LightZone 5.0.0~beta2-0obs1 šŸ’¾

LightZone is a professional-level digital darkroom and photo editor for Mac, Windows, and Linux. It includes RAW processing and editing. Rather than using layers in the way that other photo editors do, LightZone lets the user build up a stack of tools which can be rearranged, readjusted, turned off and on, and removed from the stack. It's a completely non-destructive editor, where any of the tools can be re-adjusted or modified later — even in a different editing session. A tool stack can even be copied to a batch of photos at one time. LightZone always operates in a 16-bit linear color space with the wide gamut of ProPhoto RGB.

minor bugfix: Unstable; urgency=medium Upstream sync. -- Masahiro Kitagawa Sun, 06 Jun 2023 12:13:00 +0900.

BSDL capture digital-camera graphics-conversion viewer macos linux c

elm.chat 0.1.2 šŸ’¾

elm.chat is an AGPL-3.0 open-source web messenger for creating a temporary room, sharing a single-use invite, and explicitly destroying the room. Messages and files are encrypted in the browser and relayed through one Cloudflare Durable Object per live room

minor bugfix: v0.1.2 repairs one-click Cloudflare self-hosting for the npm-workspaces repository by adding a root Wrangler contract, root build/deploy commands, and an automated configuration drift check. It also improves native-share and clipboard invite handoffs and hardens closed-WebSocket teardown. Independent deployments omit elm.chat's optional aggregate growth binding. The release has not completed an independent security audit; message authentication and replay/duplicate protection remain unfinished, the relay sees connection metadata, and endpoints can retain copies.

Affero GPLv3 communication chat cryptography web-environment javascript end-users privacy open-source

Mustangproject 2.25.0 šŸ’¾

Mustangproject is a tool to write, validate and parse Factur-X/ZUGFeRD and (CII)XRechnung e-invoices. It is a (permissive) open source cross platform command line tool and a Java library. The command line tool e.g. allows to extract and combine PDF and XML from/to Factur-X as well as validate e-invoices, convert XML to HTML or migrate from ZUGFeRD v1 to v2. The library additionally allows to generate the XML to be embedded either by implementing interfaces or actively creating objects.

minor feature: ## Highlights Support for ZUGFeRD 2.5.2 (=Factur-X 1.09.2, #1216) as well as support LogisticsServiceCharges (Zuschläge für Versand Verpackung, #228) and fixing VeraPDF Vulnerabilities CVE-2026-54078 and CVE-2026-54079 (#1213) ## Fixes - #1207 itemTotalNetAmount is null Exception when validating invoices - #925 Emit line-level CalculationPercent (BT-138) and BasisAmount (BT-137) for the EN16931 and XRechnung profiles, using the caller-supplied Allowance/Charge basis amount. - #1171 Removed deprecated methods Item::getAllowances() Item::getCharges() and their last usage in ZUGFeRD2PullProvider. - #1174 Fix UBL AllowanceCharge import, add missing percent/basisAmount aliases, dropped per-unit-price allowances - #1163 Make doRecalculateItemPricesFromLineTotals() use more than the fixed scale of 4. - #1162 Skip the elements "Information" and "PayeeSpecifiedCreditorFinancialInstitution" for basic profiles. - #1134 Fix: Trade party universal communication id not imported when scheme is not "email address" (EM) but "electronic address" (0225). - #1150 Remove D . M . Y after Rechnungsdatum in HTML visualization - #996 Omit ExemptionReason written to line item level for profile EN16931, some validators raise a warning or even an error - #1097 Invoice importer: LegalOrganization id not imported (wrong node name 'GlobalID' instead of 'ID' used) - #1151 'BR-FXEXT-IC-08rev' in ZF 2.5 requires VAT exemption reason text and code for allowances and charges - #1145 Document-level allowance with VAT category O emits RateApplicablePercent (violates BR-O-06) - add disableArithmeticCheck() / --no-arithmetic-check option to skip the arithmetic recalculation pass during validation - #1167 Upgrade com.fasterxml.jackson.core to 2.22.1 from 2.17.3 - #1186 Read Item LineTotalAmount from SpecifiedTradeSettlementLineMonetarySummation - #976 / #797 InvoiceImport: read ContractReferencedDocument/IssuerAssignedID into Invoice.contractReferencedDocument - #987 Show only the matching BIC pe

