Koki Sato

native. Toolkit for building native desktop apps

jsonpp-eval-kit. JSON++ / jq++ evaluation kit — hands-on task for participants

secretspec. Declare secrets once. Store them anywhere.

age. A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.

beans. A CLI-based, flat-file issue tracker for humans and robots. 🤖

terraform-provider-openai. The official Terraform provider for OpenAI.

goreportcard. A report card for your Go application

jqplusplus. JSON++ is an elaboration language embedded in JSON syntax whose evaluation function surjectively maps JSON++ documents onto JSON values.

meow. meow is an adorable, all-in-one JavaScript/TypeScript runtime, blazing-fast package manager, deterministic test runner, and unified quality-assurance toolchain delivered as a single, self-contained Rust binary.

humanllm. OpenAI API-compatible LLM Model powered by YOU

openscreen. Create stunning demos for free. Open-source, no subscriptions, no watermarks, and free for commercial use. An alternative to Screen Studio.

tirith. Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious AI skills/configs before they execute.

CotEditor. Lightweight Plain Text Editor for macOS

porcupine. On-device wake word detection powered by deep learning

claude-mermaid. MCP Server to previewing mermaid diagrams with live reload

presidio. An open-source framework for detecting, redacting, masking, and anonymizing sensitive data (PII) across text, images, and structured data. Supports NLP, pattern matching, and customizable pipelines.

tokio. A runtime for writing reliable asynchronous applications with Rust. Provides I/O, networking, scheduling, timers, ...

lexical. Lexical is an extensible text editor framework that provides excellent reliability, accessibility and performance.

tauri-action. Build your Web application as a Tauri binary for macOS, Linux and Windows

react-textarea-autosize. <textarea /> component for React which grows with content

oxlint-tailwindcss. TypeScript

objc2. Bindings to Apple frameworks in Rust

dnd-kit. The modern toolkit for building drag and drop interfaces

ui-ux-pro-max-skill. An AI SKILL that provide design intelligence for building professional UI/UX multiple platforms

taste-skill. Taste-Skill - gives your AI good taste. stops the AI from generating boring, generic slop

dnd. 💅 Beautiful and accessible drag and drop for lists with React. ⭐️ Star to support our work!

notify. 🔭 Cross-platform filesystem notification library for Rust.

gray-matter-rs. A tool for easily extracting front matter out of a string. It is a fast Rust implementation of gray-matter. Parses YAML, JSON, TOML and support for custom parsers.

OpenSpec. Spec-driven development (SDD) for AI coding assistants.

Backlog.md. Backlog.md - A tool for managing project collaboration between humans and AI Agents in a git ecosystem

eino. The ultimate LLM/AI application development framework in Go.

ai. The AI framework for Go developers. Build powerful AI applications and agents using our free, open-source library. From Jetify, the creators of TestPilot.

abcjs. javascript for rendering abc music notation

PSScriptAnalyzer. Download ScriptAnalyzer from PowerShellGallery

aws-vault. A vault for securely storing and accessing AWS credentials in development environments

shellcheck. ShellCheck, a static analysis tool for shell scripts

disable-checkout-persist-credentials. CLI to disable actions/checkout's persist-credentials

bumblebee. Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.

Wazuh-MCP-Server. AI-powered security operations for Wazuh SIEM—use any MCP-compatible client to ask security questions in plain English. Faster threat detection, incident triage, and compliance checks with real-time monitoring and anomaly spotting. Production-ready MCP server for conversational SOC workflows.

wazuh. Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

mcp-server-wazuh. MCP Server for Wazuh SIEM

wazuh-docker. Wazuh - Docker containers

rush. A cross-platform command-line tool for executing jobs in parallel

keeper-sdk-python. New Python SDK version of Keeper Commander SDK interface for the Keeper Security platform.

infisical. Infisical is the open-source platform for secrets, certificates, and privileged access management.

ghtkn. A CLI to create short-lived (8 hours) GitHub App User Access Token for secure local development

LuLu. LuLu is the free open-source macOS firewall

sakimori. Cross-platform supply-chain guard for CI: supervised-run audit/block (eBPF/ETW) + minimum-release-age proxy & lockfile check for npm, cargo, PyPI, NuGet.

pure-html-calc. A pure HTML calculator. No css or javascript.

zerolang. The Programming Language for Agents

marimo. A reactive notebook for Python — run reproducible experiments, query with SQL, execute as a script, deploy as an app, and version with git. Stored as pure Python. All in a modern, AI-native editor.

framework. A static site generator for data apps, dashboards, reports, and more. Observable Framework combines JavaScript on the front-end for interactive graphics with any language on the back-end for data analysis.

swift-bundler. An Xcodeproj-less tool for creating cross-platform Swift apps.

SwiftTerm. Xterm/VT100 Terminal emulator in Swift

privacy-filter. OpenAI Privacy Filter

kumo. Cloudflare's component library for building modern web applications.

activitywatch. The best free and open-source automated time tracker. Cross-platform, extensible, privacy-focused.

craft-agents-oss. TypeScript

trufflehog. Find, verify, and analyze leaked credentials

opensrc. Fetch source code for npm packages to give AI coding agents deeper context

nuclei. Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

Proxyman. The best-in-class HTTP Debugger for macOS. Capture HTTP/HTTPS from macOS, iOS, Android with a few clicks ✅

caido. 🚀 Caido releases, wiki and roadmap

googlesans-code. The Google Sans Code font family

note67. A private, local meeting notes assistant. Capture audio, transcribe locally with Whisper, and generate AI-powered summaries — all on your device.

pueue. :stars: Manage your shell commands.

meetily. Privacy first, AI meeting assistant with 4x faster Parakeet/Whisper live transcription, speaker diarization, and Ollama summarization built on Rust. 100% local processing. no cloud required. Meetily (Meetly Ai - https://meetily.ai) is the #1 Self-hosted, Open-source Ai meeting note taker for macOS & Windows. The #1 Ai Meeting Minutes generator.

raindrop-mcp. Raindrop MCP Server

github-dependents-info. Collect information about dependencies between a github repo and other repositories. Results available in JSON, markdown and badge

claude-mem. Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More

rtk. CLI proxy that reduces LLM token consumption by 60-90% on common dev commands. Single Rust binary, zero dependencies

patch-package. Fix broken node modules instantly 🏃🏽‍♀️💨

resume-schema. MOVED to jsonresume/jsonresume.org (packages/schema) — npm @jsonresume/schema unchanged

resume-cli. MOVED to jsonresume/jsonresume.org (packages/cli) — npm 'resume-cli' unchanged, revived for Node 18+

chokidar. Minimal and efficient cross-platform file watching library

nvim-treesitter. Nvim Treesitter configurations and abstraction layer

setup-takumi-guard-npm. GitHub Action to configure npm/yarn/pnpm etc. with Takumi Guard registry

ffuf. Fast web fuzzer written in Go

gobuster. Directory/File, DNS and VHost busting tool written in Go

verdaccio. A lightweight Node.js private proxy registry

SecLists. SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

yazi. 💥 Blazing fast terminal file manager written in Rust, based on async I/O.

vite-plugins. Vite Plugins for Hono

tui.editor. 🍞📝 Markdown WYSIWYG Editor. GFM Standard + Chart & UML Extensible.

react-md-editor. A simple markdown editor with preview, implemented with React.js and TypeScript.

milkdown. 🍼 Plugin driven WYSIWYG markdown editor framework.

claude-peers-mcp. Allow all your Claude Codes to message each other ad-hoc!

ai-guardian. 🛡️ Open-source LLM security library for Python. Protect your AI apps from prompt injection, data leakage, and harmful outputs in 3 lines of code.

cai. Cybersecurity AI (CAI), the framework for AI Security

pentagi. Fully autonomous AI Agents system capable of performing complex penetration testing tasks

astro-paper. A minimal, accessible and SEO-friendly Astro blog theme.

hugo. The world’s fastest framework for building websites.

hugo-PaperMod. A fast, clean, responsive Hugo theme.

go-containerregistry. Go library and CLIs for working with container registries

ghasec. 🫴 Catch security risks in your GitHub Actions workflows.

zizmor-action. Run zizmor from GitHub Actions!

sh. A shell parser, formatter, and interpreter with bash and zsh support; includes shfmt

trivy. Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

pb. Console progress bar for Golang

progressbar. A really basic thread-safe progress bar for Golang applications