Maxime Brunet

open-code-review. Open-source & free — Battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in fine-tuned ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.

likec4. Visualize, collaborate, and evolve the software architecture with always actual and live diagrams from your code

crane. A Nix library for building cargo projects. Never build twice thanks to incremental artifact caching.

uv2nix. Uv2nix - Ingest uv workspaces using Nix [maintainer=@adisbladis]

pyqwest. A modern Python HTTP client based on reqwest

protobuf-py. Idiomatic Protocol Buffers for Python.

testonnet. A unit testing framework for Jsonnet.

naersk. Build Rust projects in Nix - no configuration, no code generation, no IFD, sandbox friendly.

socktainer. Docker-compatible REST API on top of Apple container

zml. Any model. Any hardware. Zero compromise. Built with @ziglang / @openxla / MLIR / @bazelbuild

pglite. Embeddable Postgres with real-time, reactive bindings.

silicon. Create beautiful image of your source code.

ast-grep. ⚡A CLI tool for code structural search, lint and rewriting. Written in Rust

agent-skills-nix. Declarative management of Agent Skills on Nix

niquests. Drop-in replacement for Requests. Automatic HTTP/1.1, HTTP/2, and HTTP/3. WebSocket, and SSE included.

cc-skills-golang. 🧑‍🎨 A collection of Golang agentic skills that works

kitops. An open source DevOps tool from the CNCF for packaging and versioning AI/ML models, datasets, code, and configuration into an OCI Artifact.

kaito. Kubernetes AI Toolchain Operator

model-spec. An Open Standard for Packaging, Distributing and Running LLMs in Cloud-Native Environments

zensical. A modern static site generator by the Material for MkDocs team

worktrunk. Worktrunk is a CLI for Git worktree management, designed for parallel AI agent workflows

rust-overlay. Pure and reproducible nix overlay of binary distributed rust toolchains

solod. A subset of Go that translates to C

zellij. A terminal workspace with batteries included

nurl. Generate Nix fetcher calls from URLs [maintainer=@figsoda]

nix-init. Generate Nix packages from URLs with hash prefetching, dependency inference, license detection, and more [maintainer=@figsoda]

agentic.nvim. Agentic Chat Interface directly in Neovim with ACP providers from Claude-Code, Gemini, Codex, OpenCode, and Cursor-agent

prek. ⚡ A fast Git hook manager written in Rust, designed as a drop-in alternative to pre-commit, reimagined.

nur-packages-template. A template for NUR repositories: [maintainer=@fgaz]

nixpkgs-patcher. Using nixpkgs pull requests that haven't landed into your channel has never been easier!

flake-parts. ❄️ Simplify Nix Flakes with the module system

opencode. The open source coding agent.

proxy. Dependabot's HTTP proxy to authenticate requests to package registries, git servers, and the GitHub API

bootc. Boot and upgrade via container images

jsonschema-go. The Go library for JSON Schema. An official Google project providing a comprehensive toolkit for validation, reflection, and schema construction.

nixpkgs-track. 📦 Track where Nixpkgs pull requests have reached.

typst. A markup-based typesetting system that is powerful and easy to learn.

httplb. Client-side load balancing for net/http

oha. Ohayou(おはよう), HTTP load generator, inspired by rakyll/hey with tui animation.

nixpkgs-terraform. A collection of Terraform versions that are automatically updated.

hyperpb-go. 10x faster dynamic Protobuf parsing in Go that’s even 3x faster than generated code.

yazi. 💥 Blazing fast terminal file manager written in Rust, based on async I/O.

BetterUnsubscribe. Thunderbird extension that makes it easier to unsubscribe from mailing lists.

gateway-api-inference-extension. Gateway API Inference Extension

ai-gateway. Manages Unified Access to Generative AI Services built on Envoy Gateway

garage. (Mirror) S3-compatible object store for small self-hosted geo-distributed deployments. Main repo: https://git.deuxfleurs.fr/Deuxfleurs/garage

perses. The CNCF sandbox for observability visualisation. Already supports Prometheus, Tempo, Loki and Pyroscope - more data sources to come!

