Hunting for a suspicious file, process, or registry key across every endpoint becomes a single hunt in Velociraptor, an endpoint visibility and digital forensics platform. A web console sends tasks to clients on Windows, Linux, and macOS machines, which hold a persistent connection and run each task as soon as it is issued. A hunt runs a VQL artifact, one of more than 400 built in, across selected endpoints, picks up machines that reconnect later, and tracks which hosts have answered. Each hunt and collection opens into a notebook where markdown and live VQL cells group, filter, and timeline the results. A virtual file system browses a client's directories and fetches files through file, NTFS, and registry accessors, with hex and text viewers. Offline collectors bundle chosen artifacts into one binary that writes an optionally encrypted container for later import, suiting machines that never reach the server. Client event queries stream telemetry such as DNS lookups to the server, and server event queries can alert Slack, email, Elastic, or Splunk. Quarantine confines a host's network traffic to the Velociraptor server, and the Shell page runs commands on it. Sign-in works through Google, Azure, GitHub, OIDC, or SAML, with reader, analyst, investigator, and administrator roles. Responders reach for it during threat hunts, compromised host triage with KapeFiles targets, and dead disk image analysis. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Websites such as Wikipedia, Project Gutenberg, and Stack Overflow pack into single ZIM files, and Kiwix Serve publishes a folder of them as a searchable library that opens in any browser, with no connection to the originals. Point it at individual files, a directory, or a library file, and visitors get a welcome page where they filter books by language, category, or words in the title and description. Each book opens in a built-in viewer without downloading the archive, with toolbar buttons for the library, a random article, and in-book search. Title suggestions appear as you type, and full-text search returns highlighted snippets from indexed books, across several at once when they share a language. OPDS catalogs let reader apps browse and fetch the collection, and the library reloads automatically when its file changes. Admins can swap in a custom welcome page, publish under a URL prefix, hide the library button or search box, block links that leave the archive, and cap connections per visitor. Interface translations cover dozens of languages. Universities, community networks, and home labs get a reference shelf that stays available when the original sites are slow, blocked, or gone, with developer documentation and Q&A always within reach. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

GoatCounter delivers meaningful web traffic insights — pageviews, referrers, browsers, screen sizes, country-level geolocation — without setting a single cookie, without collecting personal data, and without forcing GDPR consent banners on your visitors. Written entirely in Go and distributed as a single compiled binary consuming roughly 25MB of RAM, it adds just 3.5KB to your pages via the tracking script, with a JavaScript-free tracking pixel alternative for sites that avoid scripts entirely, plus backend middleware integration and log file import for server-side collection. The dashboard displays pageview counts per path with hourly resolution, referrer sources grouped by domain with full URL on hover, browser and OS version breakdowns, screen size distributions, and country-level location data derived from IP addresses that are immediately discarded after geolocation. Campaign tracking supports UTM parameters and custom data attributes. A public stats option exposes your dashboard at a shareable URL for build-in-public transparency. SQLite serves as the default database requiring zero administration, while PostgreSQL handles higher-traffic deployments with multi-site setups. Built-in ACME and TLS certificate management eliminates reverse proxy requirements for HTTPS — no Nginx or Caddy needed. The REST API provides programmatic access to all analytics data. Deploy as a single binary, via Docker with the official arp242/goatcounter image, or through native packages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. EUPL-1.2 licensed.

With over 31,600 GitHub stars and thousands of production deployments, InfluxDB 3 Core is the open-source time series database rebuilt in Rust on the FDAP stack — Apache Flight for high-throughput data transfer, DataFusion for vectorized SQL query execution, Arrow for columnar in-memory representation, and Parquet for compressed columnar storage. The engine delivers sub-10ms query response times on recent data and handles millions of writes per second through line protocol ingestion over HTTP, with unlimited tag cardinality eliminating the high-cardinality limitations that plagued earlier InfluxDB versions. The diskless architecture persists data as compressed Parquet files to S3-compatible object storage, Azure Blob, Google Cloud Storage, or local disk with configurable partitioning strategies, while the write-ahead log and in-memory buffer serve real-time queries against recent data before compaction. Native SQL support through DataFusion includes window functions, CTEs, subqueries, and joins, while InfluxQL maintains backward compatibility with existing InfluxDB 1.x and 2.x applications through the same query API. The embedded Python VM enables processing engine plugins and triggers that execute custom logic on write events, perform cross-database queries, and transform data in real time without external tooling. Flight SQL clients provide high-performance query access from Python, Go, Java, and Rust, and the HTTP API supports writes in line protocol format compatible with Telegraf's 300+ input plugins. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT/Apache 2.0 dual-licensed.

