Discover quality open-source projects, submit projects anonymously, and claim and edit your own project.
A little curiosity. A world of open source.
THE FIRST COLLECTIONLess than 10 stars, 5+ commits in the last 30 days — projects made with care.
Zales is a personal VPN client for Android with a minimalist interface. It supports VLESS and Outline keys, automatically selects methods to bypass blockages, and restores connection when traffic is frozen. Keys are stored in hardware storage, and telemetry is absent.
Eero Prometheus Exporter is an async Python exporter that exposes 115+ metrics from eero mesh WiFi networks for Prometheus and Grafana monitoring, including devices, speed, health, Thread, and Eero Plus data.
A Docker-based deployment stack for Rybbit, an open-source privacy-friendly Google Analytics alternative. Includes environment variables and persistent storage configuration for PostgreSQL, ClickHouse, and Redis.
A GitHub Actions-based tool that monitors NYRR volunteer opportunities. It checks for 9+1-eligible roles every 15 minutes and sends push notifications via ntfy.sh when spots become available or new events are posted.
TurkeyBite is an open-source domain and host context analysis pipeline that analyzes client network traffic to categorize requested domains (e.g. adult content, gambling, shopping). It uses a Docker-based stack with Packetbeat/Browserbeat, Valkey, OpenSearch and Bind9, is non-intrusive (does not block client requests), and outputs analysis results to OpenSearch Dashboards or Syslog.
Cairn is a privacy-first, self-hosted web analytics package for Laravel. It adds cookieless pageview, session and event tracking plus a server-rendered dashboard, with no third-party data sharing and no cookie banner in its default configuration.
Open-source, privacy-first web analytics platform that runs on your own infrastructure without cookies or fingerprinting, combining real-time dashboards, session replays, heatmaps, funnels, revenue tracking, behavioral automations and natural-language queries.
VLStream Cloud is an open-source Video IoT platform built on Spring Boot and Vue 3 for device and stream management, intelligent video analysis, algorithm lifecycle management, monitoring and alerting, with MQTT model delivery to Hi3519DV500 cameras.
Rustic-exporter is a Prometheus exporter for monitoring rustic/restic backup repositories, exposing snapshot and backup metrics for observability.
secretgenerator is an auditable CSPRNG‑backed credential generator for AI agents and machine‑readable pipelines. It provides stable JSON schema, NIST entropy floors, SLSA 3 and cosign signed releases, with CLI and libraries in Go, Python, Rust, and an MCP server.
A check-in study app for Zhuanshenben (college upgrade exam) candidates with Web (PWA) and desktop versions. Includes daily check-ins, Pomodoro, mistake notebook, habits, Markdown+LaTeX notes, charts, gamified achievements, and cloud sync across devices.
Gnat is a single‑binary, self‑hosted web analytics tool written in Go. It offers SQLite/Postgres/MySQL storage, funnel and cohort analysis, custom event tracking, CSV/JSON export, and a built‑in MCP server for AI agents, all configured via environment variables.
Apple Silicon system monitor: one Rust binary samples CPU, GPU, memory, power and thermal state in-process with no sudo and no powermetrics, printing JSON for scripts and agents, plus a menu bar tray and a local dashboard.
dsnitch is a single-binary, zero-configuration terminal UI tool powered by Linux eBPF that provides real-time network and DNS egress inspection for Docker containers, attributing outbound connections directly to container names without modifying container networks.
Barbacana is an open-source WAF and API security gateway built to be secure by default and simple to use. It blocks common web attacks out of the box with 500+ OWASP CRS rules, requires only minimal human-readable YAML configuration, runs as a single container with no extra dependencies, and includes automatic HTTPS provisioning.
ctop is a top-like interactive terminal interface for real-time container metrics. It supports Docker and runC, offers multi-host monitoring, secure web dashboards, and low-overhead performance with no external dependencies.
A transport-agnostic OAuth 2.1 and OpenID Connect server built on OpenIddict and redb.Route, supporting multiple databases, MFA, WebAuthn, SCIM, and in-process direct-vm calls.
RootGuard is a self-hosted Docker Compose stack that combines AdGuard Home filtering with a private recursive Unbound resolver, adding DNSSEC validation and a unified web GUI for guided setup, local DNS, health checks, updates and rollbacks.
WordPress plugin client for ovos console error monitoring and cyberdefense. Reports PHP/JS errors, security events, and scanner probes to a self-hosted console instance. Features CVE matching, traffic rollups, and AI-driven analysis.
NiceTOTP is an air-gapped, standalone TOTP hardware key built on the nRF52840, designed to provide secure 2FA codes without phone dependency. It features a built-in display, RTC, and long battery life, with configuration via a Python app or serial commands.