OpenWorm. Repository for the main Dockerfile with the OpenWorm software stack and project-wide issues

metacontroller. Writing kubernetes controllers can be simple

helmys. Shell

liqo. Enable dynamic and seamless Kubernetes multi-cluster topologies

curlifier. Converts Request objects to curl string

protovalidate. Protocol Buffer Validation - Go, Java, Python, C++ and JS/TS

llm-d. Achieve state of the art inference performance with modern accelerators on Kubernetes

argocd-diff-preview. Tool for rendering manifest changes on pull requests.

neon. Neon: Serverless Postgres. We separated storage and compute to offer autoscaling, code-like database branching, and scale to zero.

iroh. IP addresses break, dial keys instead. A library that adds QUIC + NAT Traversal to your apps.

gritql. GritQL is a query language for searching, linting, and modifying code.

ttsEngine. Kotlin

zeroclickinfo-goodies. DuckDuckGo Instant Answers based on Perl & JavaScript

kubenix. Kubernetes management with Nix

dicio-android. Dicio assistant app for Android

whisperIMEplus. Android Input Method Editor (IME) based on RTranslators Whisper implementation

firefox. The official repository of Mozilla's Firefox web browser.

rustfs. 🚀2.3x faster than MinIO for 4KB object payloads. RustFS is an open-source, S3-compatible high-performance object storage system supporting migration and coexistence with other S3-compatible platforms such as MinIO and Ceph.

go-yaml. YAML support for the Go language

robotnix. Build Android (AOSP) using Nix [maintainer=@danielfullmer,@Atemu,@cyclic-pentane]

zizmor. Static analysis for GitHub Actions

quickemu. Quickly create and run optimised Windows, macOS and Linux virtual machines

wasmCloud. wasmCloud is an open source Cloud Native Computing Foundation (CNCF) project that enables teams to build, manage, and scale polyglot apps across any cloud, K8s, or edge.

voy. 🕸️🦀 A WASM vector similarity search written in Rust

fasthttp. Fast HTTP package for Go. Tuned for high performance. Zero memory allocations in hot paths. Up to 10x faster than net/http

localmess.github.io. JavaScript

container. A tool for creating and running Linux containers using lightweight virtual machines on a Mac. It is written in Swift, and optimized for Apple silicon.

g3. Enterprise-oriented Generic Proxy Solutions. Maintenance mode now, please switch to use [VEY](https://github.com/VEY-OSS/vey) for new development efforts

memvid. Memory layer for AI Agents. Replace complex RAG pipelines with a serverless, single-file memory layer. Give your agents instant retrieval and long-term memory.

nothing-but-nix. Create a 130GB Nix ️store in GitHub runners ❄️ Multi-partition BTRFS RAID-0 for /nix 💪 Brutally purges unnecessary software 🪓 Dynamically grows the Nix store 📈

fuc. Modern, performance focused unix commands

organist. Control all your tooling from a single console

ty. An extremely fast Python type checker and language server, written in Rust.

go-aho-corasick. aho-corasick library for TinyGo (and Go) apps

go-protoc-gen-builtins. Code generator plugins for built-in protoc languages buildable with Go

tamago. TamaGo - bare metal Go

protoschema-plugins. Protobuf plugins that generate various schemas from protobuf files - JSON Schema, PubSub, etc.

katran. A high performance layer 4 load balancer

KubeArmor. Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

tetragon. eBPF-based Security Observability and Runtime Enforcement

vpp. Mirror of VPP code base hosted at git.fd.io

codecompanion.nvim. ✨ AI Coding, Vim Style

mcphub.nvim. An MCP client for Neovim that seamlessly integrates MCP servers into your editing workflow with an intuitive interface for managing, testing, and using MCP servers with your favorite chat plugins.

code2prompt. A CLI tool to convert your codebase into a single LLM prompt with source tree, prompt templating, and token counting.

merge-gatekeeper. Get better merge control

nixvim. Configure Neovim with Nix! [maintainers=@GaetanLepage, @traxys, @mattsturgeon, @khaneliman]

openingh.nvim. Open file or project in GitHub for neovim written in lua

golang-set. A simple, battle-tested and generic set type for the Go language. Trusted by GoogleCloudPlatform, Docker, 1Password, Ethereum and Hashicorp.

finch. The Finch CLI is an open source client for container development

lsp-ai. LSP-AI is an open-source language server that serves as a backend for AI-powered functionality, designed to assist and empower software engineers, not replace them.

bunster. Compile shell scripts to static binaries.

use-containerd-snapshotter-action. Action to configure the local Docker daemon to use the experimental containerd snapshotter

memberlist. Golang package for gossip based membership and failure detection

automemlimit. Automatically set GOMEMLIMIT to match Linux cgroups(7) memory limit.

portmaster. 🏔 Love Freedom - ❌ Block Mass Surveillance

kepler. Kepler (Kubernetes-based Efficient Power Level Exporter) is a Prometheus exporter that measures energy consumption metrics at the container, pod, and node levels in Kubernetes clusters.

secure. Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).

voipms-sms-client. Popular Android messaging app for VoIP.ms, a Canadian VoIP provider

zebar. Zebar is a tool for creating customizable and cross-platform taskbars, desktop widgets, and popups.

create-github-app-token. GitHub Action for creating a GitHub App Installation Access Token

avante.nvim. Use your Neovim like using Cursor AI IDE!

flet. Build realtime web, mobile and desktop apps in Python only. No frontend experience required.

go-cloud. The Go Cloud Development Kit (Go CDK): A library and tools for open cloud development in Go.

daytona. Daytona is a Secure and Elastic Infrastructure for Running AI-Generated Code

lurk. A pretty (simple) alternative to strace.

karpenter. Karpenter is a Kubernetes Node Autoscaler built for flexibility, performance, and simplicity.

opentelemetry-ebpf-profiler. The production-scale datacenter profiler (C/C++, Go, Rust, Python, Java, NodeJS, .NET, PHP, Ruby, Perl, ...)

build-go-cache. buildGoCache speeds up nix's buildGoModule by pre-compiling imported go modules

golangci-lint-langserver. golangci-lint language server

grpc-proxy. gRPC Go Proxy library with support for one-to-many proxying and result aggregation.

kubectl-validate. Go

HeliBoard. Customizable and privacy-conscious open-source keyboard

RouteLLM. A framework for serving and evaluating LLM routers - save LLM costs without compromising quality

steampipe. Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

arewewaylandyet. Sources for https://arewewaylandyet.com

coder. Secure environments for developers and their agents

sysbox. An open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.

network-mapper. Map Kubernetes traffic: in-cluster, to the Internet, and to AWS IAM and export as text, intents, or an image

intents-operator. Manage network policies, AWS, GCP & Azure IAM policies, Istio Authorization Policies, and Kafka ACLs in a Kubernetes cluster with ease.

styx. alternate nix substitution

go-diagrams. Create beautiful system diagrams with Go

keto. The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

gptscript. Build AI assistants that interact with your systems

python-mattermost-autodriver. Python Mattermost Auto Driver for APIv4

onagre. A general purpose application launcher for X and wayland inspired by rofi/wofi and alfred

brew-nix. Experimental nix expression to package all MacOS casks from homebrew automatically

litellm. The fastest, litest AI Gateway. Rust core with Python SDK. Call 100+ LLM APIs in OpenAI (or native) format with cost tracking, guardrails, load balancing, and logging [Bedrock, Azure, OpenAI, Anthropic, OpenAI, VertexAI, vLLM, Nvidia NIM]

ChatGPT.nvim. ChatGPT Neovim Plugin: Effortless Natural Language Generation with OpenAI's ChatGPT API

telescope-gpt. Extends telescope with the jackMort/ChatGPT.nvim plugin

structlog. Simple, powerful, and fast logging for Python.

cohere-toolkit. Cohere Toolkit is a collection of prebuilt components enabling users to quickly build and deploy RAG applications.

blocky. Fast and lightweight DNS proxy as ad-blocker for local network with many features

llm-ls. LSP server leveraging LLMs for code completion (and more?)

s6-overlay. s6 overlay for containers (includes execline, s6-linux-utils & a custom init)

inspektor-gadget. Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF

nixpkgs. Nix Packages collection & NixOS

lifecycle-toolkit. Toolkit for cloud-native application lifecycle management

difftastic. a structural diff that understands syntax 🟥🟩

devenv. Fast, Declarative, Reproducible, and Composable Developer Environments using Nix

tvix. Tvix - A Rust implementation of Nix. Read-only mirror of https://code.tvl.fyi/tree/tvix

check-jsonschema. A CLI and set of pre-commit hooks for jsonschema validation with built-in support for GitHub Workflows, Renovate, Azure Pipelines, and more!

kuttl. KUbernetes Test TooL (kuttl)

continue. open-source coding agent

woodpecker. Woodpecker is a simple, yet powerful CI/CD engine with great extensibility.

malcontent. #supply #chain #attack #detection

zero-to-nix. Zero to Nix is your guide to learning Nix and flakes. Created by Determinate Systems.

learning-ebpf. Learning eBPF, published by O'Reilly - out now! Here's where you'll find a VM config for the examples, and more

free-disk-space. :octocat:⚙️🗑️ A GitHub Action to free disk space on an Ubuntu runner.

magic-nix-cache-action. Save 30-50%+ of CI time without any effort or cost. Use Magic Nix Cache, a totally free and zero-configuration binary cache for Nix on GitHub Actions.

