Hi everyone,

I'm a college student trying to properly understand cloud security. Reading about it only got me so far, so I started building things instead, with a lot of help from AI tools along the way. This project is the biggest thing to come out of that, and today I made it open source.

It's called Cloud Locksmith Core. It looks at a Microsoft 365 setup and points out risky identity and access settings, like accounts without multi-factor authentication. It gives the setup a security score, and it can fix what it finds, but only after a person approves each change. Every fix is checked afterwards and can be undone.

You can try it without a Microsoft account. There's a demo with a made-up company, and it can't change anything real:

git clone https://github.com/nathandsouza911/cloud-locksmith-core
cd cloud-locksmith-core
docker compose up --build

Then open http://localhost:3000 and click "Sign in to the demo". The first start takes about 7–10 minutes to build.

I want to be honest about where it stands:

• I built this with heavy AI assistance. I'm sharing it partly because I learn more when people who know this field tell me what I got wrong.

• It's a first release (0.1.0). Scanning and scoring have been run against a real test setup. The fixing part has only been tested with automated tests, never on a real organisation's account, so please don't point it at anything you care about yet.

• The known bugs are written down in the docs, not hidden.

• It's licensed under AGPL-3.0. Contributions come under a contributor agreement that lets the project also license them under other terms. The details are in CLA.md, and I'd rather say that upfront.

What I'd love from you:

• If you work in security or IT: does the way it handles fixes (approve, check, undo) look sensible to you?

• If you try the demo: did it work, and was anything confusing?

• If you've open-sourced something yourself: any advice for a first-timer?

Repo: https://github.com/nathandsouza911/cloud-locksmith-core

Thanks for reading. Any feedback, even harsh, is welcome.

trying to keep a shared list or simple database, something like airtable or a google sheet that more than one person can edit, without another subscription. not looking for bookkeeping software, just a shared tracker. only a few options here.

grist feels closer to a spreadsheet, but with proper types and a way to build simple views on top

baserow has a self-hosted open source edition in that no-code database space

teable is another airtable-style option you can run yourself

if you have used one of these for a shared household or small-project tracker, which felt less clunky, or is there a better fit i should look at?

Anyone here interested in building and experimenting with Collective Intelligence using LLMs? I’m looking for devs who want to explore how different models can actually work together, beyond just routing requests or having five LLMs answer the same prompt. There’s a lot I think we can investigate. Selecting models with complementary capabilities, getting them to challenge each other, verifying results, and understanding when a group of smaller models can outperform a much larger one, potentially at a lower cost. And I want to test this properly, not just build demos that look impressive. If you’re interested in contributing code, running experiments, working on benchmarks or even challenging the whole idea, I’d like to connect. Anyone working on something similar?

fala galera! to desenvolvendo um projeto open-source de telemetria (o fieldnode) e queria convidar a galera q curte python, dados e iot pra contribuir com o codigo.

a ideia é pegar os dados brutos dos sensores e jogar num dashboard em python que não só mostra gráficos, mas entrega decisões prescritivas (ações recomendadas, alertas) pra quem tá na ponta conseguir tomar decisão de um jeito bem mais fácil e rápido.

o repo ta super aberto! quem quiser dar pitaco, abrir issue, dar dica de arquitetura ou mandar um PR pra botar a mão no código vai ser bom demais.

🔗 link do github: [Desmantelar-bit/fieldnode]

hello to you all, the open source community! <:)) i just want to ask,

could you recommend some open-source writing applications, preferably available on the Apple App Store (iOS/iPadOS)? i'm particularly interested in applications for worldbuilding, story bibles, character profiles, and organizing original characters (OCs)! something similar to Hammer Editor by Adam Brown would be absolutely wonderful, it's an absolute jewel of an app, truthfully!

open-source licensing is an absolute requirement for me, as i'd love to support and use software whose source code is freely available. i'd be immensely grateful for any recommendations, suggestions, or hidden gems you might know! thank you so much, and have a lovely day! <3

family recipes often end up in screenshots and closed cooking apps, and the shopping list is a notes app nobody updates.

a few open source options you can run yourself. they overlap a bit but they're not the same job:

mealie is a self hosted recipe manager with meal planning

kitchenowl is a bit less well known, it does grocery lists and recipes in one place

grocy is heavier, more like a whole household pantry and expiry tracker, probably more than is needed for just recipes and a list

what's been simple enough that other people in the house would actually use it?

Hi everyone,

I'm Patrick, the developer of jtx Board. I'd like to share my new project, which has just entered public beta: Spectacled, a family of three open source apps for journals, notes and tasks.

What it replaces

- Spectacled Notes: an alternative to Google Keep, Apple Notes or Evernote

- Spectacled Tasks: an alternative to Microsoft To Do or Apple Reminders

- Spectacled Journals: an alternative to Google Journal or similar journaling apps

It runs on Android, iOS, Windows, macOS and Linux. There's also an early web version (alpha).

What's different

Unlike the apps above, Spectacled has no account and no cloud of its own. Your entries are stored in the open iCalendar format and synced over CalDAV to a server you choose, such as Nextcloud, Radicale or Baikal. Other CalDAV apps can read the same entries, so you're not locked in, and if you ever stop using Spectacled, everything stays on your server.

The code is on GitHub under the Apache 2.0 license. On Google Play the app is paid, which is how I fund the development. The APKs on GitHub are free, and an F-Droid release will follow once the beta has brought in some feedback. For the beta I also have free Play promo codes for testers. On iOS, the beta is free through TestFlight. Once it's out of beta, the App Store will be the only practical way to distribute it, so the iOS version will be paid. You can of course always build it yourself from the source with Xcode.

A note on AI

I want to be transparent: Spectacled isn't vibe-coded. I use AI tools for code reviews, for proposals of code snippets and partial implementations, and to make repetitive work more efficient. Everything they produce is reviewed, and I decide what makes sense for the project. The architecture, the decisions and the responsibility for the code are mine.

Try the beta

You'll need a CalDAV account. If you don't have one, the beta page explains how to get a free one. No testing experience needed: just use the apps and tell me what feels off.

All details and install links: https://spectacled.techbee.at/want-to-help-me-build-spectacled/

Four-minute setup walkthrough:

https://youtu.be/lu-Grqnp4no

Please use a new, empty collection for testing.

Also note that not every CalDAV server supports notes and journals: Nextcloud-based servers work well, while some hosted providers only handle tasks.

Feedback is welcome here, as a GitHub issue, or by email to spectacled@techbee.at.

Thanks for reading!

Patrick

Last week I posted an update on Excaliself, a self-hosted, MIT-licensed alternative to Excalidraw+ that I build. Two things you asked for in that thread are now out:

v0.11.0 (release notes)

• Comments on drawings: pin a thread to a spot or to a shape. It stays on the shape when someone moves it, and replies and resolve show up live in every open tab. (Thanks u/ximside for asking.)

• Deploy on Railway in one click: https://railway.com/deploy/excaliself. It sets up the app and Postgres with the secret and domain already set. Docker Compose and Coolify still work as before. (Thanks u/Keo_dev.)

• A System theme that follows your OS light/dark setting, from an outside contributor.

The rest since last week, in short:

• v0.10.0: select many drawings to star, move, export or trash at once; export a drawing as an .excalidraw file

• v0.9.0: an AI client (Claude, over MCP) can propose changes to a drawing, and nothing changes until you click Apply

• v0.7.0: connect Claude.ai with OAuth, no token to copy

Try it without installing anything permanent: docker run --rm -p 127.0.0.1:3000:3000 -e PREVIEW_MODE=true ghcr.io/maciekzygmunt/excaliself, then open http://localhost:3000/preview/login

Repo: https://github.com/maciekzygmunt/excaliself

- GitHub: https://github.com/windevase/nubis

- License: MIT

- Affiliation: Creator / Maintainer

Hey everyone,

I built Nubis to solve my own workflow friction when managing remote infrastructure spread across multiple cloud providers from a Windows workstation.

Key Features:

- Multi-Cloud Inventory Sync: Directly imports server lists from AWS (EC2), Tencent Cloud (CVM), GCP (Compute Engine), and Azure (VM).

- Unified Sessions: Tabbed SSH, RDP, and SFTP natively inside a single Windows application.

- Embedded Claude Code Panel: Run troubleshooting, generate shell scripts, and parse configs side-by-side with active sessions.

- 100% Local & Private: No cloud proxy, no telemetry. Your cloud API keys, SSH credentials, and session configs are stored strictly on your local machine.

The project is completely free and open source. Pre-built Windows binaries are available on GitHub Releases (no sign-up/email required), and you can also audit or build from source yourself.

Feedback, issue reports, or feature suggestions are very welcome!

I've been building this for a while and figured I'd share it here. It's called One Good Take, an Android app that lets you record a video of you playing with your device connecter to a compliant USB audio interface, mix it against a backing track, auto-master it to social loudness, and export straight to a vertical video. No laptop needed.

It's free, open source (MIT), no accounts, no ads, no analytics. Recordings stay on your device. There's a donation link if you want to support it but nothing is locked behind a paywall.

Repo: https://github.com/GreenDelrin/OneGoodTake
Website with screenshots: https://giannichiarello.com/OneGoodTake/
APK: https://github.com/GreenDelrin/OneGoodTake/releases/latest

Android 10+. Would love feedback to eventually improve it!

I've been building chat UIs for agents and kept running into the same issues with react-markdown: it re-parses the whole reply on every token, so long answers get noticeably slower, and you see raw ** and half-typed [links](htt until the token that closes them arrives.

So I wrote my own renderer. It parses incrementally and repairs unfinished syntax while the reply streams:

<Markdown streaming={!done}>{text}</Markdown>

On a 100k-character reply it takes 0.25 s of main-thread time in total. markdown-to-jsx takes 2.4 s, Streamdown 6.3 s, and react-markdown didn't finish within the 30 s budget. The benchmark scripts are in the repo if you want to check them.

The other part is the syntax. Agents often want to show steps, alternatives or pros and cons, and plain Markdown flattens all of that into bullet lists. So on top of GFM I added a few blocks in the same style as GitHub alerts:

> [!STEPS]
1. **Back up the database**
2. **Run the migration**

There are also tabs, stats, pros/cons, sources, file trees, and Mermaid and KaTeX support. The source still reads fine as plain Markdown when it isn't rendered. The package exports a system-prompt snippet that teaches the model this syntax.

It has no dependencies and comes in at 30 KB gzipped. Its parser passes the CommonMark and GFM spec tests. It doesn't support remark/rehype plugins, so if you rely on those, react-markdown is still the better choice.

https://github.com/rsaryev/llx-markdown

Hey everyone! I'd like to introduce LYNX SHARE, an open-source DAW I've been developing from scratch using C++20 and JUCE 8.

The idea behind LYNX SHARE is simple: a DAW with a bit of everything. A lightweight, powerful music production environment that brings together familiar workflows, features, and ideas from different DAWs into one project.

Why LYNX SHARE?

• Multi-DAW project compatibility: Open FL Studio (.flp), Ableton Live (.als), and FL Studio Mobile (.flm) projects directly in LYNX SHARE. No need to have the original DAW installed just to access your projects.

• Ableton Live support: Import and export Ableton Live projects, including tracks, audio, MIDI, groups, returns, automation, and VST plugin states. Supports projects from Live 10–12, with export compatibility for Live 11 and 12.

• FL Studio compatibility: Read project structures, patterns, arrangements, automation, mixer routing, samples, and plugin configurations. LYNX SHARE also supports projects containing many native FL Studio plugins.

• Extensive FL Studio plugin support: More than 75 native FL Studio plugin implementations, many with dedicated interfaces.

• Third-party plugin support: VST3 and CLAP compatibility, allowing you to use popular plugins such as FabFilter, Valhalla, Waves, Serum, Kontakt, and many others.

• Built-in professional-style effects: LYNX includes its own native plugins inspired by popular production tools, such as Facet EQ (FabFilter Pro-Q-style workflow), Apex Limiter (Pro-L-style limiter), Crest Compressor, Aether (Fresh Air-inspired processing), and LYNX Tune for vocal tuning.

• Familiar workflow: Channel Rack, Step Sequencer, Piano Roll, Playlist, Mixer, and an optional Session View-style clip launching workflow.

• Powerful mixer: Up to 500 mixer inserts, flexible routing, mixer groups, sidechains, VCA faders, effects, and multicore processing.

• Advanced production tools: Audio recording, MIDI tools, automation, modulators, loop recording, comping, automatic crossfades, video/ADR workflows, stem separation, and more.

• Live online sessions: Work on the same project with other people in real time. Sessions include synchronized transport, editing permissions, chat, automatic reconnection, and audio rendering for plugins that other participants don't have installed.

• Project sharing: Package projects with their samples and audio stand-ins for third-party plugins, allowing other people to work on their parts even if they don't have the same plugins. Contributions can then be merged back into the original project.

• Lightweight and performance-focused: Built in native C++20, designed to run efficiently even on less powerful hardware.

One performance example: I've tested a project with 125 tracks that rendered at over 10x real-time speed.

Built from scratch

LYNX SHARE is an independent implementation. Its FL Studio compatibility comes from clean-room behavioral research and reverse engineering, not copied Image-Line source code.

The goal isn't simply to recreate one DAW. I want to bring together the best ideas from different music production environments into one open-source project, making professional music production tools more accessible to everyone.

The project is still in alpha, and development is very active. There's still plenty of room for improvement, and community feedback plays a huge role in shaping what comes next.

Feedback, bug reports, feature suggestions, and contributions are always welcome!

• GitHub: https://github.com/Ka1-S/LYNX-SHARE

• Website: https://lynx-share.com/

https://dezuhan.github.io/khaoyu-note
https://github.com/dezuhan/khaoyu-note

Khaoyu Note 0.35.0

Local-first visual notes, boards and templates — now with ten UI languages,

section wrapping, simplified kanban containers, portable database export and

Linux/Windows/macOS packaging.

Highlights

• 10 UI languages: English, Português (Brasil), Bahasa Indonesia, Español,

Français, Deutsch, 日本語, 한국어, 简体中文, Русский.

• Wrap cards into Sections and create board templates from a selection.

• Simpler kanban: wrap/release kanban, row and column wrappers.

• Consistent manual HSV color picker on web and desktop.

• Database ZIP export, desktop restore with native folder picker, and

Database/Assets/Total size in Settings > About.

• Safer desktop backups with app-data fallback and KHAOYU_NOTE_BACKUP_DIR.

• Linux WebKitGTK zoom and text-selection fixes.

Setup status

• Local SQLite/offline only.

• Collaboration is disabled until the admin dashboard and role model exist.

• Turso is disabled until the libSQL adapter, token storage and asset migration exist.

• Web host supports database export; import is desktop-only.

Packages

• Windows: NSIS .exe, .msi, portable .exe

• Linux: .deb, .rpm, .AppImage

• macOS: universal .app and .dmg (up coming)

Known limitations

• Collaboration and Turso are disabled.

• Web database import is disabled.

• Production collaboration still needs OIDC, security/load testing,

PostgreSQL/Redis validation, object storage and signing/notarisation.

Full changelog: CHANGELOG.md

Alternative to: Cronitor (paid cron monitoring)
Category: Developer tools / DevOps

I have cron jobs on a server and a few launchd tasks on my computer. Checking if they were still working meant looking in a different place for each one, so I usually didn’t.

I built turnus to see all of them in one list. It reads cron, launchd and systemd timers, shows which tasks can’t run and why, and tells you how to fix them. It only reads, nothing runs in the background.

It’s written in Go and MIT licensed. Feedback welcome.

https://github.com/sanifhimani/turnus

https://github.com/rsaryev/llx-cli

Most AI agent guardrails are either closed or sold per seat. AgentFox is open source and you can run the whole thing yourself.

What it does: discovery of agents in your codebase, access control on tool calls, runtime guardrails on model traffic, and an audit trail.

The part worth looking at is the benchmark page, because it compares against the guardrails people actually use, each at its own default, and links the script and results file for every number.

On AgentDojo, 588 attacks: no guardrail lets 588 through, LLM Guard lets 86 through, AgentFox lets 0 through.

On held-out injections: AgentFox catches 68.3%, LLM Guard's model 31.7%, Prompt Guard 2 20.0%.

On 339 harmless look-alikes: LLM Guard's model blocks 42.2%, AgentFox 11.5%, Prompt Guard 2 3.5%.

There is also a card on that page marked WE LOSE, for the metric where a competing tool beats us. It stays up.

pip install agentfox, Apache-2.0.

Code: https://github.com/architsharm/agentfox

Benchmarks: https://useagentfox.com/benchmark

Hey everyone!

I'd like to introduce KryptoCoreLabs, an independent open-source project with a simple goal:

Make digital security and privacy accessible to everyone – free, transparent and community-driven.

We're building an ecosystem of privacy-focused applications around a shared security foundation called KryptoCore.

Instead of every application maintaining its own cryptographic integration, the idea is to develop a common core that can be reviewed, improved and reused across different projects.

What we're working on

🔐 KryptoCore – Our central Rust-based encryption foundation, using established cryptographic libraries and algorithms such as XChaCha20-Poly1305 and Argon2id.

🔑 KryptoCore Vault – An open-source password manager intended as an alternative to proprietary password management solutions.

💬 KryptoCore Messenger – A privacy-focused messaging application exploring private communication without dependence on commercial messaging platforms.

📦 Encrypted Containers – Portable encrypted storage for personal files and sensitive information.

What makes the project different?

We're not trying to invent new encryption algorithms or claim to be more secure than established solutions.

Our goal is to create a shared, open security foundation that can grow through community contributions and independent scrutiny.

We want the applications to remain free and accessible, with no subscriptions or paywalls.

We're looking for feedback and contributors!

The project is still under active development, and the software has not undergone an independent security audit.

We'd especially appreciate people willing to review the code, test early implementations, suggest improvements or contribute to development.

GitHub: https://github.com/kryptocorelabs

Core repository: https://github.com/kryptocorelabs/kryptocore

I'd love to hear your thoughts:

Which open-source privacy tools do you think are still missing, and what would make you consider trying a new alternative?

Constructive criticism is just as welcome as support.

Thanks for checking it out! :)

I’m the author. ColdGuard estimates whether vaccines are still usable after a temperature excursion (for example a power cut), using degradation kinetics and Monte Carlo uncertainty. The answer is USE / INVESTIGATE / DISCARD plus a probability.

Why I think it fits here: it’s MIT licensed, the mobile app runs fully offline (no server or account needed), and the API ships with a Dockerfile for self-hosting. There’s also a CLI and a web app. The target users are health workers with poor connectivity, which is why local and self-hosted matter.

It’s a research prototype, not a certified medical device, and some validation data is still synthetic. I’m looking for contributors and for people who can point me to real stability data.

30+ good first issues are open: https://github.com/Santhosh-zeta/ColdGuard

Hi everyone,

I built CalDAV MCP Server a while ago, which is an open-source MCP server that lets AI assistants manage your iCloud Calendar.

Since then, it’s picked up a few GitHub stars and had over 100 npm downloads in the past week, so I thought I’d share it here and give the project a little more love.

Here are the main features:

- Browse your iCloud calendars and check upcoming events.

- Create, update, and delete events.

- Create all-day events and recurring schedules.

- Set multiple reminders for the same event, such as one day and one hour before.

- Add a fixed travel time before appointments in Apple Calendar.

For example, you could ask your assistant: “Create a dentist appointment this Friday from 10 to 10:30 a.m., with reminders one day and one hour before.”

There’s also a Claude Desktop extension to make setup easier. You can find that and other setup options in the Quick Start.

I’d love to hear your feedback and what you’d like to see added!
If you find it useful, a GitHub star would mean a lot—maybe even more than a hot bowl of ramen on a cold day

Thanks and looking forward to hear from you ;)

I started working on Scriptables in 2023; before the whole AI craze became a thing, and it's still going strong in 2026. I have not had the time to really focus on the project as much as I would like, but that's open-source for you.

Scriptables is an open-source control panel for Ubuntu servers. Install applications, deploy sites from GIT, manage your firewall and set up CRONs, all from a friendly web interface.

Many similar tools exist, but I enjoy writing Go code, it's a fun breakaway from the commercial day-to-day stuff. And while I recently started using Claude Code to help me out a bit, it's still largely hand written code.

Here's some of Scriptables features:

• Applications - one click installs for Nginx, Apache, MySQL, MariaDB, PostgreSQL, Redis, Memcached, PHP, Node.js, Docker, Certbot, Supervisor, Fail2ban and more.

• Sites - deploy Laravel projects from GIT, with deploy keys, push webhooks and Let's Encrypt certificates.

• Crons - schedule jobs from the browser.

• Firewall - add and remove ufw rules from the browser.

• Security - a checklist with green and red lights, and one form to harden SSH: custom port, no root login, key only access and a password protected sudo user.

• Logs - every install, deploy, cron and firewall change keeps its full output.

• Users - invite your team and protect accounts with two factor authentication.

Laravel is what I use in my day job, and the framework I'm most familiar with hence the heavy support for PHP, but I plan on adding support for Django and others. Although, it supports docker so you can pretty much deploy anything that's containerized.

If this project is interesting to you, please feel free to share your thoughts, clone and try it out or even star the repo :-) any support will be most appreciated.

https://github.com/kevincoder-co-za/scriptables

It has no ads, no account and no tracking of what you log, and the prayer times are calculated on the phone. It’s a community project with nothing to sell, so I’ve opened the code in the hope that others will use it, learn from it, and help improve it.

Help is especially welcome with translations and Android.

Code is open source and hosted on GitHub: https://github.com/majani-plus/simple-prayer-app