open-source
A sliding, tiling window manager for MacOS.
Paneru is a MacOS window manager that arranges windows on an infinite strip, extending to the right. A core principle is that opening a new window will never cause existing windows to resize, maintaining your layout stability.
Each monitor operates with its own independent window strip, ensuring that windows remain confined to their respective displays and do not "overflow" onto adjacent monitors.
declarative. reproducible. human-friendly.
Lix is a modern, delicious implementation of the Nix package manager, focused on correctness, usability, and growth – and committed to doing right by its community.
Claude Code orchestrator in one window.
Orchestrate multiple Claude Code sessions across projects. Review diffs, annotate code, send instructions — all from one window.
Related contents:
Fast, encrypted, deduplicated backups in Rust — with friendly YAML config, a desktop GUI, and support for S3, custom REST and SFTP storage.
Inspired by BorgBackup, Borgmatic, Restic, and Rustic. Vykar uses its own on-disk format and is not compatible with Borg or Restic repositories.
Vykar is a fast, encrypted, deduplicated backup tool written in Rust. It’s centered around a simple YAML config format and includes a desktop GUI and webDAV server to browse snapshots. More about design goals.
🔗 A federated network to bookmark, organize, share and discover good web pages. 🪢Federated website aggregator.
It's getting harder and harder to find good web pages. When you do find good ones, it's worth hanging onto them. ties is your own small corner of the web, where you can keep your favorite pages, and share them with your friends to help them find good web pages too.
Manage CrowdSec, Traefik integration, decisions, scenarios, logs, backups, and updates from a single web interface.
A web-based management interface for CrowdSec security stack with Pangolin integration. This project replaces the bash script with a modern, user-friendly ShadcnUI built with Go and React.
Package your AI coding workflows as YAML. Run them anywhere — CLI, Web, Slack, Telegram, GitHub, Discord.
The first open-source harness builder for AI coding. Make AI coding deterministic and repeatable.
Open-Source API Security Testing Framework.
API security testing framework for REST, GraphQL, and gRPC that validates authorization logic using role-based testing and YAML-driven templates.
Hadrian is an open-source API security testing framework that detects OWASP API Top 10 vulnerabilities in REST, GraphQL, and gRPC APIs. It uses role-based authorization testing and YAML-driven templates to automatically find broken object-level authorization (BOLA), broken function-level authorization (BFLA), broken authentication, and other critical API security flaws — without writing custom test code.
Understand Any Codebase in Minutes, Not Hours
AI-powered repository analysis that turns complex codebases into interactive documentation, dependency graphs, and intelligent conversations.
Related contents:
Virtual desktop pet cats for macOS — pixel art cats that live on your dock and chat with you via Ollama LLM.
Related contents:
Self-hosted image processing
Resize, compress, convert, remove backgrounds, and more. All on your own server, no data leaves your machine. Get started
Stirling-PDF but for images. 30+ tools and local AI in a single Docker container - resize, compress, remove backgrounds, upscale, OCR, and more. No cloud, no telemetry. Your images never leave your machine.
Related contents:
Sync and store locally all of your X / Twitter bookmarks.
An open source, free CLI tool for collecting and categorizing your personal X/Twitter bookmarks. Makes your bookmarks locally available to Claude Code, Codex, or any other agent with shell access.
Related contents:
A new developer platform is coming. Every commit tells a story. Now you can read it.
Entire CLI hooks into your git workflow to capture AI agent sessions on every push. Sessions are indexed alongside commits, a searchable record of how code was written.
Related contents:
A Man-in-the-Middle proxy written in Rust. Intercept, inspect, and modify HTTP/HTTPS traffic with Lua scripting, a TUI, and a web interface.
A programmable MITM proxy that intercepts HTTP/HTTPS traffic so you don't have to guess what your app is doing. Forward & reverse modes, TLS interception, TUI, terminal, and web GUI.
Related contents:
Filesystem-based module system for Nix
Haumea is not related to or a replacement for NixOS modules. It is closer to the module systems of traditional programming languages, with support for file hierarchy and visibility.
In short, haumea maps a directory of Nix files into an attribute set.
Community driven Dendritic Nix configurations.
Editor-distributions like those for nvim/emacs provide community-driven, opinionated configurations that can be easily reused and enabled by newcomers.
The dendrix project aims to provide the same experience: having community-managed, author-maintained and no-barrier-of-entry setups for everything that can be configured using flake-parts modules.
Related contents:
Keymap manager for wlroots-based compositors. Inspired by which-key.nvim.
Related contents:
Recursively import Nix modules from a directory tree.
import-tree recursively discovers and imports Nix files from a directory tree. It works with NixOS, nix-darwin, home-manager, flake-parts, NixVim, and any Nix module system.
Related contents:
Personal News Reader with Intelligence Training. RSS and web feeds, synced on every platform you use.
A production-grade, zero-configuration preset for
Ultracite is a zero-config preset for ESLint, Biome, and Oxlint that helps teams and AI write consistent, type-safe code.
The Universal Documentation Engine.
