Roman Volosatovs

Starstream. Implementation experiments as part of the design process of Starstream VM

spacewasm. A flight-compliant WebAssembly interpreter.

wit-bindgen. A language binding generator for WebAssembly interface types

claude-code-nix. Always up-to-date Nix package for Claude Code with hourly updates from Anthropic's native releases

browserpod-meta. Run Node.js, Python, Rails, and other full-stack runtimes directly in the browser. A browser-native code sandbox.

deadnix. Scan Nix files for dead code

teepot. Nix, crates and tools for TEE handling

ssh-tresor. Encrypt and decrypt secrets using SSH agent keys

zerocopy. Zerocopy makes zero-cost memory manipulation effortless. We write `unsafe` so you don’t have to.

linux-raw-sys. Generated bindings for Linux's userspace API

xgotop. C

noTunes. A simple macOS application that will prevent iTunes or Apple Music from launching.

tree-sitter-cedar. Cedar grammars for tree-sitter.

opensteuerauszug. Tool to generate swiss e-steuerauszug from banking exports

DiskANN. A vector indexing library to bring fast, fresh and filtered search to your database

nix-rosetta-builder. Nix

chirpstack. ChirpStack open-source LoRaWAN Network Server

lua-component-demo. Demo of turning the Lua interpreter into a WebAssembly component with wasm32-wasip2

pifs. πfs - the data-free filesystem!

nvim-oxi. :link: Rust bindings to all things Neovim

moltis. A secure persistent personal agent server in Rust. One binary, sandboxed execution, multi-provider LLMs, voice, memory, Telegram, WhatsApp, Discord, Teams, and MCP tools. Secure by design, runs on your hardware.

wasi-sdk. WASI-enabled WebAssembly C/C++ toolchain

cviz. CLI tool to visualize WebAssembly component composition structure.

agent-scan. Security scanner for AI agents, MCP servers and agent skills.

sandbox-runtime. A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.

meet. Open source video conferencing app powered by LiveKit. Built with Django and React.

strace-macos. A clone of the strace command for macOS

koka. Koka language compiler and interpreter

mimalloc. mimalloc is a compact general purpose allocator with excellent performance.

hyper-mcp. 📦️ A fast, secure MCP server that extends its capabilities through WebAssembly plugins.

fence. Lightweight, container-free sandbox for running commands with network and filesystem restrictions

object. A unified interface for reading and writing object file formats

hoprnet. HOPR is an open incentivized mixnet which enables privacy-preserving point-to-point data exchange. HOPR is similar to Tor but actually private, decentralized and economically sustainable.

rellume. Lift machine code to performant LLVM IR

bad64. Binja Arm64 Disassembler

goblin. An impish, cross-platform binary parsing crate, written in Rust

elfconv. AOT binary translator of Linux/ELF → WebAssembly

skills. Public repository for Claude Skills

libkrun. A dynamic library providing Virtualization-based process isolation capabilities

awesome-strudel. A curated collection of awesome Strudel resources including tracks (popular song covers and remixes), tutorials, and repositories

superpowers. An agentic skills framework & software development methodology that works.

framework16-keyboard-v1. Ortholinear split keyboard for Framework 16

iggy. Apache Iggy: Hyper-Efficient Message Streaming at Laser Speed

walrus. 🦭 Distributed log streaming engine built from first principles

wanix. A compute toolkit for the web with the depth of Plan 9 from Bell Labs

bytes. Wrapper types to enable optimized handling of &[u8] and Vec<u8>

spectec. Wasm SpecTec specification tools

balatro-mobile-maker. Create a mobile Balatro app from your Steam version of Balatro

awesome-wasm-components. A curated list of WebAssembly Component tooling and ready-to-use components.

wide-arithmetic. WebAssembly proposal for wide arithmetic

wasi-http-demos. Rust

mini.nvim. Library of 45+ independent Lua modules improving Neovim experience with minimal effort

nixvim. Configure Neovim with Nix! [maintainers=@GaetanLepage, @traxys, @mattsturgeon, @khaneliman]

kopium. Kubernetes OPenapI UnMangler

redis-protocol.rs. A Rust implementation of RESP2 and RESP3

quanta. high-speed timing library in Rust

MPMCQueue. A bounded multi-producer multi-consumer concurrent queue written in C++11

arcstr. Better reference counted strings for Rust

Microsoft-Activation-Scripts. Open-source Windows and Office activator featuring HWID, Ohook, TSforge, and Online KMS activation methods, along with advanced troubleshooting.

nixsgx. Reproducible Nix packages for TEEs

nix-github-actions. A library to turn Nix Flake attribute sets into Github Actions matrices [maintainer=@adisbladis]

cs16.css. CSS library based on Counter Strike 1.6 UI.

wild. A very fast linker for Linux

rqlite. The lightweight, fault-tolerant database built on SQLite. Designed to keep your data highly available with minimal effort.

skopeo. Work with remote images registries - retrieving information, images, signing content

kubernix. Single dependency Kubernetes clusters for local testing, experimenting and development.

