Leonardo Maldonado

revenue-centric-design. Product-design, conversion & behavioral-science principles for SaaS

skills. Skills for teaching agents how to build on Cloudflare.

orca. Orca is the ADE for working with a fleet of parallel agents. Run any coding agent with your own subscription. Available on desktop and mobile.

skills. access to david ondrej's personal agent skills

strix. Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

astryx. An open source design system that's fully customizable and agent ready

ECC. The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.

loop-engineering. Practical patterns, starters & CLI tools for loop engineering with AI coding agents. Design systems that prompt and orchestrate agents (inspired by Addy Osmani and Boris Cherny). Includes loop-audit, loop-init, loop-cost.

workdir. Fast, self-hostable sandboxes for agents

headroom. Compress tool outputs, logs, files, and RAG chunks before they reach the LLM. 60-95% fewer tokens, same answers. Library, proxy, MCP server.

stylex. StyleX is the styling system for ambitious user interfaces.

helix-db. HelixDB is an OLTP graph-vector database built in Rust on Object Storage.

envoy. Cloud-native high-performance edge/middle/service proxy

iptv. Collection of publicly available IPTV channels from all over the world

ponytail. Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.

OpenHands. 🙌 OpenHands: AI-Driven Development

kubernetes-the-hard-way. Bootstrap Kubernetes the hard way. No scripts.

pgledger. A double entry ledger implementation in PostgreSQL

backstage. Backstage is an open framework for building developer portals

build. [mirror] Go's continuous build and release infrastructure (no stability promises)

learn-harness-engineering. Harness engineering beginner tutorial, from 0 to 1

rpiv-mono. Monorepo for @juicesharp/rpiv-* Pi plugins (lockstep versions, single install, single publish pipeline)

pg_durable. PostgreSQL in-database durable execution

sqlc. Generate type-safe code from SQL

godump. A minimal, developer-friendly pretty-printer and debug dumper for Go structs, inspired by Laravel’s dump() and Symfony’s VarDumper.

testify. A toolkit with common assertions and mocks that plays nicely with the standard library

limen. Modern, composable authentication for Go

netbird. Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls.

ai-job-search. The job search that runs on your machine. AI job application framework built on Claude Code: evaluate postings, tailor CVs, write cover letters, prep interviews. Fork it and own it.

goose. A database migration tool. Supports SQL migrations and Go functions.

ComfyUI. The most powerful and modular diffusion model GUI, api and backend with a graph/nodes interface.

gofumpt. A stricter gofmt

pi-dynamic-workflows. TypeScript

claude-cookbooks. A collection of notebooks/recipes showcasing some fun and effective ways of using Claude.

pgflow. Workflows, jobs and cron in Elixir and Postgres powered by PGMQ

pgmq. A lightweight message queue. Like AWS SQS and RSMQ but on Postgres.

easyjson. Fast JSON serializer for golang.

pebble. RocksDB/LevelDB inspired key-value database in Go

rocksdb. A library that provides an embeddable, persistent key-value store for fast storage.

gorocksdb. gorocksdb is a Go wrapper for RocksDB

mediabunny. Pure TypeScript media toolkit for reading, writing, and converting video and audio files, directly in the browser.

toxiproxy. :alarm_clock: :fire: A TCP proxy to simulate network and system conditions for chaos and resiliency testing

tmux. tmux source code

codegraph. Pre-indexed code knowledge graph, auto syncs on code changes, for Claude Code, Codex, Gemini, Cursor, OpenCode, AntiGravity, Kiro, and Hermes Agent — fewer tokens, fewer tool calls, 100% local

bumblebee. Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.

agents. A framework for building realtime voice AI agents 🤖🎙️📹

dokploy. Open Source Alternative to Vercel, Netlify and Heroku.

learning-go. Go

lean-ctx. Control what your AI can see. LeanCTX (Lean Context) is the context intelligence layer for AI agents — one local Rust binary that decides what they read, remembers what they learn, guards what they touch, and proves what they save. 60–90% fewer tokens as the receipt. 76 MCP tools, 30+ agents, local-first.

quint. An executable specification language with delightful tooling based on the temporal logic of actions (TLA)

pollyjs. Record, Replay, and Stub HTTP Interactions.

lisette. A little language inspired by Rust that compiles to Go

awesome-ai-system-prompts. 🧠 Curated collection of system prompts for top AI tools. Perfect for AI agent builders and prompt engineers. Incuding: ChatGPT, Claude, Perplexity, Manus, Claude-Code, Loveable, v0, Grok, same new, windsurf, notion, and MetaAI.