APL invoice metadata accounting java-library java e-billing e-invoice

QuoteChime Free 1.4.1 šŸ’¾

QuoteChime Free is a browser-only message generator for Australian trade and service businesses following up unanswered quotes. It creates a finite four-touch sequence: receipt check, helpful nudge, decision request, and polite close. Customer and quote details never leave the browser. The project has no dependencies, account, cookies, tracking, or network calls and can be hosted as static files. It is intended for small-business operators and resource publishers who want practical follow-up wording without pressure tactics or automated sending.

minor feature: Adds optional quote numbers to generated follow-ups and fixes wording when the amount is blank. Copied email drafts now include their subject line, text downloads use the QuoteChime filename, and the standalone demo has matching copy controls.

MITL utilities javascript office customer-service end-users web-environment

QuoteChime Free 1.3.0 šŸ’¾

QuoteChime Free is a browser-only message generator for Australian trade and service businesses following up unanswered quotes. It creates a finite four-touch sequence: receipt check, helpful nudge, decision request, and polite close. Customer and quote details never leave the browser. The project has no dependencies, account, cookies, tracking, or network calls and can be hosted as static files. It is intended for small-business operators and resource publishers who want practical follow-up wording without pressure tactics or automated sending.

minor feature: Renamed the public edition to QuoteChime Free and added links to three companion tools: business-day calendar reminders, lost-revenue scenario modelling, and calm objection responses.

MITL utilities javascript office customer-service end-users web-environment

Steam Market Fee Calculator šŸ’¾

A client-side calculator for comparing buyer-facing Steam Community Market prices with seller proceeds using integer minor units. It separates Steam and publisher fee components, supports configurable rates, and includes boundary tests for rounding behavior. The source is MIT-licensed, and Steam's final displayed amount remains authoritative.

minor feature:

MITL steam marketplace calculator javascript web utility

Weblate 2026.8 šŸ’¾

Weblate is an open source web-based translation tool with version control. It includes several hundred languages with basic definitions, and enables the addition of more language definitions, all definitions can be edited by the web community or a defined set of people, as well as through integrating machine translation, such as DeepL, Amazon Translate, or Google Translate.

minor feature:

GNU GPLv3 translation localization web python html

elm.chat 0.1.1 šŸ’¾

elm.chat is an AGPL-3.0 open-source web messenger for creating a temporary room, sharing a single-use invite, and explicitly destroying the room. Messages and files are encrypted in the browser and relayed through one Cloudflare Durable Object per live room

minor feature: v0.1.1 centralizes the public security status and limitations, opens an independent-review coordination issue, preserves an invited participant s active room when they open the make-your-own path, and adds a public changelog, press kit, practical guides, structured article pages, and a 12-entry RSS feed. The release has not completed an independent security audit

Affero GPLv3 communication chat cryptography web-environment javascript end-users privacy open-source

elm.chat 0.1.0 šŸ’¾

elm.chat is an open-source web messenger for creating a temporary room, sharing a single-use invite, and destroying the room when the conversation is finished. Messages and files are encrypted in the browser and relayed through one Cloudflare Durable Object per live room

major feature: First tagged release. Adds browser-side encryption for messages and files, single-use and revocable room invitations, manual and timed room destruction, account-free use, no persisted server-side transcript or file history, one Durable Object per live room, a one-click Deploy to Cloudflare path, and public architecture and threat-model documentation. This release has not had an independent security audit

Affero GPLv3 communication chat cryptography web-environment javascript end-users privacy open-source

Duckweed 1.0.13 šŸ’¾

Duckweed is a cross-platform local terminal workspace for vibe coding. It keeps real PTY-backed shells, locally installed coding-agent CLIs, project context, tests, logs, and Git diff review visible in one window. It supports Windows, macOS, and Linux and can run Claude Code, Codex CLI, Cursor Agent, Grok CLI, and OpenCode already installed on the computer. Duckweed does not host repositories or provide provider accounts, subscriptions, API credentials, or usage-limit bypasses. It is distributed under the Duckweed Source-Available License 1.0.

minor feature: Current stable release: local multi-pane workspace, real shells, coding-agent interfaces, project context, and Git diff review for Windows, macOS, and Linux.

Other terminal-emulator developer-tools ai-coding cross-platform windows macos linux tauri rust claude-code codex cursor-agent opencode git

AI Dictation šŸ’¾

AI Dictation is an MIT-licensed voice-to-text application for macOS, Windows, iPhone, iPad, and Android. It provides voice input in supported text fields, offline speech recognition on supported devices and languages, and optional cloud transcription and cleanup. Personal vocabulary, replacements, writing rules, and spoken shortcuts are available depending on platform and workflow. Native client source is published at https://github.com/writingmate/aidictation.

minor feature:

MITL speech-to-text voice-to-text dictation desktop mobile macos windows ios android swift

FreeRDP 3.30.0 šŸ’¾

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Enjoy the freedom of using your software wherever you want, the way you want it, in a world where interoperability can finally liberate your computing experience.

major security: Security and release. Addresses a severe server side, update highly recommended. CVE: Claude and Ada Logics. https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-m37j-jcr2-8gcc. https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vv64-95pc-vj9v. https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rqgv-grx4-xm6x. ## What's Changed. Logon info update. Websocket regression. Sdl clipbaord and bounds checks. core,rdstls improve version handling. channels,drdynvc channel unref on create request send failure. Audin checks. channels,rdpsnd tighten bounds checks. Pcap cleanup. For a complete and detailed change log since the last release run: git log 3.30.0...3.29.0

Apache rdp remote-desktop networking c

OpenHV 20250725 šŸ’¾

An Open Source 90s Pixelart Science-Fiction Real Time Strategy game with Multiplayer (LAN and internet) support, competent skirmish AI as well as an integrated map editor. All the assets are licensed under Open Source compliant terms.

major feature:

GNU GPLv3 game rts pixelart sci-fi strategy

Habeas 0.9.8 šŸ’¾

Habeas is an open-source browser extension that reclaims your data (receipts, invoices, bank/card transactions) from services with no API or export that hide it behind anti-bot walls. It runs in your real, logged-in session, so it stores no credentials and never fights bot detection: the opposite of Plaid/Tink. Local-first: your data only leaves the browser to a destination you choose (folder, Drive, Dropbox, WebDAV, S3). Sources are declarative, auditable data, not code, in an open registry.

minor feature: Feat(perms): detect amp; recover revoked site access (noperm) A source's OPTIONAL host permissions can be silently revoked by a. Browser/add-on update notably a Firefox temporary add-on reload . After which auto-sync died with a cryptic "groups 0 Missing host. Permission for the tab". An unattended run now checks permissions.contains first. (lib/capture.js#hasCapturePermissions); on loss it logs a distinct. `noperm` status and fires an actionable notification whose click opens. Settings. Settings flags each affected source with a "Site access. Needed" pill + a one-click "Grant site access" button that re-requests. The permission (the user gesture the background lacks) and re-registers. The capture bridge. Localized (en/es), styled, unit-tested. Release 0.9.8.

Affero GPLv3 javascript mozilla financial-and-insurance-industry end-users information-technology

mkc 0.6 šŸ’¾

A build configuration tool.

minor feature: 0.6 2026-7-31 * Changes: * The 'check_include_...' statements are now efficient. * Remove 'set temporary'. * New Features: * set local * Internal: * Re-write variable handling.

Zlib c console cross-plattform developers

Agent Only MCP 0.3.1 šŸ’¾

Agent Only MCP is an open-source stdio MCP server for coding agents, paired with a public troubleshooting community. It helps agents search shared fixes, record reusable solutions, and coordinate practical debugging knowledge without opening a local network port. Install with npx -y agent-only-mcp. Node.js 20+; MIT license.

minor feature: Current release provides a stdio MCP server with shared troubleshooting memory and practical Agent Only community access.

MITL mcp ai-agents developer-tools nodejs open-source troubleshooting

Nano 9.2 šŸ’¾

GNU nano is a console text editor, modeled after Pico. It is very newcomer-friendly due to on-screen menus with always visible keyboard shortcuts. Keybindings are configurable, and full undo and redo actions are supported. Nano can even be used as STDIN pager, and it provides fast syntax highlighting using regular expressions.

minor bugfix: * Nano refuses to start when standard output is not a erminal. * Options --newbuffer and 'set newbuffer' were added as better synonyms of --multibuffer and 'set multibuffer'. * Legacy keystroke pairs Ctrl+W Ctrl+T and Ctrl+/ Ctrl+T are recognized again.

GNU GPL editor text-editor terminal console pico syntax-highlighting

Onyx Launcher 1.6.3 šŸ’¾

Onyx Launcher is a free and open-source Minecraft launcher for Windows and Linux. It keeps instances isolated, integrates Modrinth discovery and installation, manages Java automatically, and includes Crash Bisect, performance diagnostics, World Guard snapshots, and safe backups. It is intended for players who want clean modded profiles and practical recovery tools in a modern desktop interface.

minor feature: Current stable release with Windows installer and portable builds, Linux AppImage and tarball, an English interface, isolated instances, integrated Modrinth browsing, automatic Java management, Crash Bisect, World Guard snapshots, diagnostics, and safe backups.

MITL minecraft launcher gaming modrinth typescript electron windows linux

PanConvert 0.3.1 šŸ’¾

PanConvert is a multi-platform GUI for instrumenting Pandoc to convert between various text, file and markup formats. It allows selecting files, or ad-hoc conversion of entered/pasted markup. Pandoc needs to be installed, and handles MarkDown/CommonMark, LaTeX, OPML, ODT and EPUB formats.

feature: Updated to QT6

GNU GPLv3 python qt5 pandoc text-conversion markup format

FamiStudio 4.5.2 šŸ’¾

FamiStudio is a simple music editor for the Nintendo Entertainment System or Famicom. It is targeted at both chiptune artists and NES homebrewers.

minor bugfix: This release was also 100 handled by Steo, I'm just publishing it. Thanks!! Export dialog where "Loop Count" and "Duration" options could both be disabled. Where a leading whitespace in the project name would break ROM / NSF export. With FamiTracker exports where envelopes weren't truncated to max supported length. Where sequencer didn't update when deleting a sample in "DPCM Sample" color mode. Introduced in 4.5.0 regarding MIDI instruments no longer exporting as intended. Added option to replace arps in context menu. Crash with broken MIDI files (unexpected end of file). Where pasting a pattern in the sequencer could lead to it containing an unsupported effect. With switching back to instrument arp after using an override.

MITL music music-editor audio audio-editor nes chiptune csharp assembly

Habeas 0.9.2 šŸ’¾

Habeas is an open-source browser extension that reclaims your data (receipts, invoices, bank/card transactions) from services with no API or export that hide it behind anti-bot walls. It runs in your real, logged-in session, so it stores no credentials and never fights bot detection: the opposite of Plaid/Tink. Local-first: your data only leaves the browser to a destination you choose (folder, Drive, Dropbox, WebDAV, S3). Sources are declarative, auditable data, not code, in an open registry.

minor feature: Chore(release): 0.9.2 Groups the accumulated work: native in-Settings recorder, configurable. Sync-all (membership/order, drag'n'drop), passphrase secrets vault, broker. Trade display, epoch range format, list.expand (+drop), refresh progress. Send-from-store (avoid needless source access). Unblocks pepephone-es. (minVersion 0.9.2).

Affero GPLv3 javascript mozilla financial-and-insurance-industry end-users information-technology

Orkas šŸ’¾

Orkas is an open-source, local-first desktop AI workforce. A Commander turns goals into executable plans and coordinates specialist agents in parallel or sequence through one chat. It supports work such as research, coding, data analysis, documents, slides, and video. Packaged installers are available for macOS and Windows, while Linux can be run from source.

:

MITL artificial-intelligence desktop multi-agent typescript productivity

BashStyle-NG 11.3 šŸ’¾

BashStyle-NG is a graphical tool and toolchain for changing the behaviour and look'n'feel of Bash, Readline, Vim, Nano and Git. Possibilities include Bash: 12 fancy pre-defined prompt styles, colors are customizable, random text color, random prompt style for each session possible, create your own prompt using UI, colored manpages (without using most), rembering last visited directory (and restore upon new session), customize bash history settings, lscd: customized variant of cd, showing content of directory after cd, can create directories that don't exist, passing of customized ls parameters, un/setting shopts (shell options), customizable completion blacklist, timeout, welcome message and more, GIT: set GIT user name, mail address, editor for commit messages, colored output Readline: un/set completion, case sensitivity, horizontal completion, mark filetypes and folders, include hidden files incompletion, customize almost 30 keybindings VIM: un/set remember last position, syntax highlighting, auto indention, case sensitive/incremental search, display line numbers, highlight current line/column, dark or bright background, line-wrap and tab-length Nano: un/set search history, syntax highlighting, auto indention, case sensitive search Extras: several extra functions for daily use (see $prefix/share/bashstyle-ng/rc/functions/ for all)

major feature: Several new features and fixes, various utils improved and refinied. See supplied NEWS for detailed information.

GNU GPLv3 shell bash readline vim nano git gtk python

liquid-dsp 1.8.1 šŸ’¾

Software-Defined Radio Digital Signal Processing Library - https://liquidsdr.org liquid-dsp is a free and open-source digital signal processing (DSP) library designed specifically for software-defined radios on embedded platforms. The aim is to provide a lightweight DSP library that does not rely on a myriad of external dependencies or proprietary and otherwise cumbersome frameworks. All signal processing elements are designed to be flexible, scalable, and dynamic, including filters, filter design, oscillators, modems, synchronizers, complex mathematical operations, and much more.

minor bugfix: Version 1.8.1 includes logic for runtime mode selection for distributing a Generic binary for a particular platform and allowing selection of particular Implementations based on the specific instruction set architecture available on the host system. For example a build server can create a shared object that Supports SSE, AVX, and AVX512 and deploy it to a system that only has SSE and AVX support. Autotools support continues with as of yet full feature support. This will likely be removed for version 2.0.0. Also included is a constant struct with build information such as version, Git Hash, date, and other compile-time and hardware acceleration options. NOTE: AltiVec support is temporarily put on hold due to memory alignment. Specifics that do not allow only run-time execution selection. Build. Typos and inconsistent formatting. Consolidating configuration file to support both cmake and autotools. Build environments. Added option for strict compilation (treat warnings as errors). Added compile-time build information (version, git hash, build OS. Etc.) to binary. With 'autoscript' target breaking cross-compilation. And library install directory With installation destination, 32-bit architectures, and. Conditional autoscript builds Core. Added timer object for handling run-time execution testing. Added cpuinfo struct to support compile-time/run-time mode deconfliction. Added sysinfo struct to support run-time mode definition such as. Hardware acceleration and core count. Would ideally include clock rate or rough indication of processor capability. Dotprod. Added run-time mode selection for vector dot product, allowing for. Distributed binary to operate across various architectures with Instruction sets for acceleration Filter. Firdespm: long-standing out-of-bounds read element. Firdespm: cleaning up deging macros. Iirdes: ing with complex pair resolution. Math. Long-standing with poly/findroots out-of-bounds error. Modem. Apsk: with negative mod

MITL sdr ham-radio amateur-radio radio communication dsp c cpp

sngrep 1.8.4 šŸ’¾

sngrep is a terminal tool that groups SIP (Session Initiation Protocol) Messages by Call-Id, and displays them in arrow flows similar to the used in SIP RFCs. The aim of this tool is to make easier the process of learnig or debugging SIP. Features: * Capture SIP packets from devices or read from PCAP file * Supports UDP, TCP and TLS (partially) transports * Allows filtering using BPF (Berkeley Packet Filter) * Save captured packets to PCAP file

minor feature: Call flow: add RTP stream statistics to call flow UI. Call list: add SIP Contact column to F10 call list selection. Save: new parameter to disable edition of the save path. Options: set default savepath to user homedir. Rtp: heap out of bounds read in RTCP XR block parser. Sip: stack buffer overflow on non-numeric Warning header. Util: check valid length parameter in sng_strncpy. Call flow: alias display on columns for IPv6 addresses. Build: use libpcre3 over libpcre2 on old distributions. Build: build rpm spec across EL7-10, Fedora and openSUSE.

GNU GPLv3 sip telephony trace terminal pcap diagnostic c

PrRescue 0.132 šŸ’¾

PrRescue is a rescue CD based on Gentoo amd64 supporting nilfs2 and btrfs. Its goal is to always include the newest kernel and Gentoo packages.

minor feature: Kernel has been updated to version 7.1.5. Gentoo packages have been upgraded to latest versions.

GNU GPL gentoo rescue boot

fzf 0.74.2 šŸ’¾

An interactive command line filter program for any kind of list; files, command history, processes, hostnames, bookmarks, git commits, etc. It implements a "fuzzy" matching algorithm, so you can quickly type in patterns with omitted characters and still get the results you want. Highlights šŸ“¦ Portable — Distributed as a single binary for easy installation ⚔ Blazingly fast — Highly optimized code instantly processes millions of items šŸ› ļø Extremely versatile — Fully customizable via an event-action binding mechanism šŸ”‹ Batteries included — Includes integration with bash, zsh, fish, Vim, and Neovim

minor bugfix: Single-character queries are up to 2.4x faster. - This is the most latency-sensitive case; the first keystroke scans the entire list before the result cache can help. Faster sorting of search results; the default two-criteria ranking skips redundant radix passes. Nondeterministic match highlight positions. Fzf now detects terminal resize on Windows in `--height` mode. Signal handler cleanup when fzf is used as a library; SIGINT/SIGTERM/SIGHUP and resize handlers no longer persist after `Run()` returns. Fish: history command being affected by user initialization scripts, and improved timestamp colors in CTRL-R.

MITL cli finder go ruby shell

RuleRoute 0.2.5 šŸ’¾

RuleRoute is a local-first, zero-dependency analyzer for Codex and Claude Code repository instructions. Given a target file, it deterministically traces the applicable AGENTS.md, AGENTS.override.md, CLAUDE.md, CLAUDE.local.md, project-rule, path-glob, symlink, import, and exclusion routes while distinguishing launch-time Claude sources from sources loaded when the target is read. It also reports oversized instruction files, broken local references and imports, same-level shadowing, invalid path rules, import cycles, exclusions, and exact duplicate list rules. RuleRoute does not use an LLM, execute instruction contents, make network requests, upload repositories, edit target files, or include instruction contents or absolute repository roots in reports.

minor feature: Version 0.2.5 represents the JSON repository root as a portable dot, omits external Claude import destinations, and adds private exclusive-create mode-0600 report files through --output with overwrite refusal and complete report writing before --check returns status 1. Saved reports are documented as project-sensitive because they retain relative paths, target paths, counts, sizes, import relationships, matched patterns, and diagnostics while omitting instruction contents and absolute repository roots.

MITL software-development static-analysis javascript nodejs cli developers artificial-intelligence claude-code codex monorepo configuration

HookLint 0.1.2 šŸ’¾

HookLint is a read-only, zero-dependency linter for Codex and Claude Code hook configuration. It detects configuration that is invalid, silently ignored, skipped by one harness, sensitive to the launch directory, or declared more than once. It reads repository-local settings, Codex hook configuration, plugin hook manifests, and hook entries referenced by plugin manifests without executing commands, prompts, scripts, MCP tools, HTTP handlers, or hook URLs. Reports omit handler bodies, commands, prompts, URLs, headers, environment values, and absolute target paths. HookLint makes no network requests and writes only an explicitly requested private mode-0600 report file.

security: Version 0.1.2 adds bounded strict-UTF-8 no-follow reads, repository-containment and opened-handle validation, bounded and sanitized reports without absolute target paths, and scanning of every inline manifest hook entry. It also preserves private exclusive-create mode-0600 report files, writes complete reports before --check returns status 1, and rejects symlinks, non-regular files, oversized configuration, and structural limits instead of presenting partial coverage as complete.