RAGFlow has established itself as one of the most widely adopted open-source RAG engines available, powering production AI systems that demand traceable, hallucination-free answers from complex enterprise data. The platform processes PDF, DOCX, Excel, and PPT files through vision-based deep document understanding with layout analysis and OCR, extracting structured knowledge from tables, charts, and images that simpler parsers miss entirely. RAGFlow's hybrid retrieval pipeline combines vector search with BM25 keyword matching and multi-stage reranking across configurable document stores including Elasticsearch, InfiniFlow's Infinity engine, OpenSearch, and OceanBase. Developers connect any combination of LLM providers — OpenAI, DeepSeek, Anthropic Claude, Google Gemini, and locally-hosted models via Ollama — through a unified configuration layer. The visual agent workflow system enables multi-step reasoning chains with persistent memory, tool calling, and pre-built templates for common enterprise scenarios. RAGFlow synchronizes data from Confluence, S3, Notion, and Google Drive, and delivers answers through chat integrations with Feishu, Discord, Telegram, and Line. The Python SDK and RESTful API on port 9380 provide programmatic access to knowledge base management, document parsing, and conversational retrieval. The full stack deploys via Docker Compose with MySQL for metadata, Redis for task orchestration, and MinIO for object storage. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

The most widely deployed open-source BI tool, Metabase is a visualization and query layer that sits on top of your existing databases without ingesting or copying data. Non-technical users ask questions through a visual query builder with drill-through menus that answer follow-ups like "broken down by month" without writing a new query, while analysts use the native SQL editor with variables and templates for complex work. Questions assemble into interactive dashboards with filters, auto-refresh, fullscreen mode, and custom click behavior, and dashboard subscriptions email or Slack scheduled reports to stakeholders. It connects to 20+ data sources including PostgreSQL, MySQL, MongoDB, SQL Server, BigQuery, Snowflake, Redshift, and ClickHouse - always querying in place, so there is no second data store to secure, sync, or pay for, and results are always current. Models and metrics let a data team define official, reusable starting points so self-service stays consistent, collections with permissions organize content, and alerts fire when a metric crosses a threshold. The practical effect is cutting the ad-hoc query queue that lands on the data team, since non-technical staff can answer their own questions. Written in Clojure, licensed AGPL, and shipped as a single JAR or Docker image with an embedded application database - a working BI instance runs before most tools finish their installer - the open-source edition has no limits on users, dashboards, or connected databases, where commercial BI platforms price per viewer as well as per creator.

Your files already live in five places; filex puts them in one tree and serves that tree back out through almost any protocol. Mount local disks, S3 buckets, SFTP servers, WebDAV shares, FTP sites, and SMB network drives side by side, then copy in one storage and paste into another without thinking about where anything physically sits. The same tree is reachable as S3, SFTP, FTPS, NFS, and WebDAV, so rclone, restic, the AWS CLI, WinSCP, or FileZilla all work against it with the same per-user and per-folder permissions as the web interface. Sharing leaves the server under your control: public links carry a PIN, an expiry, and a download limit, and file-request links let people upload into a folder without seeing its contents. Anything deleted stays recoverable inside a retention window, overwritten files keep version snapshots, and encrypted folders are sealed in the browser so the server never receives a key. People sign in with OIDC single sign-on, LDAP or Active Directory, or the host machine's own accounts, with roles, groups, and tenants plus folder-level exceptions. A desktop app keeps chosen folders in sync within about a second, the file manager embeds into other products as a web component, and an MCP server plus REST API let agents work the same tree. It runs from one static binary or container on port 5212. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Operately is an opinionated operating system for growing companies that connects strategic goals directly to execution without the overhead of assembling separate tools. The OKR module tracks company-wide, team-level, and individual goals with measurable success conditions showing progress bars against numeric targets, timeframe deadlines, and automated progress aggregation from linked projects. Project management includes champion ownership, milestone tracking, Kanban task boards with TODO, In Progress, and Done columns, and scheduled check-ins that generate async progress updates on a configurable cadence. Team Spaces give departments organized homes for their goals, projects, documents, and discussions with configurable access controls at the space, goal, and project level. Message boards replace scattered email threads with focused project conversations, while the document and file system provides centralized content management. The Review screen aggregates everything requiring attention or approval into a single actionable view. The Elixir Phoenix backend uses Absinthe for GraphQL queries and mutations, Oban for background job processing, and Swoosh for email notifications. The React TypeScript frontend leverages Apollo Client for GraphQL state management. Full CLI and API access enables programmatic interaction, and MCP tools added in version 1.7 allow AI agents to create goals, update projects, manage tasks, and post check-ins. On RepoCloud, deploy Operately on a dedicated VPS with PostgreSQL persistence, root SSH access, and complete control over your organizational data, all under the Apache 2.0 license.