learngo. ❤️ 1000+ Hand-Crafted Go Examples, Exercises, and Quizzes. 🚀 Learn Go by fixing 1000+ tiny programs.

awesome-behavioral-interviews. Tips and resources to prepare for Behavioral interviews.

awesome-leetcode-resources. Awesome LeetCode resources to learn Data Structures and Algorithms and prepare for Coding Interviews.

awesome-low-level-design. Learn Low Level Design (LLD) and prepare for interviews using free resources.

connect-go. The Go implementation of Connect: Protobuf RPC that works.

oh-my-codex. OmX - Oh My codeX: Your codex is not alone. Add hooks, agent teams, HUDs, and so much more.

flue. The sandbox agent framework.

caddy. Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

openhuman. Your Personal AI super intelligence. A brain that builds a local-first memory of your life, a fantastic orchestrator of agent fleets and workflows, and a deep researcher.

trustclaw. A self-hostable personal AI agent with vector memory, Composio tools, and Telegram.

pierre. pierre’s open source code

zizmor. Static analysis for GitHub Actions

dualmark. Open-source AEO (Answer Engine Optimization) infrastructure — every page, dual-marked. Markdown twins for AI agents alongside HTML for humans, picked by HTTP content negotiation.

resonate. Distributed Async Await — Durable Executions, Dead Simple

anime. JavaScript animation engine

slop-scan. Detect AI code slop patterns in your repo

hunk. Review-first terminal diff viewer for agentic coders

better-result. Lightweight Result type for TypeScript with generator-based composition.

rover-resume. ATS friendly LaTeX resume template. Create a unique looking CV from scratch.

mcdowell-cv. A Nice-looking CV template made into LaTeX

Awesome-CV. :page_facing_up: Awesome CV is LaTeX template for your outstanding job application

warden. Your code is under new management. Agents that review your code.

tinyskies. TypeScript

deepsec. Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents

rinha-de-backend-2026. Rinha de Backend - Quarta Edição: Detecção de Fraude com Busca Vetorial

grpc-go. The Go language implementation of gRPC. HTTP/2 based RPC

skills. Skills for Real Engineers. Straight from my .claude directory.

dlht. High-performance, lock-free concurrent hash table in Go, based on DLHT, with cooperative resizing and cache-efficient buckets.

lightdash. Agentic BI. Analytics at the speed of code ⚡️

chroma. Search infrastructure for AI

awesome-system-design. A curated list of awesome System Design (A.K.A. Distributed Systems) resources.

chaosmonkey. Chaos Monkey is a resiliency tool that helps applications tolerate random instance failures.

varlock. AI-safe .env files: Schemas for agents, Secrets for humans.

cargo-mutants. :zombie: Inject bugs and see if your tests catch them!

crawl4ai. 🚀🤖 Crawl4AI: Open-source LLM Friendly Web Crawler & Scraper. Don't be shy, join here: https://discord.gg/jP8KfhDhyN

vet. Protect against malicious open source packages 🤖

fallow. Codebase intelligence for TypeScript and JavaScript. Free static analysis of code and styles: unused code, duplication, circular deps, complexity hotspots, architecture boundaries, design-system drift. Optional paid runtime layer (Fallow Runtime): hot-path review and cold-path deletion evidence from real production traffic.

rapid. Rapid is a modern Go property-based testing library

rq. Simple job queues for Python

libkrun. A dynamic library providing Virtualization-based process isolation capabilities

pgq. Generic Queue for PostgreSQL

gocron. distributed scheduled task management system

pi-autoresearch. Autonomous experiment loop extension for pi

pentagi. Fully autonomous AI Agents system capable of performing complex penetration testing tasks

pg-boss. Queueing jobs in Postgres from Node.js like a boss

PgQue. PgQue – Zero-bloat Postgres queue built on top of on battle-proven Skype's PgQ. One SQL file to install, pg_cron to tick https://pgque.dev

absurd. An experiment in durability

hand-shark. Hand-Shark is a web-based 3D app where users control a holographic shark using real-time hand gestures via the browser. Built with MediaPipe and Three.js, it runs fully client-side, ensuring no camera data is sent to servers. Demonstrates intuitive interaction, real-time processing, and privacy-by-design.

fynt. Self-hostable workflow automation platform

agent-ci. Agent-CI is local GitHub Actions for your agents.

