
Give every agent its own browser.
The headless browser for AI agents and web scraping. Obscura is a headless browser engine written in Rust, built for web scraping and AI agent automation. It runs real JavaScript via V8, supports the Chrome DevTools Protocol, and acts as a drop-in replacement for headless Chrome with Puppeteer and Playwright.
A simple, open-source and easy-to-use Google Analytics alternative for the modern web.
Understand your website traffic, visitors, and conversions without the complexity of Google Analytics.
UI components for AI Agents.
React UI components for AI agent conversations, plus a CLI. Beautifully crafted, copy-paste blocks for everything an agent shows mid-conversation: thinking states, tool calls, streaming text, tables and more.
Related contents:
Local PHP development for Linux and macOS.
Lerd runs Nginx, PHP-FPM and your services as rootless Podman containers. Automatic .test domains, per-project PHP & Node, one-command TLS. No Docker daemon, no sudo, no system pollution.
Related contents:
every AI coding limit, in your menu bar. Show usage stats for OpenAI Codex and Claude Code, without having to login.
Track usage windows, credit balances, and reset countdowns across the AI tools you actually pay for.
Related contents:
Crible Algébrique: Distribution, Optimisation - Number Field Sieve.
CADO-NFS is a complete implementation in C/C++ of the Number Field Sieve (NFS) algorithm for factoring integers and computing discrete logarithms in finite fields. It consists in various programs corresponding to all the phases of the algorithm, and a general script that runs them, possibly in parallel over a network of computers. CADO-NFS is distributed under the Gnu Lesser General Public License (LGPL) version 2.1 (or any later version).
Related contents:
Visual FFmpeg Command Generator.
A web-based GUI for quickly generating common FFmpeg command-line operations.
Related contents:
Execute chDB queries in Postgres.
This library provides PostgreSQL extensions for executing chDB queries in Postgres, and for copying data from external sources into a PostgreSQL table.
Related contents:
The JavaScript Oxidation Compiler.
Oxlint (/oʊ-ɛks-lɪnt/) is a high-performance linter for JavaScript and TypeScript built on the Oxc compiler stack.
Opinionated Oxlint rules for rejecting low-evidence TypeScript and JavaScript patterns.
Related contents:
AI-built automation platform. Deterministic Automation for AI Agents. Makes AI repeatable, shareable, and auditable.
Your AI solves a problem, then forgets how it got there. Your team never sees the solution. Nobody can prove what happened. Swamp fixes all three.
Swamp is a CLI that supercharges AI agents to create operational workflows that are reviewable, shareable, and accurate. Built for agents, there to empower humans. All the data lives in the .swamp/ (the swamp).
A chart grammar you don't have to outgrow.
A typed, tree-shakable chart grammar for SVG and Canvas. Compose marks, views, scales, transforms, interactions, and motion with compact primitives or D3-compatible inputs.
Router that virtually distributes inference across connected devices in the home.
NVIDIA Personal AI Router (PAIR) is a local inference router for a group of compatible computers on the same network. It discovers participating nodes, manages supported inference engines, and presents Ollama-compatible and OpenAI-compatible proxy endpoints to applications and agents. Independent requests can be routed to eligible nodes according to engine availability, model availability, and current workload.
PAIR is useful for concurrent local workloads such as multi-agent applications. Prompts and responses are intended to remain on the local network when every configured client, model source, engine, and node is local.
Every ad account.One command line. Free PPC & Google Ads Audit Tool.
12 platforms, 33 skills, one /ads command. Read-only by default, every finding backed by evidence.
Claude-first paid-media operations skill for Claude Code across 12 ad platforms (Google, Meta, YouTube, LinkedIn, TikTok, Microsoft, Apple, Amazon, Reddit, Pinterest, Snapchat, X): source-grounded audits, deterministic scoring, versioned JSON reports, and capability-gated account changes.
Claude Ads turns authorized exports or account reads into source-grounded audits, plans, creative workflows, experiments, monitoring, and reports. It is read-only by default. Live changes stay disabled until the exact platform and operation pass approval, idempotency, verification, audit, and rollback gates.
27 Security Intelligence Tools for Claude.
Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.
A free, open-source screen recorder and video editor Native capture, local AI, no paywall.
Record your screen, ship a demo. Free and open-source, GPU-accelerated, no watermarks, no subscriptions. Windows, macOS, Linux. Actively maintained.
Semantic Versioning for Nix Flakes.
Thaw works by operating directly on the ref specified for your flake's inputs. If a ref exists on the input and is a valid SemVer version, thaw will attempt to upgrade it to the latest version. Both url querey param and object configuration syntax are supported.
