Jess Frazelle

gptcommit. A git prepare-commit-msg hook for authoring commit messages with LLMs.

pyo3-stub-gen. Stub file (*.pyi) generator for PyO3

pyo3-stubgen. Generates .pyi files from external .so libraries built using pyo3

gpt-oss. gpt-oss-120b and gpt-oss-20b are two open-weight language models by OpenAI

harmony. Renderer for the harmony response format to be used with gpt-oss

lsp-client. Language server protocol client for CodeMirror

Rectangle. Move and resize windows on macOS with keyboard shortcuts and snap areas

tiktoken. tiktoken is a fast BPE tokeniser for use with OpenAI's models.

databend. Data Agent Ready Warehouse : One for Analytics, Search, AI, Python Sandbox. — rebuilt from scratch. Unified architecture on your S3.

naersk. Build Rust projects in Nix - no configuration, no code generation, no IFD, sandbox friendly.

httptap. View HTTP/HTTPS requests made by any Linux program

llama.vim. Vim plugin for LLM-assisted code/text completion

DeepSeek-R1.

maker. Zoo's KCL language as Typescript Library

ghostty. 👻 Ghostty is a fast, feature-rich, and cross-platform terminal emulator that uses platform-native UI and GPU acceleration.

ratgdo.

avante.nvim. Use your Neovim like using Cursor AI IDE!

RFID-Tag-Guide. Instructions on how to read out the bambulab nfc tags

machine-api. This API intends to provide a standardized local interface to any machines used for manufacturing physical things.

ethercrab. A pure Rust EtherCAT MainDevice supporting std and no_std environments

atopile. Design circuit boards with code! ✨ Get software-like design reuse 🚀, validation, version control and collaboration in hardware; starting with electronics ⚡️

llama3-from-scratch. llama3 implementation one matrix multiplication at a time

hacker-news-undocumented. Some of the hidden norms about Hacker News not otherwise covered in the Guidelines and the FAQ.

vaultwarden. Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs

copilot-rs. Copilot LSP implementation in Rust

samsung-frame-art. A small script that makes it easy to fling a folder of images onto the Samsung Frame TV

playwright-rust. Playwright port to Rust

modeling-app. The Zoo Design Studio app.

diff-viewer-extension. View changes to your models directly within GitHub with our extension for all Chrome, Edge, and Chromium-powered browsers.

tower-lsp. Language Server Protocol implementation written in Rust

llama2.rs. A fast llama2 decoder in pure Rust.

hyperDB. A hyper-fast local vector database for use with LLM Agents. Now accepting SAFEs at $135M cap.

ann-benchmarks. Benchmarks of approximate nearest neighbor libraries in Python

CLIP. CLIP (Contrastive Language-Image Pretraining), Predict the most relevant text snippet given an image

evals. Evals is a framework for evaluating LLMs and LLM systems, and an open-source registry of benchmarks.

tch-rs. Rust bindings for the C++ api of PyTorch.

model3d. Create & render beautiful 3D models

meilisearch. A lightning-fast search engine API bringing AI-powered hybrid search to your sites and applications.

datafusion-sqlparser-rs. Extensible SQL Lexer and Parser for Rust

knap. Neovim plugin for creating live-updating-as-you-type previews of LaTeX, markdown, and other files in the viewer of your choice.

MonitorControl. 🖥 Control your display's brightness & volume on your Mac as if it was a native Apple Display. Use Apple Keyboard keys or custom shortcuts. Shows the native macOS OSDs.

cxx. Safe interop between Rust and C++

cc-rs. Rust library for build scripts to compile C/C++ code into a Rust library

rust-cuda. Ecosystem of libraries and tools for writing and executing fast GPU code fully in Rust.

difftastic. a structural diff that understands syntax 🟥🟩

gpt3-logseq. A simple gpt-3 integration with Logseq

apple-juice. An advanced battery gauge for macOS, that displays the remaining battery time and more.

tauri. Build smaller, faster, and more secure desktop and mobile applications with a web frontend.

cube. 📊 Cube Core is open-source semantic layer for AI, BI and embedded analytics

omnivore. Omnivore is a complete, open source read-it-later solution for people who like reading.

vim-css-color. Preview colours in source code while editing

nabla.nvim. take your scientific notes :pencil2: in Neovim

cpr. C++ Requests: Curl for People, a spiritual port of Python Requests.

CreateAPI. Delightful code generator for OpenAPI specs

libflightplan. A library for reading and writing flight plans in various formats. Available as both a C and Zig library.

cross. “Zero setup” cross compilation and “cross testing” of Rust crates

secretive. Protect your SSH keys with your Mac's Secure Enclave

pinentry-touchid. Custom GPG pinentry program for macOS that allows using Touch ID for fetching the password from the macOS keychain.

awesome-neovim. Collections of awesome neovim plugins.

copilot.vim. Neovim plugin for GitHub Copilot

dorita980. Unofficial iRobot Roomba and Braava (i7/i7+, 980, 960, 900, e5, 690, 675, m6, etc) node.js library (SDK) to control your robot

Pulse. Network logger for Apple platforms

foxtrot. A fast, experimental STEP file viewer

Nuke. Image loading system

getting-started. How to get started with Oresat, and CubeSats in general

minimacplus. Source code, PCB artwork and firmware for a tiny Macintosh Plus

curv. a language for making art using mathematics

eul. 🖥️ macOS status monitoring app written in SwiftUI.

community.

dxf-rs. Rust

yubikey-agent. yubikey-agent is a seamless ssh-agent for YubiKeys.

yubikey.rs. Pure Rust YubiKey host-side driver for PIV-based RSA/ECC key storage + signing/encryption support

age. A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.

keyrace. Daily multiplayer keyboard races for macos

croc. Easily and securely send things from one computer to another :crocodile: :package:

keybrain. Drop-in replacement controller for WASD CODE v2B keyboard

ddclassify. Dewey Decimal Classifier

blink. Blink Mobile Shell for iOS (Mosh based)

tailscale. The easiest, most secure way to use WireGuard and 2FA.

nestur. The NES (emulator) you left outside in the rain but let dry and still kind of works

bluez-alsa. Bluetooth Audio ALSA Backend

pomerium. Pomerium is an identity and context-aware access proxy.

docker-signal. Whisper Systems Signal Desktop standalone application in Docker.

unfork. unfork(2) is the inverse of fork(2). sort of.

kin-openapi. OpenAPI 3.0 and 3.1 (and Swagger v2) implementation for Go (parsing, converting, validation, and more)

go-twitter. Go Twitter REST and Streaming API v1.1

differential-privacy. Google's differential privacy libraries.

qspimux. QSPI flash multiplexer - connect a SPI NOR flash to either an embedded system or a programmer for remote firmware tests

weechat-matrix. Weechat Matrix protocol script written in python

book. LinuxBoot book which contains the documentation in markdown format

PSPTool. Display, extract, and manipulate PSP firmware inside UEFI images

oreboot. oreboot is a fork of coreboot, with C removed, written in Rust.

heads. A minimal Linux that runs as a coreboot or LinuxBoot ROM payload to provide a secure, flexible boot environment for laptops, workstations and servers.

awesome-reMarkable. A curated list of projects related to the reMarkable tablet

srvfb. Stream a framebuffer device over HTTP

oak. Meaningful control of data in distributed systems.

graphene. Graphene / Graphene-SGX - a library OS for Linux multi-process applications, with Intel SGX support

spec. The canonical spec for ulid

rmapi. Go app that allows you to access your reMarkable tablet files through the Cloud API

traffic-control-classifier-example. Just an example I wrote for a tc ebpf classifier (cls_bpf)

firecracker. Secure and fast microVMs for serverless computing.

katran. A high performance layer 4 load balancer

dive. A tool for exploring each layer in a docker image

up. Ultimate Plumber is a tool for writing Linux pipes with instant live preview

stellar. Simplified Container System

rootlesskit. Linux-native "fake root" for implementing rootless containers

vfsgen. Takes an input http.FileSystem (likely at go generate time) and generates Go code that statically implements it.

boss. Run containers like a ross

sso. sso, aka S.S.Octopus, aka octoboi, is a single sign-on solution for securing internal services

pkg. A home for various Go packages to be imported by other projects.

github-markdown-toc. Easy TOC creation for GitHub README.md

viewdocs. Read the Docs meets Gist.io for simple Markdown project documentation

lux. 👾 Fast and simple video download library and CLI tool written in Go

mkcert. A simple zero-config tool to make locally trusted development certificates with any names you'd like.

go-cmp. Package for comparing Go values in tests

dbus. Native Go bindings for D-Bus

fwupd. A system daemon to allow session software to update firmware

intel_nuc_led. Intel NUC7i[x]BN and NUC6CAY LED Control for Linux

vim-polyglot. A solid language pack for Vim.

vim-devicons. Adds file type icons to Vim plugins such as: NERDTree, vim-airline, CtrlP, unite, Denite, lightline, vim-startify and many more

curl. A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, MQTTS, POP3, POP3S, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, TELNET, TFTP, WS and WSS. libcurl offers a myriad of powerful features

usql. Universal command-line interface for SQL databases

watchtower. A process for automating Docker container base image updates.

wesanderson. A Wes Anderson color palette for R

gif-for-cli. Python

gentoo-docker-images. [MIRROR] Common effort to get an official and automated gentoo base docker container

rust-clippy. A bunch of lints to catch common mistakes and improve your Rust code. Book: https://doc.rust-lang.org/clippy/

shellharden. The corrective bash syntax highlighter

reg. Docker registry v2 command line client and repo listing generator with security checks.

littleboss. littleboss: supervisor construction kit

docker-hackmd. DEPRECATION: Please read our online documentation instead

dillinger. The last Markdown editor, ever.

overleaf. A web-based collaborative LaTeX editor

bblfshd. A self-hosted server for source code parsing

transfer.sh. Easy and fast file sharing from the command-line.

buildbench. benchmark tool for Docker, BuildKit, img, Buildah, and Kaniko

img. Standalone, daemon-less, unprivileged Dockerfile and OCI compatible container image builder.

awesome-machine-learning-on-source-code. Cool links & research papers related to Machine Learning applied to source code (MLonCode)

gitbase. SQL interface to git repositories, written in Go. https://docs.sourced.tech/gitbase

go-tripit. TripIt API in Go

go-internals. A book about the internals of the Go programming language.

git-standup. Recall what you or your team did on the last working day

cmd-localfs. Remotely sharing a local directory with a container over SSH

xhyve. xhyve, a lightweight OS X virtualization solution

simh. The Computer History Simulation Project

libcni. A generic CNI library to provide APIs for CNI plugin interactions

cri. Moved to https://github.com/containerd/containerd/tree/master/pkg/cri . If you wish to submit issues/PRs, please submit to https://github.com/containerd/containerd

libslirp. A TCP-IP emulator as a library.

raw. Package raw enables reading and writing data at the device driver level for a network interface. MIT Licensed.

su-exec. switch user and group id and exec

bpftrace. High-level tracing language for Linux eBPF - development moved to https://github.com/iovisor/bpftrace

httpbin. HTTP Request & Response Service, written in Python + Flask.

go2seccomp. Generate seccomp profiles from go binaries

runrootless. rootless OCI container runtime with ptrace hacks (No root privileges nor SUID binaries (e.g. newuidmap) are required!)

virtcontainers. A Go package for building hardware virtualized container runtimes

statik. Embed files into a Go executable

runtime. Kata Containers version 1.x runtime (for version 2.x see https://github.com/kata-containers/kata-containers).

DockerConEU2015-demo. The `docker run unikernel` demo DockerCon EU (Nov 2015)

netboot. Packages and utilities for network booting

upspin. Upspin: A framework for naming everyone's everything.

clevis. Automated Encryption Framework

gobpf. Go bindings for creating BPF programs.

container-diff. container-diff: Diff your Docker containers

gosu. Simple Go-based setuid+setgid+setgroups+exec

go-tools. Staticcheck - The advanced Go linter

opensnitch. OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

linux. Linux kernel source tree

cmd-colors-solarized. Solarized color settings for Windows command prompt

runtime. OCI (Open Containers Initiative) compatible runtime using Virtual Machines

cilium. eBPF-based Networking, Security, and Observability

govanityurls. Use a custom domain in your Go import path

syzkaller. syzkaller is an unsupervised coverage-guided kernel fuzzer

go-ykpiv. Golang interface to manage Yubikeys, including a crypto.Signer & crypto.Decrypter interface

github-mention-highlighter. A Chrome extension that automatically highlights any time you are mentioned on a GitHub issue or pull request thread by highlighting your username, any team you're a member of, and the border of any containing comment.

cc-oci-runtime. OCI (Open Containers Initiative) compatible runtime for Intel® Architecture

groto. A protocol buffer file definition parser written in Go

EQGRP. Decrypted content of eqgrp-auction-file.tar.xz

gmail-britta. Generate complex gmail filters via a neat little ruby DSL

oauth2_proxy. A reverse proxy that provides authentication with Google, Github or other provider

wireguard-monolithic-historical. Historical monolithic WireGuard repository, split into wireguard-tools, wireguard-linux, and wireguard-linux-compat.

e2email. E2EMail is a simple Chrome application - a Gmail client that exchanges OpenPGP mail.

vim-linux-coding-style. Vim plugin to respect the Linux kernel coding style http://www.vim.org/scripts/script.php?script_id=4369

falco. Cloud Native Runtime Security

flatpak. Linux application sandboxing and distribution framework

macouflage. macouflage is a MAC address anonymization tool, written in Golang, for Linux-based operating systems.

usblockout. USBLockout monitors your user session and triggers Grsecurity Deny New USB feature.

hellogopher. Hellogopher: "just clone and make" your conventional Go project

subgraph-oz-profiles. Repository of maintained OZ profiles and seccomp filters.

sgos_handbook. Subgraph OS Handbook

fw-daemon. Subgraph Application Firewall

core. :house_with_garden: Open source home automation that puts local control and privacy first.

algo. Set up a personal VPN in the cloud

yubitouch. Bash script for setting or clearing touch requirements for # cryptographic operations the OpenPGP application on a YubiKey 4

bcc. BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more

masscan. TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

alacritty. A cross-platform, OpenGL terminal emulator.

keytransparency. A transparent and secure way to look up public keys.

dep. Go dependency management tool experiment (deprecated)

cinf. Command line tool to view namespaces and cgroups, useful for low-level container prodding

the-onion-diaries. Blog-type notes about building Onion sites