Stop hoping your AI coding assistant remembers to plan before it codes, test after it implements, and review before it ships. Archon wraps Claude Code, OpenAI Codex, and other AI agents inside structured YAML workflows that enforce the same development process every single time. Define your pipeline as a directed acyclic graph of nodes (AI tasks, shell scripts, approval gates, loops) and Archon handles the orchestration: resolving dependencies, running independent nodes in parallel, passing artifacts between steps, and isolating every run in its own git worktree so five bug fixes can proceed simultaneously without conflicts. Ship with 17 pre-built workflows covering everything from "idea to merged PR" to automated conflict resolution, or author your own by committing YAML files to your repository's .archon/workflows/ directory. The web dashboard, launched with archon serve, provides a conversation interface with real-time streaming, a visual drag-and-drop workflow builder for creating DAG pipelines, step-by-step progress monitoring for every run, and a unified sidebar aggregating conversations from CLI, Slack, Telegram, and GitHub into one view. An NLP router parses natural language requests and automatically selects the right workflow. Structured JSON output schemas let you enforce typed responses from AI nodes, with validation and auto-repair for providers that lack native schema support. Every workflow file is version-controlled, portable, and reviewable in pull requests, so your entire team runs identical processes from day one. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Over 2,500 open-source projects and companies in more than 165 countries localize with Weblate - the libre continuous localization platform and the standard self-hosted answer to Crowdin and Lokalise. Its defining trait is that translations live in the same version control as your code: Weblate talks directly to Git and Mercurial, pulls new source strings automatically via webhooks, and pushes finished translations back either as direct commits or as pull/merge requests on GitHub, GitLab, Gitea, Bitbucket, Azure DevOps, Gerrit, or Pagure. Every translator is properly credited in the commit history. For translators, it is a full computer-aided translation tool: translation memory, glossaries, customizable quality checks that catch placeholder and formatting mistakes, propagation of identical strings across components, and automatic suggestions from machine translation services - DeepL, Amazon Translate, LibreTranslate, and others, with per-service priorities and support for custom Python engines. It handles the format zoo (gettext PO, JSON, YAML, Android XML, iOS strings, and dozens more) and supports crowdsourced workflows with granular access control, workspaces, two-factor authentication, and reviewer approval steps. A REST API, CLI client, and add-on system automate everything else. Built on Python/Django, GPL-licensed, with no per-string or per-seat pricing when self-hosted.

