Shivasurya

rosie. Agent package manager

superset. Apache Superset is a Data Visualization and Data Exploration Platform

codex. Lightweight coding agent that runs in your terminal

gochecknoglobals. Check that no globals are present in Go code.

ds4. DeepSeek 4 Flash and PRO local inference engine for Metal, CUDA and ROCm

hermes-agent. The agent that grows with you

poc-CVE-2026-0073. CVE-2026-0073 - ADB Wireless Mutual Authentication Bypass PoC

hunk. Review-first terminal diff viewer for agentic coders

vscode_extension. This is a simple attempt to create my own vscode extension that prints hello world. More updates coming later!

mito. message stream processing engine based on CEL

arscontexta. Claude Code plugin that generates individualized knowledge systems from conversation. You describe how you think and work, have a conversation and get a complete second brain as markdown files you own.

server. Bitwarden infrastructure/backend (API, database, Docker, etc).

pierre. pierre’s open source code

blog_website. Welcome to my space to learn about me and my work!

globe. Interactive ASCII globe generator

auth. Boring user authentication code for golang

pi. AI agent toolkit: unified LLM API, agent loop, TUI, coding agent CLI

memento. Python

flatpak. Linux application sandboxing and distribution framework

graphify. Turn any codebase, with its docs, SQL schemas, configs, and PDFs, into a queryable knowledge graph. A /graphify skill for Claude Code, Cursor, Codex, and Gemini CLI: local deterministic AST parsing, every edge explained, no vector store.

moby. The Moby Project - a collaborative project for the container ecosystem to assemble container-based systems

grpc. C++ based gRPC (C++, Python, Ruby, Objective-C, PHP, C#)

wazero. wazero: the zero dependency WebAssembly runtime for Go developers

regengo. a compile-time finite state machine generator for regular expressions in golang

h2. Pure-Python HTTP/2 protocol implementation

mcp-registry. Official Docker MCP registry

turboquant. TurboQuant: Near-optimal KV cache quantization for LLM inference (3-bit keys, 2-bit values) with Triton kernels + vLLM integration

langflow. Langflow is a powerful tool for building and deploying AI-powered agents and workflows.

advisory-database. Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

cla-assistant. Contributor License Agreement assistant (CLA assistant)

temporal. Temporal service

NemoClaw. Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference

AgentTeams. An open-source Collaborative Multi-Agent OS for transparent, human-in-the-loop task coordination via Matrix rooms.

jax-js. JAX in JavaScript – ML library for the web, running on WebGPU & Wasm

django-lsp. Django Language Server Protocol library to provide smart autocomplete functionality for Django projects.

autoresearch. AI agents running research on single-GPU nanochat training automatically

ebpf. ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.

superset. Code Editor for the AI Agents Era - Run an army of Claude Code, Codex, etc. on your machine

nvm. Node Version Manager - POSIX-compliant bash script to manage multiple active node.js versions

cmux. Open source Ghostty-based macOS terminal with vertical tabs and notifications for AI coding agents. Built for multitasking, organization, and programmability.

registry. A community driven registry service for Model Context Protocol (MCP) servers.

gotreesitter. Pure Go tree-sitter runtime

go-errorlint. Moved to https://codeberg.org/polyfloyd/go-errorlint

go-concurrent-map-bench. Benchmarks for concurrent hash map implementations in Go

openscreen. Create stunning demos for free. Open-source, no subscriptions, no watermarks, and free for commercial use. An alternative to Screen Studio.

betterleaks. Scan the world (for secrets)

llmgateway. Route, manage, and analyze your LLM requests across multiple providers with a unified API interface.

omarchy. Beautiful, Modern & Opinionated Linux

superpowers. An agentic skills framework & software development methodology that works.

moonshine. Very low latency speech to text, intent recognition, and text to speech, for building voice agents and interfaces

cli. 📜 Entire CLI hooks into your Git workflow to capture AI agent sessions as you work. Sessions are indexed alongside commits, creating a searchable record of how code was written in your repo.

