apache2-licensed
Scalable Distributed Storage.
SeaweedFS is a fast distributed storage system for blobs, objects, files, and data lake, for billions of files! Blob store has O(1) disk seek, cloud tiering. Filer supports Cloud Drive, xDC replication, Kubernetes, POSIX FUSE mount, S3 API, S3 Gateway, Hadoop, WebDAV, encryption, Erasure Coding. Enterprise version is at seaweedfs.com.
A High-Performance S3 to File Translation Tool. Turn your local filesystem into an S3 server with a single command!
The Versity S3 Gateway serves as a bridge between file based storage systems and applications that rely on S3 object interfaces. It enables applications to interact with file storage using familiar S3 operations like put and get, allowing for easy integration and compatibility. Built from scratch in Go, a highly efficient programming language known for its performance and scalability, the Versity S3 Gateway leverages Go’s benefits to deliver exceptional speed and efficiency.
Related contents:
Helm chart, that enables scheduled scaling of a target resource, intended to be add overprovisioning to an autoscaling k8s cluster.
Helm Chart for overprovisioning an autoscaling Kubernetes Cluster, based on the Cluster Proportional Autoscaler and a deployment, that's acting as a "placeholder" for overprovisioning which is inspired by Cluster Overprovisioning Helm Chart from Delivery Hero.
Related contents:
Fine-Grained Authorization. A high performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar
Relationship-based access control made fast, scalable, and easy to use.
OpenFGA is an open-source authorization solution that allows developers to build granular access control using an easy-to-read modeling language and friendly APIs.
Related contents:
LLM Service Fingerprinting Tool.
Simple LLM service identification - translate IP:Port to Ollama, vLLM, LiteLLM, or 30+ other AI services in seconds.
Julius is an LLM service fingerprinting tool for security professionals. It detects which AI server software is running on network endpoints during penetration tests, attack surface discovery, and security assessments.
Unlike model fingerprinting tools that identify which LLM generated text, Julius identifies the server infrastructure: Is that endpoint running Ollama? vLLM? LiteLLM? A Hugging Face deployment? Julius answers in seconds.
Related contents:
Open Source DevOps Control Plane.
Run operational workflows across the tools you already use. Stay in control of releases, incident response, infrastructure provisioning, notifications, disaster recovery, and everything in between. SuperPlane is an open source DevOps control plane for defining and running event-based workflows. It works across the tools you already use such as Git, CI/CD, observability, incident response, infra, and notifications.
Related contents:
Chrome automation from the command line. CLI tool for interacting with the web.
A Go CLI tool that drives a persistent headless Chrome instance using the rod browser automation library. Each command connects to the same long-running Chrome process, making it easy to script multi-step browser interactions from shell scripts or interactive use.
Related contents:
Create executable demo documents that show and prove an agent's work.
Showboat helps agents build markdown documents that mix commentary, executable code blocks, and captured output. These documents serve as both readable documentation and reproducible proof of work. A verifier can re-execute all code blocks and confirm the outputs still match.
Related contents:
the Honeycomb Sampling Proxy.
Refinery is a trace-aware tail-based sampling proxy. It examines whole traces and intelligently applies sampling decisions (whether to keep or discard) to each trace.
Refinery is a tail-based sampling proxy and operates at the level of an entire trace. Refinery examines whole traces and intelligently applies sampling decisions to each trace. These decisions determine whether to keep or drop the trace data in the sampled data forwarded to Honeycomb.
A tail-based sampling model allows you to inspect an entire trace at one time and make a decision to sample based on its contents. For example, your data may have a root span that contains the HTTP status code to serve for a request, and another span that contains information on whether the data was served from a cache. Using Refinery, you can choose to keep only traces that had a 500 status code and were also served from a cache.
Apache Parquet is an open source, column-oriented data file format designed for efficient data storage and retrieval. It provides high performance compression and encoding schemes to handle complex data in bulk and is supported in many programming languages and analytics tools.
Related contents:
A Complete WebGPU Game Engine for Browser & Desktop Arcade Oriented.
ArcadeGPU is a high performance WebGPU game engine inspired by classic techniques that made retro games legendary.
