apache2-licensed
Review the package artifact before it ships. pre-publish package security. Review the artifact before you publish it: diffs the built npm/PyPI package against the last published version and pins risk signals to the changed lines.
Between your last code review and the public registry sit build scripts, bundler output, and CI credentials. Drydock diffs the exact artifact against the last published version and pins every supply-chain finding to a changed line. Workflow Gate enforces the decision on a configured protected job; Stage Watchtower records an advisory npm review.
ADR secures enterprise AI agents through observability, security benchmarking, and threat detection. Deployed at Uber.
ADR (Agentic AI Detection and Response) is an enterprise security system for AI agents. It helps organizations secure employee-facing agents such as Cursor, Claude Code, and Codex, as well as customer-facing agents such as AI support agents.
Run Locally, Deploy Globally
Develop and test your AWS applications locally to reduce development time and increase product velocity. Reduce unnecessary AWS spend and remove the complexity and risk of maintaining AWS dev accounts
Related contents:
Simple, Composable, Open Source ETL
Singer powers data extraction and consolidation for all of your organization’s tools.
High Performance, Resource Efficient OpenTelemetry Collection.
Rotel provides an efficient, high-performance solution for collecting, processing, and exporting telemetry data. Rotel is ideal for resource-constrained environments and applications where minimizing overhead is critical.
Harper is an English grammar checker designed to be just right. I created it after years of dealing with the shortcomings of the competition.
Related contents:
HugeGraph is a full-stack graph database system A graph database that supports more than 100+ billion data, high performance and scalability (Include OLTP Engine & REST-API & Backends).
providing complete graph data processing capabilities from storage, real-time querying to offline analysis, supporting both Gremlin and Cypher query languages.
Related contents:
Distribute and run LLMs with a single file.
Our goal is to make open LLMs much more accessible to both developers and end users. We're doing that by combining llama.cpp with Cosmopolitan Libc into one framework that collapses all the complexity of LLMs down to a single-file executable (called a "llamafile") that runs locally on most computers, with no installation.
Related contents:
A Protocol for Agent-Driven Interfaces¶
A2UI enables AI agents to generate rich, interactive user interfaces that render natively across web, mobile, and desktop—without executing arbitrary code.
Related contents:
LiteRT, successor to TensorFlow Lite. is Google's On-device framework for high-performance ML & GenAI deployment on edge platforms, via efficient conversion, runtime, and optimization
Related contents:
an open-source Remote Desktop Protocol server.
xrdp provides a graphical login to remote machines using RDP (Microsoft Remote Desktop Protocol). xrdp accepts connections from variety of RDP clients: FreeRDP, rdesktop, NeutrinoRDP and Microsoft Remote Desktop Client (for Windows, macOS, iOS and Android).
pod that scales down to zero.
Zeropod is a Kubernetes runtime (more specifically a containerd shim) that automatically checkpoints containers to disk after a certain amount of time of the last TCP connection. While in scaled down state, it will listen on the same port the application inside the container was listening on and will restore the container on the first incoming connection.
Related contents:
Local-first persistent memory for AI coding agents (Claude Code, Cursor, Codex) via MCP. 94.5% LoCoMo recall@10, 70ms p50, multilingual, zero API keys.
Related contents:
- [How I built local-first memory for Claude Code, Cursor, and Codex - 94.5% LoCoMo recall@10, 70ms p50 @ HackerNoon.
A self-hosted PDF library indexer and reader.
Inkheart is considered stable, and I am confident enough in its current state to bump the version to 1.0.0. I use it regularly for my own reading and reference. Bug reports, issue submissions, and feature requests are welcome, and I try to respond to them in a timely manner. However, please note that this is a personal side project among several others, and my motivation to work on it comes and goes. As a result, new features or enhancements may take time (or may not happen at all). Thanks for your understanding!
Search more with less.
Cloud-native search engine for observability. An open-source alternative to Datadog, Elasticsearch, Loki, and Tempo. Quickwit is the fastest search engine on cloud storage. It's the perfect fit for observability use cases.
The Machine Learning Toolkit for Kubernetes The Kubeflow project is dedicated to making deployments of machine learning (ML) workflows on Kubernetes simple, portable and scalable. Our goal is not to recreate other services, but to provide a straightforward way to deploy best-of-breed open-source systems for ML to diverse infrastructures. Anywhere you are running Kubernetes, you should be able to run Kubeflow.
Related contents:
Network Observability for the AI Era.
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
Wait for anything! A lightweight tool to wait for services to be ready.
Wait4X allows you to wait for a port or a service to enter the requested state, with a customizable timeout and interval time.
Inject web platform expertise, best practices, and modern API patterns directly into your AI coding agents.
Modern Web Guidance is an agent skill (aka SKILL.md) with a CLI that helps coding agents build better web applications using modern, high-performance, accessible, and secure APIs instead of legacy workarounds.
An agent-first decompiler designed to be refined by other agents. Kuna is written in Rust and was originally ported from Ghidra.
Kuna is a self-refining decompiler built to be used by agents. It is based on the Ghidra decompiler, written in Rust, and integrates modern features from other open-source decompilers and research. Kuna is an experiment to see how far agents can take self-refining tools.
Diesel is a Safe, Extensible ORM and Query Builder for Rust.
Diesel is the most productive way to interact with databases in Rust because of its safe and composable abstractions over queries.
LLM inference, optimized for your Mac. Local AI, no more waiting on your Mac.
LLM inference server with continuous batching & SSD caching for Apple Silicon — managed from the macOS menu bar.
macOS-native MLX server with smart caching. Claude Code, OpenClaw, and Cursor respond in 5 seconds, not 90.
Related contents:
Open Source Locally Hosted Lovable with Full Stack Support. The Open-Source AI Development Platform Built for Self-Hosting.
AI-powered development environment with advanced agent orchestration - designed for complete data sovereignty and infrastructure control.
Own Your IAM with a Perpetual License. Open source alternative to Auth0 / Firebase Auth.
Authgear is an open-source extensible turnkey solution for all of your consumer authentication needs. Authgear gets you started in 5 minutes with developer-friendly SDKs and a comprehensive portal.
The Markdown CMS. A CMS With Version Control Built-in.
Tina is a headless content management system with support for visual editing and Git.
Related contents:
Universal Sandbox Infrastructure for AI Applications.
Securely run commands, filesystems, code interpreters, browsers, and developer tools in isolated runtime environments.
OpenSandbox is a general-purpose sandbox platform for AI applications, offering multi-language SDKs, unified sandbox APIs, and Docker/Kubernetes runtimes for scenarios like Coding Agents, GUI Agents, Agent Evaluation, AI Code Execution, and RL Training.
beego is an open-source, high-performance web framework for the Go programming language.
Beego is used for rapid development of enterprise application in Go, including RESTful APIs, web apps and backend services.
It is inspired by Tornado, Sinatra and Flask. beego has some Go-specific features such as interfaces and struct embedding.
High performance array computing.
Composable transformations of Python+NumPy programs: differentiate, vectorize, JIT to GPU/TPU, and more. JAX provides a familiar NumPy-style API for ease of adoption by researchers and engineers.
Related contents:
🕸 WebGL Graph Visualizations for React. WebGL-Powered Open-Source Network Graph Visualization.
a high-performance network graph visualization built in WebGL for React.
Postgre SQL Operator for Kubernetes. Run PostgreSQL. The Kubernetes way.
CloudNativePG is the Kubernetes operator that covers the full lifecycle of a highly available PostgreSQL database cluster with a primary/standby architecture, using native streaming replication.
Related contents:
- Plongez dans le monde de CloudNativePG #4 - Les sauvegardes ! @ Dalibo :fr:.
- Making Postgres scale to zero with CNPG @ xata.
- Kubernetes Finally Solves Its Biggest Problem: Managing Databases @ The New Stack. https://medium.com/@nejdetkadir/how-i-built-my-own-home-lab-a-single-node-kubernetes-platform-34bdf6a08a26
Rust powered waveform source separation.
A native Rust implementation of HTDemucs v4 — state-of-the-art music source separation. Splits any song into individual stems (drums, bass, vocals, etc.) using GPU-accelerated inference via Burn.
Runs as a native CLI (Metal on macOS, Vulkan on Linux/Windows), entirely in the browser via WebAssembly + WebGPU, or as a DAW plugin (VST3/CLAP, macOS) — no server, no uploads, fully local.
Related contents:
A tool for transforming and moving code between repositories.
Copybara is a tool used internally at Google. It transforms and moves code between repositories.
Often, source code needs to exist in multiple repositories, and Copybara allows you to transform and move source code between these repositories. A common case is a project that involves maintaining a confidential repository and a public repository in sync.
Copybara requires you to choose one of the repositories to be the authoritative repository, so that there is always one source of truth. However, the tool allows contributions to any repository, and any repository can be used to cut a release.
Go (formerly PowerShell) collector for adding MSSQL attack paths to BloodHound with OpenGraph.
A collector for adding MSSQL attack paths to BloodHound with OpenGraph by Chris Thompson at SpecterOps. Available as both a PowerShell script and a cross-platform Go binary (with concurrent collection, SOCKS5 proxy support, and streaming output).
Related contents:
This is Maxwell's daemon, a change data capture application that reads MySQL binlogs and writes data changes as JSON to Kafka, Kinesis, and other streaming platforms.
Related contents:
Headless iOS Simulator manager/farm + host-side input injection for iOS 26 — taps, swipes, multi-finger gestures, and 60 fps streaming .
A single Swift CLI — baguette — plus a self-contained web UI that gives you full headless control of an iOS simulator without opening Xcode or Simulator.app. Boot devices, stream their screens at 60 fps, dispatch taps / swipes / multi-finger gestures / system gestures / keyboard / hardware buttons, tail the unified log, inspect the accessibility tree, take screenshots and recordings, and — as of 0.1.72 — pipe your Mac webcam into the simulator's camera APIs.
Turn any GitHub repository into a comprehensive AI-powered documentation hub.
Generate beautiful, world-class documentation from any GitHub repository — instantly. Just replace hub with summarize in any GitHub URL to generate a live, interactive documentation hub.
reference impl with llama.cpp compiled to distributed inference across machines, with real end to end demo.
Mesh LLM lets you pool spare GPU capacity across machines and expose the result as one OpenAI-compatible API.
If a model fits on one machine, it runs there. If it does not, Mesh LLM automatically spreads the work across the mesh.
Related contents:
Open source, AI-native testing framework for web apps.
End-to-end testing framework powered by visual AI agents that see your interface and adapt to any changes in it.
A pretty (simple) alternative to strace.
lurk is a simple and pretty alternative to strace. It allows the user to trace system calls of a process or of a command. In contrast to strace, lurk focuses on a simple, yet pretty, user experience while implementing the most important use cases of strace.
Monitor cross-zone network traffic in Kubernetes.
KUBErnetes cross-ZONe NETwork monitoring with Prometheus for Cilium-based clusters (in Legacy host routing mode).
Related contents:
Kubernetes for Local LLMs.
A Kubernetes operator for self-hosted LLM inference. vLLM, llama.cpp, TGI, NVIDIA, Apple Silicon.
Related contents:
Open-source Grok Bot alternative. Choose your own model and sandbox.
Web, desktop, and mobile. Bring your own AI and sandbox. The product is still early (beta).
Each bot has one thread, one computer, memory, routines, and history. A bot can also spawn more bots — each a regular peer with its own thread and computer — or run short-lived subagents inside the current turn. This repository is the complete core product — it runs without a Rakazo-operated control plane.
A research project to add some brrrrrr to Burp.
"burpference" started as a research idea of offensive agent capabilities and is a fun take on Burp Suite and running inference. The extension is open-source and designed to capture in-scope HTTP requests and responses from Burp's proxy history and ship them to a remote LLM API in JSON format. It's designed with a flexible approach where you can configure custom system prompts, store API keys and select remote hosts from numerous model providers as well as the ability for you to create your own API configuration. The idea is for an LLM to act as an agent in an offensive web application engagement to leverage your skills and surface findings and lingering vulnerabilities. By being able to create your own configuration and model provider allows you to also host models locally via Ollama to prevent potential high inference costs and potential network delays or rate limits.
A container-based solution for automating Docker container base image updates.
With watchtower you can update the running version of your containerized app simply by pushing a new image to the Docker Hub or your own image registry. Watchtower will pull down your new image, gracefully shut down your existing container and restart it with the same options that were used when it was deployed initially.
Containerrr's Watchtower fork.
the open source, distributed, transactional key-value store.
FoundationDB is a distributed database designed to handle large volumes of structured data across clusters of commodity servers. It organizes data as an ordered key-value store and employs ACID transactions for all operations. It is especially well-suited for read/write workloads but also has excellent performance for write-intensive workloads. Users interact with the database using a API language binding.
This crate provides routines for searching strings for matches of a regular expression (aka “regex”). The regex syntax supported by this crate is similar to other regex engines, but it lacks several features that are not known how to implement efficiently. This includes, but is not limited to, look-around and backreferences. In exchange, all regex searches in this crate have worst case O(m * n) time complexity, where m is proportional to the size of the regex and n is proportional to the size of the string being searched.
Related contents:
State-of-the-art TTS model under 25MB 😻
Kitten TTS is an open-source realistic text-to-speech model with just 15 million parameters, designed for lightweight deployment and high-quality voice synthesis.
Related contents:
Run your agent on local models. Free, private, and offline.
Open source inference server that runs the best local models for your hardware, plugged into the agent you already use. Works with Pi, OpenCode, Hermes, OpenClaw, Codex, Claude Code, Oh My Pi, and Cline.
Like IntelliSense, but for shells!
IntelliShell is a command-line tool that acts as a smart bookmark manager. It helps you find, organize, and reuse complex shell commands without ever leaving your terminal.
A tool to identify and investigate inauthentic GitHub user accounts and repositories.
ghbuster is a tool to detect suspicious GitHub repositories and users using heuristics. It is designed to help identify potentially malicious or inauthentic accounts and repositories on GitHub.
Related contents:
A reasonable configuration language.
RCL is a domain-specific language for generating configuration files and querying json documents. It extends json into a simple, gradually typed, functional programming language that resembles Python and Nix.
Related contents:
A modern, UI-first Identity and Access Management (IAM) / Single Sign-On (SSO) platform with comprehensive SaaS management capabilities. Supports OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, RADIUS, Google Workspace, Active Directory, and Kerberos
Automate Kubernetes Configuration Editing.
kpt is a package-centric toolchain that enables a WYSIWYG configuration authoring, automation, and delivery experience, which simplifies managing Kubernetes platforms and KRM-driven infrastructure at scale by manipulating declarative Configuration as Data.
Related contents:
A single-page dashboard portal for quick link access, built with React, TypeScript, and Express.js.
A modern, responsive React-based dashboard application for organizing and managing web links with a beautiful, customizable interface.
A command-line utility for taking automated screenshots of websites.
Related contents:
a free messaging app for Slack, Facebook Messenger, WhatsApp, Telegram and more.
Related contents:
push frontier AI to it limits. A fork of the Codex CLI with validation, automation, browser integration, multi-agents, theming, and much more. Orchestrate agents from OpenAI, Claude, Gemini or any provider.
Every Code (Code for short) is a fast, local coding agent for your terminal. It's a community-driven fork of openai/codex focused on real developer ergonomics: Browser integration, multi-agents, theming, and reasoning control — all while staying compatible with upstream.
Enterprise Open-Source On-Prem/Private Cloud MTA.
The first Open-Source high-performance MTA developed from the ground-up for high-volume email sending environments.
Real-time, high-performance reading of log files and writing to clickhouse.
This tool can write the monolog standard log directly to clickhouse in real time via the tcp protocol. If you can write regular rules, other standardized log can also support it.
A fast, simple, and embedded key-value store for Rust.
TurboKV is an async embedded key-value database with atomic batches, ordered range scans, configurable durability, compression, and background compaction.