The minimalist, zero-config engine for professional documentation. No React, no heavy frameworks. Generate minimal, fast & beautiful docs from Markdown. No React, no bloat, just content. Built for developers.
⚡️ Superpowers for your Openclaw. Powerful prebuilt agent workflows. Including 113 prebuilt workflows you can enable in 1 click 🎉
Build your own component library.
Accessible components for Astro and Tailwind CSS. Components are added to your project with the CLI. You own and control the code.
Deploy any Agent Skill as an API via POST /run. Multi-model, stateful, open source.
Turn any Agent Skill (SKILL.md) into a callable API via POST /run. Multi-model, stateful, open source.
A language designed for machines to write. A programming language designed for LLMs to write, not humans.
Vera (v-ERR-a) is a programming language designed for large language models to write. The name comes from the Latin veritas (truth). Programs compile to WebAssembly and run at the command line or in the browser.
A fully featured React components library.
Build fully functional accessible web applications faster than ever – Mantine includes more than 120 customizable components and 70 hooks to cover you in any situation.
Components in Markdown.
A fast, streaming-ready markdown parser with component support for Vue, React, Svelte, HTML and ANSI terminal.
skeleton screens for your UI. Auto generated skeleton loading framework.
Pixel-perfect skeleton loading screens, extracted from your real UI. No manual measurement, no hand-tuned placeholders. boneyardsnapshots your real UI and captures a flat list of skeleton “bones” — positioned, sized rectangles that mirror the page exactly.
No manual measurement. No hand-tuned placeholders. Wrap your component in <Skeleton> and get pixel-perfect skeleton screens that stay in sync with your actual layout.
BIRD is an (not only) IP routing daemon.
The BIRD project aims to develop a fully functional dynamic IP routing daemon primarily targeted on (but not limited to) Linux, FreeBSD and other UNIX-like systems and distributed under the GNU General Public License.
BIRD is a dynamic IP routing daemon with full support of most modern routing protocols, easy to use configuration interface and powerful route filtering language, primarily targeted on (but not limited to) Linux and other UNIX-like systems and distributed under the GNU General Public License.
A fast and lightweight fully featured OCI runtime and C library for running containers
Spin is a framework for building and running event-driven microservice applications with WebAssembly (Wasm) components.
It aims to be the easiest way to get started with WebAssembly microservices, and takes advantage of the latest developments in the WebAssembly component model and Wasmtime runtime. Spin offers a simple CLI that helps you create, distribute, and execute applications, and in the next sections we will learn more about Spin applications and how to get started.
CLI tool for spawning and running containers according to the OCI specification.
youki is an implementation of the OCI runtime-spec in Rust, similar to runc.
Turns any HTML page into clean markdown.
Mozilla Readability algorithm + hickory-to-markdown converter for Babashka.
Turns any HTML page into clean markdown by parsing it with jsoup, scoring content using the Mozilla Readability algorithm, extracting the main article body, and converting the hickory tree to markdown.
Related contents:
Effortlessly Save and Preserve Web Pages. Web Extension for saving a faithful copy of a complete web page in a single HTML file.
SingleFile is a browser extension that allows you to save an entire web page, including all its resources (e.g., images, stylesheets, fonts, frames, etc.), as a single HTML file with just one click.
The saved page can be displayed offline in any browser without needing to install any extension. Ideal for researchers, students, and professionals needing reliable offline copies of web pages, or for anyone wanting to keep a record of their favorite web content.
SingleFile is available for Chrome, Edge, Firefox, and Safari. It is free and open source.
Related contents:
AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
Runtime governance for AI agents — the only toolkit covering all 10 OWASP Agentic risks with 9,500+ tests. Governs what agents do, not just what they say — deterministic policy enforcement, zero-trust identity, execution sandboxing, and SRE — Python · TypeScript · .NET · Rust · Go
Related contents:
Open Agent Harness.
OpenHarness delivers core lightweight agent infrastructure: tool-use, skills, memory, and multi-agent coordination.
Related contents:
The Agent Operating System.
LibreFang is a production-grade runtime for autonomous AI agents. Single binary, 15 built-in capability units, 44 channel adapters. Built in Rust for the workloads that can't afford to go down. LibreFang is an Agent Operating System — a full platform for running autonomous AI agents, built from scratch in Rust. Not a chatbot framework, not a Python wrapper.
Traditional agent frameworks wait for you to type something. LibreFang runs agents that work for you — on schedules, 24/7, monitoring targets, generating leads, managing social media, and reporting to your dashboard.
Related contents:
reference impl with llama.cpp compiled to distributed inference across machines, with real end to end demo.
Mesh LLM lets you pool spare GPU capacity across machines and expose the result as one OpenAI-compatible API.
If a model fits on one machine, it runs there. If it does not, Mesh LLM automatically spreads the work across the mesh.
Related contents:
Motion animations as Tailwind classes.
