gVisor is the missing security layer for running containers efficiently and securely.

gVisor is an open-source Linux-compatible sandbox that runs anywhere existing container tooling does. It enables cloud-native container security and portability. gVisor leverages years of experience isolating production workloads at Google.

erminal diffs
for humans & agents

Hunk is a review-first diff viewer that plays nice with agents. It's fast, it looks good, and it works everywhere.

Self-hosted, Gmail-style mail client. Multi-account IMAP, threaded conversations, real-time push via IMAP IDLE + Mercure. Built with Symfony, FrankenPHP, Hotwire Turbo. Clone and docker compose up.

via https://korben.info/plmail-client-mail-auto-heberge.html

« LinkedIn est pénible. vutuv non. »

Doory is a full design editor that runs in your browser. Make posters, social posts, stories, slides, invitations, resumes, thumbnails and business cards: start from a template or a blank page, edit everything, and export to PNG, JPG, SVG, PDF, MP4 or GIF. Every feature is free, nobody needs an account to start, and you can run the whole thing on your own server.

Que faire face à une vulnérabilité dans un équipement embarqué ?

Make beautiful screen recordings

Recordly is your open-source tool for demos, walkthroughs, and product videos. Includes built-in auto-zooms, smooth cursor, and much more.

Filmer la police : ce qu’il faut savoir avant, pendant, après

Filmer la police est un droit, mais ce droit ne protège pas forcément sur le moment. Ce guide pratique rassemble ce qu’il faut savoir pour se protéger d’abord, pour produire une image utile ensuite, et pour décider de ce qu’on en fait après.

Ekwo OS est une infrastructure de données libre et open source pour la comptabilité, la finance et la fiscalité, sous AGPL-3.0 : un schéma, les règles de chaque pays sous forme de données, et des outils, pour les entreprises et leurs experts-comptables.

Turn a $5 Raspberry Pi RP2350 board into an open-source hardware passkey: WebAuthn/FIDO2 logins, ssh & git signing, OpenPGP, PIV, TOTP. Rust firmware, no_std.

A Personal Secure Key with open hardware and software

Thanks to Raspberry Pico (RP2040, RP2350) and ESP32-S3, you can use it as a personal secure key for key storage, secure login and much more.

Je ne sais pas si vous connaissez curl.md, mais c'est un service qui prend l'adresse d'une page web et vous l'affiche en Markdown. Y'a pas de menus, pas de bandeaux de cookies, et ce genre de conneries... C'est juste le texte de votre article, les titres, les liens et les tableaux.

security-audit

A coding-agent skill that turns your agent into a security auditor. It orchestrates isolated agents through reconnaissance, coverage-led hunting, candidate validation, structured output, independent record verification, and target-neutral reporting.

This is the skill that seeded Cloudflare's vulnerability discovery harness, described in Build your own vulnerability harness. The harness grew into a multi-stage, fleet-wide system; this skill is the single-repo starting point it evolved from.

OmniVoice is a state-of-the-art massively multilingual zero-shot text-to-speech (TTS) model supporting over 600 languages. Built on a novel diffusion language model-style architecture, it generates high-quality speech with superior inference speed, supporting voice cloning and voice design.

'équipe Next-gen Kaldi de Xiaomi a sorti OmniVoice, un modèle de synthèse vocale qui parle 646 langues et qui est capable de "recopier" une voix à partir d'un extrait de huit secondes minimum. Et tout ça en local et gratuitement !

QR codes in seconds.

ente powered qr code generator, no bullshit

PostgreSQL for Everything

Pas encore impressionné ? OK, OK. Balance un peu de JS inline (direct dans l’HTML, espèce de puriste à la con) et t’as des dialogues natifs. Regarde bien : pas de build, pas de frameworks, juste du pouvoir brut.

Win11Debloat is a lightweight, easy to use PowerShell script that allows you to quickly declutter and customize your Windows experience, no installation required! You can use it to remove pre-installed apps, disable telemetry, remove intrusive interface elements and much more. No need to painstakingly go through all the settings yourself or remove apps one by one. Win11Debloat makes the process quick and easy!

Keep your Docker containers fresh, safely.

freshdock watches your running containers, notices when a newer image ships, and updates them health-gated. A broken update rolls back automatically instead of leaving you with a dead service. The maintained successor to the archived Watchtower.