hermes-agent. The agent that grows with you

oops. 🔥 Error handling library with context, assertion, stack trace and source fragments

NornicDB. Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and writes. Using Neo4j Bolt/Cypher and qdrant's gRPC means you can switch with no changes while adding intelligent features like schemas, managed embeddings, reranking+llm, GPU accel, Auto-TLP, Policy-based Memory Decay, and MCP server.

gremlins. A mutation testing tool for Go.

claude-mem. Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More

afl.rs. 🐇 Fuzzing Rust code with American Fuzzy Lop

hk. git hooks and project lints

phaser. Phaser is a fun, free and fast 2D game framework for making HTML5 games for desktop and mobile web browsers, supporting Canvas and WebGL rendering.

biome-effect-linting-rules. This is a collection of opinionated linting rules (in Biomejs) for Effect-ts projects

freelens. Free IDE for Kubernetes

career-ops. Open-source AI job search: scan job portals, score listings A-F, tailor your CV, track applications — runs locally in your AI coding CLI (Claude Code, Gemini, Codex, OpenCode…)

fastjson. Fast JSON parser and validator for Go. No custom structs, no code generation, no reflection

sonic. A blazingly fast JSON serializing & deserializing library

rtk. CLI proxy that reduces LLM token consumption by 60-90% on common dev commands. Single Rust binary, zero dependencies

incur. CLI framework for agents and humans

kubernetes. Production-Grade Container Scheduling and Management

mempalace. The best-benchmarked open-source AI memory system. And it's free.

containerd. An open and reliable container runtime

moby. The Moby Project - a collaborative project for the container ecosystem to assemble container-based systems

PentestGPT. Automated Penetration Testing Agentic Framework Powered by Large Language Models

nats-server. High-Performance server for NATS.io, the cloud and edge native messaging system.

statsviz. Visualise Go runtime metrics in real time

jaeger. CNCF Jaeger, a Distributed Tracing Platform

email-verifier. :white_check_mark: A Go library for email verification without sending any emails.

agent-skills. Production-grade engineering skills for AI coding agents.

websocket. Package gorilla/websocket is a fast, well-tested and widely used WebSocket implementation for Go.

certbot. Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.

fast-check. Property based testing framework for JavaScript (like QuickCheck) written in TypeScript

openclaude. runs anywhere. uses anything

awesome-tf. Curated list of resources on HashiCorp's Terraform and OpenTofu

testcontainers-go. Testcontainers for Go is a Go package that makes it simple to create and clean up container-based dependencies for automated integration/smoke tests. The clean, easy-to-use API enables developers to programmatically define containers that should be run as part of a test and clean up those resources when the test is done.

engine. The Orchestration Engine To Deliver Self-Service Infrastructure ⚡️

vulnerability-Checklist. This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

container-security-checklist. Checklist for container security - devsecops practices

ralph-claude-code. Autonomous AI development loop for Claude Code with intelligent exit detection

go-micro. A Go agent harness and service framework

useSend. Open source alternative to Resend, Sendgrid, Postmark etc.

compozy. Drive the full lifecycle of AI-assisted development — from idea to shipped code.

JSON-Alexander. A really good JSON viewer browser Extension

gvisor. Application Kernel for Containers

kata-containers. Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs. https://katacontainers.io/

agentos. A faster, lighter, cheaper alternative to sandboxes. Run any coding agent inside an isolated Linux VM, with agent orchestration built in.

supabase. The Postgres development platform. Supabase gives you a dedicated Postgres database to build your web, mobile, and AI applications.

vertz. The Agent-native TypeScript stack

ata-validator. Native C++ validator built on simdjson and RE2. Hybrid JS codegen with V8 TurboFan optimizations. Up to 94x faster on $dynamicRef, 5.3x on normal schemas, 2,729x faster compilation. Full $dynamicRef/$anchor support, Draft 2020-12 + Draft 7 compatible

OWASP-Web-Checklist. OWASP Web Application Security Testing Checklist

API-Security-Checklist. Checklist of the most important security countermeasures when designing, testing, and releasing your API

pretext. Fast, accurate & comprehensive text measurement & layout

terminal-use. tu is tmux for your coding agent

ESAA-Security. ESAA-Security applies the ESAA architecture to automated security auditing. LLM-based agents execute a structured audit across 16 security domains, governed by the same immutable append-only event log, boundary contracts, and hash-verified projections that ESAA provides for software engineering workflows. Every finding, classification, and remediat

secure-exec. Secure Node.js Execution Without a Sandbox A lightweight library for secure Node.js execution. No containers, no VMs — just npm-compatible sandboxing out of the box.