By default, non-major upgrades are allowed, but this can be changed with the --major flag. No additional tools or components are required.
Professional email for individuals and teams. Mailflare is a self-hosted email inbox for custom domains, built on Cloudflare.
Receive, send, search and organize email for your own domains from one fast, private workspace. No ad profiles. No mystery servers.
A tiny, self-hosted notification inbox for developers. Something happened in one of your apps; Boop tells you on your phone.
One Go binary, one SQLite file, one Docker container. Pushes go straight from your server to Apple's APNs. There is no hosted relay, account system, or telemetry.
Boop speaks the Sentry ingest protocol, so any existing server-side Sentry SDK (Python, Node, Go, Ruby, PHP, …) can report to Boop with no code changes — just point the DSN at your Boop host and use a project API key as the public key:
Generative art skill for Claude Code — deterministic, hash-seeded, onchain-ready.
Create long-form generative art with AI assistance — deterministic, hash-seeded, ready for onchain platforms like Art Blocks, 256ART, Verse, Highlight, Plottables and bootloader.art — or for screens, via Artpoint.
Motorola 680x0 emulator written in C.
Musashi is a Motorola 68000, 68010, 68EC020, 68020, 68EC030, 68030, 68EC040 and 68040 emulator written in C. This emulator was written with two goals in mind: portability and speed.
One app for every mouse. Free, open source mouse configurator.
OpenMouse runs entirely in your browser over WebHID — DPI, polling rate, buttons, and RGB, for dozens of gaming mice, with no accounts, no installs, and no telemetry sent anywhere.
A novel-writing tool created by a novelist. A distraction-free word processor for authors, by a wannabe author.
NEO understands from the moment you install it that you are writing books and nothing else. No bloat, no distractions, with manuscripts that look like books as you write them.
Open-Source Personal Subscription Tracker.
Self-hostable web application designed to empower you in managing your finances with ease. Wallos simplifies the process of tracking expenses and helps you gain better control over your finances.
Your home, with memory. AI assistant with memory for Home Assistant.
Nives is an AI assistant that remembers your preferences, devices, and routines — so every conversation picks up where the last one left off.
Related contents:
Modern Desktop Suite. Modern Desktop for niri, Hyprland, Sway, and Wayland.
A world model trained automatically on SuperTuxKart gameplay videos, running entirely inside your browser.
Every display control macOS hides, in one menu bar panel. Free BetterDisplay & Lunar alternative for macOS.
Free, open-source external monitor control for macOS: a lightweight menu bar app with sharp HiDPI/Retina scaling (no more blurry or tiny text), DDC brightness, presets, and virtual displays. A free alternative to BetterDisplay and Lunar, including features they charge for.
A interactive 3D edition of The Gateless Gate ancient Zen Buddhist text.
The Mumonkan, "The Gateless Gate," is a collection of Zen koans put together in 1228. Koans are short, strange stories a student sits with until something opens. This edition turns that book into a place you can visit instead of pages you turn.
Cyber is a new language for fast, efficient, and concurrent scripting.
Cyber is a fast, efficient, and concurrent scripting language. You can embed it into your applications, games, or engines on desktop or web. Cyber also comes with a CLI so you can do scripting on your computer.
A hive mind communication platform.
A workspace where humans and agents build together, on a relay you own.
Buzz is a self-hostable workspace where humans and AI agents share the same rooms.
A Buzz community is the workspace a user reaches by URL. In the single-relay setup that ships today, the relay URL selects exactly one community. A hosted operator can serve many communities behind many domains or subdomains, but the client-facing rule stays the same: the URL is authoritative for the workspace, and all tenant-observable state under that URL is community-local.
UI Sound Design. 936 Interface Sound Effects.
A tiny, complete library of interface sound effects for web apps, mobile apps, SaaS, education, media, and games. Preview every UI sound in 12 distinct sonic personalities.
textmode.js is a lightweight creative coding library for creating real-time ASCII art on the web.
Executive Strategy for Self-Evolving Agent Skills.
SkillOpt is a text-space optimizer that trains reusable natural-language skills for frozen LLM agents through trajectory-driven edits, validation-gated updates, and deployable best_skill.md artifacts.
SkillOpt treats a compact natural-language skill document as the trainable state of a frozen language agent, then learns that document through rollouts, reflection, bounded edits, and held-out validation gates.
An open source terminal coding agent, written in Rust.
The most RAM efficient harness. The most intelligent harness. jcode is built to be as performant and resource efficient as possible. Every metric is optimized to the bone, which is important for scaling multi-session workflows. Here we sample a few metrics to show the difference: RAM usage and boot up.
Safe schema management for MySQL and MariaDB.
