Starred repositories
A gh CLI extension that generates and verifies the GitHub Actions dependency lockfile, pinning every action your workflows use to an exact commit.
How to avoid complicated coordinated upgrades
Prefix analysis of package names across PyPI, npm, crates.io, rubygems, hex, hackage and NuGet
Run Python anywhere. A single self-contained binary (Zig + embedded CPython) that runs PEP 723 scripts on machines with no Python installed.
Experimental structured tracing for Bundler's PubGrub resolver
What programming language do LLMs default to when you don't tell them? A small benchmark.
A deliberately insecure gem for the RubyConf 2026 Maintainer Security Guide workshop
Detect and avoid accidental hooked-cross (swastika) patterns in QR codes
The official Homebrew tap for Alpha-Omega Security software.
1
Updated Jul 17, 2026
An interactive data visualization tool which brings matplotlib graphics to the browser using D3.
Inline proxy for software package registries to provide observability and policy controls to installs.
Agent skill for producing threat models for open-source projects
5
Updated Jul 8, 2026
Search the coding agent history already on your machine
A meta-registry and package manager for WebAssembly
Tests a library against the projects that depend on it.
AirPods liberated from Apple's ecosystem.
📢 OSV-format vulnerability records for Homebrew packages
A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if hand…
Model router for agentic systems. Routes every prompt to the right model in <50ms. Cut costs 40-70% with just an endpoint change.
Edit your slides, live, in Markdown.
A multi-person speech to text tool. Help to locate different speakers in the room.
Debian Security Scanner MCP Server - inspired from debsecan tool