OpenFGA answers the question 'can this user perform this action on this resource?' in single-digit milliseconds, implementing Google's Zanzibar paper as a production-ready authorization engine adopted by Auth0, Grafana Labs, Canonical, Docker, Agicap, and Read.AI. The server exposes both gRPC and HTTP APIs for authorization queries including Check, ListObjects, ListUsers, Expand, and the high-throughput BatchCheck endpoint that deduplicates and processes multiple authorization decisions in a single request. Authorization models combine relationship-based access control with role-based and attribute-based patterns through a purpose-built DSL that supports contextual tuples, conditional relationship tuples with CEL expressions, and time-based filtering via the ReadChanges API. Storage backends include PostgreSQL 14+, MySQL 8, and SQLite in beta, with an in-memory adapter for development and testing. Official SDKs for Java, .NET, Node.js, Go, and Python provide type-safe client integration, while a Terraform provider enables infrastructure-as-code management of authorization stores and models. The built-in browser playground at port 3000 lets developers visually model authorization schemas, write relationship tuples, and test access control queries interactively before deployment. OpenTelemetry instrumentation integrates with existing monitoring infrastructure, and Helm charts simplify Kubernetes deployment. A VS Code extension provides syntax highlighting and validation for FGA model files, and GitHub Actions automate model testing in CI/CD pipelines. A CNCF incubating project with transparent governance. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Amplication turns entity definitions into production-ready backend services, generating NestJS with Prisma and Apollo GraphQL for Node.js or ASP.NET Core for .NET, eliminating months of boilerplate. The plugin-driven Data Service Generator hooks into code generation lifecycle events, enabling teams to inject CI/CD manifests, proprietary authentication schemes, testing configurations, and cloud-specific deployment targets for AWS, Azure, and GCP without forking the core generator. Blueprint templates encode organizational architecture standards, security policies, and coding conventions into reusable foundations that keep every generated service consistent across the engineering organization. Jovu AI translates natural language requests into entities, relationships, fields, modules, DTOs, and custom API actions, automatically aligning each resource with predefined standards. Generated services include full CRUD operations with input validation, Swagger/OpenAPI documentation, authentication middleware, database-agnostic ORM via Prisma, optional React Admin interfaces, and Jest test scaffolding. Code output syncs to Git repositories as pull requests, preserving standard review workflows while letting developers edit every generated line and add custom business logic. Supports PostgreSQL, MySQL, and MongoDB as database targets. Over 16,000 GitHub stars with enterprise adoption. Apache 2.0 licensed.

Tau delivers a complete self-hosted cloud platform where Git is the control plane and WebAssembly is the runtime. The Go binary deploys as interconnected nodes that form a P2P network using libp2p for automatic service discovery, eliminating Kubernetes entirely. Serverless functions compile to WebAssembly for secure multi-tenant execution with automatic horizontal scaling — write in Go, Rust, AssemblyScript, or C and deploy by pushing to Git. Branch-based environments map Git branches to isolated deployments, so staging and production run identical infrastructure from different refs. Static website hosting serves frontends with global distribution and automatic content-addressed deduplication via IPFS-derived storage. The built-in K/V database provides distributed storage with automatic replication across nodes, while object storage handles file management with content addressing. Pub/Sub messaging enables real-time communication between functions and external services including WebSocket support. Spore Drive automates multi-host deployment and rolling updates from a single command across bare metal or VMs running Ubuntu. The Dream CLI provides a complete local development environment that mirrors production exactly — same services, same routing, same deployment flow. Zero-configuration HTTPS provisions TLS certificates automatically for custom domains. The web console at console.taubyte.com provides visual project management, or use the tau CLI for Git-native workflows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

Perplexity's answer-engine experience, self-hostable and open-source: Morphic searches the web and writes cited answers. Instead of returning a list of links, it searches the web, reads the sources, and generates a complete answer with inline numbered citations. The generative UI streams rich components, source cards with thumbnails, image grids, syntax-highlighted code, and LaTeX math, rather than plain markdown. Quick mode answers fast; Adaptive mode runs deeper multi-step research. Search backends are pluggable: the Docker Compose bundle ships with a private SearXNG instance so no search API key is required, and Tavily, Brave, and Exa are supported alternatives. LLM providers include OpenAI, Anthropic, Google, Ollama, and any OpenAI-compatible endpoint, with per-mode model mapping - fast, cheap models for quick searches, stronger models for adaptive research, tuning the cost-quality trade-off per query type. An inspector panel exposes tool execution during multi-step research, and AI-suggested follow-up questions keep an investigation moving. Chat history persists in PostgreSQL, results are shareable by URL, file uploads feed context into queries, and optional Supabase authentication adds multi-user or guest access. Because the default search path is your private SearXNG instance, research topics never hit a commercial search API - and with local Ollama models the marginal cost of a query approaches zero. Built with Next.js, TypeScript, and the Vercel AI SDK under Apache 2.0.

Mathesar puts a spreadsheet in front of your PostgreSQL database, letting anyone on the team browse, edit, filter, sort, and query tables without writing a line of SQL. Connect it to any existing PostgreSQL instance and immediately navigate schemas, tables, and records through an intuitive grid interface with inline editing, grouping, and summarization. The query builder joins tables across foreign key relationships, creates custom views with aggregations, and exports results to CSV. Rather than inventing its own permission layer, Mathesar maps each user or team to a native PostgreSQL role with granular schema-level and table-level privileges enforced at the database engine level, so there is never a gap between what the UI allows and what the database permits. Record summary templates display human-readable representations of linked records, making foreign key relationships immediately understandable instead of showing raw IDs. Import data from CSV files, create new tables and columns with proper PostgreSQL types including arrays, JSON, and custom domains, and modify schema structure through the web interface. Mathesar scales as well as the underlying PostgreSQL instance with no artificial limits on database size or complexity. Maintained by the Mathesar Foundation, a 501(c)(3) nonprofit, with a permanent commitment against vendor lock-in or licensing changes. Docker deployment connects to existing PostgreSQL instances or a bundled database in minutes. 5,000+ GitHub stars. GPL-3.0 licensed.

With over 9,000 GitHub stars and a focus on developer experience over legacy monitoring complexity, Highlight.io delivers a unified observability platform that correlates frontend user behavior with backend performance data in a single interface. The session replay engine captures high-fidelity DOM recordings showing exactly what users experienced, including console logs, network requests, page transitions, and user interactions, with configurable privacy redaction for sensitive content. Error monitoring automatically groups and deduplicates errors, surfaces affected user sessions, and provides full stack traces with source map support for minified production code. The logging pipeline ingests structured and unstructured logs from any backend service with automatic property extraction, full-text search, and configurable alerting thresholds. Distributed tracing tracks request flows across microservices with embedded links to associated sessions, errors, and logs for complete request lifecycle visibility. The metrics system collects custom application metrics alongside built-in web vitals and performance data for trend analysis and anomaly detection. Search across all telemetry types uses a unified query language with automatic attribute discovery and saved views for recurring investigations. Integrations connect with Slack, Discord, Linear, Jira, Vercel, and dozens of other developer tools for notification routing and workflow automation. SDKs cover React, Next.js, Vue, Angular, Python, Go, Ruby, Java, PHP, and Elixir with framework-specific instrumentation. Self-hosted deployment runs via Docker Compose with ClickHouse for analytics storage. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

The CAPTCHA bargain - annoy your users and feed their behavior to Google - gets replaced with economics by mCaptcha. Instead of image puzzles, it uses SHA256 proof-of-work: every visitor's browser silently solves a small computational challenge (via a WebAssembly library) before submitting a form. Humans never notice the milliseconds; bots hammering your site must burn more compute sending requests than your server spends answering them, which makes attacks more expensive than defense - the property that also makes mCaptcha genuine DoS protection, not just bot filtering. Written in Rust, the system is fully automated: difficulty scales with traffic, so challenges stay trivial in normal conditions and harden under attack. The privacy and accessibility wins are structural rather than promised: no tracking, no profiling, no user-pattern data collection, and no visual puzzles that exclude users with visual or cognitive impairments - the design was published in Communications of the ACM. Rate limiting is IP-independent, so users behind NATs, VPNs, or Tor get the same experience instead of endless challenge loops, and proofs resist replay attacks, neutering captcha farms. Migration is deliberately easy: the API is compatible with reCAPTCHA and hCaptcha, making it a drop-in replacement. AGPL-licensed core with proprietary-friendly client libraries.

Livebook is an interactive notebook for Elixir where you write code alongside rich Markdown prose, execute it cell by cell with reactive dependency tracking, and deploy finished notebooks as standalone web applications with a single click. Nearly 6,000 GitHub stars reflect the Elixir core team's investment in a platform where code cells run on demand alongside Mermaid diagrams and KaTeX mathematical formulas. The Kino visualization library renders Vega-Lite charts, interactive data tables with sorting and pagination, Leaflet maps, and Mermaid diagrams directly within notebook output cells, while custom Kino components enable building interactive controls with sliders, text inputs, and buttons that feed values back into running code. Smart cells abstract high-level tasks into configurable UI widgets: query PostgreSQL, MySQL, SQLite, and BigQuery databases, train machine learning models with Axon, plot charts, and build map visualizations without writing boilerplate code. Real-time collaboration lets multiple users edit the same notebook simultaneously with cursor presence indicators and synchronized cell evaluation. Notebooks are stored as .livemd files, a Markdown-compatible format that renders cleanly on GitHub and integrates with standard version control workflows. Custom runtimes connect Livebook to existing Elixir applications for live introspection and documentation of running systems. The Docker image at ghcr.io/livebook-dev/livebook exposes ports 8080 and 8081 with password or token authentication. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Inference Gateway puts a single OpenAI-compatible API endpoint in front of OpenAI, Anthropic, Groq, Cohere, Ollama, DeepSeek, Google, Mistral, MiniMax, Moonshot, Nvidia, and llama.cpp, so your application code never changes when you switch models or providers. The Go binary starts on port 8080 and normalizes authentication, streaming protocols, and response formats across all backends transparently. Native Model Context Protocol support auto-discovers tools from connected MCP servers and injects them into LLM requests without client-side management, enabling server-side tool execution across any provider that supports function calling. Agent-to-Agent protocol integration allows distributed agent communication through a declarative Agent Definition Language that generates production-ready Go or Rust servers from a single YAML manifest. The dedicated Kubernetes Operator manages Gateway, Agent, MCP, and Orchestrator custom resources with automatic HPA scaling, OIDC authentication, and service discovery that rebuilds MCP configurations when the discovered server set changes. Prometheus metrics and OpenTelemetry tracing provide full request-level observability across the entire inference pipeline. Middleware controls enable per-request provider selection, model routing, and fallback strategies. Official SDKs in Go, Python, TypeScript, and Rust provide typed client interfaces with streaming support. Docker Compose deployment requires only environment variables for API keys. A CNCF Sandbox applicant. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

OpenCode Manager is a mobile-first command center for AI coding agents. Install the PWA on your phone or tablet and you get real-time streaming chat, multi-repository Git operations, and scheduled automation right in your pocket. Git integration handles SSH-authenticated repo cloning, worktree management, unified diffs, and branch operations across all your projects in one dashboard. Chat with coding agents through Server-Sent Events streaming that supports slash commands, @-mentions for files, Plan and Build modes, and Mermaid diagram rendering for architecture discussions. Schedule reusable prompts to run against any repository on intervals or cron expressions, with each run tracking history and linking to sessions so you can pick up exactly where automation left off. MCP server configuration adds local and remote HTTP servers with OAuth support, plugging into the broader Model Context Protocol ecosystem. A dedicated assistant workspace provides an isolated AI environment with auto-provisioned skills for managing schedules, notifications, and settings. Multiple AI providers are supported including Anthropic, GitHub Copilot, and OpenAI-compatible services, each configurable with custom system prompts and granular tool permissions. Push notifications alert you to session events, agent questions, errors, and task completions across all managed repositories.

Born at Brazilian media giant Globo.com, Thumbor answers imaging CDNs like Imgix and Cloudinary with an HTTP service where every image variant is just a URL. Ask for /300x200/smart/your-image.jpg and Thumbor fetches the original, crops and resizes on demand, and caches the result - one source file, unlimited renditions, no batch pre-generation pipeline. The "smart" in the URL is the signature feature: OpenCV-based face detection finds people in the frame and crops around them (no more thumbnails with severed heads), and when no faces exist, feature detection finds visually important corners and computes a weighted center of mass as the focal point. Beyond cropping, a chainable filter pipeline handles brightness, contrast, grayscale, blur, red-eye removal, rounded corners, rotation, watermarks, and format conversion with quality control - applied in order via URL segments. All common image formats work out of the box, and every layer is pluggable: loaders (HTTP, local, S3), storages and result storages (local, S3, Ceph, and community backends), engines, optimizers, filters, and even custom detectors, with the awesome-thumbor list cataloging the ecosystem. URL signing prevents abuse of your processing capacity. Integrations exist for Django, Rails, Node, WordPress, and most frameworks. MIT-licensed, battle- tested for over a decade.

Scira is an AI search engine that breaks complex research questions into sub-tasks, retrieves grounded answers from live sources, and cites every claim with clickable links to the original evidence. Formerly known as MiniPerplx and now backed by nearly 12,000 GitHub stars, the platform implements agentic research planning where language models decompose queries, select appropriate tools, retrieve information in parallel, and synthesize responses with inline citations. Seventeen distinct search modes cover Web, Academic, Extreme, X (Twitter), Reddit, GitHub, Stocks, Crypto, YouTube, and Prediction markets, each activating a curated subset of the 28 built-in tools. The Extreme mode deploys a deep research agent with multi-step planning, parallel source retrieval, code execution in sandboxed Daytona environments, and R2 artifact storage for generated charts. Model routing spans 50+ AI providers through a unified configuration layer supporting OpenAI, Anthropic, Google, xAI Grok, and custom models, with per-mode model assignment based on task requirements. The web search tool supports Exa, Tavily, and Firecrawl as interchangeable providers via a Strategy pattern. Lookouts schedule recurring research agents on cron schedules that monitor topics, track changes, and email summaries using Upstash QStash for reliable execution. PostgreSQL stores chat history, user preferences, and custom instructions while Redis handles caching and rate limiting. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

JobSpy API turns seven major job boards into a single REST endpoint, aggregating listings from LinkedIn, Indeed, Glassdoor, Google Jobs, ZipRecruiter, Bayt, and Naukri through one GET request. Built on FastAPI with the Python JobSpy scraping library, the API returns structured JSON or downloadable CSV containing job titles, companies, locations, salaries, descriptions, posting dates, and direct application URLs. Filters cover search terms, location, distance radius, job type (full-time, part-time, contract, internship), remote status, hours since posting, country, and salary range. Interactive Swagger UI and ReDoc interfaces provide try-it-now functionality for testing queries directly in the browser. Security includes x-api-key header authentication with configurable rotation, per-endpoint rate limiting with adjustable thresholds, and response caching with configurable TTL to reduce redundant scraping. Global proxy support routes outbound requests through HTTP/HTTPS proxies to avoid IP-based rate limiting from job boards. Environment variables control everything from default search parameters and logging levels to CORS origins and documentation paths. Health check and ping endpoints integrate with uptime monitoring services. Docker Compose exposes the API on a configurable port. MIT licensed.

Try an idea in React, Svelte, Python, or SQL without installing anything: LiveCodes is a browser-based playground where code compiles, runs, and previews the moment you type it. Starter templates open ready-made projects for most of the 90+ supported technologies. The desktop editor brings completion, multi-cursor editing, Emmet, and Vim or Emacs bindings, while a lighter touch-friendly editor takes over on phones and tablets. Packages from npm, deno.land/x, jsr, and GitHub import straight into your code, and a console, compiled-code viewer, and test runner show what happens behind the preview. Bring projects in from GitHub gists, GitLab snippets, JS Bin, or zip files, then share them as links or QR codes, export them as HTML, JSON, or zip archives, or send them to CodePen and JSFiddle. Deploy a project to a public URL on GitHub Pages, sync your work across devices, or broadcast your editor and result live to a classroom. An embed builder and SDKs for JavaScript, React, Vue, Svelte, Solid, Preact, and web components place playgrounds inside documentation pages, and prefilled code makes every example editable. Projects stay private by default. Local assets, snippets, themes, and dark or light modes tailor the workspace to each person. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

II-Agent is an autonomous AI agent platform that ranked first on the GAIA benchmark by combining multi-step task planning with a full-stack execution environment spanning research, coding, browsing, and content creation. The platform runs a React frontend on port 1420 backed by FastAPI on port 8000, with PostgreSQL for persistence, Redis for task queuing, and MinIO for S3-compatible file storage, all deployable via Docker Compose. Users switch between Anthropic Claude, OpenAI GPT, and Google Gemini mid-conversation using bring-your-own-key authentication. Task domains include deep research with source triangulation, website and mobile app generation from prompts, storybook creation with illustrations, video and image generation via Google Veo and Imagen, presentation building with live collaborative editing, and document manipulation covering PDF extraction, Excel formulas, Word editing, and PowerPoint creation. Built-in connectors integrate Gmail, Slack, GitHub, Notion, Google Calendar, Discord, Dropbox, and Canva for workflow automation. A sandboxed code interpreter runs Python while browser automation with vision capabilities handles web interactions. Custom skills let teams package and reuse workflows. Context management handles up to 120,000 tokens with intelligent window sizing. 3,400+ GitHub stars. Apache-2.0 licensed.

pgAdmin 4 is the reference administration GUI for PostgreSQL, bundled by virtually every Linux distribution and supporting versions 14 through 18 including EDB Advanced Server — browse schemas in a hierarchical tree, write and optimize queries with AI assistance, design entity-relationship diagrams visually, monitor live sessions, and run backup/restore operations entirely from the browser. Built on Python Flask with a ReactJS frontend, version 9.17 delivers a comprehensive web-based platform accessible from any device. The Query Tool provides syntax highlighting, auto-completion, query history, an EXPLAIN plan visualizer with graphical node representation, AI-powered SQL generation from natural language prompts, and AI Insights for execution plan analysis that identifies performance bottlenecks. The Graph Visualiser renders query results as line charts, bar charts, stacked charts, and pie charts directly in the interface. The ERD Tool auto-generates entity-relationship diagrams from existing schemas for visual database design. The Schema Browser presents databases, schemas, tables, views, functions, sequences, roles, and extensions in a navigable hierarchy. Server monitoring dashboards display real-time active sessions, locks, transaction throughput, and vacuum status. GUI-driven backup and restore wraps pg_dump and pg_restore with format and compression options. Authentication supports internal, LDAP, Kerberos, OAuth2/OIDC, and webserver modes. The Helm chart includes an HTTPRoute template for Kubernetes Gateway API deployments. Bundled pg_dump, pg_restore, and psql utilities version 18.4. Deploy via Docker with the official dpage/pgadmin4 image. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. PostgreSQL License.

With 3,100+ GitHub stars, CyberScraper 2077 replaces brittle CSS selectors and XPath queries with natural language data extraction powered by Large Language Models. Users paste a URL, describe the data they want in plain English, and the AI extracts structured results from any website — no HTML parsing knowledge required. The tool supports three LLM backends: OpenAI GPT models for maximum accuracy, Google Gemini for cost-effective extraction, and local Ollama instances for fully private scraping where URLs and data never leave your server. Built on Python asyncio with Playwright browser automation, it handles concurrent page fetching with content-based and query-based LRU caching to minimize redundant API calls. The Streamlit web interface runs on port 8501 and provides one-click export to JSON, CSV, HTML, SQL, Excel, and direct Google Sheets upload. Tor network integration routes requests through onion routing for anonymous scraping of both clearnet and .onion hidden service sites with automatic circuit management and stream isolation. Stealth mode randomizes user agents, manages cookies, and controls JavaScript execution timing to bypass bot detection systems. Multi-page scraping navigates through paginated results with automatic URL pattern detection. Docker deployment packages all dependencies including Playwright browsers into a single container. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Open Agent Builder delivers a visual canvas for orchestrating AI agent workflows without writing Python scripts or managing complex codebases. The React Flow-powered drag-and-drop interface supports seven node types — Agent, Scraper, Transform, If/Else, Loop, User Approval, and MCP Tool — each configurable with provider-specific settings for Anthropic Claude (Haiku 4.5 and Sonnet 4.5), OpenAI GPT-5, Groq, or any OpenAI-compatible endpoint. The LangGraph orchestration engine handles state management, conditional routing, and human-in-the-loop approval gates while Firecrawl integration converts any website into structured, LLM-ready data through scrape, crawl, and map operations. E2B sandboxed code execution powers Transform nodes for secure data manipulation without risking host system integrity. Real-time streaming updates show execution progress node-by-node as workflows run, with Convex providing reactive database synchronization for workflow state and execution history. The TypeScript-first architecture (96.8% TypeScript) built on Next.js 16 App Router with Tailwind CSS delivers a responsive interface across devices. Clerk handles multi-user authentication with JWT integration for secure workspace isolation. Deploy via npm install and environment configuration with Firecrawl, Convex, and Clerk API keys. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.