Herman

The package behind a lot of shadcn component styling is being rewritten from scratch, split into subpath exports, and now shipping a stylesheet that works without any runtime class merging.

A Textual TUI with fuzzy search, auto-refreshing previews, a command palette and YAML config with autocompletion, installed through uv, Nix or an AppImage.

A TypeScript library that fixes malformed JSON documents, from missing commas and single quotes through to truncated output, with a streaming mode for very large files.

A Python generator that fetches gfwlist, layers your own AdBlock Plus style rules on top, and emits the config file whatever proxy client you happen to run.

A C++ module that reimplements Magisk's Zygisk interface on top of ptrace, giving APatch and KernelSU the API their module ecosystem expects while keeping a tight grip on what an app can see.

The Sphinx-based v1 was archived on a branch and v2 was rebuilt on MyST in TypeScript, which is the single most important thing to know before you choose a version.

A Go and Vanilla application that resolves Bilibili video, bangumi, collection and favourites links into downloadable streams, with QR login, SQLite state and ffmpeg for muxing.

A local-first Flask and PyWebView application that analyses footage, writes a commentary script, generates speech, syncs it to shots and exports a cut, with licensing terms that limit you to personal use.

IceWhale's release distribution for its Zima hardware, grown out of CasaOS, distributed as a disk image you flash with Etcher rather than a package you install, with support extending to generic x86-64 machines.

Twelve thousand lines of C in a single file implement a self-compiling compiler, a self-executing RISC-V emulator and a self-hosting hypervisor, plus the teaching material, an autograder and three bachelor theses that ship as release tags.

A CC0 licensed WebExtension that watches every page you open, notices IPFS paths and DNSLink records, and quietly sends them to the gateway running on your own machine instead of a public one.

A C# proxy that translates Torznab queries into site-specific scrapes, maintained as a long list of one-off fixes to trackers that change their HTML on a schedule.

A small Apache-2.0 library that launches your app in a fresh process when the state change is too fundamental for a configuration change, and asks you to add one guard to onCreate.

Microsoft's official C# extension for Visual Studio Code, built on the Language Server Protocol and shipped as a required dependency of C# Dev Kit.

An MIT-licensed Python library with per-site scrapers on top of schema.org parsing, which hands you ingredients and instructions and leaves fetching and bot protection to you.

A Node.js WhatsApp bot whose README is two buttons and three pair servers, with the substance in its dependency list: Baileys fork, ffmpeg, DALL-E, PDF generation and a SQLite store.

A cross-platform Rust crate for system information whose main trap is not portability but statefulness: most values are diffs against a previous reading, so the same System instance has to be reused.

RT-DETR is the official code release for the CVPR 2024 paper that argues DETRs can beat YOLOs at real-time detection. It ships four separate code trees, two pretrained-weight families and no pip package, which shapes both who should adopt it and how much work that takes.

ReAgent wraps Ghidra exports and a reverser/checker model pair in a bounded validation loop that produces candidate C/C++ functions. The interesting part is not the model choice but the four independent gates a candidate has to clear before the tool calls the reversal successful.

The cilium/ebpf library loads, modifies and attaches eBPF programs from Go without cgo, and bpf2go compiles C programs into embeddable Go. It is for Go engineers building long-running kernel observability and networking tools, not for Kubernetes users looking for the Cilium CNI.

LeRobot packages a common Robot interface, the LeRobotDataset format, and a library of imitation, reinforcement and vision-language-action policies into one Python project. It fits teams that already have hardware and want a shared data and training pipeline, not teams looking for a simulator-first framework.

Nyxian is an AGPL-3.0 iOS app that provides a full native IDE and a userspace microkernel for building and running iOS apps directly on an unjailbroken iPhone, offline, across iOS 18.4 through iOS 27 Beta 4.

Druid is a data-first Rust-native UI toolkit that Linebender has discontinued in favour of Xilem. The 0.8.3 release still builds and its architecture is worth understanding, but the README tells new projects to look elsewhere.

