apache2-licensed
Utilities that should have been Terraform core functions.
Core functions with identical implementations for Terraform, OpenTofu, Terratest, and other software in the so-called Terra/Fu ecosystem.
While some of these can be implemented in HCL, some of them begin to push up against the limits of Terraform and the HCL2 configuration language. Exposing these functions as both a Go library as well as a Terraform/OpenTofu provider enables us to use the same functionality in both our Terraform/OpenTofu applies as well as while using a testing framework.
High-performance self-hosted personal dashboard. Single binary, premium UI, native grid engine in pure JavaScript.
Visibility into AI agent activity on endpoints, with on-device detection, optional pre-action blocking, and forensic reconstruction.
numbat observes supported desktop, CLI, IDE, and gateway agents through local hooks and plugins, OTLP/HTTP logs, and on-disk session artifacts. Live and at-rest activity is normalized into one event model and evaluated by the same CEL rule engine. Detection runs locally; records can be written to stdout or a local file and optionally delivered over HTTP.
Gemma 4 26B-A4B inference in about 2 GB of RAM A custom Swift + Metal runtime for any Apple Silicon Mac, even the 8 GB ones.
A High-Performance Analytical Database.
The world's fastest open query engine for sub-second analytics both on and off the data lakehouse. With the flexibility to support nearly any scenario, StarRocks provides best-in-class performance for multi-dimensional analytics, real-time analytics, and ad-hoc queries. A Linux Foundation project.
the open standard for sealing anything.
The open standard for proving any file is real, unaltered, sealed by a known certificate, and in existence by a certain date. One standard for every kind of file: documents, images, email, code, containers. Verifiable by anyone, forever. The proof travels with the file and stands on its own.
TypeScript-to-Native Compiler.
Zero-runtime TypeScript. scriptc compiles ordinary TypeScript into small, fast native executables — no Node, no V8, no JavaScript engine in the binary.
No changes to your code. No annotations, no dialect — the same TypeScript you run on Node, type-checked by the real TypeScript compiler and compiled to native. What compiles behaves byte-for-byte like Node.
The framework for building agents
Like Next.js for agents. Build durable agents with one folder. eve is a filesystem-first framework for durable AI agents. Core agent capabilities live in conventional locations, so projects are easier to inspect, extend, and operate.
Related contents:
Open-source auth gateway connecting 1000+ SaaS providers to AI agents through SDK, CLI, MCP, HTTP, and OpenAPI.
OpenConnector is an open-source connector gateway for AI agents and an alternative to Composio. Connect user app accounts once, then expose a shared catalog of 1,000+ providers and 10,000+ prebuilt Actions to agents and applications.
SQL powered operating system instrumentation, monitoring, and analytics. Easily ask questions about your Linux, Windows, and macOS infrastructure.
osquery is an operating system instrumentation framework for Windows, OS X (macOS), and Linux. The tools make low-level operating system analytics and monitoring both performant and intuitive.
osquery exposes an operating system as a high-performance relational database. This allows you to write SQL queries to explore operating system data. With osquery, SQL tables represent abstract concepts such as running processes, loaded kernel modules, open network connections, browser plugins, hardware events or file hashes.
Related contents:
The open agent runtime.
Open, self-hostable agentic runtime for organizations — durable, replayable agent sessions, human approvals, governed credentials and memory, running in managed sandboxes or on your own hardware. Apache-2.0.
a 744-billion-parameter mind, on your desk tiny engine, immense model.
Run GLM-5.2 — 744B Mixture-of-Experts — on hardware you already own. Pure C, zero dependencies, experts staged just-in-time across VRAM, RAM and disk. The galaxy behind this text is real: the model's measured expert atlas.
Real-time visualization of Claude Code agent orchestration — see your agents think, branch, and coordinate as they work.
Your people, your agents, your project — all in one place. A hive mind communication platform.
Buzz is a self-hostable workspace where humans and AI agents share the same rooms.
A Buzz community is the workspace a user reaches by URL. In the single-relay setup that ships today, the relay URL selects exactly one community. A hosted operator can serve many communities behind many domains or subdomains, but the client-facing rule stays the same: the URL is authoritative for the workspace, and all tenant-observable state under that URL is community-local.
Related contents:
Headless iOS Simulator manager/farm + host-side input injection for iOS 26 — taps, swipes, multi-finger gestures, and 60 fps streaming .
A single Swift CLI — baguette — plus a self-contained web UI that gives you full headless control of an iOS simulator without opening Xcode or Simulator.app. Boot devices, stream their screens at 60 fps, dispatch taps / swipes / multi-finger gestures / system gestures / keyboard / hardware buttons, tail the unified log, inspect the accessibility tree, take screenshots and recordings, and — as of 0.1.72 — pipe your Mac webcam into the simulator's camera APIs.
A calm, CLI-native way to semantically grep everything, like code, images, pdfs and more.
Agentic SAST Pipeline.