Related contents:
Production-grade Ghidra MCP Server — 132 endpoints, cross-binary documentation transfer, batch analysis, headless mode, and Docker deployment for AI-powered reverse engineering.
A production-ready Model Context Protocol (MCP) server that bridges Ghidra's powerful reverse engineering capabilities with modern AI tools and automation frameworks.
Related contents:
Spring Boot helps you to create Spring-powered, production-grade applications and services with absolute minimum fuss.
Related contents:
Free Open-source Q&A Platform. Build a Knowledge Base with Apache Answer.
A Q&A platform software for teams at any scale. Whether it’s a community forum, help center, or knowledge management platform, you can always count on Answer.
the continuous thing-doer.
Concourse is an automation system written in Go. It is most commonly used for CI/CD, and is built to scale to any kind of automation pipeline, from simple to complex.
Concourse is very opinionated about a few things: idempotency, immutability, declarative config, stateless workers, and reproducible builds.
Idempotent schema management for MySQL, PostgreSQL, SQLite, and SQL Server.
sqldef is a CLI tool for diffing two SQL schemas. You can use it to manage the migration of RDBMSs using regular SQL DDLs.
Supported databases: MySQL, MariaDB, TiDB, PostgreSQL, SQL Server, and SQLite3.
Hunt Smarter, Hunt Harder.
Active Directory Security Analysis Platform.
ADTrapper is a comprehensive security analysis platform designed for cybersecurity professionals to analyze Windows Active Directory authentication logs. The platform provides advanced threat detection, anomaly analysis, and interactive visualizations to help identify and investigate security incidents.
Kubernetes-native AI serving platform for scalable model serving.
Related contents:
Vercel for Backend. Deploy backends without the hassle.
A modern platform for deploying, managing, and scaling your Python and Node.js backends.
Agent Connectivity Solved. Next Generation Agentic Proxy for AI Agents and MCP servers.
Agent Gateway is an open source data plane built on AI-native protocols (A2A & MCP) to connect, secure, and observe agent-to-agent and agent-to-tool communication across any framework and environment.
Related contents:
a container wrapper.
Podenv provides a declarative interface to manage containerized applications. Using rootless containers, podenv let you run applications seamlessly.
Related contents:
Fast container image distribution plugin with lazy pulling .
Pulling image is one of the time-consuming steps in the container lifecycle. Research shows that time to take for pull operation accounts for 76% of container startup time[FAST '16]. Stargz Snapshotter is an implementation of snapshotter which aims to solve this problem by lazy pulling. Lazy pulling here means a container can run without waiting for the pull completion of the image and necessary chunks of the image are fetched on-demand.
Related contents:
The first open-source platform for automated database provisioning and management. It supports multiple database technologies and can be hosted on any Kubernetes infrastructure, in the cloud or on-premises.
OpenEverest is an open-source platform for automated database provisioning and management. It supports multiple database technologies and can be hosted on any Kubernetes infrastructure, in the cloud or on-premises.
Related contents:
Open-source offensive security platform for conducting phishing campaigns that weaponizes iCalendar automatic event processing.
Tangled is a phishing platform designed from an offensive security perspective. It automates many of the aspects of social engineering campaigns delivery and weaponizes iCalendar rendering features in Microsoft Outlook & Gmail (Google Workspace) to deliver spoofed meeting invites that are automatically added to a user's calendar without interaction.
Kubernetes usage analytics for CPU, Memory, and GPU — track costs and optimize cluster resources.
kube-opex-analytics is a Kubernetes usage accounting and analytics tool that helps organizations track CPU, Memory, and GPU resources consumed by their clusters over time (hourly, daily, monthly).
A comprehensive solution for managing, securing, and accessing Model Context Protocol (MCP) servers at scale. Built for enterprises, development teams, and autonomous AI agents.
Enterprise-ready MCP Gateway & Registry that centralizes AI development tools with secure OAuth authentication, dynamic tool discovery, and unified access for both autonomous AI agents and AI coding assistants. Transform scattered MCP server chaos into governed, auditable tool access with Keycloak/Cognito integration.
Related contents:
Model Context Protocol Gateway.