NymphCast. Audio and video casting system with support for custom applications.

uv. An extremely fast Python package and project manager, written in Rust.

mutagen. Fast file synchronization and network forwarding for remote development

blixt. Layer 4 Kubernetes load-balancer

pdm. A modern Python package and dependency manager supporting the latest PEP standards

pixi. Powerful system-level package manager for Linux, macOS and Windows written in Rust – building on top of the Conda ecosystem.

rye. a Hassle-Free Python Experience

scheduler-plugins. Repository for out-of-tree scheduler plugins based on scheduler framework.

arkenfox-nixos. Utilities to use arkenfox/user.js in NixOS

rust-jemalloc-pprof. Convert jemalloc heap profiles to pprof to understand memory usage, fix memory leaks, and fix OOM Kills.

exvoker. A CLI tool. Extract regexes from stdout (e.g. URLs) and invoke commands on them (e.g. open the webpage).

localsend. An open-source cross-platform alternative to AirDrop

gh-actions-ps-profiling. GitHub Action for Continuous Profiling which you can run to profile your CI/CD. It uses parca and Polar Signals cloud.

quick-start-connectors. This open-source repository offers reference code for integrating workplace datastores with Cohere's LLMs, enabling developers and businesses to perform seamless retrieval-augmented generation (RAG) on their own data.

biome. A toolchain for web projects, aimed to provide functionalities to maintain them. Biome offers formatter and linter, usable via CLI and LSP.

sudo-rs. A memory safe implementation of sudo and su.

mdBook. Create book from markdown files. Like Gitbook but implemented in Rust

external-secrets. External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.

pylyzer. A fast, feature-rich static code analyzer & language server for Python

kong. Kong is a command-line parser for Go

nilaway. Static analysis tool to detect potential nil panics in Go code

fzf-tab. Replace zsh's default completion selection menu with fzf!

zoxide. A smarter cd command. Supports all major shells.

hyperfine. A command-line benchmarking tool

odigos. Distributed tracing without code changes. 🚀 Instantly monitor any application using OpenTelemetry and eBPF

vanguard-go. Support REST, gRPC, gRPC-Web, and Connect clients with one server.

banking-apps-compat-report. Report and track banking app compatibility with GrapheneOS, including which workarounds may be required.

GmsCore. Free implementation of Play Services

AuroraStore. Kotlin

rsc-regexp. Translations of a simple C program to Rust.

testcontainers-go. Testcontainers for Go is a Go package that makes it simple to create and clean up container-based dependencies for automated integration/smoke tests. The clean, easy-to-use API enables developers to programmatically define containers that should be run as part of a test and clean up those resources when the test is done.

testify. A toolkit with common assertions and mocks that plays nicely with the standard library

hera. Hera makes Python code easy to orchestrate on Argo Workflows through native Python integrations. It lets you construct and submit your Workflows entirely in Python. ⭐️ Remember to star!

terraform-plugin-codegen-framework. Terraform Provider Code Generation Specification to Framework

aip-go. Go SDK for implementing resource-oriented gRPC APIs.

connect-python. WIP connectrpc client/server in python

cel-go. Fast, portable, non-Turing complete expression evaluation with gradual typing (Go)

digger. Digger is an open source IaC orchestration tool. Digger allows you to run IaC in your existing CI pipeline ⚡️

opentofu. OpenTofu lets you declaratively manage your cloud infrastructure.

mirrord. Run any process, on your machine or in an AI agent's environment, as if it were a pod in your Kubernetes cluster: real env vars, DNS, network, traffic.

gateway. Manages Envoy Proxy as a Standalone or Kubernetes-based Application Gateway

devpod. Codespaces but open-source, client-only and unopinionated: Works with any IDE and lets you use any cloud, kubernetes or just localhost docker.

bloop. bloop is a fast code search engine written in Rust.

spyglass. A personal search engine: Create a searchable library from your personal documents, interests, and more!