Intel ISPC compiles a C-based SPMD language to SSE2, AVX, AVX512, ARM NEON and Intel Xe GPU targets. Here is how it installs, how the execution model maps to vector hardware, and where it is the wrong tool.

Microsoft365DSC turns Microsoft 365 tenant settings into PowerShell DSC configurations you can deploy, extract and monitor. It fits teams already running DSC or CI pipelines, and it fails loudly on tenants without the right Defender for Office 365 licensing.

server.js wraps Express, socket.io and a fixed set of middleware behind a route array, so a small Node project can start serving with one require. It is convenient for prototypes and small APIs, and a poor fit for anyone who needs a maintained framework.

yazi.nvim wraps the yazi terminal file manager in a Neovim floating window, syncing file operations with open buffers and LSP servers. It is a solid choice for Neovim users who want a fast, keyboard-driven file manager without leaving the editor.

AnythingLLM is a self-hosted, MIT-licensed AI application that combines document chat, agent workflows, and multi-user management. This review covers its architecture, setup, and the trade-offs you accept when you adopt it.

duckdb-wasm compiles the DuckDB OLAP engine to WebAssembly so SQL over Parquet, CSV and JSON runs client side. It is genuinely useful for in-browser analytics, but single-threaded by default, sandboxed against out-of-core work, and dependent on CORS for every remote file.

TFT_eSPI is a C graphics library for 32-bit boards that drives SPI and parallel TFT panels on RP2040, STM32, ESP8266 and ESP32. Its defining choice is that the panel and pins live inside the library, not in your sketch.

PRISM-INSIGHT wires more than a dozen LLM agents into a pipeline that scans for surge stocks, writes reports, and places trades. The README is explicit about its market coverage and its AGPL-3.0 licence, and both shape who can realistically run it.

ctx indexes the JSONL and SQLite logs that Claude, Codex, and other agents leave on your machine, then exposes them through a CLI and SDKs. It offers fast, token-efficient retrieval and a paid 'blame' feature that ties code back to the agent session that produced it.

eslint-plugin-security adds fifteen ESLint rules that flag risky Node.js patterns such as eval, non-literal require, and child_process use. It is a triage aid, not a vulnerability scanner, and it warns you about its own false positives.

This curated list organizes hundreds of engineering blogs by company, individual, and technology, but its value depends on how current its links remain. For engineers who want a single alphabetical starting point, it works; for those who need active maintenance, it may disappoint.

Androguard exposes APK archives, DEX structure and Dalvik bytecode to Python scripts, with an optional decompiler and disassembler. It is a library first and a CLI second, and version 5 is a rewrite that is not the package on PyPI.

Pentest Swarm AI orchestrates dozens of AI agents through a stigmergic blackboard, not a fixed pipeline. Built in Go with Claude API support and local model options, it targets authorized pentests, bug bounty, and CTFs, but its AGPL license and early-stage maturity demand scrutiny.

Firejail wraps a process in Linux namespaces, seccomp-bpf filters and capability restrictions so it sees a private network stack, process table and mount table. Here is how it installs, what the profiles actually do, and where the design costs you.

A GPL-3.0 drafting and solid modeling application with a shared core between a desktop build and a browser build, shipping weekly releases and pinning its geometry kernel to a specific revision.

FormKit renders a whole field from one component with validation declared inline, and structures form data automatically through its node primitive. The open source tier covers native HTML inputs, and the complex inputs are a commercial product.

The visual pipeline is a front end that emits ordinary Python using pandas and an in-process query engine, and the readme makes that explicit. That is the difference between this and a pipeline tool: when you are done, you have a script, and the licence terms are the part to read carefully.

An Agent Skills package that generates .drawio files from natural language and real system sources, then keeps them in sync with a CLI. It is built for teams that already live in draw.io and want their diagrams to survive the next refactor.

smarGate maps ports between internal networks over TCP P2P, with an Android client as the only access entry point and a server binary that runs without configuration. It is free, its licence is not stated, and its official relay does not forward to Hong Kong, Macau, Taiwan or overseas IPs.

GithubStarsManager syncs your starred repositories, summarizes and categorizes them with a model you configure, and adds vector search, repository Q&A, MCP and release tracking. It is an Electron desktop app, a Docker stack, and a Cloudflare Worker, with MIT licensing throughout.

Project SuperDex bundles four modules (Physics, Robotics, Studio, Lab) behind a Python API for manipulation research. It is a v1.0.0 release from Meta's research org with a Linux-first toolchain and a simulation module still marked early preview.

BottleCRM is an MIT-licensed, self-hosted CRM built on Django REST Framework, SvelteKit and Flutter, with PostgreSQL Row-Level Security as its tenant boundary. The interesting engineering decision is where that boundary sits, and it is also the reason the project is not for everyone.

The Terms of Service, Privacy Statement and a set of conduct and compliance policies that govern github.com, published as Markdown under a public domain dedication, with a review process that explains how each change got in.

The community-scripts/ProxmoxVE repository offers hundreds of shell scripts that turn a single pasted command into a working LXC container or VM on Proxmox VE. It is fast, but it demands root shell access and an internet connection, and it inherits the maintenance risks of any community-run script collection.

HolyClaude bundles Claude Code, a web UI, a headless browser, and 50-plus developer tools into one Docker image. The pitch is simple: stop configuring, start building. The reality is a heavy, opinionated container that trades flexibility for convenience.

Apache Superset is a Python-based, Apache-2.0 licensed business intelligence platform for data exploration and visualization. This review covers its architecture, setup, limitations, and alternatives, with a focus on whether it fits your engineering team.

free5GC is an open-source 5G core network implementation from the Linux Foundation, targeting 3GPP Release 15 and beyond. It is written in Go, licensed under Apache-2.0, and suited for experimentation rather than carrier-grade deployment.

This is DingTalk's own channel plugin for OpenClaw, giving an agent access to messages, documents, to-dos, AI tables, calendars and DING reminders, installed with an npx command and a QR code scanned in the DingTalk app. What makes it worth reading carefully is the security section: the vendor states plainly that the agent acts as your user identity, that prompt injection is an inherent risk, and that it should not be deployed in enterprise production.

Swift Argument Parser turns a Swift struct into a CLI by reading property wrappers. It is the parsing layer under swift-format and Swift Package Manager, Apache-2.0 licensed, and it sets a hard floor on your Swift toolchain version.

vue-notification is an MIT-licensed Vue 2 plugin that renders toast popups from a global $notify call, with per-group holders and CSS or Velocity animations. It is small, unopinionated, and tied to Vue 2.

Blitz is a modular HTML/CSS rendering engine written in Rust, aimed at developers who want to render web content inside native applications without shipping a full browser. It is in beta, and the README says so plainly.

The README of this Scala JSON library is not a tutorial, it is an adopter list with throughput figures attached: Criteo migrating 200k queries per second off Jackson, SoundCloud transforming 200 million events an hour, Twilio sending millions of messages a day.

A C source port for Doom, Heretic, Hexen and Strife whose stated goal is to reproduce the DOS binaries accurately, bugs included, which makes it the reference point rather than the comfortable choice.

A 2,700-star Chrome and Firefox extension that rebuilds the 2015 and 2018 Twitter layouts from scratch, and what its repository structure says about how it stays alive.

Cosmos gen3 replaces the IL2CPU transpiler with the official .NET ahead-of-time compiler, so a dotnet build produces a bootable kernel ELF for x64 or ARM64. It is a construction kit for people who want to write an operating system in a managed language.

The v5.0.0 release of @codegenie/serverless-express keeps your Express, Koa or Hapi app and adapts API Gateway, ALB and Lambda@Edge events into requests. It is a small adapter with a hard Node.js 24 floor and no server listening on a socket.

A drop-in Agent Skills package that reviews NDAs, MSAs, merchant agreements and M&A documents with CUAD risk categories, market benchmarks and redline language. It installs with one git clone, and it is a first-pass tool, not counsel.