Documents, tables, files, chat, and video meetings share one workspace in atomic.place, and AtomicServer is the part you host yourself so a team can edit together while the data stays on a machine it controls. Documents are collaborative rich text with comments, icons, and cover images, tables enforce a strict schema with keyboard navigation and copy and paste, and any table can switch to a kanban, calendar, dashboard, or timer view. Templates start an issue tracker, a CRM, a project task list, or a time tracker. Live cursors, typing indicators, and presence avatars show who is working where, group channels carry attachments, replies, and search, and an infinite canvas can be drawn on together. Every write is a signed commit, so a full history is kept. Read and write rights follow the resource hierarchy, and invite links bring people in. Websites are designed in the browser, published in one click, and rolled back to any earlier version. Custom classes and properties come from the Ontology Editor, small apps are plain JavaScript screens over the same data, and AI features work with any model through OpenRouter or a local Ollama and support MCP. Typeahead search suggests results as you type. A REST API answers in JSON-AD, Turtle, or JSON-LD for automation, and export and import commands write and read JSON-AD backups. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Processing billions of operations per second across companies like Twitter, GitHub, Snapchat, and Stack Overflow, Redis is the world's fastest and most widely deployed in-memory data store. Redis 8 unifies previously separate modules into a single distribution: RediSearch for full-text indexing with BM25 scoring and vector similarity search via HNSW and FLAT algorithms, RedisJSON for native JSON document storage with JSONPath queries, RedisTimeSeries for timestamped data with configurable downsampling compaction rules, and RedisBloom for probabilistic data structures including Bloom filters, cuckoo filters, count-min sketches, top-k, and t-digest. The core engine provides strings, lists, sets, sorted sets, hashes, streams, HyperLogLog, bitmaps, bitfields, geospatial indexes, and the new array data structure introduced in Redis 8.8. Pub/Sub delivers lightweight real-time messaging between publishers and subscribers, while Streams provide an append-only log with consumer groups for event sourcing and complex consumption patterns. Redis Cluster distributes data across nodes with automatic sharding using 16,384 hash slots, and Sentinel provides high availability with automatic failover monitoring. Lua scripting and Redis Functions enable server-side computation, and ACL-based security provides granular per-command, per-key access control. Official clients exist for Python, Node.js, Java, Go, .NET, Rust, and PHP. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPLv3 licensed.

libSQL bridges the gap between SQLite's legendary simplicity and the server-accessible database model developers expect from PostgreSQL and MySQL, adding network access, replication, and vector search while maintaining full file format and API compatibility. The sqld (SQL daemon) component transforms SQLite into a network-accessible database server accepting queries via HTTP with JSON payloads, WebSocket connections, and a Hrana protocol optimized for low-latency edge access. Client libraries for TypeScript, JavaScript, Rust, Go, and Python connect to sqld identically to any traditional client-server database, while the LD_PRELOAD compatibility layer enables switching existing SQLite applications from local to remote mode without code changes. Embedded replicas synchronize a local SQLite copy inside your application process with the primary server, delivering sub-millisecond read latency while maintaining consistency through streaming replication. Bottomless replication continuously backs up database state to S3-compatible object storage with generation-based snapshots and WAL page shipping, providing point-in-time recovery without manual backup scheduling. Native vector search enables semantic similarity queries directly within SQL using cosine distance functions, eliminating the need for external vector database infrastructure. Read replica support distributes query load across multiple sqld instances, and integration with mvSQLite adds multi-version concurrency for high-availability deployments. Created by Turso with 17,100+ stars and active production deployment. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Run every TV, menu board, kiosk, and video wall from one browser dashboard with ScreenTinker, a digital signage CMS you host yourself, with no per-screen license fees. Players cover Android TV, Fire TV, Samsung Tizen, LG webOS, Amazon Vega OS, Roku, Raspberry Pi, Windows, ChromeOS, and any web browser. Upload images and video, turn each PDF page into a slide, or design animated decks in the slide editor with templates, optional voiceover, a music bed, and an optional AI designer that works from a prompt using your own model endpoint. Widgets add clocks, weather, RSS tickers, moderated social walls, live IPTV streams, and iCal or JSON data bound straight into a slide. A weekly calendar handles recurring schedules, priorities, and time zones, and Preview at shows what a given screen will play at any chosen moment. Group screens to push playlists and bulk commands, split displays into zones, or join several panels into a video wall with bezel compensation. Live remote control, CSV proof-of-play reports, and offline email alerts keep a fleet in check, while web and Android players cache content and keep playing through outages. Workspaces, six role levels, optional approval before publishing, OIDC single sign-on, white-label branding on your own domain, and a scoped REST API serve agencies and larger teams. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

"As simple as Trello but as feature-rich as Jira" is how the Leantime team frames its goals-focused project management system for non-project managers - built from the ground up with ADHD, autism, and dyslexia in mind, with behavioral science shaping customizable dashboards, time blocking, low-cognitive-load prioritization, and Kanban, list, table, Gantt, and calendar views so each person works the way their brain does. The PHP application (AGPL, Laravel Blade frontend) connects strategy to execution: tasks with unlimited subtasks and dependencies roll up into milestones on a timeline, sprints and retrospectives handle iteration, and strategy-level blueprint boards - Lean Canvas, SWOT, risk analysis, goal and metric tracking - keep the "why" attached to the work. Knowledge lives alongside: wikis and docs, idea boards, comments on everything, file storage on S3 or local disk, even screen and webcam recording. Time tracking with timesheets supports estimation and client billing. Admin features are serious for an OSS tool: per-project permissions, two-factor auth, LDAP and OIDC single sign-on, Slack, Mattermost, and Discord integrations, a plugin system, and an expanding API that now powers a mobile app. Recent releases added multi-collaborator task assignment and low-vision accessibility improvements. Available in 20+ languages.