termwright. Playwright-like automation framework for terminal TUI applications

expect. Expect tests your agent's code in a real browser

taste-skill. Taste-Skill - gives your AI good taste. stops the AI from generating boring, generic slop

pmg. PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.

tokio. A runtime for writing reliable asynchronous applications with Rust. Provides I/O, networking, scheduling, timers, ...

vinext. Vite plugin that reimplements the Next.js API surface — deploy anywhere

inngest. The leading workflow orchestration platform. Run stateful step functions and AI workflows on serverless, servers, or the edge.

go-fuzz. Randomized testing for Go

cc-skills-golang. 🧑‍🎨 A collection of Golang agentic skills that works

scorecard. OpenSSF Scorecard - Security health metrics for Open Source

go-sdk. The official Go SDK for Model Context Protocol servers and clients. Maintained in collaboration with Google.

typescript-sdk. The official TypeScript SDK for Model Context Protocol servers and clients

huma. Huma REST/HTTP API Framework for Golang with OpenAPI 3.1

oapi-codegen. Generate Go client and server boilerplate from OpenAPI 3 specifications

limiters. Golang rate limiters for distributed applications

failsafe-go. Fault tolerance and resilience patterns for Go

asynq. Simple, reliable, and efficient distributed task queue in Go

redis. For developers, who are building real-time data-driven applications, Redis is the preferred, fastest, and most feature-rich cache, data structure server, and document and vector query engine.

ants. 🐜🐜🐜 ants is the most powerful and reliable pooling solution for Go.

gocache. ☔️ A complete Go cache library that brings you multiple ways of managing your caches

delve. Delve is a debugger for the Go programming language.

bytebase. World's most advanced database DevSecOps solution for Developer, Security, DBA and Platform Engineering teams. The GitHub/GitLab for database DevSecOps.

bigcache. Efficient cache for gigabytes of data written in Go.

aconfig. Simple, useful and opinionated config loader.

bubbletea. A powerful little TUI framework 🏗

expose. A beautiful, fully open-source, tunneling service - written in pure PHP

wormhole. Open-source ngrok alternative. Expose your localhost to the internet with one command. Built with Go + Cloudflare Workers.

logfile. Logfile is a reliable append-only log file optimized for SSD and concurrency. Most suitable for implementing WALs.

goconfig. Your configuration library for your Go programs.

impeccable. The design language that makes your AI harness better at design.

agency-agents. A complete AI agency at your fingertips - From frontend wizards to Reddit community ninjas, from whimsy injectors to reality checkers. Each agent is a specialized expert with personality, processes, and proven deliverables.

mcp-grafana. MCP server for Grafana

prompts.chat. f.k.a. Awesome ChatGPT Prompts. Share, discover, and collect prompts from the community. Free and open source — self-host for your organization with complete privacy.

InsForge. The all-in-one, open-source backend platform for agentic coding. InsForge gives your coding agent database, auth, storage, compute, hosting, and AI gateway to ship full-stack apps end-to-end.

screenshot-studio. A free, browser-based editor for creating stunning screenshots and visuals. No signup, no watermarks.

sish. HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH.

xyflow. React Flow | Svelte Flow - Powerful open source libraries for building node-based UIs with React (https://reactflow.dev) or Svelte (https://svelteflow.dev). Ready out-of-the-box and infinitely customizable.

cmux. Open source Ghostty-based macOS terminal with vertical tabs and notifications for AI coding agents. Built for multitasking, organization, and programmability.

huginn. Create agents that monitor and act on your behalf. Your agents are standing by!

dagster. An orchestration platform for the development, production, and observation of data assets.

prefect. Prefect is a workflow orchestration framework for building resilient data pipelines in Python.

gstack. Use Garry Tan's exact Claude Code setup: 23 opinionated tools that serve as CEO, Designer, Eng Manager, Release Manager, Doc Engineer, and QA

sidekiq. Simple, efficient background processing for Ruby

que. A Ruby job queue that uses PostgreSQL's advisory locks for speed and reliability.

restate. Restate is the platform for building resilient applications that tolerate all infrastructure faults w/o the need for a PhD.

pulumi. Pulumi - Infrastructure as Code in any programming language 🚀