Policy-driven, layered isolation and containment

Fast and streamable Excalidraw MCP App

Agent Package Manager

pinact is a CLI to edit GitHub Workflow and Composite action files and pin versions of Actions and Reusable Workflows. pinact can also update their versions and verify version annotations.

Run stateful Docker Compose apps on managed Kubernetes

binstaller (binst) is a config-driven secure shell-script installer generator that creates reproducible installation scripts for static binaries distributed via GitHub releases.

Cross-platform file system notifications for Go.

GitHub’s official command line tool

mo is a Markdown viewer that opens .md files in a browser.

🔄 GitHub Action to keep files like Action workflows or entire directories in sync between multiple repositories.

Cross-platform keyring interface for Go

testing to prepare handson

Perl bindings for Tailscale-rs

Data visualization solution in Obsidian, support plots and graphs.

A formatter for Go text/template files

Bumps up Go program version

Upload multiple artifacts to GitHub Release in parallel

An experimental error handling library.

Package plug replaces functions, defined in the other packages, on testing.

A lightweight AWS service emulator written in Go

Lightweight, container-free sandbox for running commands with network and filesystem restrictions

Sandbox any AI agent in seconds - zero setup, zero latency.

Declarative GitHub infrastructure management via YAML

safely executing shell scripts in AI Agent contexts

A cross-platform security sandbox CLI tool that executes commands with restricted file system write access while maintaining full read permissions.

🏔️ The AI-native RSS reader

yq is a portable command-line YAML, JSON, XML, CSV, TOML, HCL and properties processor