apache2-licensed
Community driven Dendritic Nix configurations.
Editor-distributions like those for nvim/emacs provide community-driven, opinionated configurations that can be easily reused and enabled by newcomers.
The dendrix project aims to provide the same experience: having community-managed, author-maintained and no-barrier-of-entry setups for everything that can be configured using flake-parts modules.
Related contents:
Recursively import Nix modules from a directory tree.
import-tree recursively discovers and imports Nix files from a directory tree. It works with NixOS, nix-darwin, home-manager, flake-parts, NixVim, and any Nix module system.
Related contents:
Spin is a framework for building and running event-driven microservice applications with WebAssembly (Wasm) components.
It aims to be the easiest way to get started with WebAssembly microservices, and takes advantage of the latest developments in the WebAssembly component model and Wasmtime runtime. Spin offers a simple CLI that helps you create, distribute, and execute applications, and in the next sections we will learn more about Spin applications and how to get started.
CLI tool for spawning and running containers according to the OCI specification.
youki is an implementation of the OCI runtime-spec in Rust, similar to runc.
reference impl with llama.cpp compiled to distributed inference across machines, with real end to end demo.
Mesh LLM lets you pool spare GPU capacity across machines and expose the result as one OpenAI-compatible API.
If a model fits on one machine, it runs there. If it does not, Mesh LLM automatically spreads the work across the mesh.
Related contents:
A backend plugin for Mise that allows you to install and manage packages using Nix.
A Mise plugin that brings the power of the Nix ecosystem to your development workflow.
Open Source Container Runtime Software.
Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs.
Related contents:
The Container Security Platform. Application Kernel for Containers.
gVisor provides a strong layer of isolation between running applications and the host operating system. It is an application kernel that implements a Linux-like interface. Unlike Linux, it is written in a memory-safe language (Go) and runs in userspace.
gVisor includes an Open Container Initiative (OCI) runtime called runsc that makes it easy to work with existing container tooling. The runsc runtime integrates with Docker and Kubernetes, making it simple to run sandboxed containers.
An experimental Rust architecture for reactive UI.
Xilem and Masonry provide an experimental high-level architecture for writing GUI apps in Rust.
Masonry is a foundational crate for building natively compiled GUIs in Rust. It provides a retained widget tree and runs event handling and update passes on it.
Xilem a high-level reactive framework inspired by React, SwiftUI and Elm. It lets users create a lightweight view tree, and changes the rendered app based on changes to the tree. It has a web backend and a Masonry backend.
Run multiple agents in parallel — each in its own container, with its own workspace, collaborating on your code or project files simultaneously.
Scion is an experimental multi-agent orchestration testbed designed to manage "deep agents" running in containers.
The design language that makes your AI harness better at design. The missing upgrade to Anthropic's frontend-design skill. Design fluency for AI harnesses.
Great design prompts require design vocabulary. Most people don't have it. You can't ask for "more vertical rhythm" if you've never used those words. Impeccable gives you commands that put designer language in your hands.
Related contents:
The Open Cybersecurity Schema Framework (OCSF) is an open standard for cybersecurity event logging and data normalization. The framework is made up of a set of categories, event classes, data types, and an attribute dictionary. It is not restricted to cybersecurity nor to events, however the initial focus of the framework has been a schema for cybersecurity events.
Related contents:
A 30-minute talk sharing practical lessons from building real production projects with AI coding agents — from brainstorming to shipped code.
Related contents:
Track AI Code all the way to production
An open-source Git extension for tracking AI code through the entire SDLC. Once installed, it automatically links every AI-written line to the agent, model, and transcripts that generated it — so you never lose the intent, requirements, and architecture decisions behind your code.
Gemma Gem runs Google's Gemma 4 model entirely on-device via WebGPU — no API keys, no cloud, no data leaving your machine.
Your personal AI assistant living right inside the browser. Gemma Gem runs Google's Gemma 4 model entirely on-device via WebGPU — no API keys, no cloud, no data leaving your machine. It can read pages, click buttons, fill forms, run JavaScript, and answer questions about any site you visit.
LiteRT-LM is Google's production-ready, high-performance, open-source inference framework for deploying Large Language Models on edge devices.
an open source, extensible AI agent that goes beyond code suggestions - install, execute, edit, and test with any LLM.
goose is your on-machine AI agent, capable of automating complex development tasks from start to finish. More than just code suggestions, goose can build entire projects from scratch, write and execute code, debug failures, orchestrate workflows, and interact with external APIs - autonomously.
Related contents:
modern Postgres terminal written in Rust. psql-compatible, with built-in DBA diagnostics and AI assistant.
A psql-compatible terminal written in Rust with built-in DBA diagnostics and AI assistant. Single binary, no dependencies, cross-platform.
Kubernetes Progressive Delivery Controller.
Argo Rollouts is a Kubernetes controller and set of CRDs which provide advanced deployment capabilities such as blue-green, canary, canary analysis, experimentation, and progressive delivery features to Kubernetes.
ZML is a production inference stack, purpose-built to decouple AI workloads from proprietary hardware.
Any model, many hardwares, one codebase, peak performance. Compiled directly to NVIDIA, AMD, TPU, Trainium for peak hardware performance on any accelerator. No rewriting.
Related contents:
Effortless End-to-End Encrypted Backups for Your Critical Data
Open-Source, Self-Hosted Backup Solution That Puts You in Control. Pluton is a self-hosted backup management platform that simplifies automated, incremental backups across your storage destinations. Pluton leverages powerful open-source tools - Restic for secure incremental backups and Rclone for versatile cloud storage connectivity - wrapped in an intuitive web interface designed for both beginners and advanced users.
Related contents:
our Own AI Co-Worker. Its own computer.
Phantom deploys to a dedicated machine, learns from every conversation, and evolves its own capabilities. Open source. Self-hosted or managed.
Sandbox any command with file, network, and credential controls.
Lightweight, cross-platform process sandboxing powered by OpenAI Codex's runtime. Sandbox any command with file, network, and credential controls.
Enterprise governance for AI agents — scan, enforce, and audit every skill, MCP server, and plugin before it runs.
DefenseClaw is the enterprise governance layer for OpenClaw. It sits between your AI agents and the infrastructure they run on, enforcing a simple principle: nothing runs until it's scanned, and anything dangerous is blocked automatically.
Data Visualization for React. Streaming-First Visualization for React
Push data at 60fps with decay, pulse, and staleness encoding. Or just pass an array — static data is the simple case. 40+ chart types, network graphs, coordinated dashboards, and AI tooling built in.
Use Codex from inside Claude Code for code reviews or to delegate tasks to Codex.
This plugin is for Claude Code users who want an easy way to start using Codex from the workflow they already have.
Lightweight Docker monitoring dashboard with anomaly detection & Telegram alerts. One-liner install, zero config.
A user-friendly management layer for TVHeadend that simplifies IPTV playlist integration, EPG mapping, and DVR scheduling.
Headendarr is a simple wrapper around TVHeadend with the singular goal of making it simple to configure TVHeadend for IPTV playlist.
TVHeadend is an extremely powerful TV streaming server and recorder with excellent support for IPTV sources. However, for most people, setting this up can be difficult and time-consuming. The goal of this project is to wrap around TVHeadend and, using its API, configure most of the server for you.
Official Elastic Skills.
Elastic Agent Skills — built by the people who built Elastic — deliver native platform expertise directly to your AI coding agent. This is the official Agent Skills library, compatible with agentic IDEs such as Cursor, GitHub Copilot, Windsurf, Gemini CLI, and more. Skills follow the Agent Skills open standard.
Kubernetes AI Toolchain Operator.
KAITO is an operator that automates the AI/ML model inference or tuning workload in a Kubernetes cluster. The target models are popular open-sourced large models such as falcon and phi-3.
Related contents:
noq, a QUIC implementation in Rust.
General purpose implementation of the QUIC transport protocol in pure Rust. Noq is built as an async-friendly API in the noq crate on top of a sans-io protocol library in noq-proto.
Noq started out as a fork of the excellent Quinn project. The main focus of development has been towards adding support for more QUIC (draft) extensions.
Related contents:
734 Cybersecurity Skills for AI Agents. 734+ AI-Ready Skills for Claude Code & More.
The largest open-source library of structured cybersecurity skills following the agentskills.io standard. Deploy instantly to Claude Code, GitHub Copilot, Cursor, and 26+ platforms.
Pts.py is an experimental library for visual thinking.
A vision appears. It twinkles in the vast space of imagination. We squint to connect the dots in a sky full of stars.
Pts.py is an experimental librar for for creative coding, visualization and play. It explores principles of visual composability in code. I started this series of explorations, first with an idea about a simple point (Pt, 2015), then an idea about connecting them, (Pts.js, 2017). Starting anew in Pts.py (2025), this is again both a software library and a speculative playground.
A fast, helpful, and open-source document parser.
LiteParse is an open-source document parsing library that parses text with spatial layout information and bounding boxes. It runs entirely on your machine, with no cloud dependencies, no LLMs, no API keys.
LiteParse is designed specifically for use cases that require fast, accurate text parsing: real-time applications, coding agents, and local workflows. It provides a simple CLI and library API for parsing PDFs, Office documents, and images, with built-in OCR support.
Attack Surface Discovery & OSINT Reconnaissance Tool.
Organizational asset discovery tool with 20+ plugins covering certificate transparency, passive DNS, and all 5 Regional Internet Registries.
Pius is an open-source attack surface discovery tool written in Go. Given a company name, it maps the complete external attack surface: domains, subdomains, and IP ranges (CIDRs). Pius queries certificate transparency logs, all five regional Internet registries (ARIN, RIPE, APNIC, AFRINIC, LACNIC), passive DNS databases, WHOIS/RDAP, BGP tables, and more through 24 discovery plugins.
The fastest macOS package manager. Written in Zig.
A fast package manager for macOS and Linux. Written in Zig. Uses Homebrew's bottles and formulas under the hood, plus native .deb support for Docker containers.
A TUI to browse and diff NixOS configurations at the config-level.
A TUI which allows you to browse values and dependencies of NixOS options that influenced a NixOS configuration. This can be used to diff two configurations at the configuration/option-level as opposed to diffing the resulting derivation.
Related contents:
Open Source Video Player.
open source media player framework for Web and React. Modern, modular, and composable media player framework for Web and React.
Related contents:
A command-line interface the simplifies interaction with Kafka.
Manage & view data inside your Apache Kafka ® cluster
Kafka GUI for Apache Kafka ® to manage topics, topics data, consumers group, schema registry, connect and more...
Elephantshark helps monitor, understand and troubleshoot Postgres network traffic: Postgres clients, drivers and ORMs talking to Postgres servers, proxies and poolers (also: standby servers talking to their primaries and subscriber servers talking to their publishers).
Elephantshark sits between the two parties in a PostgreSQL-protocol exchange, forwarding messages in both directions while parsing and logging them.
Related contents:
An open standard for shared agent learning. Agents persist, share, and query collective knowledge so they stop rediscovering the same failures independently.
cq is derived from colloquy (/ˈkɒl.ə.kwi/), a structured exchange of ideas where understanding emerges through dialogue rather than one-way output. It reflects a focus on reciprocal knowledge sharing; systems that improve through participation, not passive use. In radio, CQ is a general call ("any station, respond"), capturing the same model: open invitation, response, and collective signal built through interaction.
Related contents:
The open source toolbox for resilient operations.
Rebound is a set of tools, ranging from a network injection fault proxy to a reliability automation platform, so people can rely on you being there when they need.
Related contents:
Bring the Real World into Minecraft.
Transform any location on Earth into a playable Minecraft world. Free, open source, and easy to use.
Related contents:
Requests is an elegant and simple HTTP library for Python, built for human beings.
Related contents:
Agentic review of Linux Kernel code changes.
Sashiko is an agentic Linux kernel code review system. It uses a set Linux kernel-specific prompts and a special protocol to review proposed Linux kernel changes. Sashiko can ingest patches from mailing lists or local git. It's fully self contained (doesn't use any external agentic cli tools) and can work with various LLM providers.
Related contents:
Store, organize and index scanned documents in PDF, JPEG and TIFF formats. Instantly find relevant information using full text, tags and metadata based search.
agent-sandbox enables easy management of isolated, stateful, singleton workloads, ideal for use cases like AI agent runtimes.
Related contents:
Common Expression Language. Fast, safe expression language
Common Expression Language (CEL) is an expression language that’s fast, portable, and safe to execute in performance-critical applications. CEL is designed to be embedded in an application, with application-specific extensions, and is ideal for extending declarative configurations that your applications might already use.
Use CEL for things like list filters for API calls, validation constraints on protocol buffers, and authorization rules for API requests.
Related contents:
Node for Offline Media, Archives, and Data.
Project N.O.M.A.D, is a self-contained, offline survival computer packed with critical tools, knowledge, and AI to keep you informed and empowered—anytime, anywhere.
A multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.
Trajan scans CI/CD pipelines for security vulnerabilities that attackers use to compromise software supply chains. It supports GitHub Actions, GitLab CI, Azure DevOps, Jenkins, and JFrog.
Named .localhost URLs for Development. Replace port numbers with stable, named local URLs. For humans and agents.
Portless replaces port numbers with stable, named .localhost URLs for local development. For humans and agents.
OpenShell is the safe, private runtime for autonomous AI agents.
NVIDIA OpenShell is the safe, private runtime for autonomous AI agents. It provides sandboxed execution environments that protect your data, credentials, and infrastructure. Agents run with exactly the permissions they need and nothing more, governed by declarative policies that prevent unauthorized file access, data exfiltration, and uncontrolled network activity.
Related contents:
End-to-End UI Testing for Mobile and Web.
Maestro makes UI testing dead simple. Write your first test in under 5 minutes. Maestro is an open-source framework that makes UI and end-to-end testing for Android, iOS, and web apps simple and fast. Write your first test in under five minutes using YAML flows and run them on any emulator, simulator, or browser.
Transparently add OAuth 2.0 support to IMAP/POP/SMTP client applications, scripts or any other email use-cases that don't support this authentication method.
An IMAP/POP/SMTP proxy that transparently adds OAuth 2.0 authentication for email clients that don't support this method. Keep legacy email clients working with Exchange Online, Gmail and other providers.
Exploring memory safety that's easier to use.
A programming language that is higher level than Rust but lower level than Go. Someday, anyways.
Related contents:
The Context File System for AI Agents. A Context DataBase for AI Agents.
Memory, Resource, Skill. Everything is a File.
Related contents:
service manager, init system.
Dinit is a service manager / supervision system, which can (on Linux) also function as a system manager and init.
Related contents:
Build a superior context layer for AI agents.
Empower your AI agents through the leading open-source RAG engine, delivering reliable context and an integrated agent platform, built for enterprise.
RAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with Agent capabilities to create a superior context layer for LLMs