An advanced, system-level personal security and anti-coercion suite for Android. Running as a systemless priv-app with LSPosed hooks, it provides duress PINs, hardware tripwires, and remote SMS control.
IndieStats is a privacy-friendly, self-hosted web analytics platform built with Laravel, allowing users to track multiple sites without using cookies or requiring consent banners.
Self-hosted security operations stack combining SIEM log collection, endpoint detection with Sigma rules and cross-event correlation, SOAR playbooks, OSV vulnerability scanning and a local Ollama model for AI triage, deployed with a single docker compose up.
Linux security hardening tool written in Rust that scans for misconfigurations, applies fixes with rollback, and maps findings to ten compliance frameworks across multiple distributions.
SUNGLASSES is a local, open-source input inspection layer for AI agents. It scans text, images, audio, video, PDFs and QR codes for prompt injection, credential exfiltration and command injection, and provides a CLI, Python API, MCP server and Claude Code firewall hook.
Throughline is a Rust-based Linux tool that visualizes all network connections attributed to specific processes and allows users to modify routing paths (e.g., via VPN or Tor) through a drag-and-drop web interface. It operates in observe-only mode by default and requires explicit confirmation with a countdown timer to apply changes, ensuring safety and auditability.
Theia is a privacy‑first, server‑side analytics tool that reads nginx access logs, stores page‑view data in SQLite and offers CLI statistics as well as an authenticated HTTP API. It requires no client‑side JavaScript, making it resistant to ad‑blockers.
Self-hosted live map for Palworld dedicated servers showing players, bases, Pals, NPCs, and server metrics via Docker. Read-only, no client mods required.
A continuous scanner for optimizing Cloudflare IPs based on official IP pools, featuring a Web management console and CLI. It supports bandwidth testing, data center/country identification, and SQLite-based breakpoint resume, implemented in pure Python 3.8+ with zero dependencies.
WP VisitChart is a self-hosted WordPress plugin providing real-time traffic analytics with live visitor counts, traffic graphs, source/device breakdowns, trending badges, and per-post pageviews, all without third-party services.
A curated collection of Zapret client modifications (FluxRoute, Zapret-Zen, Zapret-Hub-Continuation, Zapret-Discord-YouTube) with pre-configured bypass rules for gaming, streaming, and other blocked services.
External monitoring frontend providing open-internet access to PanDA production monitoring for the ePIC experiment at BNL's Electron Ion Collider, proxying data through a persistent SSH tunnel.
IPScout enriches IP addresses from 67 sources (cloud, CDN, threat feeds) via command line, providing threat ratings, caching, and configurable output formats.
A lightweight dashboard and webhook receiver for Prometheus Alertmanager, using Valkey for state storage to visualize active alerts.
BWLog is a lightweight, self-hosted bandwidth logger for *nix systems written in Go. It monitors incoming and outgoing network traffic on specified interfaces and provides a web frontend with live graphs and historical statistics.
A tiny, privacy-friendly, multi-site web analytics platform distributed as a single Bun-compiled binary using SQLite for storage.
A self-hosted Go application that listens to RuuviTag BLE broadcasts and pushes environmental sensor data to InfluxDB, PostgreSQL, AWS, GCP, MQTT, and webhooks.
Privacy-friendly, cookieless self-hosted web analytics delivered as a single binary with embedded storage.
Smokey is a static single-file dashboard that shows GitHub repository health at a glance: last push, latest release, open PRs and issues in one sortable table, plus attention badges for external contributor activity. No login or build step is needed for public repos.
Selasar is a self-hosted, open-source web analytics platform powered by ClickHouse, offering privacy-friendly tracking without cookies or consent banners.
Self-hosted privacy-friendly product analytics for ASP.NET Core. Collects telemetry events using EF Core and SQL Server without relying on third-party tracking services, with built-in data minimization, allow-listing, and rate limiting.
Surface Observatory is a passive, daily monitoring project of the public surface of an explicit set of targets, collecting security headers, TLS properties, DNS records, and Certificate Transparency data as time series to reveal drift.
Privacy-focused server log analysis tool. Built with PHP 8.1+ and SQLite, it provides an admin interface that aggregates only daily access logs, storing no IP, UA raw text, etc., only aggregated values such as PV, 404, Bot, HTTP status, etc., for self-hosted use.
Defense-only fraud detection for cross-merchant identity reuse. Sentinel builds an identity link graph across merchants, scores payment events deterministically with explainable verdicts, and provides an analyst console, audit trail, and measured precision, recall, and false-positive cost in rupees.
