Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.

tmux sidebar for coding agents — Amp, Claude Code, Codex, OpenCode. Per-thread markers, local HTTP API, live session state.

Symphony turns project work into isolated, autonomous implementation runs, allowing teams to manage work instead of supervising coding agents.

A place for creators and users of password managers to collaborate on resources to make password management better.

Ed's repo of Claude Code plugins, centered around a research-plan-implement workflow. Only a tiny bit cursed. If you're lucky.

the ps utility, with an eBPF twist and container context

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

Quickly create and run optimised Windows, macOS and Linux virtual machines

Basic auth server and OIDC implementation for homelab use

A low-level library for writing Go LLM agents

XS-Leaks Wiki

Proxy TCP connections based on static rules, HTTP Host headers, and SNI server names (Go package or binary)

Age plugin for Apple's Secure Enclave

Stateless cluster local OCI registry mirror.

Experimental Async AWS SDK Clients for Python (In Development)

Kickstart and manage your AWS Organization via Terraform

Graft is an open-source transactional storage engine optimized for lazy, partial, and strongly consistent replication—perfect for edge, offline-first, and distributed applications.

Delay a systemd service's startup until network interfaces are online

Slack bot to share the news that someone has created a new emoji!

Static analysis for GitHub Actions

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

Access, a centralized portal for employees to transparently discover, request, and manage their access for all internal systems needed to do their jobs

Remote Git repos as fs.FS file systems.

A simple HTTP proxy that fogs over naughty URLs

HTTP proxy that injects 3rd party credentials into requests

A Go module that provides an `io.ReadCloser` for a variety of compression formats

Device Bound Session Credentials: A Protocol for Protecting From Cookie Theft