semantica. Graph-Native Infrastructure for Context and Accountable AI Systems

repo-security-scanner. CLI tool that finds secrets accidentally committed to a git repo, eg passwords, private keys

monty. A minimal, secure Python interpreter written in Rust for use by AI

noodle. An on-device, GPU-accelerated language model in Rust.

claude-code-devcontainer. Sandboxed devcontainer for running Claude Code in bypass mode safely. Built for security audits and untrusted code review.

airllm. Runs 405B LLMs on 8GB VRAM

dangerzone. Take potentially dangerous PDFs, office documents, or images and convert them to safe PDFs

humanizer. Agent skill that removes signs of AI-generated writing from text

awesome-cicd-attacks. Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.

pgrok. Poor man's ngrok - a multi-tenant HTTP/TCP reverse tunnel solution through SSH remote port forwarding

mgrep. A calm, CLI-native way to semantically grep everything, like code, images, pdfs and more.

1code. Orchestration layer for coding agents (Claude Code, Codex)

mpb. multi progress bar for Go cli applications

openwhispr. Voice-to-text dictation app with local (Nvidia Parakeet/Whisper) and cloud models (BYOK). Privacy-first and available cross-platform.

nanocode. Minimal Claude Code alternative. Single Python file, zero dependencies, ~250 lines.

TimeCapsuleLLM. A LLM trained only on data from certain time periods to reduce modern bias

rusty-cpp. Rust

go-optimization-guide. Go Optimization Guide: Patterns and Techniques for Writing High-Performance Applications with Go

planning-with-files. Persistent file-based planning for AI coding agents and long-running tasks. Crash-proof markdown plans, session recovery after /clear and compaction, per-turn re-injection against context rot, deterministic completion gate. Manus-style. Claude Code, Codex, Cursor, Kiro, OpenCode and 60+ agents via the Agent Skills standard.

coregex. Pure Go production-grade regex engine with SIMD optimizations. Up to 3-3000x+ faster than stdlib.

serena. A powerful MCP toolkit for coding, providing semantic retrieval and editing capabilities - the IDE for your agent

tailsnitch. A security auditor for Tailscale configurations. Scans your tailnet for misconfigurations, overly permissive access controls, and security best practice violations.

gastown. Gas Town - multi-agent workspace manager

rustbpe. The missing tiktoken training code

tally. Let agents classify your bank transactions.

witr. Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.

cc-safety-net. A coding agent CLI hook that acts as a safety net, catching destructive git and filesystem commands before they execute. Supports Codex, Claude Code, OpenCode, Gemini CLI, Copilot CLI, Kimi Code and Pi.

durable-streams. The data primitive for the agent loop.

Font-Awesome. The iconic SVG, font, and CSS toolkit

poutine. poutine, a supply chain vulnerability scanner for build pipelines

react-turnstile. Cloudflare Turnstile integration for React.

slack-watchman. Slack enumeration and exposed secrets detection tool

vuln-list. NVD, Ubuntu, Alpine

prowler. Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

parquet-go. High-performance Go package to read and write Parquet files

retire.js. scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

noseyparker-explorer. Interactive results explorer and annotation tool for Nosey Parker

tsunami-security-scanner. Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

hindsight. Hindsight: Agent Memory That Learns

duckdb-go. duckdb-go provides a database/sql driver for the DuckDB database engine.

vulnerability-db. Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.2, purl, and vers.

cors. Official CORS gin's middleware

remark-gfm. remark plugin to support GFM (autolink literals, footnotes, strikethrough, tables, tasklists)

go-redis. Redis Go client

sadcloud. A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure

tree-sitter-dockerfile. A tree-sitter grammar for Dockerfile

go-size-analyzer. A tool for analyzing the size of compiled Go binaries, offering cross-platform support, detailed breakdowns, and multiple output formats.

code-pathfinder-chocolatey. PowerShell

app. A GitHub App that acts like a Security Token Service (STS) for the Github API

kingfisher. Detect leaked secrets + live validation. Map blast radius across your stack. Revoke fast. 1,000+ rules.

chrome-mcp-bridge. JavaScript

penpot. Penpot: The open-source design platform for Product teams that need scalable collaboration.

grpcurl. Like cURL, but for gRPC: Command-line tool for interacting with gRPC servers

homebrew-tap. Ruby

llm-council. LLM Council works together to answer your hardest questions

nsjail. A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

reader3. Quick illustration of how one can easily read books together with LLMs. It's great and I highly recommend it.

awesome-annual-security-reports. A curated list of annual cyber security reports

concierge. 🚀 Universal SDK for building next-gen MCP servers

metis. Metis is an open-source, AI-driven tool for deep security code review

ty. An extremely fast Python type checker and language server, written in Rust.

OpenSpec. Spec-driven development (SDD) for AI coding assistants.

skills. Browserbase's official collection of agent skills to access the web.

bubblewrap. Low-level unprivileged sandboxing tool used by Flatpak and similar projects

Qwen3-Coder. Qwen3-Coder is the code version of Qwen3, the large language model series developed by Qwen team.

mem0. Universal memory layer for AI Agents

rules. Project CodeGuard is an AI model-agnostic security framework and ruleset that embeds secure-by-default practices into AI coding workflows (generation and review). It ships core security rules, translators for popular coding agents, and validators to test rule compliance.

agent-lightning. The absolute trainer to light up AI agents.

ladybird. Truly independent web browser

graudit. grep rough audit - source code auditing tool

DeepSeek-OCR. Contexts Optical Compression

vibesdk. An open-source vibe coding platform that helps you build your own vibe-coding platform, built entirely on Cloudflare stack

skills. Public repository for Agent Skills

ghostty. 👻 Ghostty is a fast, feature-rich, and cross-platform terminal emulator that uses platform-native UI and GPU acceleration.

label-studio. Label Studio is a multi-type data labeling and annotation tool with standardized output format

SkyRL. SkyRL: A Modular Full-stack RL Library for LLMs

CredSweeper. CredSweeper is a tool to detect credentials in any directories or files. CredSweeper could help users to detect unwanted exposure of credentials (such as token, passwords, api keys etc.) in advance. By scanning lines, filtering, and using AI model as option, CredSweeper reports lines with possible credentials, where the line is, and expected type o

hyperlearn. 2-2000x faster ML algos, 50% less memory usage, works on all hardware - new and old.

chatkit-js. TypeScript

mastra. Mastra is the modern TypeScript framework for AI-powered applications and agents.

gonnx. Run ONNX models using Go

TinyRecursiveModels. Python

onnx-go. onnx-go gives the ability to import a pre-trained neural network within Go without being linked to a framework or library.

calculator_agent_rl. Training an LLM to use a calculator with multi-turn reinforcement learning, achieving a **62% absolute increase in evaluation accuracy**.

nango. Build product integrations with AI.

tunix. A Lightweight LLM Post-Training Library

gh-dash. A rich terminal UI for GitHub that doesn't break your flow.

cline. Autonomous coding agent as an SDK, IDE extension, or CLI assistant.

ax. The pretty much "official" DSPy framework for Typescript

eris. Error handling library with readable stack traces and flexible formatting support 🎆

cli-spinners. Spinners for use in the terminal

chrome-devtools-mcp. Chrome DevTools for coding agents

log-update. Log by overwriting the previous output in the terminal. Useful for rendering progress bars, animations, etc.

opentui. OpenTUI is a library for building terminal user interfaces (TUIs)

klavis. Klavis AI: MCP integration platforms that let AI agents use tools reliably at any scale

claude-agent-sdk-demos. Claude Code SDK Demos

build-nanogpt. Video+code lecture on building nanoGPT from scratch

DeepResearch. Tongyi Deep Research, the Leading Open-source Deep Research Agent

ccstatusline. 🚀 Beautiful highly customizable statusline for Claude Code CLI with powerline support, themes, and more.

claude-code. Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.

genkit. Open-source framework for building AI-powered apps in JavaScript, Go, and Python, built and used in production by Google

limits. Rate limiting using various strategies and storage backends such as redis, memcached & mongodb

ccusage. npx ccusage

django-DefectDojo. Open-Source Unified Vulnerability Management, DevSecOps & ASPM

litellm. The fastest, litest AI Gateway. Rust core with Python SDK. Call 100+ LLM APIs in OpenAI (or native) format with cost tracking, guardrails, load balancing, and logging [Bedrock, Azure, OpenAI, Anthropic, OpenAI, VertexAI, vLLM, Nvidia NIM]

fosite. Extensible security first OAuth 2.0 and OpenID Connect SDK for Go.

mcp-servers. MCP servers built by Truffle AI. Can be used with Dexto to create powerful AI Agents

dexto. A coding agent and general agent harness for building and orchestrating agentic applications.

awesome-claude-code. A hand-picked collection of the finest of resources for the most awesome of agents, Claude Code, the undisputed champion of coding companions, from the unstoppable team at Anthropic PBC. A delectable showcase of top tier skills, ambidextrous agents, scintillating status lines, top notch developer tooling, and also we have plugins

vet. Protect against malicious open source packages 🤖

verifiers. Our library for RL environments + evals

rendergit. Render any git repo into a single static HTML page for humans or LLMs

pdfplumber. Plumb a PDF for detailed information about each char, rectangle, line, et cetera — and easily extract text and tables.

server. The Triton Inference Server provides an optimized cloud and edge inferencing solution.

cai. Cybersecurity AI (CAI), the framework for AI Security

go-callvis. Visualize call graph of a Go program using Graphviz

git-who. Git blame for file trees

langextract. A Python library for extracting structured information from unstructured text using LLMs with precise source grounding and interactive visualization.

godepgraph. A Go dependency graph visualization tool

CredData. CredData is a set of files including credentials in open source projects. CredData includes suspicious lines with manual review results and more information such as credential types for each suspicious line. CredData can be used to develop new tools or improve existing tools. Furthermore, using the benchmark result of the CredData, users can choose a proper tool among open source credential scanning tools according to their use case.

claude-code-security-review. An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.

KittenTTS. State-of-the-art TTS model under 25MB 😻

flex-nano-vllm. FlexAttention based, minimal vllm-style inference engine for fast Gemma 2 inference.

TTPForge. The TTPForge is a Cybersecurity Framework for developing, automating, and executing attacker Tactics, Techniques, and Procedures (TTPs).

gpt-oss. gpt-oss-120b and gpt-oss-20b are two open-weight language models by OpenAI

Wan2.2. Wan: Open and Advanced Large-Scale Video Generative Models

HRM. Hierarchical Reasoning Model Official Release

opencode. The open source coding agent.

credential-digger. A Github scanning tool that identifies hardcoded credentials while filtering the false positive data through machine learning models :lock:

qwen-code. An open-source AI coding agent that lives in your terminal.

openvsx. An open-source registry for VS Code extensions

CloudBrute. Awesome cloud enumerator

vulnapi. API Security Vulnerability Scanner designed to help you secure your APIs.

codesearch. Fast, indexed regexp search over large file trees

mmap-go. A portable mmap package for Go

OpenCut. The open-source CapCut alternative

tinymcp. Let LLMs control embedded devices via the Model Context Protocol.

webkin. 💻 CLI tool to send webpages to kindle. 📔

apple_generative_model_safety_decrypted. Decrypted Generative Model safety files for Apple Intelligence containing filters

giu. Cross platform rapid GUI framework for golang based on Dear ImGui.

TradingAgents. TradingAgents: Multi-Agents LLM Financial Trading Framework

gharchive.org. GH Archive is a project to record the public GitHub timeline, archive it, and make it easily accessible for further analysis.

event. Simple internal event bus for Go applications

force-push-scanner. Scan for secrets in dangling commits on GitHub using GH Archive data.

gemini-cli. An open-source AI agent that brings the power of Gemini directly into your terminal.

uv. An extremely fast Python package and project manager, written in Rust.

iTerm2. iTerm2 is a terminal emulator for Mac OS X that does amazing things.

wrangler-action. 🧙‍♀️ easily deploy cloudflare workers applications using wrangler and github actions

depth. Visualize Go Dependency Trees