Model Context Protocol gateway & proxy - unify REST, MCP, and A2A with federation, virtual servers, retries, security, and an optional admin UI.
ContextForge MCP Gateway is a feature-rich gateway, proxy and MCP Registry that federates MCP and REST services - unifying discovery, auth, rate-limiting, observability, virtual servers, multi-transport protocols, and an optional Admin UI into one clean endpoint for your AI clients. It runs as a fully compliant MCP server, deployable via PyPI or Docker, and scales to multi-cluster environments on Kubernetes with Redis-backed federation and caching.
Related contents:
A VS Code/Cursor extension capable of performing realtime security monitoring from inside the IDE.
IDE Shepherd is a security extension for VS Code and Cursor IDEs that provides real-time runtime protection against malicious extensions and supply chain attacks. Using advanced require-in-the-middle (RITM) instrumentation, IDE Shepherd intercepts Node.js primitives at the module loading layer, enabling comprehensive monitoring and blocking of suspicious network requests, process executions, dynamic code evaluation, and workspace tasks.
Related contents:
This repo contains the SDK and specification for MCP Apps Extension (SEP-1865).
Related contents:
Turn any PDF or image document into structured data for your AI. A powerful, lightweight OCR toolkit that bridges the gap between images/PDFs and LLMs. Supports 100+ languages.
PaddleOCR is an industry-leading, production-ready OCR and document AI engine, offering end-to-end solutions from text extraction to intelligent document understanding
Related contents:
Sophisticated job processing framework. Process Billions of Jobs Without Losing Sleep.
Thousands of Elixir and Python applications rely on Oban Pro for background jobs with advanced workflows, distributed concurrency, highly optimized performance, and a trove of enterprise grade features.
Related contents:
Cowork-like experience in the browser using filesystem api.
An AI-powered file system manager built with the File System Access API. Co-do lets you select a folder on your local machine and use AI to perform operations on the files within.
Related contents:
Lightweight, container-free sandbox for running commands with network and filesystem restrictions.
Fence wraps commands in a sandbox that blocks network access by default and restricts filesystem operations based on configurable rules. It's most useful for running semi-trusted code (package installs, build scripts, CI jobs, unfamiliar repos) with controlled side effects, and it can also complement AI coding agents as defense-in-depth.
the sovereign forge.
Radicle is an open source, peer-to-peer code collaboration stack built on Git. Unlike centralized code hosting platforms, there is no single entity controlling the network. Repositories are replicated across peers in a decentralized manner, and users are in full control of their data and workflow.
A beautiful config generator for Ghostty terminal.
Related contents:
A gallery that showcases on-device ML/GenAI use cases and allows people to try and use models locally.
The Google AI Edge Gallery is an experimental app that puts the power of cutting-edge Generative AI models directly into your hands, running entirely on your Android (available now) and iOS (available now via TestFlight) devices. Dive into a world of creative and practical AI use cases, all running locally, without needing an internet connection once the model is loaded. Experiment with different models, chat, ask questions with images and audio clip, explore prompts, and more!
Related contents:
Chat that is simple, secure, and private. Everything you expect from an easy-to-use messaging platform, but now under your control.
Lightweight Container Runtime for Kubernetes.
Open Container Initiative-based implementation of Kubernetes Container Runtime Interface. CRI-O follows the Kubernetes release cycles with respect to its minor versions (1.x.y). Patch releases (1.x.z) for Kubernetes are not in sync with those from CRI-O, because they are scheduled for each month, whereas CRI-O provides them only if necessary. If a Kubernetes release goes End of Life, then the corresponding CRI-O version can be considered in the same way.
Related contents:
aura-inspector is a Swiss Army knife of Salesforce Experience Cloud testing. It facilitates in discovering misconfigured Salesforce Experience Cloud applications as well as automates much of the testing process. Some of it's functionality includes:
Related contents:
The Claude Agent Skill for Terraform and OpenTofu - testing, modules, CI/CD, and production patterns.
Comprehensive Terraform and OpenTofu best practices skill for Claude Code. Get instant guidance on testing strategies, module patterns, CI/CD workflows, and production-ready infrastructure code.
Related contents:
A modern, UI-first Identity and Access Management (IAM) / Single Sign-On (SSO) platform with comprehensive SaaS management capabilities. Supports OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, RADIUS, Google Workspace, Active Directory, and Kerberos
A tiny experimental language designed to be targeted by coding LLMs.
NanoLang transpiles to C for native performance while providing a clean, modern syntax optimized for both human readability and AI code generation.
The common language for platforms, agents and businesses.
UCP defines building blocks for agentic commerce—from discovering and buying to post purchase experiences—allowing the ecosystem to interoperate through one standard, without custom builds.
Related contents:
MiniJinja is a powerful but minimal dependency template engine which is based on the syntax and behavior of the Jinja2 template engine for Python.
Related contents:
🚀 Cowork with Your AI, Gemini CLI, Claude Code, Codex, Qwen Code, Goose CLI, Auggie, and more.
Free, local, open-source Cowork for Gemini CLI, Claude Code, Codex, Opencode, Qwen Code, Goose Cli, Auggie, and more |
If you have installed command-line tools like Gemini CLI, Claude Code, CodeX, Qwen Code, Goose AI, Augment Code, AionUi can automatically detect them and provide a unified graphical interface
ENV management tool, consolidate and manage .env and env variables.
Related contents:
Security, visibility, and authorization for AI agents
Leash wraps AI coding agents in containers and monitors their activity. You define policies in Cedar; Leash enforces them instantly.
Authorize and monitor your AI agents with policy enforcement, sandboxed execution, and real-time observability—ensuring they operate safely within your defined boundaries.
Kubevious (pronounced [kju:bvi:əs]) is a suite of app-centric assurance, validation, and introspection products for Kubernetes. It helps running modern Kubernetes applications without disasters and costly outages by continuously validating application manifests, cluster state, and configuration. Kubevious projects detect and prevent errors(typos, misconfigurations, conflicts, inconsistencies) and violations of best practices. Our secret sauce is based on the ability to validate across multiple manifests and look at the configuration from the application vantage point.
an advanced IRC bouncer that is left connected so an IRC client can disconnect/reconnect without losing the chat session.
Agent harness framework for building, running, and verifying LLM workflows.
Gambit helps you build reliable LLM workflows by composing small, typed “decks” with clear inputs/outputs and guardrails. Run decks locally, stream traces, and debug with a built-in UI.
Open Responses is an open-source specification and ecosystem for building multi-provider, interoperable LLM interfaces based on the OpenAI Responses API. It defines a shared schema, and tooling layer that enable a unified experience for calling language models, streaming results, and composing agentic workflows—independent of provider.
A fast, feature-rich CSV/TSV/delimited file viewer for the command line.
ftv brings spreadsheet-like functionality to your terminal with vim-inspired controls.
Make shipping applications more enjoyable.
KubeVela is a modern software delivery platform that makes deploying and operating applications across today's hybrid, multi-cloud environments easier, faster and more reliable.
Low-code programming for event-driven applications The easiest way to collect, transform and visualize real-time data.
AI → JSON → UI. AI-generated UI with guardrails.
When users prompt for UI, you need guarantees. json-render gives AI a constrained vocabulary so output is always predictable.
Predictable. Guardrailed. Fast.
Let users generate dashboards, widgets, apps, and data visualizations from prompts — safely constrained to components you define.
Related contents:
Dicer auto-sharder: Infrastructure for building sharded services.
Dicer is a foundational infrastructure system for building sharded services. By colocating in-memory state with the computation that operates on it, Dicer enables applications to achieve low latency, high availability, and cost efficiency at scale. It is widely used across Databricks, where it has driven substantial reliability and performance improvements in production systems.
Ralph is the CMDB / Asset Management system for data center and back office hardware.
Ralph is full-featured Asset Management, DCIM and CMDB system for data centers and back offices.
Semantic search for agents.
A calm, CLI-native way to semantically grep everything, like code, images, pdfs and more.
Related contents:
A High-Performance, GPU-Accelerated Redis Client Built with Rust 🦀 and GPUI ⚡️
Zedis is a next-generation Redis GUI client designed for developers who demand speed.