raspberry-pi-nix. NixOS modules to aid in configuring NixOS for raspberry pi products

shoes. A multi-protocol proxy server written in Rust (HTTP, SOCKS5, Vmess, Vless, Shadowsocks, Trojan, Snell, Hysteria2, TUIC v5, AnyTLS, Naiveproxy, XTLS)

wasm-bpf. WebAssembly library, toolchain and runtime for eBPF programs

Telegram-X. The main repository of Telegram X — official alternative Telegram client for Android.

cilium. eBPF-based Networking, Security, and Observability

kube. Rust Kubernetes client and controller runtime

rust-tun. TUN device creation and handling.

opal. Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

ruff. An extremely fast Python linter and code formatter, written in Rust.

uv. An extremely fast Python package and project manager, written in Rust.

wac. WebAssembly Composition (WAC) tooling

2048. The source code for 2048

hocker. Utilities for interacting with the docker registry and generating nix build instructions

lwc. Large WASM Collider

uosc. Feature-rich minimalist proximity-based UI for MPV player.

zsh-histdb. A slightly better history for zsh

component-model. Repository for design and specification of the Component Model

tree-sitter-wit. Tree Sitter grammar for Web Assembly Interface Types

hybrid2.nvim. A spirtual successor of `w0ng/vim-hybrid`, which works with treesitter

base16-nvim. Neovim plugin for building a sync base16 colorscheme. Includes support for Treesitter and LSP highlight groups.

spec. WebAssembly specification, reference interpreter, and test suite.

pi-card. Raspberry Pi Voice Assistant

isyswasfa. I sync, you sync, we all sync for async!

ttl.sh. An anonymous & ephemeral Docker image registry

yabai. A tiling window manager for macOS based on binary space partitioning

console. a debugger for async rust!

wander. wander - the Wasm Renderer

nixpkgs-firefox-darwin. Nixpkgs overlay with Firefox binary builds for macOS

cve-rs. Blazingly 🔥 fast 🚀 memory vulnerabilities, written in 100% safe Rust. 🦀

pass-rs. A password manager like `pass` implemented in Rust

autoware. Autoware - the world's leading open-source software project for autonomous driving

dua-cli. View disk space usage and delete unwanted data, fast.

l4d2vr. Left 4 Dead 2 VR mod

portal2vr. Portal 2 VR Mod

noh. An open source implementation of Icefrog's DotA, with a pretty amazing engine. Builds in 3 minutes flat; cross-platform.

Jovian-NixOS. Discussions: https://matrix.to/#/#Jovian-Experiments:matrix.org

neovim-nightly-overlay. [maintainer=@GaetanLepage, @willruggiano]

rustaceanvim. 🦀 Supercharge your Rust experience in Neovim! A heavily modified fork of rust-tools.nvim

eza. A modern alternative to ls

waydroid. Waydroid uses a container-based approach to boot a full Android system on a regular GNU/Linux system like Ubuntu.

avizo. A neat notification daemon

garn. garn is a build tool and environment manager that replaces justfiles/makefiles, docker, and the annoying parts of READMEs. The builders lingua franca.

nats-server. High-Performance server for NATS.io, the cloud and edge native messaging system.

wasm-flatcars. Shell

sqlsync. SQLSync is a collaborative offline-first wrapper around SQLite. It is designed to synchronize web application state between users, devices, and the edge.

crux. Cross-platform app development in Rust

apple-platform-rs. Rust crates supporting Apple platform development

fluvio. 🦀 event stream processing for developers to collect and transform data in motion to power responsive data intensive applications.

minegrub-theme. A Grub Theme in the style of Minecraft!

docuseal. Open source DocuSign alternative. Create, fill, and sign digital documents ✍️

lanzaboote. Secure Boot & Measured Boot for NixOS [maintainers=@blitz @raitobezarius @nikstur]

nrpc. nRPC is like gRPC, but over NATS

witgen. witgen is a library to generate .wit files for WebAssembly in Rust

http.cat. :cat: HTTP Cats API

openwrt. This repository is a mirror of https://git.openwrt.org/openwrt/openwrt.git It is for reference only and is not active for check-ins. We will continue to accept Pull Requests here. They will be merged via staging trees then into openwrt.git.

rust-analyzer. A Rust compiler front-end for IDEs

patchelf. A small utility to modify the dynamic linker and RPATH of ELF executables

nixities. The ❄️ snowflake ❄️ is the limit

tuxedo-rs. Rust libraries for interacting with hardware from TUXEDO Computers

msvc-wine. Scripts for setting up and running MSVC in Wine on Linux

nixie. Put Nix in everything!

macOS-Security-and-Privacy-Guide. Community guide to securing and improving privacy on macOS.

KeyDB. A Multithreaded Fork of Redis

nixos-images. Automatically build (netboot) images for NixOS [maintainer=@Mic92]

nixos-anywhere. Install NixOS everywhere via SSH [maintainers=@Mic92 @Lassulus @phaer @Enzime @a-kenji]

malwaredb-rs. MalwareDB: bookkeeping for malware, goodware, and unknown files with relationship discovery

plan9port. Plan 9 from User Space

preview2-prototyping. Polyfill adapter for preview1-using wasm modules to call preview2 functions.

r13y.com. NixOS Reproducibility Checker

nix-flake-tests. Use lib.runTests in a nix flake

nix-autobahn. Shell

foosteros. FoosterOS/2 Warp - NixOS-based system configuration for my computers

disko. Declarative disk partitioning and formatting using nix [maintainers=@Lassulus @Enzime @iFreilicht @Mic92 @phaer]

microvm.nix. NixOS MicroVMs

crane. A Nix library for building cargo projects. Never build twice thanks to incremental artifact caching.

setup-nix-cache-action. GitHub Action that configures Nix to read/write to a cache

cbindgen. A project for generating C bindings from Rust code

spiderlightning. A set of WIT definitions and associated implementations to enable app developers to work at a faster pace and require less knowledge of the environment in which they are executing.

rustler. Safe Rust bridge for creating Erlang NIF functions

ferris. A low profile split keyboard designed to satisfy one single use case elegantly

flox. The Deterministic Foundation for your SDLC

kata-containers. Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs. https://katacontainers.io/

cloud-hypervisor. A Virtual Machine Monitor for modern Cloud workloads. Features include CPU, memory and device hotplug, support for running Windows and Linux guests, device offload with vhost-user and a minimal compact footprint. Written in Rust with a strong focus on security.

wasmCloud. wasmCloud is an open source Cloud Native Computing Foundation (CNCF) project that enables teams to build, manage, and scale polyglot apps across any cloud, K8s, or edge.

zellij. A terminal workspace with batteries included

tpmtotp. Use a TPM to store a TOTP token in order to attest boot state to another device

futures-rs. Zero-cost asynchronous programming in Rust

config-rs. ⚙️ Layered configuration system for Rust applications (with strong support for 12-factor applications).

Dilemma. Roff

googerteller. audible feedback on just how much your browsing feeds into google

headscale. An open source, self-hosted implementation of the Tailscale control server

teavm. Compiles Java bytecode to JavaScript, WebAssembly and C

Sanitarium. SSH CA manager

codex. Code examples that can be compiled to WebAssembly for use with Enarx

netboot.xyz. Your favorite operating systems in one place. A network-based bootable operating system installer based on iPXE.

nix-portable. Nix - Static, Permissionless, Installation-free, Pre-configured

sops-nix. Atomic secret provisioning for NixOS based on sops

web-extensions-sys. WebExtension API WASM bindings in Rust

robotnix. Build Android (AOSP) using Nix [maintainer=@danielfullmer,@Atemu,@cyclic-pentane]

deploy-rs. A simple multi-profile Nix-flake deploy tool.

alejandra. The Uncompromising Nix Code Formatter

cargo2nix. Granular builds of Rust projects for Nix

rathole. A lightweight and high-performance reverse proxy for NAT traversal, written in Rust. An alternative to frp and ngrok.

wasi-libc. WASI libc implementation for WebAssembly

europa-component-library. ECL - Europa Component Library

nix-quick-install-action. Shell

redoc. 📘 OpenAPI/Swagger-generated API Reference Documentation

nix-config. My personal NixOS config

syngesture. Swipes and gestures for Linux with the MT multitouch protocol

flam3. the original fractal flame renderer and genetic language

maui-shell. Maui Shell is a convergent shell for desktops, tablets, and phones.

electricsheep. infinite evolving crowdsourced artwork

tarpaulin. A code coverage tool for Rust projects

WASI. WebAssembly System Interface

sallyport. API for the hypervisor-microkernel boundary

cachix. Command line client for Nix binary cache hosting:

PeerTube. ActivityPub-federated video streaming platform using P2P directly in your web browser

rust-search-extension. 🦀 The ultimate search extension for Rust

indent-blankline.nvim. Indent guides for Neovim

invidious. Invidious is an alternative front-end to YouTube

nitter. Alternative Twitter front-end

Piped. An alternative privacy-friendly YouTube frontend which is efficient by design.

searx. Privacy-respecting metasearch engine

ungoogled-chromium. Google Chromium, sans integration with Google

dldialog. C++

trunk. Build, bundle & ship your Rust WASM application to the web.

CUDA.jl. CUDA programming in Julia.

starcharts. Plot your repository stars over time.

nix-on-droid. Nix-enabled environment for your Android device. [maintainers=@t184256,@Gerschtli]

emanote. Emanate a structured view of your plain-text notes

neuron. Future-proof note-taking and publishing based on Zettelkasten (superseded by Emanote: https://github.com/srid/emanote)

firecracker. Secure and fast microVMs for serverless computing.

rust-overlay. Pure and reproducible nix overlay of binary distributed rust toolchains

kvm. Rust