With over 2,700 GitHub stars, Auto Company is the first open-source framework that runs a fully autonomous AI company 24/7 — 14 specialized agents modeled after Jeff Bezos (CEO strategy), Werner Vogels (CTO architecture), Charlie Munger (critical analysis), DHH (full-stack engineering), Kelsey Hightower (DevOps), Seth Godin (marketing), and eight more domain experts collaborate through dynamic squad formation to ideate products, write code, deploy infrastructure, and execute marketing campaigns without human intervention. The five-layer architecture separates execution, orchestration, cognition, workflow routing, and observability, while the consensus memory pattern uses a single markdown file as a relay baton between cycles — no vector databases, no Redis, no embeddings required. A bash loop invokes Claude Code or OpenAI Codex CLI every 30 seconds, each cycle selecting 2-5 agents from the 14-person pool based on task context. Over 30 reusable skills handle specialized tasks from frontend design to competitive analysis and deployment automation. Circuit breakers trigger cooldown after consecutive errors, rate-limit detection auto-sleeps on API throttling, and sandbox rollback protects against destructive changes. The Python-powered web dashboard displays real-time cycle status, cost tracking per cycle averaging under $2, and agent activity visualization, with CLI control via make start, stop, monitor, pause, and resume. Supports macOS via launchd, Windows via WSL with systemd, and native Linux deployment. The npx create-auto-co command scaffolds a new AI company in seconds. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Document review, fixed-layout report generation, and multi-step research that ends in a PPT, Excel, or Word file all run inside BISHENG, a self-hosted workspace for enterprise AI applications. Review and report flows are drawn on a visual canvas where a circle becomes a loop, side-by-side nodes run in parallel, and a multi-item selection runs as a batch. A running flow can stop for a person to give input, confirm, or make changes, and chat and automation share one flow type. Research goes to Task Mode: give it a goal plus any files, knowledge bases, tools, and skills, and it writes a checklist, hands research to parallel sub-agents, and returns a report with clickable citation markers. Teams sharing documents use Knowledge Spaces, with folders, tags, keyword search, AI Q&A that shows its sources, and permissions down to a single file for people, departments, or user groups. For a daily news briefing, Channels turn WeChat official accounts and websites into topic feeds and save articles as knowledge in one click. Admins connect OpenAI-compatible APIs, Azure OpenAI, Anthropic, Qwen, DeepSeek, and local Ollama models, then govern access with approvals, audit logs, SSO, and LDAP. Private document parsing reads printed text, handwriting, tables, layouts, and seals, and a service-account Open API lets other systems call applications and knowledge bases. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

With MediaWiki, the wiki software behind Wikipedia, a team writes one shared knowledge base in plain wikitext or a visual editor while every revision stays saved for comparison and rollback. Page history names the author and edit summary of each change, and a side-by-side diff shows exactly what moved before anyone reverts. Talk pages hold threaded discussions with inline replies, notifications announce mentions and thanks, and watchlists flag the pages you follow. Namespaces, categories, redirects, and reusable templates give a large wiki its structure, and Lua modules written for Scribunto power infoboxes. Uploaded images get automatic thumbnails and a full-screen lightbox. Bundled extensions add PDF handling and math rendering for documentation that needs more than text. Group-based permissions decide who may read, edit, protect, or delete. A wiki can stay open to everyone or sit behind a login. AbuseFilter, CAPTCHAs, blocklists, and two-factor sign-in help fend off spam and account takeovers. Vector 2022 brings a sticky table of contents and an optional dark mode. The interface is localized in over 350 languages. Bots and scripts log in, read, search, and edit with the Action API. Use it for company handbooks, engineering runbooks, course notes, fandom encyclopedias, and public reference sites. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0-or-later licensed.