VVAH is Visa's open-source harness for autonomous vulnerability discovery, remediation, and validation using frontier AI models, built on learnings from Project Glasswing (Anthropic's initiative for AI-assisted vulnerability research).
Redis-compatible distributed cache.
A low-latency, high-throughput, distributed cache. Drop-in replacement for Redis — up to 1.9x faster with p99 latency under 1.3ms.
Distributed AI/LLM for the people. Share compute privately or publicly to power your agents and chat.
Mesh LLM pools GPUs and memory across machines and exposes the result as one OpenAI-compatible API at http://localhost:9337/v1. Start one node, add more nodes later, and let the mesh decide whether a model runs locally, routes to a peer, or uses Skippy stage splits for models that are too large for one box.
Network Observability for the AI Era.
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
Open Source Secret Scanner with Live Validation
Detect, validate, and revoke leaked credentials across your codebase, Git history, cloud storage, and developer platforms. Built in Rust by MongoDB.
Open Source, Self-Hostable Deployment Platform.
Push your code - builds, config, and deployment are handled automatically. Use our cloud or connect your own servers. Zero lock‑in, completely open‑source.
Open-source, self-hostable deployment platform with built-in CI/CD. Push code, ship containers, manage infrastructure — from a desktop app, web dashboard, or CLI.
A top for eBPF programs.real-time view of running eBPF programs.
Real-time average runtime per call, events/s, and CPU utilization for every loaded eBPF program.
Keep your Docker containers fresh, safely. A safe Docker container auto-updater.
freshdock watches your running containers, notices when a newer image ships, and updates them health-gated. A broken update rolls back automatically instead of leaving you with a dead service. The maintained successor to the archived Watchtower.
Schedule, supervise, observe. One binary.
Cron job manager + process supervisor in a single binary. Web dashboard, TUI, retries, failure notifications. crond/supervisord replacement
AI Builder Real World Apps. Open-source app builder engine — intent to working app.
The open-source Convergence App Builder. Generate a working app from intent, then verify every agent turn against its business requirements.
The lazygit for PostgreSQL. A vim-style terminal UI for browsing, querying, and editing your database without leaving the keyboard.
A vim-style TUI PostgreSQL client built like lazygit — fast keyboard navigation, modal panes, and a focused workflow for browsing and querying your database from the terminal.
An open source Snowflake cost optimization and observability dashboard.
cost control for AI agent loops. Your AI agent loops don't know when to stop. LoopGain does.
When an agent keeps checking and revising its own work, it often spins on a problem it can't solve — or talks itself into an answer worse than one it already had. LoopGain watches the loop as it runs, stops it at the right iteration, and keeps the best version, not the last.
A Kubernetes controller that generates CycloneDX 1.6 ML-BOM documents for AI workloads at runtime — inference services, agent stacks, RAG pipelines, training jobs, evaluation harnesses — with auditor-traceable evidence for every attribute.
Related contents:
Fleet visibility dashboard and ingest server for Bumblebee scans.
Run the Hive server, point developer endpoints at it with --output http, and browse fleet inventory, exposure findings, and per-endpoint scan history in a React dashboard — no log shipper or custom receiver required.
Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.
push frontier AI to it limits. A fork of the Codex CLI with validation, automation, browser integration, multi-agents, theming, and much more. Orchestrate agents from OpenAI, Claude, Gemini or any provider.
Every Code (Code for short) is a fast, local coding agent for your terminal. It's a community-driven fork of openai/codex focused on real developer ergonomics: Browser integration, multi-agents, theming, and reasoning control — all while staying compatible with upstream.
The Application Development Engine for Kubernetes Tame your developer workflow to go from Code to URL in one push.
Epinio installs into any Kubernetes cluster to bring your application from source code to deployment and allow for Developers and Operators to work better together!
Related contents:
YouTrackDB is a general-use object-oriented graph database with storage format native to handle graph relations. YouTrackDB supports Gremlin queries and ACID transactions. YTDB supports both embedded and client-server deployment models.
Run the Moebius inpainting model in the browser.
Paint over a region of an image to replace it; the denoising loop runs locally on your GPU. The first run downloads ~1.27 GB of weights from Hugging Face (then browser-cached). A WebGPU-capable browser (recent Chrome or Safari) is required.
Related contents:
databow is a command-line tool for querying databases.
A command-line tool for querying databases via ADBC.
Private, unlimited file transfer. Peer-to-peer, encrypted, no accounts.
AlterSend sends files straight between devices, end-to-end encrypted — never through cloud storage. No accounts, no size limits, no codes to scan once you've paired.
Agent Substrate is a system built on top of Kubernetes which manages agent-like workloads to achieve higher scale and efficiency than Kubernetes alone can offer, with lower latency. It builds on top of Kubernetes features like Pods and Pod autoscaling, but takes the Kubernetes control-plane out of the critical path to achieve lower latency.
Related contents:
Continuous Terraform drift detection, reporting, and auto-remediation CLI. The open-source driftctl replacement.
tfdrift is a Python CLI tool that monitors your Terraform-managed infrastructure for drift — changes made outside of Terraform workflows (console clicks, scripts, other tools). It scans your Terraform workspaces, detects discrepancies between state and reality, generates structured reports, and optionally auto-remediates or notifies your team.
Related contents:
PDF Reader in JavaScript.
PDF.js is community-driven and supported by Mozilla. Our goal is to create a general-purpose, web standards-based platform for parsing and rendering PDFs.
Related contents:
Give a coding agent its own disposable Linux machine, not yours. Disposable, network-restricted Linux VMs for AI coding agents.
clawk is a third option. cd into a repo, type clawk, and Claude Code (or Codex, or a shell) is working inside a disposable Linux VM (your code mounted in, root in the guest, no permission prompts) while your files, your keychain, and the rest of your machine stay out of reach. The agent gets its own machine instead of yours.
Self-hosted publish and subscribe metric dashboards.
Plotix is a free, open source, self-hosted tool for turning simple data pushes into live graphs. Send a value or a set of named values to a topic with a single request, then subscribe to that topic to view the output graph. It works like ntfy, but instead of sending notifications, you send numbers and get charts.
High performance S3 compatible object storage focused on speed and simplicity and designed to be an open alternative to MinIO and RustFS.
Alarik is a high-performance, S3-compatible object storage system written in Swift, licensed under the Apache 2.0 license. It aims to deliver exceptional speed, developer-friendly ergonomics, and a modern cloud-native core.
Kafka TUI client.
ktea is a tool designed to simplify and accelerate interactions with Kafka clusters.
Your ClickHouse, one workspace.
SQL editor, dashboards, pipelines, query analytics, cluster monitoring, governance, and an AI copilot — one single binary, on your infrastructure. Open source at its core. Pro is a license key, not a subscription to someone else's servers.
Open Source ClickHouse Web UI with RBAC. Free & Self-Hosted.
What started as a single-connection console grew into the combination most ClickHouse tools only do a piece of — first-class RBAC, multi-cluster fleet monitoring, and an autonomous AI SRE that finds the root cause and writes the fix. Read-only. On-prem. Yours.
Empowering your AI Agents. Instant, Concurrent, Secure & Lightweight Sandbox Service for AI Agents.
Cube Sandbox is a high-performance, out-of-the-box secure sandbox service built on RustVMM and KVM. It supports both single-node deployment and easy scaling to multi-node clusters. It is compatible with the E2B SDK and can create a hardware-isolated, fully serviceable sandbox in under 60ms with less than 5MB of memory overhead.
OfficeCLI is the first and best Office suite purpose-built for AI agents to read, edit, and automate Word, Excel, and PowerPoint files. Free, open-source, single binary, no Office installation required.
Otari Gateway is the open-source gateway that puts a single OpenAI-compatible API in front of many LLM providers.
Run it in your own infrastructure. Use it standalone, or connect it to otari.ai for hosted routing, authentication, and usage reporting.
Simple CLI tool for deterministic routing of queries between local and hosted LLM models.
A fast, offline hard-or-easy call on every prompt — scored deterministically, with no model call. Route the easy ones to your small/local model and the hard ones to your big one, or compose any model-router behind it.
Providing the building blocks for creating modern, cloud-based applications.
The easiest way to build and run serverless workloads on Kubernetes. Built by the community, for modern cloud-native teams
Related contents:
Guard rail for your commit messages for sustainable development.
This project is an AI-Native SAST tool. Unlike traditional SAST tools that rely solely on parsing and analysis rules, this project uses LLM (e.g. Claude from Anthropic, GPT from OpenAI or Gemini from Google) to find vulnerabilities.
An open source registry and proxy that federates MCP, A2A, and REST/gRPC APIs with centralized governance, discovery, and observability. Optimizes Agent & Tool calling, and supports plugins.
ContextForge is an open source registry and proxy that federates tools, agents, and APIs into one clean endpoint for your AI clients. It provides centralized governance, discovery, and observability across your AI infrastructure.
Automate Kubernetes Configuration Editing.
kpt is a package-centric toolchain that enables a WYSIWYG configuration authoring, automation, and delivery experience, which simplifies managing Kubernetes platforms and KRM-driven infrastructure at scale by manipulating declarative Configuration as Data.
Related contents:
the open source, distributed, transactional key-value store.
FoundationDB is a distributed database designed to handle large volumes of structured data across clusters of commodity servers. It organizes data as an ordered key-value store and employs ACID transactions for all operations. It is especially well-suited for read/write workloads but also has excellent performance for write-intensive workloads. Users interact with the database using a API language binding.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
KICS stands for Keeping Infrastructure as Code Secure, it is open source and is a must-have for any cloud native project.
Related contents:
A format specification for describing a visual identity to coding agents. DESIGN.md gives agents a persistent, structured understanding of a design system.
Enterprise Open-Source On-Prem/Private Cloud MTA.
The first Open-Source high-performance MTA developed from the ground-up for high-volume email sending environments.
A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
Related contents: