Jason Stangroome

torlink. A sleek, zero-setup torrent finder and downloader that lives right in your terminal.

Jailbreaker-CE. Jailbreaker is a local evaluation tool for testing chatbot and agent-style systems against jailbreak, prompt-injection, and related failure modes.

progress. Linux tool to show progress for cp, mv, dd, ... (formerly known as cv)

clamav. ClamAV - Documentation is here: https://docs.clamav.net

geos. Source code of GEOS 2.0 for the Commodore 64 and 128

periscope. Hosted version of ladder and alternative to 12ft.io.

diffzip. TypeScript

obsidian-livesync. TypeScript

logseq. A privacy-first, open-source platform for knowledge management and collaboration. Download link: http://github.com/logseq/logseq/releases. roadmap: https://logseq.io/p/NX4mc_ggEV

ctail. Tail Certificate Transparency logs and extract hostnames

Qwen3-TTS-Train. Qwen3-TTS is an open-source series of TTS models developed by the Qwen team at Alibaba Cloud, supporting stable, expressive, and streaming speech generation, free-form voice design, and vivid voice cloning.

LibreChat. Enhanced ChatGPT Clone: Features Agents, MCP, Skills, DeepSeek, Anthropic, AWS, OpenAI, Responses API, Azure, Groq, o1, GPT-5, Mistral, OpenRouter, Vertex AI, Gemini, Artifacts, AI model switching, message search, Code Interpreter, langchain, DALL-E-3, OpenAPI Actions, Functions, Secure Multi-User Auth, Presets, open-source for self-hosting. Active

meilisearch. A lightning-fast search engine API bringing AI-powered hybrid search to your sites and applications.

cascade. A friendly DNSSEC signing solution: sensible defaults, controllability, observability and flexibility.

LibreTranslate. Free and Open Source Machine Translation API. Self-hosted, offline capable and easy to setup.

lupine. LUPINE is a GPU over IP bridge allowing GPUs on remote machines to be attached to CPU-only machines.

editorconfig-checker. A tool to verify that your files are in harmony with your .editorconfig

gcfg. read INI-style configuration files into Go structs; supports user-defined types and subsections

bumblebee. Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.

nora. Lightweight multi-format artifact registry. 13 formats: Docker, Maven, npm, PyPI, Cargo, Go, NuGet, RubyGems, Terraform, Conan, Ansible Galaxy, Dart Pub, and Raw. Single binary, zero dependencies, <100MB RAM.

goaccess. GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through your browser.

liteparse. A fast, helpful, and open-source document parser

kontainer-engine-driver-lke. Kontainer Engine Driver for Rancher Cluster Driver

kontainer-engine-driver-example. Go

floci. Light, fluffy, and always free - The AWS Local Emulator alternative

mail-archiver. Mail-Archiver is a web application for archiving, searching, and exporting emails from multiple accounts. Featuring folder sync, attachment support, mailbox migration and a dashboard.

openDAW. openDAW is a next-generation web-based Digital Audio Workstation (DAW)

rector. Instant Upgrades and Automated Refactoring of any PHP 5.3+ code

k6. A modern load testing tool, using Go and JavaScript

stickers. Building blocks for charmbracelet/lipgloss 👾

smokedmeat. A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.

GoSungrow. GoLang implementation to access the iSolarCloud API updated by SunGrow inverters.

reflow. A collection of (ANSI-sequence aware) text reflow operations & algorithms

securix. SécurixOS is a NixOS-based secure operating system tailored for small to medium-sized teams. It provides a minimal, hardened environment with strong isolation, reproducibility, and policy-driven configurations to ensure operational security and compliance.

glkvm. Python

ntp. The full and complete NTP Reference Implementation from the Network Time Protocol Project at Network Time Foundation.

huh. Build terminal forms and prompts 🤷🏻‍♀️

wire. Compile-time Dependency Injection for Go

bubblon. Manage nested Bubble Tea models 🥞

virt-v2v. Virt-v2v converts guests from foreign hypervisors to run on KVM

pretty-php. The opinionated PHP code formatter

ntcharts. Nimble Terminal Charts for the Golang BubbleTea framework and your TUIs

go-qemu. Go packages to interact with QEMU using the QEMU Machine Protocol (QMP). Apache 2.0 Licensed.

GLiNER2. Unified Schema-Based Information Extraction

wol. Package wol implements a Wake-on-LAN client. MIT Licensed.

cosmopolitan. build-once run-anywhere c library

llamafile. Distribute and run LLMs with a single file.

vulhunt. Vulnerability detection framework by Binarly's REsearch team

betterleaks. Scan the world (for secrets)

glkvm-cloud. Self-Deployed Lightweight KVM Cloud

docs-kvm. HTML

KslDump. KslDump — Why bring your own knife when Defender already left one in the kitchen?

ht-vllm-omni. A framework for efficient model inference with omni-modality models

CorridorKey. Perfect Green Screen Keys

blackbox_exporter. Blackbox prober exporter

reproducible-mkosi. Build bit-by-bit reproducible OS images with mkosi and Nix

TextyMcSpeechy. Easily create Piper text-to-speech models in any voice. Make a text-to-speech model with your own voice recordings, or use thousands of RVC voices. Works offline on a Raspberry pi. Rapidly record custom datasets for any metadata.csv file and listen to your model as it is training.

silero-vad. Silero VAD: pre-trained enterprise-grade Voice Activity Detector

silero-models. Silero Models: pre-trained text-to-speech models made embarrassingly simple

stereOS. A Linux based operating system hardened and purpose built for AI agents

go-vad. Voice Activity Detection package for Golang. Might be useful for speech-to-speech or speech-to-text system.

v2. Minimalist and opinionated feed reader

ente. 💚 End-to-end encrypted cloud for everything.

fancy-cryptography. Deployments of fancy cryptography

tld. TLD by country

stunmesh-go. A WireGuard helper that enables peer-to-peer connections through NAT using STUN discovery, with encrypted endpoint storage via a pluggable backend system.

llmfit. Hundreds of models & providers. One command to find what runs on your hardware.

BGPlay. BGPlay.js provides a graphical and intuitive representation of the inter-domain routing and its evolution over time

sandboxec. A lightweight command sandbox for Linux, secure-by-default, built on Landlock.

unredact. A simple tool for reading in poorly redacted documents and reproducing their origional form

amber. 💎 Amber the programming language compiled to Bash/Ksh/Zsh

andrej-karpathy-skills. A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls.

FxEmbed. Fix X/Twitter and Bluesky embeds! Use multiple images, videos, polls, translations and more on Discord, Telegram and others

ntfy. Send push notifications to your phone or desktop using PUT/POST

vouch. A community trust management system based on explicit vouches to participate.

rememory. a digital safe with multiple keys, held by people you trust

EpsteOut. See which of your LinkedIn connections appear in the Epstein files.

xa.sh. A cross-assembler in Bourne

navidrome. 🎧 Your Personal Streaming Service

num2words. num2words - Numbers to words converter in Go (Golang)

brakeman. A static analysis security vulnerability scanner for Ruby on Rails applications

git-credential-1password. A Git credential helper that utilizes the 1Password CLI to authenticate a Git over http(s) connection.

purl-spec. A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby

roadrunner. 🤯 High-performance PHP application server, process manager written in Go and powered with plugins

event-loop. Revolt is a rock-solid event loop for concurrent PHP applications.

openswoole. Openswoole: powering the next-generation micro-services and application

fusionpbx. Official FusionPBX - A full-featured domain based multi-tenant PBX and voice switch for FreeSwitch.

sentences. A multilingual command line sentence tokenizer in Golang

sentencizer. A sentence splitting (sentence boundary disambiguation) library for Go. It is rule-based and works out-of-the-box.

phonenumbers. Go port of Google's libphonenumber library

libphonenumber. Google's common Java, C++ and JavaScript library for parsing, formatting, and validating international phone numbers.

vllm-omni. A framework for efficient model inference with omni-modality models

docker-credential-helpers-1password. Fork of Official docker credential helper for 1password integration

docker-credential-helpers. Programs to keep Docker login credentials safe by storing in platform keystores

dnf5. Next-generation RPM package management system

thinstation. A framework for making thin and light Linux based images for x86 based machines and thinclients.

py-strace2pcap. convert specific strace output file to pcap using scapy

avo. Generate x86 Assembly with Go

pocket-tts. A TTS that fits in your CPU (and pocket)

automatic-ripping-machine. Automatic Ripping Machine (ARM) Scripts

HandBrake. HandBrake's development repository

sshfs. A network filesystem client to connect to SSH servers

subiquity. Ubuntu Server Installer, and backend for Ubuntu Desktop Installer

mox. modern full-featured open source secure mail server for low-maintenance self-hosted email

postfixadmin. PostfixAdmin - web based virtual user administration interface for Postfix mail servers

tparted. Text-based user interface (TUI) frontend for parted: A simple, user-friendly utility for creating, reorganizing, and deleting disk partitions, based on Turbo/Free Vision application framework.

mysql-server. MySQL Server, the world's most popular open source database, and MySQL Cluster, a real-time, open source transactional database.

wavesurfer.js. Audio waveform player

peaks.js. JavaScript UI component for interacting with audio waveforms

DiskImageTool. A powerful floppy disk image manager with built-in bitstream analysis and Greaseweazle support. Also includes optional Kryoflux integration.

resticprofile. Configuration profiles manager and scheduler for restic backup

natpmp-controller. Go

sks. Secure Key Storage (SKS) is a library for Go that abstracts Security Hardware on laptops.

dupeguru. Find duplicate files

instagram-cli. Instagram's CLI and TUI client -- The ultimate weapon against brainrot

jellyfin. The Free Software Media System - Server Backend & API

wezterm. A GPU-accelerated cross-platform terminal emulator and multiplexer written by @wez and implemented in Rust

sclocka. The real screensaver/lock for terminals

authelia. The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™

polaris. Polaris is a music streaming application, designed to let you enjoy your music collection from any computer or mobile device.

koel. Music streaming solution that works.

mmdb-server. mmdb-server is an open source fast API server to lookup IP addresses for their geographic location.

AndroidMic. Use your Android phone as a microphone for your PC

x-ray. A tool to detect whether a PDF has a bad redaction

Apps2Samsung. One-click app installer for Samsung TVs, projectors and smart monitors (Tizen) — Jellyfin, Moonlight, and the whole community catalog.

crowdsec. CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.

zerobyte. Backup automation for self-hosters. Built on top of restic

versitygw. A simple to deploy but feature rich S3 object storage server for your filesystem

got-your-back. Got Your Back (GYB) is a command line tool for backing up your Gmail messages to your computer using Gmail's API over HTTPS.

CVE-2025-55182-scanner. A non-intrusive surface scanner for CVE-2025-55182 (React Server Components RCE). Detects exposed RSC endpoints in React 19 and Next.js applications

the-bastion. Authentication, authorization, traceability and auditability for SSH accesses.

bun. Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one

gomodfs. GOMODCACHE Go module cache FUSE + NFS + WebDAV + WinFsp filesystem

restic. Fast, secure, efficient backup program

webrtc. Pure Go implementation of the WebRTC API

tayga. Simple, no-fuss NAT64 for Linux

model_server. A scalable inference server for models optimized with OpenVINO™

websocket. Package gorilla/websocket is a fast, well-tested and widely used WebSocket implementation for Go.

SimulStreaming. Python

WinJS-Microsoft-Account-Bypass. The WinJS-Microsoft-Account-Bypass repo offers a method to skip the Microsoft Account requirement during Windows 11 OOBE. By accessing the Developer Console, users can trigger a hidden local account setup screen. This offline technique works across all Windows 11 versions, including S-Mode, allowing local account creation.

snac. Multi-Scale Neural Audio Codec (SNAC) compresses audio into discrete codes at a low bitrate

aiola-python-sdk. Python

orpheus-streaming. Orpheus TTS Server with streaming support (TTFB ~160ms)

Medusa. Medusa: Simple Framework for Accelerating LLM Generation with Multiple Decoding Heads

librepods. AirPods liberated from Apple's ecosystem.

httpforwarded. A Go package for parsing the HTTP Forwarded header (RFC-7239)

ghidra. Ghidra is a software reverse engineering (SRE) framework

ossec-hids. OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

ngx_http_hmac_secure_link_module. HMAC Secure Link module for NGINX.

impacket. Impacket

chirp-stt. Python

perses. The CNCF sandbox for observability visualisation. Already supports Prometheus, Tempo, Loki and Pyroscope - more data sources to come!

code-mode. 🔌 Plug-and-play library to enable agents to call MCP and UTCP tools via code execution.

olah. Self-hosted huggingface mirror service. 自建huggingface镜像服务。

livekit-agent. Python

kani-tts. Jupyter Notebook

ZipVoice. Fast and High-Quality Zero-Shot Text-to-Speech with Flow Matching

SpeechGPT-2.0-preview. GPT-4o-level, real-time spoken dialogue system.

MOSS-TTSD. MOSS-TTSD is a spoken dialogue generation model designed for expressive multi-speaker synthesis. It features long-context modeling, flexible speaker control, and multilingual support, while enabling zero-shot voice cloning from short audio references.

termshark. A terminal UI for tshark, inspired by Wireshark

lollms_hub. A proxy server for multiple ollama instances with Key security

mac-wireguard-setup. Setup multiple wireguard tunnels on macOS as launchd services

rtl_433. Program to decode radio transmissions from devices on the ISM bands (and other frequencies)

CopilotKit. The Frontend Stack for Agents & Generative UI. React, Angular, Mobile, Slack, and more. Makers of the AG-UI Protocol

Win11Debloat. A simple, lightweight PowerShell script that allows you to remove pre-installed apps, disable telemetry, as well as perform various other changes to declutter and customize your Windows experience. Win11Debloat works for both Windows 10 and Windows 11.

cvmboot. The cvmboot project provides ephemeral disk integrity protection for Linux confidential virtual machines (CVMs)

journald. Go implementation of systemd Journal's native API for logging

readline. Readline is a pure go(golang) implementation for GNU-Readline kind library

PushProx. Proxy to allow Prometheus to scrape through NAT etc.

helm-charts. :wheel_of_dharma: A community repository for Helm Charts of OpenSearch Project.

gitleaks. Find secrets with Gitleaks 🔑

WhisperLive. A nearly-live implementation of OpenAI's Whisper.

binwalk. Firmware Analysis Tool

portmaster. 🏔 Love Freedom - ❌ Block Mass Surveillance

mysql-operator. Asynchronous MySQL Replication on Kubernetes using Percona Server and Openark's Orchestrator.

mailinabox. Mail-in-a-Box helps individuals take back control of their email by defining a one-click, easy-to-deploy SMTP+everything else server: a mail server in a box.

spotify-downloader. Download your Spotify playlists and songs along with album art and metadata (from YouTube if a match is found).

pangolin. Identity-aware VPN and tunneled reverse proxy for remote access based on WireGuard®.

distribution. The toolkit to pack, ship, store, and deliver container content

tun2socks. tun2socks - powered by gVisor TCP/IP stack

shadowsocks-rust. A Rust port of shadowsocks

sriov-network-operator. SR-IOV Network Operator

ollm. Python

SurfacePro4-FydeOS-SecureBoot. Secure Bootloader for FydeOS and Surface Pro 4

scst. SCST is a SCSI target software stack that allows to export any block device or file via iSCSI, FC or RDMA (SRP).

ssh-config. 📟 SSH config parser and stringifier

garak. the LLM vulnerability scanner

Asus-ROG-Aml-Deep-Dive. A deep dive into the ACPI.sys DPC latency problems on Asus ROG laptops

hermes-dec. A reverse engineering tool for decompiling and disassembling the React Native Hermes bytecode

ssh-sync. An SSH syncing application built with Go.

mago. Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.

rustfs. 🚀2.3x faster than MinIO for 4KB object payloads. RustFS is an open-source, S3-compatible high-performance object storage system supporting migration and coexistence with other S3-compatible platforms such as MinIO and Ceph.

oras. OCI registry client - managing content like artifacts, images, packages

bootc. Boot and upgrade via container images

unregistry. Push docker images directly to remote servers without an external registry

yt-dlp. A feature-rich command-line audio/video downloader

sample-external-issuer. A sample external Issuer for cert-manager

asciicam. Displays your webcam... on the terminal

aidefense-framework. An open-source knowledge base of defensive countermeasures to protect AI/ML systems. Features interactive views and maps defenses to known threats from frameworks like MITRE ATLAS, MAESTRO, and OWASP.

gdb-static. A statically compiled gdb/gdbserver-17.x repository