Skeema is a declarative SQL-based schema management utility. Simply track your desired schema state in a repo of CREATE statements, and the tool figures out how to apply any changes to your tables and routines. You won't need to code migrations ever again.
cn is a new engine for Tailwind class merging and conflict resolution. It replaces tailwind-merge and clsx. Same APIs. Full parity. And it is 30× faster.
infrastructure as code, in Lean 4.
Terraform-style declarative infrastructure, written in the Lean programming language and proof assistant instead of a bespoke DSL. Target and observed cloud state are dependently-typed Lean values, so an unrealisable target is a compile error rather than a failed apply.
A dangling reference, a region a cloud is not in, an instance size that does not exist, a plaintext password in a committed file — none of these get as far as a plan.
Related contents:
a PHP language server.
Fast PHP language server with deep type intelligence. Generics, Laravel, PHPStan annotations. Ready in an instant.
Free Music Player Firmware.
Rockbox is a free replacement firmware for digital music players. It runs on a wide range of players.
copy/paste, everywhere. Native encrypted clipboard sync over SSH for macOS and Linux.
Peer-to-peer clipboard sync over SSH for macOS and Linux. Copy anything on one machine, paste on another. No relay, no account, no new ports. Written in Rust ackchyually.
CLI for internet speed test via cloudflare.
A CLI tool that displays network speed test results from Cloudflare's speed test service in a TUI interface.
Speakr is a personal, self-hosted web application designed for transcribing audio recordings.
Speakr transforms your audio recordings into organized, searchable, and intelligent notes. Built for privacy-conscious groups and individuals, it runs entirely on your own infrastructure, ensuring your sensitive conversations remain completely private.
Related contents:
One clipboard. Every device you own. Open-source encrypted clipboard across Mac, Windows, Linux, iPhone & Android.
UniClipboard is the open-source, end-to-end encrypted clipboard that syncs text, images, and files across Mac, Windows, Linux, iPhone, and Android. No cloud account, no server in the middle.
Related contents:
Docker and Kubernetes monitoring. One single container.
Docker monitoring that also covers your endpoints, SSL certificates, cron jobs, system resources and image updates. Live in seconds, zero configuration.
Related contents:
The download button GitHub forgot to add.
Yatko turns any public GitHub repository into a clean download link that picks the right release for each visitor's OS and architecture.
Rust LSP that doesn't eat memory for breakfast.
Rust Glancer is a memory efficient LSP for Rust. It uses a different approach compared to rust-analyzer: instead of storing everything in memory and recomputing dynamically, it uses frozen workspaces that can be offloaded to the filesystem. As a result, the LSP gets some performance penalty, but is able to achieve extreme memory efficiency and instant restarts.
Private dictation for Mac.
FnScribe turns your voice into text entirely on your Mac. No account, no cloud transcription, and no archive of what you said.
Give ChatGPT a secure connection to your own machine and Turn ChatGPT into Codex.
Minimal Coding Agent Harness on MCP for ChatGPT, Claude, Hermes, Grok Bot, OpenClaw.
DevSpace is a self-hosted MCP server that lets ChatGPT read, edit, search, and run code in your real local projects — your files, your tools, your terminal — without uploading anything to a third party. You run it on your machine, expose it through a tunnel you control, and approve the connection with a password only you have.
A model-independent format for storing and sharing memories for use by AI agents and humans.
memoryfields are a vastly simpler way of giving AI agents memories. The memoryfield format is based on standard file formats with wide support that both LLM agents and humans can easily understand.
Related contents:
The Open Platform for Cloud Coding Agents.
The self-hosted developer control center for coding agents and automations.
Run OpenHands, Claude Code, Codex, Gemini, or any ACP-compatible agent across local, remote, and cloud backends.
Interactive SVG maps toolkit for React 19 and Vue 3. Choropleths, markers, routes, bubble and zoomable maps with components powered by d3.js.
Preview how pages look when shared, on every major platform.
OGee is a Chromium extension that shows how the current page’s Open Graph link card will look when it is shared. Open the popup on any page to see the real thumbnail, title, description, and domain each platform would display, side by side, in both light and dark themes.
Automated PWA health check tool to make sure your PWA looks, feels, and behaves like a real app.
Audit shadcn apps for UI fundamentals.
Deterministic UI audits for shadcn apps
shadscan statically analyzes your React shadcn components for accessibility, state, and composition regressions — the same result on every run, built for your terminal and your CI.
pg_shmemviz captures PostgreSQL's main and dynamic shared memory segments and presents named allocations, exact structure layouts, padding, pointer targets, and raw bytes in a local browser.
The capture uses an extension. Structure metadata comes from DWARF in the exact postgres executable used for the capture.
Related contents: