foss
An Active Directory security-assessment toolkit in Rust: a PingCastle-class auditor that maps a domain's attack paths — scored, graphed, and MITRE-tagged — then, for authorized red-team and research use, proves those paths end-to-end. One static binary, from Kali/Linux or Windows, on an embedded from-scratch DCE/RPC · NTLM · SMB2 · Kerberos stack (the "impacket for Rust" that didn't otherwise exist).
Free email OSINT tool, 2500+ platforms, identity clustering, breach detection. No API keys required.
Self-hostable OSINT platform for investigating email addresses. Fan out across breach databases, social networks, DNS records, and the open web — get back a unified exposure score and structured findings you can export or pipe into Maltego.
Guard skills for coding agents, quality gates that catch AI-generated failure modes in code, tests, and docs.
Focused guard skills for coding agents: second-pass quality gates that catch the systematic failure modes of AI-generated code, tests, and docs before they ship.
Best use: let your agent do the work, then invoke the relevant guard on the diff before you present, commit, or merge it. These skills can guide writing when you explicitly ask for that, but they are strongest as reactive review passes.
Rules for writing code that coding agents (and humans) can find through plain-text search: distinctive names, precise types, comments where search lands, and concept-named modules.
Related contents:
codebase intelligence for typescript and javascript.
AI made writing code fast. Keeping a codebase coherent is now the hard part. Fallow finds what is unused, duplicated, overly complex, or drifting across boundaries, and can add the one thing static tools cannot: what actually runs in production.
Related contents:
The official Terraform language server (terraform-ls) maintained by HashiCorp provides IDE features to any LSP-compatible editor.
Related contents:
This is a simple language server for Terragrunt.
It's a work in progress, and we're looking to start coordination with the Terragrunt community to make this the best possible language server for Terragrunt.
A language server for Caddyfile configuration files.
Language server for Dockerfiles, Compose files, and Bake files.
The Docker Language Server is a language server for providing language features for file types in the Docker ecosystem (Dockerfiles, Compose files, and Bake files).
Sandboxes for every agent.
The micro-VM for AI agents — light enough to embed on your laptop, elastic enough to power an agentic cloud. A Box is a hardware-isolated micro-VM that runs any OCI image — and it persists. Agents install packages, write files, and resume across turns, never from cold.
Sandbox for AI Agents — Kernel-Level Isolation.
Run AI agents in a zero latency sandbox in seconds and with zero setup — Claude Code, Codex, Pi, CoPilot, Hermes, OpenCode, OpenClaw and more — nono gets you up and running within seconds, with no daemon, no container, no VM, and no disk space usage. Out of the box, nono enforces a least-privilege sandbox and supports macOS, Linux, and Windows (WSL2).
Adds a /-/mcp MCP server to any Datasette instance.
Related contents:
CLI tool for exploring an MCP server.
Related contents:
ADR secures enterprise AI agents through observability, security benchmarking, and threat detection. Deployed at Uber.
ADR (Agentic AI Detection and Response) is an enterprise security system for AI agents. It helps organizations secure employee-facing agents such as Cursor, Claude Code, and Codex, as well as customer-facing agents such as AI support agents.
TencentDB Agent Memory is a team-level memory hub for AI Agents — turning conversations, docs, and code into four reusable memory assets (Chat Memory, Skill, LLM-Wiki, Code-Graph) that are governed, shared, and equipped across agents and frameworks.
Compiler-First Reactive UI. Write JavaScript. Get reactivity for free.
A compiler-first UI framework that turns ordinary classes and functions into surgical DOM updates. No virtual DOM. No hooks. No signals. Just your code — wired at build time.
Related contents:
The model IS the database. Query neural network weights like a graph database. No GPU required.
LARQL decompiles transformer models into a queryable format called a vindex (vector index), then provides LQL (Lazarus Query Language) to browse, edit, and recompile the model's knowledge.
A library for building dynamic webapps, using Js_of_ocaml.
Bonsai is a UI library for building performant, reactive web applications in OCaml, partly inspired by Elm. It is used to build almost all web applications inside Jane Street, everything from the corporate directory to tools that monitor and interact with our trading systems. A simple Bonsai component with a little interactivity looks like this:
A self-hosted email client with an AI agent, running entirely on Cloudflare Workers.
Agentic Inbox lets you send, receive, and manage emails through a modern web interface -- all powered by your own Cloudflare account. Incoming emails arrive via Cloudflare Email Routing, each mailbox is isolated in its own Durable Object with a SQLite database, and attachments are stored in R2.
Local analytics dashboard for Claude Code. No cloud, no telemetry.
Related contents:
Ecosystem, Frameworks, Workflows for AI coding agents.
Gentle-AI is NOT an AI agent installer. Most agents are easy to install. It is an ecosystem configurator that equips the AI coding agent(s) you already use with persistent memory, Spec-Driven Development (SDD), curated skills, MCP servers, model routing, a teaching-oriented persona, and bounded native review.
Before: "I installed Claude Code / OpenCode / Cursor, but it's just a chatbot that writes code."
After: Your agent now has memory, skills, workflow, MCP tools, and a persona that actually teaches you.
Related contents:
Kubernetes GitOps with nix and Argo CD.
Managing Kubernetes configurations at scale is hard. Helm charts require complex value overrides, Kustomize leads to repetitive overlays, and raw YAML becomes unmaintainable. Reviewing changes across environments is nearly impossible.
Nixidy solves this by bringing the power of Nix and the NixOS module system to Kubernetes.
Related contents:
All your email. One beautiful home. Self-Hosted Unified Email.
MailFlow is a self-hosted, open-source webmail client. Connect Gmail, iCloud, Outlook, and any IMAP account — then read, search, and reply from one fast, clean browser interface you control completely.
Related contents:
Instant webmail for any email provider. Email, calendar, contacts, and storage
Your open-source workspace , perfectly synced and beautifully integrated.
Related contents:
Docker Model Runner (DMR) makes it easy to manage, run, and deploy AI models using Docker. Designed for developers, Docker Model Runner streamlines the process of pulling, running, and serving large language models (LLMs) and other AI models directly from Docker Hub, any OCI-compliant registry, or Hugging Face.
Related contents:
Free Tinkercad Alternative. Forge ideas into 3D,right in your browser A local-first 3D design editor that runs in your browser.
Shape, combine, refine, import, and export models in one focused workspace. No account or payment required.
A Laravel database analysis tool that inspects schema structure, indexes, and constraints to identify potential issues and enforce best practices.
The DBStan package provides detailed analysis and insights into your database schema for Laravel applications.
It helps identify structural issues, missing indexes, normalization problems, nullable column risks, foreign key inconsistencies, and performance concerns. It is an essential tool for debugging, optimizing, reviewing, and maintaining a healthy database architecture in Laravel projects.
On-device models that know when they're wrong: every answer carries a confidence score for cloud handoff.
A small, on-device model is fast and private, but sometimes wrong. At Cactus we post-train models to know when they are wrong: we ship probes inside the checkpoint that score every answer with a confidence between 0 and 1, returned as structured data (never parsed out of the answer text). Answer on-device when confidence is high; you can re-route to a bigger model when it's low:
Make any TypeScript Function Durable.
use workflow brings durability, reliability, and observability to async JavaScript. Build apps and AI Agents that can suspend, resume, and maintain state with ease.
Related contents:
AI Agent for Snowflake.
An open-source, self-hosted agentic framework that turns plain English into Snowflake operations.
Frosty is a 153-agent system built by Gyrus Inc that lets you manage your entire Snowflake environment in plain English — from querying data to administering security policies.
Tools for Agents
One MCP endpoint, 67 real tools — news, web search, mail, markets, weather, video, storage. Connect an agent once and it has all of them, instead of wiring up a server for each.
Mu is an MCP server and web app for agents and humans. It provides access to the real world through MCP for the agents and let's humans browse or interact with same content in a web app. Access news, web search, mail, markets, weather, video, places, images, files, calendar, contacts and more.
A hook that registers a WebMCP tool with the browser and ties its lifecycle to a React component.
WebMCP lets a page expose JavaScript functions as "tools" that an AI agent (browser-built-in, iframe-hosted, or extension) can discover and call. The site author can expose functionality, and the agent uses this instead of scraping the DOM, a11y tree, or using screenshots.
Userspace macOS ARM64 → Linux aarch64 translation layer (CLI-first, no JIT).
Load Darwin Mach-O on Linux aarch64, map a freestanding libSystem, translate BSD syscalls, and run real guests (clang probes, 7-Zip 7zz, curl, threads).
s6 is a small suite of programs for UNIX, designed to allow process supervision (a.k.a service supervision), in the line of daemontools and runit, as well as various operations on processes and daemons. It is meant to be a toolbox for low-level process and service administration, providing different sets of independent tools that can be used within or without the framework, and that can be assembled together to achieve powerful functionality with a very small amount of code.
DeepSeek 4 Flash and PRO local inference engine for Metal, CUDA and ROCm.
DwarfStar is a small native inference engine optimized first for DeepSeek V4 Flash. It also supports GLM 5.2 and, on very high-memory machines, DeepSeek V4 PRO. It is self-contained and deliberately narrow, not a general GGUF runner. Model loading, prompt rendering, tool calls, KV state, the HTTP server, and the coding agent are built and tested together. The repository also includes tools and data for GGUF, imatrix, quality, and speed.
Predictive inline shell autosuggestions for zsh - Go daemon, no TUI, no sync. smarter than history, lighter than a plugin.
Deja is a smarter replacement for zsh-autosuggestions. Instead of only surfacing commands that start with what you've typed, Deja uses fuzzy matching, directory awareness, and command sequence prediction to suggest what you actually want to run — as inline ghost text, after every keystroke, with zero latency.
Related contents:
🍴 OpenNutriTracker is a free and open source calorie tracker with a focus on simplicity and privacy.
OpenNutriTracker logs what you eat and drink against a calorie and macro target it works out from your height, weight, age, and activity level, and keeps the record on your phone. It is for anyone who wants the numbers without handing their eating history to a company, whether that is losing weight, gaining it, managing a condition, or simply knowing.
Related contents:
Unlimited OCR Works. Welcome the Era of One-shot Long-horizon Parsing.
Create, calculate, and format money safely
An immutable library for expressing monetary values in JavaScript and TypeScript.
Money is complex, and the primitives of the language aren't enough to properly represent it. Dinero.js is a JavaScript library that lets you express monetary values, but also perform mutations, conversions, comparisons, formatting, and overall make money manipulation easier and safer in your application.
Take control of your TODO list. A fast and powerful, offline-first task manager for your terminal, desktop, and phone.
Cfait is built for people who want keyboard-centric efficiency.
You can use it comfortably from the command line (TUI), on your desktop (GUI), or on the go with the native Android app. Because it is built entirely offline-first, you can manage your tasks perfectly without ever connecting to a server.
Related contents:
experimental PS5 emulator.
An experimental PlayStation 5 emulator for Windows, Linux and macOS.
Self-hosted video library & downloader.
Self-hosted downloader and player for YouTube, Bilibili, Twitch, MissAV, and yt-dlp sites. Features channel subscriptions, auto-downloads, and local storage for media. Organize your library into collections with a sleek UI. Includes built-in Cloudflare Tunnel support for secure remote access without port forwarding. Docker-ready deployment.
Local PDF & Markdown knowledge base with semantic search and AI-powered enrichment.
Works with PDFs AND Markdown files - Index your research papers, books, notes, docs, and any .md files in one unified, searchable knowledge base.
AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 2,000+ agentic skills. Includes CLI, local MCP, catalog, plugins, and Workbench.
A Terminal UI for Terraform Plans.
An interactive terminal UI for reading Terraform plans. A Terraform configuration is a graph, and a plan is a proposed change over that graph. Scrolling through hundrends of lines of terraform plan output makes that structure almost impossible to see. tfplantui renders the plan as its dependency graph — laid out in columns by dependency depth — and lets you walk it with the arrow keys, expanding any resource to see a color-coded before → after diff of its attributes.
Open-source, native Postgres GUI for macOS. Ask questions in English; review the SQL before it runs.
Postgres GUI using the LLM already on your Mac. Free, open-source native macOS database GUI using Apple's on-device Foundation Model for text-to-sql.
zeedumper connects to a Kubernetes cluster using your kubeconfig and dumps component z-pages — flagz, statusz, and configz — retrieving them through the API server proxy. The only credentials in play are those in your kubeconfig; the tool is read-only and never mutates the cluster.
It presents the results as structured text, JSON, or a self-contained HTML page.
An egress firewall for untrusted workloads.
iron-proxy is a single-binary egress firewall for workloads you don't fully trust. It enforces an allowlist on outbound HTTP and HTTPS, holds credentials so the workload never sees the real value, and records every request as structured JSON.
📈 A small, fast chart for time series, lines, areas, ohlc & bars.
uPlot is a fast, memory-efficient Canvas 2D-based chart for plotting time series, lines, areas, ohlc & bars. From a cold start it can create an interactive chart containing 166,650 data points in 25ms, scaling linearly at ~100,000 pts/ms afterwards. In addition to fast initial render, the zooming and cursor performance is by far the best of any similar charting lib; at ~50 KB, it's likely the smallest and fastest time series plotter that doesn't make use of context-limited WebGL shaders or WASM, both of which have much higher startup cost and code size.
Terminal UIs on a Native Zig Core. OpenTUI is a library for building terminal user interfaces (TUIs).
Build rich, interactive terminal interfaces with TypeScript bindings, first-class React/Solid support, and a C ABI for any language.
Related contents:
Utilities that should have been Terraform core functions.
Core functions with identical implementations for Terraform, OpenTofu, Terratest, and other software in the so-called Terra/Fu ecosystem.
While some of these can be implemented in HCL, some of them begin to push up against the limits of Terraform and the HCL2 configuration language. Exposing these functions as both a Go library as well as a Terraform/OpenTofu provider enables us to use the same functionality in both our Terraform/OpenTofu applies as well as while using a testing framework.
MCP Server for kubernetes management commands.
MCP Server that can connect to a Kubernetes cluster and manage it. Supports loading kubeconfig from multiple sources in priority order.
Related contents:
A unified dashboard for managing multiple Sonarr, Radarr, Prowlarr, Lidarr, Readarr, Plex, Tautulli, Jellyfin, Emby, and Seerr instances. Consolidate your media automation management into a single, secure, and powerful interface.
Related contents:
High-performance self-hosted personal dashboard. Single binary, premium UI, native grid engine in pure JavaScript.
Your reading list, as a podcast you own. Self-hosted Podcasting 2.0 service that turns saved articles into a personal podcast feed.
Paste a URL or upload a document (PDF, DOCX, Markdown, text, or HTML), wait a few minutes, and get an episode with cloned-voice narration, artwork, an LLM-written episode summary, and a WebVTT transcript. Subscribe in Pocket Casts, Overcast, or Apple Podcasts like any other show.
Self-hosted tagger that turns Bandcamp purchases into an organized music library, with metadata from MusicBrainz.
Complete Picard-compatible tags and cover art, ready for Plex and Navidrome — and it asks before it guesses, so nothing gets mislabeled.
A Kanban board made of Markdown local-first Kanban board in Markdown, self-hosted.
Boards live in your browser, so the UI is instant and works offline. For anything you want to keep, run the sync server you host yourself.
Local Social Publishing Dashboard.
Free, open-source, self-hosted crossposter — compose once and publish or schedule to X, LinkedIn, Bluesky, Mastodon, Instagram, YouTube, Dev.to, Pinterest, Hacker News, Nostr, and Dribbble from localhost.
Crossposter keeps the publishing workflow close to the app itself: one composer, provider readiness cards, local history, scheduled posts, and warnings only when selected socials would reject a draft.
Every layer, exactly where you want it. G-code generator for 3D printers (Bambu, Prusa, Voron, VzBot, RatRig, Creality, etc.)
OrcaSlicer is a free, open-source slicer for FDM 3D printers. Calibration tools built in, per-feature control over every print move, and tuned profiles for hundreds of printers — on Windows, macOS, and Linux.
Related contents:
GitOps for Docker
Deploy and manage your services with ease, directly from your Git repository.
OrcaCD is a simple GitOps tool for Docker. It allows you to deploy your applications using Git as the source of truth. With OrcaCD, you can easily manage your Docker containers and keep them in sync with your Git repository.