Write Motion animations as Tailwind-like classes. Zero imports, zero boilerplate, zero runtime overhead. Write Framer Motion animations as Tailwind-style utility classes – Motionwind transforms animate-* classes into motion props at build time with zero imports and zero boilerplate. Motion animations as Tailwind classes. A Babel plugin that transforms animate-hover:scale-110 into whileHover={{ scale: 1.1 }} at build time. Zero imports, zero boilerplate.
Related contents:
This repo contains the Vercel deployment adapter for Next.js. It does not need to be used directly as it will be auto configured when deploying on Vercel.
Related content:
Run JavaScript anywhere. Safely. Run Node.js safely, anywhere, with any JS engine. Edge.js is a secure JavaScript runtime, designed for Edge computing and AI workloads.
Edge.js reimagines Node.js: fully sandboxed via --safe mode, engine-agnostic, and built for AI and serverless workloads. Ubiquitous by design.
Related contents:
Use Obsidian as a CMS for Astro.
The open-source headless content management system that turns Obsidian into a publishing platform for your Astro website.
Related contents:
A fast, persistent use_nix/use_flake implementation for direnv.
A faster, persistent implementation of direnv's use_nix and use_flake, to replace the built-in one.
Non-blocking direnv integration daemon with tmux/zellij support that provides instant shell prompts by running direnv asynchronously in the background.
A backend plugin for Mise that allows you to install and manage packages using Nix.
A Mise plugin that brings the power of the Nix ecosystem to your development workflow.
Better configuration for less. Manage complex configurations. Modular, correct and boilerplate-free.
Nickel is the universal configuration language. Nickel is configuration templating, but done right. Modular, correct and concise.
Its purpose is to automate the generation of static configuration files - think JSON, YAML, XML, or your favorite data representation language - that are then fed to another system. It is designed to have a simple, well-understood core: it is in essence JSON with functions.
Control all your tooling from a single console.
Managing a project's development environment involves configuring a lot of tools and occasionally getting to communicate with each other: one (or several) package managers, a CI system, a service manager (to run that local postgresql database without which you can't test anything), custom utility scripts that end up spawning everywhere, etc. Organist aims at being your main entrypoint for managaing all these different tools.
Related contents:
Open Source Container Runtime Software.
Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs.
Related contents:
The Container Security Platform. Application Kernel for Containers.
gVisor provides a strong layer of isolation between running applications and the host operating system. It is an application kernel that implements a Linux-like interface. Unlike Linux, it is written in a memory-safe language (Go) and runs in userspace.
gVisor includes an Open Container Initiative (OCI) runtime called runsc that makes it easy to work with existing container tooling. The runsc runtime integrates with Docker and Kubernetes, making it simple to run sandboxed containers.
Related contents:
Type-Safe Errors for JS & TypeScript. Encode failure into your program.
This package contains a Result type that represents either success (Ok) or failure (Err).
Related contents:
It's an AI teacher that lives as a buddy next to your cursor. It can see your screen, talk to you, and even point at stuff. Kinda like having a real teacher next to you.
An experimental Rust architecture for reactive UI.
Xilem and Masonry provide an experimental high-level architecture for writing GUI apps in Rust.
Masonry is a foundational crate for building natively compiled GUIs in Rust. It provides a retained widget tree and runs event handling and update passes on it.
Xilem a high-level reactive framework inspired by React, SwiftUI and Elm. It lets users create a lightweight view tree, and changes the rendered app based on changes to the tree. It has a web backend and a Masonry backend.
Full autonomy. Controlled environment. OS-level containment for AI coding agents on macOS.
macOS containment for AI agents — user isolation, kernel sandbox, pf firewall, DNS blocklist, backup/rollback. TLA+ verified.
AI coding agents are most useful when you let them work autonomously. But full autonomy means the agent runs with your full privileges, your credentials, your files.
Hazmat makes that safe.
Related contents:
Run multiple agents in parallel — each in its own container, with its own workspace, collaborating on your code or project files simultaneously.
Scion is an experimental multi-agent orchestration testbed designed to manage "deep agents" running in containers.
The design language that makes your AI harness better at design. The missing upgrade to Anthropic's frontend-design skill. Design fluency for AI harnesses.
Great design prompts require design vocabulary. Most people don't have it. You can't ask for "more vertical rhythm" if you've never used those words. Impeccable gives you commands that put designer language in your hands.
Related contents:
The Open Cybersecurity Schema Framework (OCSF) is an open standard for cybersecurity event logging and data normalization. The framework is made up of a set of categories, event classes, data types, and an attribute dictionary. It is not restricted to cybersecurity nor to events, however the initial focus of the framework has been a schema for cybersecurity events.
Related contents:
A 30-minute talk sharing practical lessons from building real production projects with AI coding agents — from brainstorming to shipped code.
Related contents:
Track AI Code all the way to production
An open-source Git extension for tracking AI code through the entire SDLC. Once installed, it automatically links every AI-written line to the agent, model, and transcripts that generated it — so you never lose the intent, requirements, and architecture decisions behind your code.
The highest-scoring AI memory system ever benchmarked. And it's free.
Every conversation you have with an AI — every decision, every debugging session, every architecture debate — disappears when the session ends. Six months of work, gone. You start over every time.
Related contents: