With over 7,700 GitHub stars and thousands of Cloudflare employees using it daily across every function, Cloudflare OS delivers an open-source AI workspace where every employee gets a personal agent grounded in company context, systems, and skills — not a generic chatbot but a programmable workspace that builds real applications, automates workflows, and connects to internal tools through governed access. The Code Mode agent writes and immediately executes code snippets to perform arbitrary tasks, build full-stack Gadgets with client code, server code, APIs, and durable SQLite state, debug errors, and test results within isolated sandboxes. Gadgets are private application instances running in separate sandboxes — each document, spreadsheet, or tool is its own secure runtime that cannot leak data even to attackers with access to other Gadgets. Blueprints enable sharing application code as templates that others instantiate with independent state, credentials, and resources. Gatekeepers provide security governance giving system owners precise control over what agents can see, change, and when human approval is required before actions execute. Built on Cloudflare Workers using Durable Objects for workspace persistence, Dynamic Workers for Gadget execution, and Facets for access management. Zero Trust security via Cloudflare Access verifies every user and request before granting access. Real-time collaboration lets colleagues use shared Gadgets. Deploy to your own Cloudflare account or self-host on workerd, the open-source Workers runtime, on your own servers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Over a million active instances make OctoPrint the standard web interface for consumer 3D printers - Gina Häußge's Python application, the center of the printing world since 2012. It talks to your printer over USB serial and turns every browser into a control panel: upload, organize, and start G-code prints; watch hotend and bed temperature graphs in real time; drive the print head manually; adjust feed rate, flow, and fan speed mid-print; and hit an emergency stop if things go wrong. The G-code visualizer renders the current layer in sync with the job, and a connected webcam adds a live feed plus automatic timelapse recording of every build. What keeps OctoPrint ahead is its plugin ecosystem - 300+ community plugins installable from the built-in manager. Highlights include Obico's AI spaghetti detection that pauses failed prints automatically, OctoEverywhere for tunnel-based remote access, Bed Level Visualizer's 3D mesh of your bed surface, PrintTimeGenius for accurate time estimates, Exclude Region to abandon one failed object mid-print while others continue, and Firmware Updater to flash Marlin or Klipper without SD-card shuffling. Event hooks fire notifications when prints finish or fail, and a full REST API supports slicer integration and custom automation. AGPL-licensed.

Perplexity's answer-engine experience, self-hostable and open-source: Morphic searches the web and writes cited answers. Instead of returning a list of links, it searches the web, reads the sources, and generates a complete answer with inline numbered citations. The generative UI streams rich components, source cards with thumbnails, image grids, syntax-highlighted code, and LaTeX math, rather than plain markdown. Quick mode answers fast; Adaptive mode runs deeper multi-step research. Search backends are pluggable: the Docker Compose bundle ships with a private SearXNG instance so no search API key is required, and Tavily, Brave, and Exa are supported alternatives. LLM providers include OpenAI, Anthropic, Google, Ollama, and any OpenAI-compatible endpoint, with per-mode model mapping - fast, cheap models for quick searches, stronger models for adaptive research, tuning the cost-quality trade-off per query type. An inspector panel exposes tool execution during multi-step research, and AI-suggested follow-up questions keep an investigation moving. Chat history persists in PostgreSQL, results are shareable by URL, file uploads feed context into queries, and optional Supabase authentication adds multi-user or guest access. Because the default search path is your private SearXNG instance, research topics never hit a commercial search API - and with local Ollama models the marginal cost of a query approaches zero. Built with Next.js, TypeScript, and the Vercel AI SDK under Apache 2.0.

Trusted by Cal.com, WhiteBIT, and Documenso and backed by 8,800+ GitHub stars, OpenStatus delivers the open-source status page and uptime monitoring platform that replaces Atlassian Statuspage, Better Stack, and Instatus with a single self-hosted deployment. The monitoring engine runs Go-based probes across 28 global regions on three cloud providers checking HTTP, TCP, and DNS endpoints in parallel with configurable intervals and multi-region consensus to eliminate false-positive alerts. Status pages ship with custom domain support, password and email-domain access controls, maintenance windows, grouped monitor components, and subscriber notifications via email and RSS. Incident management provides structured status reports with investigating, identified, monitoring, and resolved timeline phases that publish automatically to affected status pages. The monitoring-as-code workflow supports YAML configuration synced through the CLI, a GitHub Actions integration for CI/CD pipelines, and a Terraform provider for infrastructure-as-code deployments. The typed ConnectRPC JSON-over-HTTP API exposes a published OpenAPI specification with a Node SDK for programmatic access, while an MCP server connects AI assistants like Claude, ChatGPT, and Cursor directly to workspace data. The tech stack combines Next.js with shadcn/ui for the dashboard, Hono for the API server, Drizzle ORM over Turso for application data, and Tinybird for analytics. Private monitoring locations deploy as a single 8.5MB Docker image behind firewalls to check internal services. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Backed by 9,000+ GitHub stars and developed by a Germany-based team with deep FIDO2 expertise, Hanko delivers the open-source authentication platform that replaces Auth0, Clerk, and Firebase Auth with a passkey-first architecture built on phishing-resistant WebAuthn credentials. The Go backend exposes both public and administrative HTTP APIs handling passkey registration and login, password authentication, email passcodes, TOTP-based MFA, security key verification, server-side sessions with remote revocation, and JWT issuing with configurable expiry and refresh policies. OAuth SSO connects Apple, Google, GitHub, Microsoft, and custom OIDC providers, while SAML Enterprise SSO integrates corporate identity providers for single sign-on across the organization. Hanko Elements provides framework-agnostic web components that embed complete onboarding, login, and user profile flows into any application with two lines of code, fully customizable via CSS variables and supporting i18n with custom translations. The JavaScript frontend SDK handles API communication, credential management, and session state for teams building custom authentication UIs without the pre-built components. Webhooks notify external services of authentication events including user creation, login, email verification, and password changes. Privacy-first design principles enforce data minimalism with user-deletable passwords and configurable identifier strategies supporting email-only, username-only, or combined approaches. Docker deployment starts the backend with PostgreSQL or MySQL, serving both APIs on configurable ports. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 (backend) / MIT (frontend) licensed.

Backed by over 8,700 GitHub stars and OpenID Connect certification, Pocket ID delivers what enterprise identity platforms like Keycloak provide but without the configuration complexity — a passkey-only OIDC provider purpose-built for homelabs and small deployments. The core design decision is radical simplicity: no passwords exist in the system, only WebAuthn-based passkeys using hardware security keys, TouchID, FaceID, or device PINs, making phishing attacks structurally impossible rather than merely discouraged. The Go backend built on the Gin framework serves a compiled SvelteKit frontend as static assets, running as a single Docker container with SQLite as the default database and optional PostgreSQL for larger deployments. User management supports manual creation, signup links, and open registration, with group-based access control that restricts which OIDC clients each group can access and attaches custom claims for downstream role mapping. LDAP synchronization pulls users and groups from OpenLDAP or Active Directory, while SCIM support enables automated provisioning from compatible identity sources. Federated client credentials handle machine-to-machine authentication for service-to-service communication patterns. The audit system logs every authentication event with GeoIP enrichment, sends email notifications for sign-ins from unknown devices, and provides one-time login codes for accessing accounts from devices without passkey support. TLS with HTTP/2 is built in, PKCE adds code exchange protection, and OpenTelemetry provides tracing and metrics integration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD 2-Clause licensed.

With nearly 9,000 GitHub stars and adoption by over 60,000 companies across 100 countries, Papermark is the open-source DocSend alternative that turns document sharing into a data-rich conversation between you and your viewers. Every shared document generates page-by-page analytics showing exactly which pages capture attention, how long viewers spend on each section, where they drop off, and whether they return for a second look, with real-time notifications the moment a document is opened. Virtual data rooms support unlimited folders with drag-and-drop organization, bulk uploads, granular per-viewer permissions, dynamic watermarking that stamps each page with the viewer's identity, and NDA gating that requires agreement before access. Custom branding applies your logo, colors, and custom domain to every shared link and download page, while email verification and password protection add authentication layers. The AI Data Room Copilot lets viewers chat with uploaded documents, ask questions, and receive contextual summaries directly within the data room interface. The developer platform exposes 43 REST API operations covering data rooms, documents, folders, links, visitors, and analytics, with an MCP server for AI agent integration and a CLI for automation. Built on Next.js with TypeScript, Prisma ORM, PostgreSQL, NextAuth.js authentication, and shadcn/ui components. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPLv3 licensed.

Recognized by the CNCF Landscape in the AI Agent – Workflow Orchestration category alongside Dify and Temporal, Astron Agent is iFLYTEK's fully open-source platform for building, deploying, and managing enterprise multi-agent systems — backed by 8,900+ GitHub stars and the production infrastructure behind one of China's largest AI companies. Unlike pip-install frameworks such as LangGraph, CrewAI, or AutoGen, Astron Agent ships as a complete microservices platform spanning 10+ services across Java, Python, Go, and TypeScript: a ReactFlow-based visual workflow builder for low-code agent orchestration, native integration with the Model Context Protocol (MCP) for tool calling, a built-in model management layer supporting iFLYTEK Spark, OpenAI, Anthropic, and on-premises MaaS deployments, and a multi-tenant Go authentication service powered by Casdoor. The standout differentiator is native RPA integration via the companion astron-rpa project (7,200+ stars), providing 300+ pre-built automation capabilities spanning browser, Office document, and enterprise system interaction — enabling agents to execute physical UI actions rather than only API calls. Infrastructure includes PostgreSQL for multi-tenant data isolation, MySQL for application metadata, Kafka for event streaming, Redis for caching, and MinIO for object storage, all orchestrated through Docker Compose with explicit health checks and dependency chains or production Kubernetes Helm charts. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Typeform's conversational format, self-hosted: HeyForm is the open-source form builder that presents one question at a time. Forms present one question at a time, which measurably improves completion rates compared to long static pages. It supports 40+ field types, from text, email, and phone inputs to picture choices, date pickers, star ratings, signatures, and file uploads. Conditional logic shows or hides questions based on earlier answers, routes respondents to different endings, and redirects to URLs, so a single form can serve multiple flows. Completed submissions land in a results dashboard with drop-off and completion analytics, and connect outward through webhooks or integrations with Zapier, Make, Google Sheets, Notion, Airtable, and Slack. Theming covers fonts, colors, backgrounds, and custom CSS, so embedded forms look native to your site rather than like a third-party widget; the JavaScript embed library renders them inline, as popups, or full-page, with shareable standalone links as the default. Team workspaces and projects with member management let multiple teams share one instance without mixing data. Self-hosting removes per-response pricing entirely - unlimited forms and submissions for flat hosting cost - and keeps lead data, feedback, and quiz answers in your own MongoDB, simplifying GDPR compliance. The stack is a NestJS server and React webapp backed by MongoDB and KeyDB, distributed under GPLv3 as a Docker image.

Solidtime is a time tracker for freelancers and agencies, offering a modern SaaS-quality interface that rivals commercial tools like Toggl and Clockify. The time tracking interface provides a running timer, calendar view, and weekly timesheet for flexible entry across desktop, mobile, and the dedicated macOS, Windows, and Linux desktop applications. Project management organizes work by client with hierarchical billable rates configurable at organization, member, project, and project-member levels, ensuring accurate billing across complex team structures. The invoicing module generates polished PDF invoices and structured EU e-invoices with configurable VAT rates, percentage and fixed discounts, EU reverse-charge handling, reusable company templates, and automatic line item generation from billable time entries. Reporting provides filterable summaries by user, project, client, and date range with exportable data for billing audits and team retrospectives. Multi-organization support manages separate workspaces from a single account with role-based permissions controlling access across organizations. Data import from Toggl, Clockify, and generic Timeentry CSV files enables migration from existing tools without losing historical records. The RESTful API with bearer token authentication enables automation and integration with external services. Docker deployment with PostgreSQL runs behind Nginx or Traefik reverse proxy. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Webstudio delivers a professional-grade visual website builder that outputs semantic HTML and clean CSS without inline style pollution or JavaScript-heavy render paths. The live canvas editor provides direct manipulation of all CSS properties — flexbox, grid, spacing, typography, transforms, and filters — with real-time preview across responsive breakpoints. The component system supports reusable instances with variants and overrides, while design tokens maintain consistent colors, fonts, and spacing across the entire site. Data bindings connect to external content sources through native integrations with Strapi and Supabase, plus a generic CMS interface for any REST API backend. The Scroll Timeline API powers animations at 120 FPS off the main thread, with presets for rotate, scale, translate, opacity, color, and filter effects. Projects build as dynamic Remix applications with server-side rendering or export as static HTML, CSS, and JavaScript files. The Webstudio CLI generates Docker-ready builds that run a Node.js server on port 3000, with Nginx reverse proxy configuration for SSL termination via Let's Encrypt. The builder requires minimum 1 GB RAM and 1 CPU core for Docker builds. MCP integration enables AI agents to create and modify websites programmatically. On RepoCloud, deploy Webstudio projects on a dedicated VPS with root SSH access, persistent storage, and complete control over your hosting, custom domains, and deployment pipeline, all under the AGPL-3.0 license.

The project that proved organizations could have Dropbox-style convenience with complete data ownership: ownCloud is the original open-source file sync and share platform - the codebase Nextcloud later forked from. This deployment runs the classic ownCloud Server (PHP over PostgreSQL or MariaDB, with Redis caching), the battle-tested edition trusted across enterprises, universities, and public institutions worldwide. The core loop: store files on your server, sync them via desktop clients for Windows, macOS, and Linux plus iOS and Android apps, and access everything through the web interface or standard WebDAV. Sharing is granular - internal users and groups, external recipients via public links with passwords and expiration dates, and federated sharing that connects separate ownCloud instances into one network. Security controls include file firewall rules, multi-factor authentication, encryption, and detailed audit-friendly lifecycle management with versioning and trash-bin recovery. An app marketplace extends the platform, and Web Office integrations bring collaborative document editing through Collabora Online, OnlyOffice, or Microsoft Office Online directly into your files. LDAP and Active Directory integration slots it into existing identity infrastructure. For teams that need a proven, self-hosted alternative to Dropbox or Google Drive - where compliance demands knowing exactly which disk your data sits on - ownCloud remains a foundational choice.

Backed by 8,700+ GitHub stars and designed as a modern alternative to Apache Airflow, Mage delivers the open-source data pipeline platform that combines the interactive flexibility of notebooks with production-grade orchestration in a single self-hosted environment accessible at port 6789. The modular block architecture lets data engineers compose pipelines from Python, SQL, and R code blocks with instant data previews, live execution logs, and visual debugging at each step. Over 100 prebuilt integrations connect sources and destinations including PostgreSQL, MySQL, Snowflake, BigQuery, Redshift, S3, Kafka, MongoDB, Amplitude, Salesforce, and Stripe with parallel stream synchronization for high-throughput data movement. Batch pipelines run on cron schedules or event triggers while streaming pipelines process real-time data from Kafka, Kinesis, and RabbitMQ with stream mode reducing memory usage by approximately 90 percent compared to batch processing. Native dbt integration builds, tests, and runs dbt models directly inside the pipeline editor alongside custom transformation blocks. Spark, Snowpark, and Databricks runtimes handle large-scale distributed processing. AI-assisted development generates code, fixes errors, and optimizes queries within the notebook interface. Monitoring dashboards track pipeline health with integrations to Datadog, Prometheus, New Relic, and OpenTelemetry. Terraform templates deploy production environments to AWS, GCP, or Azure with two commands, while Helm charts support Kubernetes clusters. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Wealthfolio is a portfolio tracker offering a complete wealth management platform where financial data never leaves your infrastructure. Built on Rust with an Axum HTTP server, Diesel ORM, and SQLite storage, paired with a React 19 and Vite frontend, version 3.6 tracks stocks, ETFs, mutual funds, crypto, and cash savings across unlimited accounts with unified holdings. The performance engine calculates time-weighted returns (TWR), internal rate of return (IRR), volatility, maximum drawdown, and benchmark comparisons against the S&P 500 and custom indices, scoped per-account or across the entire portfolio. Net worth tracking monitors assets including real estate, vehicles, collectibles, and precious metals alongside liabilities, with stale-valuation warnings for items not updated in 90+ days. The spending module categorizes transactions automatically, supports multi-currency credit cards, builds budgets with monthly targets and rollovers, and generates narrative insights. A built-in AI assistant answers portfolio questions, suggests asset classifications, and imports transactions conversationally — bring your own API key from OpenAI, Anthropic, or use local LLMs. The addon system provides sandboxed extensions with granular permission declarations across 16 capability domains. CSV import maps broker exports with per-broker recipes for Interactive Brokers, Schwab, Fidelity, and dozens more. Market data streams from Yahoo Finance with automatic currency conversion. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Quote to cash in one web application - create quotes, convert them to invoices, record payments, track customers: iDURAR is an open-source ERP and CRM platform for small and medium-sized businesses. Built on the MERN stack (MongoDB, Express, React, Node.js) with Ant Design components and Redux state management, it presents a clean SaaS-style interface that needs little onboarding. Core modules cover invoice management with PDF generation and email delivery, payment recording against invoices, quote and proforma handling, customer records, and accounting views over the resulting data. Multi-currency support and localization make it usable for internationally operating teams. Because the whole stack is JavaScript with an API-first backend, extending it - custom fields, new modules, integrations - is approachable for any Node/React developer rather than requiring a specialist ERP skill set. Deployment is straightforward via Docker with a MongoDB instance. Licensed under AGPL-3.0 with free commercial use; a hosted enterprise version exists but the self-hosted edition is fully functional.