MITL security software-development static-analysis javascript nodejs cli developers artificial-intelligence claude-code codex hooks

PluginProof 0.1.3 šŸ’¾

PluginProof is a read-only, zero-dependency validator for Codex and Claude Code plugin packages. It checks manifests, component paths and path escapes, external symlinks, repository and personal marketplace entries, Agent Skill and Claude plugin-agent frontmatter, Claude channel references to bundled MCP servers, package name/version drift, publish-file coverage, and common cross-harness packaging mismatches. It validates the package on disk without loading the plugin or running its hooks, MCP servers, scripts, binaries, or lifecycle commands. Reports contain finding metadata and plugin-relative paths rather than manifest contents or absolute plugin-root paths, and PluginProof performs no network requests.

security: Version 0.1.3 adds private mode-0600 exclusive-create report files through --output, writes the complete report before --check returns status 1, and removes the absolute plugin-root path from terminal and JSON reports. It builds on validation for Claude agent frontmatter, bundled MCP channel references, component symlinks, marketplace sources, skill manifests, package drift, and publish-file coverage.

MITL security software-development static-analysis javascript nodejs cli developers artificial-intelligence claude-code codex plugins

HarnessDelta 0.1.6 šŸ’¾

HarnessDelta reviews semantic changes to coding-agent configuration before they land. It examines Git objects and working-tree files locally for newly executable hooks or MCP servers, provably broadened Claude Code allow rules, newly broadened Codex allow prefixes, weakened sandbox or approval policy, deleted guardrail-bearing configuration, changed instruction scope, plugin or skill changes, hidden controls, and likely embedded credentials. Reports use relative paths, counts, hashes, and redacted findings rather than repository roots, configuration contents, commands, endpoints, permission values, or possible credentials.

security: Version 0.1.6 adds redacted high-severity findings for provably broader Claude Code shell-prefix and same-anchor Read/Edit allow rules, with bounded comparison and conservative generic fallback for ambiguous forms. Version 0.1.5 adds semantic checks for broadened Codex allow prefixes and prompt/forbidden-to-allow transitions. Version 0.1.4 detects deleted Claude deny rules and executable definitions, removed Claude/Codex MCP definitions, and removed Codex approval or sandbox controls.

MITL security software-development version-control javascript linux developers system-administrators artificial-intelligence static-analysis claud

Agent Tools 0.1.11 šŸ’¾

Agent Tools is a zero-runtime-dependency Node.js dispatcher and Agent Skill bundle for five deterministic local checks of Claude Code and Codex repository configuration. PermitLint audits permission policy, RuleRoute resolves repository instruction scope, HarnessDelta reviews semantic configuration changes, HookLint checks hook schemas and portability, and PluginProof verifies packaged plugins. One command selects the narrowest checker and forwards only the arguments supplied by the operator. The checkers are static and document their own bounded inputs; they do not prove what a running harness loaded or executed, upload repositories, collect usage events, or include telemetry or analytics. Node.js 20 or newer is required.

minor feature: Version 0.1.11 pins HarnessDelta 0.1.6 with redacted high-severity findings for provably broadened Claude Code shell-prefix and same-anchor Read/Edit allow rules, conservative fallback semantics for unsupported forms, deterministic 20,000-rule and review-wide 1,000,000-comparison permission ceilings, manifest alignment coverage, and synchronized Claude Code and Codex plugin versions. The bundle contains the dispatcher plus focused Agent Skills for all five checkers.

MITL developer-tools security static-analysis javascript nodejs cli claude-code codex

Habeas 0.7.0 šŸ’¾

Habeas is an open-source browser extension that reclaims your data (receipts, invoices, bank/card transactions) from services with no API or export that hide it behind anti-bot walls. It runs in your real, logged-in session, so it stores no credentials and never fights bot detection: the opposite of Plaid/Tink. Local-first: your data only leaves the browser to a destination you choose (folder, Drive, Dropbox, WebDAV, S3). Sources are declarative, auditable data, not code, in an open registry.

minor feature: Chore(release): 0.7.0 Milestone grouping the 0.6.0.x dev iterations: month-sharded canonical store. (all backends, self-heal + move to month shard), Amazon real dates in the store. Recover-from-destination, live progress + Stop button, group-header checkboxes. Long-press select, inline preview, checkpointed large downloads, SW-recycle. Retry + keep-alive, static backend imports. Parallel shard reads + progressive rendering.

Affero GPLv3 javascript mozilla financial-and-insurance-industry end-users information-technology

BashStyle-NG 11.2 šŸ’¾

BashStyle-NG is a graphical tool and toolchain for changing the behaviour and look'n'feel of Bash, Readline, Vim, Nano and Git. Possibilities include Bash: 12 fancy pre-defined prompt styles, colors are customizable, random text color, random prompt style for each session possible, create your own prompt using UI, colored manpages (without using most), rembering last visited directory (and restore upon new session), customize bash history settings, lscd: customized variant of cd, showing content of directory after cd, can create directories that don't exist, passing of customized ls parameters, un/setting shopts (shell options), customizable completion blacklist, timeout, welcome message and more, GIT: set GIT user name, mail address, editor for commit messages, colored output Readline: un/set completion, case sensitivity, horizontal completion, mark filetypes and folders, include hidden files incompletion, customize almost 30 keybindings VIM: un/set remember last position, syntax highlighting, auto indention, case sensitive/incremental search, display line numbers, highlight current line/column, dark or bright background, line-wrap and tab-length Nano: un/set search history, syntax highlighting, auto indention, case sensitive search Extras: several extra functions for daily use (see $prefix/share/bashstyle-ng/rc/functions/ for all)

major feature: Several new features and fixes, various utils improved and refinied, especially 'systemkit'. See supplied NEWS for detailed information.

GNU GPLv3 shell bash readline vim nano git gtk python

Horde Groupware 6.2.1 šŸ’¾

Horde 6 is back with Exchange Activesync 16.1, caldav and carddav support, TOTP and OpenID Connect support.

minor feature: Chore(release): bump version to 6.2.1 Release version 6.2.1. Add EstablishHordeSession middleware to /auth/login route. (base#137): render Last Login date and time separately. Refactor: Hold a SessionAccess locator rather than a specific HordeSession object. Follow up on jcdelepine's PR #136 for parity between login.php and LoginService. (auth): generalize loginparams collection, honor selection via session.

GNU LGPL groupware

beerscan.lua 3.0 šŸ’¾

beerscan.lua (formerly 'untappd.lua') is a lua script that displays beers currently available at venues using realalefinder.com and untappd.com. It had a tui interface and uses libUseful-lua and libUseful.

major feature: Added support for realalefinder.com Changed project name to 'beerscan.lua'.

GNU GPLv3 beer webscraping lua libuseful

CentSettle 0.1.0 šŸ’¾

CentSettle is a zero-runtime-dependency Node.js CLI, importable ESM core, and static browser application that turns one shared-expense ledger into exact balances and a compact deterministic payment plan. Decimal strings are converted to exact BigInt cents; equal and weighted splits use largest-remainder allocation with declared participant order as the tie-break. The browser app needs no account, upload, network API, external asset, browser storage, telemetry, or analytics. CentSettle supports one three-letter display label and exactly two decimal places. It does not convert currency, apply ISO minor-unit rules, initiate payments, provide accounting, legal, or tax advice, or claim that its deterministic plan uses the mathematically minimum number of transfers.

major feature: Initial release with exact-cent equal and weighted splits, deterministic settlement ordering, stable text and schema-versioned JSON output, a bounded Node.js CLI, local-only static browser app, strict UTF-8 and duplicate-key handling, terminal-safe reporting, explicit resource ceilings, 41 tests, 1,000 randomized settlement checks, and zero runtime dependencies.

MITL expenses personal-finance privacy javascript nodejs cli local-first productivity

Xandikos 0.4.5 šŸ’¾

Xandikos is a lightweight yet complete CardDAV/CalDAV server that backs onto a Git repository. Xandikos (ĪžĪ±Ī½Ī“Ī¹ĪŗĻŒĻ‚ or ĪžĪ±Ī½ĪøĪ¹ĪŗĻŒĻ‚) takes its name from the name of the March month in the ancient Macedonian calendar, used in Macedon in the first millennium BC.

minor bugfix: Implement the RFC 3744 `principal-property-search` REPORT, the. `principal-collection-set` property, and the. `apply-to-principal-collection-set` search flag. (Jelmer Vernooij).

GNU GPLv3 self-hosted calendar contacts caldav carddav webdav server python