The entire wiki - content, code, and interface - is built from "tiddlers," small addressable units of information that link, transclude, tag, and filter into each other: TiddlyWiki is a non-linear personal notebook with a design philosophy unlike anything else in this catalog. Instead of pages in a hierarchy, you compose views by pulling tiddlers together on demand, which is why researchers, zettelkasten practitioners, and GTD devotees have sworn by it for two decades. The whole application is JavaScript, and the UI itself is written in hackable WikiText - customization goes as deep as rewriting the interface from inside the wiki. Self-hosting runs the Node.js version, which upgrades the classic single-HTML-file architecture in the ways that matter for a server: every tiddler is stored as an individual text file (Git-friendly, organizable), edits save through the HTTP API from any modern browser including phones, and one installation can serve multiple wikis blending shared and unique content. The plugin ecosystem covers graph visualizations, themes, languages, and hundreds of community extensions, declared per-wiki in a simple tiddlywiki.info file; the newer MultiWikiServer plugin adds multi-user accounts and tiddler sharing. Your notes stay usable for decades, independent of any corporation - the project's founding promise. BSD-licensed.

PrivateBin shares text and files with true zero-knowledge encryption: the server stores only ciphertext it cannot decrypt because the key exists exclusively in the URL fragment that never reaches the server. With over 8,400 GitHub stars and 500,000+ Docker pulls, it has become the standard for privacy-respecting paste sharing where not even the hosting operator can read stored content. All encryption uses 256-bit AES in Galois Counter mode performed entirely client-side in the browser. Burn-after-reading mode destroys pastes on first view, while configurable expiration timers automatically purge content after periods ranging from five minutes to forever. Optional password protection adds a second encryption layer requiring recipients to enter a passphrase before decryption occurs. Discussion threads enable anonymous or nickname-based commenting on pastes with IP-based identicon avatars for visual identity. Markdown rendering with live preview formats pastes as styled HTML, and syntax highlighting through prettify.js supports dozens of programming languages across four color themes. File upload support enables sharing images, PDFs, and media files with in-browser preview. QR code generation converts paste URLs for mobile device transfer. Customizable templates include Bootstrap 5, classic Bootstrap CSS, and Darkstrap themes. Storage backends support filesystem, MySQL, PostgreSQL, SQLite, Amazon S3, and Google Cloud Storage. Deploy via Docker with the privatebin/nginx-fpm-alpine image on port 8080. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. zlib licensed.

The deep end of self-hosted recipe management: Tandoor Recipes is a Django/Vue application that replaces Paprika, AnyList, and ad-choked recipe sites with a database you control. Import is where most people start: paste any URL and Tandoor scrapes schema.org markup for ingredients, instructions, images, times, and nutrition; bulk-paste URLs for batch import; or migrate wholesale from Mealie, Paprika, Nextcloud Cookbook, Pepperplate, and other managers with built-in importers. The structured recipe editor tracks ingredients individually, which is what powers everything downstream: full-text search with trigram similarity, a "what can I make with what's in the fridge" ingredient search, automatic nutrition via OpenFoodFacts, and shopping lists that merge duplicate ingredients across recipes, convert units, scale by servings, and sort by your supermarket's actual aisle layout. The weekly meal planner is drag-and-drop, feeds shopping lists automatically, exports to your calendar, and shows a nutritional summary for the week. Multi-user support comes with a granular permission system - shared household cookbooks, private recipes, even secret ones - and shopping lists sync in real time so two people can shop simultaneously. A full REST API integrates with Home Assistant and Grocy. For households serious about cooking, Tandoor's depth is unmatched.