Standard Notes keeps your notes, files, and tags encrypted on your device before anything touches the network, meaning the server stores only ciphertext it cannot read. Cross-platform sync across desktop, mobile, and web delivers fast, conflict-free updates on unlimited devices with the same zero-knowledge guarantee that only your password can decrypt your content. The V2 server architecture condenses everything into four Docker containers consuming roughly 570MB RAM total (down from 13 containers and 1.7GB in the legacy setup), with startup under one minute. Revision history automatically preserves every version of every note, so recovering deleted text or reverting to a previous state never depends on manual backups. A nested tag system organizes thousands of notes with hierarchical categorization that goes well beyond flat folder structures, while search operates entirely on client-side decrypted content. File attachments of any type encrypt and sync alongside notes with identical end-to-end protection. Multiple editor options span plain text, Markdown with preview, and rich formatting to fit different writing workflows. Two-factor authentication via TOTP with email backup codes adds a second barrier beyond your password. An optional separate container serves the web frontend, providing browser access to your encrypted vault without depending on standardnotes.com infrastructure. With 5,500+ GitHub stars and active development, the project continues expanding editor plugins and sync improvements.

Backed by 4,800+ GitHub stars and trusted by teams replacing LaunchDarkly and Split with a self-hosted solution, Flipt v2 delivers the first truly Git-native feature management platform that treats feature flags as code stored in your own repositories. The architecture eliminates all database dependencies by building immutable in-memory snapshots from YAML flag definitions on every Git commit, delivering sub-millisecond evaluation latency with zero external runtime dependencies beyond the single Go binary. Multi-environment support maps directly to Git abstractions — separate repositories per environment, different directories within the same repository, or different branches — enabling teams to use their existing branching strategy, pull request workflows, and code review processes for flag changes. The evaluation engine supports boolean flags, multivariate string and numeric variants, segment-based targeting with constraint rules, percentage rollouts, and namespace isolation. Native SCM integration with GitHub, GitLab, BitBucket, Azure DevOps, and Gitea creates merge proposals directly from the UI with GPG-signed commits. Flipt implements the OpenFeature Remote Evaluation Protocol with official providers for Go, Node.js, Python, Java, C#, Ruby, and Web SDKs, enabling vendor-agnostic flag evaluation across all services. The gRPC API with REST HTTP gateway exposes flag management, evaluation, and analytics endpoints. Offline mode continues serving flags when the source repository is temporarily unavailable. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Fair Core License (server) / MIT (client SDKs).

Upload a report, ask a "what if" question in plain language, and MiroFish builds a small simulated society that plays out the answer before you commit to a decision. It reads your seed documents, whether news, policy drafts, financial signals, or a novel, and extracts entities and relationships into a GraphRAG knowledge graph. Entities from the graph become agents with a profession, a biography, and interest tags, and the app estimates simulation rounds from the simulated time span, with a custom mode for shorter runs. Agents post and react on two simulated platforms at once, a feed-style plaza and a topic community, while a live monitor tracks rounds, elapsed simulated time, and actions. A ReportAgent then plans an outline and writes the prediction report section by section with the InsightForge, PanoramaSearch, QuickSearch, and InterviewSubAgent tools. Afterward you can keep questioning the ReportAgent, chat with any individual agent, or send a survey question to a selected group and read their answers. Typical uses include rehearsing public relations responses, testing policy drafts against likely reactions, and exploring alternate endings for a story. The interface switches between English and Chinese, and you bring your own model: any OpenAI SDK compatible LLM endpoint works, Zep Cloud stores agent memory, and the project suggests starting under 40 rounds because runs consume many tokens. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

World Monitor replaces twenty or more browser tabs by fusing geopolitical, military, financial, and infrastructure signals onto a single interactive canvas built with TypeScript, Vite, globe.gl with Three.js for the 3D globe, and deck.gl with MapLibre GL for the flat map. World Monitor ingests live data from 530 upstream sources including ACLED and UCDP for conflict events, OpenSky Network for military and civilian aircraft, AISStream for vessel positions, NASA FIRMS for satellite fire detection, USGS for earthquakes, and FRED, IMF, BIS, and Finnhub for macroeconomic and market data. The Country Instability Index v8 computes real-time stress scores across 31 Tier-1 nations, while the finance radar tracks 29 stock exchanges, commodities, and cryptocurrency with a 7-signal market composite. Six specialized dashboard variants — World, Tech, Finance, Commodity, Energy, and Happy — deploy from a single codebase. AI summarization runs locally through Ollama and LM Studio integration or optionally via Groq and OpenRouter cloud providers, with Transformers.js powering browser-side inference. The platform supports 26 languages with native-language feeds and RTL layout, and provides MCP server integration for AI agent connectivity. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Logging every drive, charge, and idle stretch of a Tesla to a database you own, TeslaMate shows where the battery went, including degradation, vampire drain, and charging cost. Battery health comes first: the dashboard estimates usable capacity, range lost, and degradation against mileage. Idle losses come next, with Vampire Drain listing how much charge disappears during every idle period and a States view recording every online, asleep, and offline stretch. The car is left alone to fall asleep, so logging adds no extra vampire drain. Charging sessions show curves, energy added and used, efficiency, and cost, using per-location prices attached to geo-fences drawn on a map. Each drive records second-by-second speed, power, elevation, and temperature, plotted on a route map beside tire pressure and consumption charts. Trip, Drives, Efficiency, Drive Stats, Mileage, Updates, Statistics, and a lifetime driving map fill in the rest. Live vehicle data goes out over MQTT to Home Assistant, Node-RED, and Telegram, and old history imports from TeslaFi or tesla-apiscraper. Several vehicles on one Tesla account work together, addresses are looked up automatically, and the web interface offers light, dark, or system themes in 19 languages. Sign-in uses Tesla access and refresh tokens that TeslaMate encrypts with a key you set. It works best on an always-on server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Why keep a Java runtime on the server just to host Minecraft, when Pumpkin runs from a single native executable and lets Java and Bedrock players share a world? Java Edition clients join on port 25565 and Bedrock clients on 19132, although Bedrock support is still marked work in progress. Builds exist for Windows, Linux, macOS, and Android. On launch, the console reports the worlds loaded and the server ready within milliseconds. Plugins are sandboxed WebAssembly modules that raise console permission prompts and pass signature checks, and authors can write them in Rust, Kotlin, Python, Go, C#, C/C++, D, Zig, or TypeScript. The ppm package manager searches and installs community plugins from the Pumpkin Market, and PatchBukkit loads some Bukkit and Paper plugins, with expected gaps. One pumpkin.toml file holds ports, MOTD, view distance, whitelist, authentication, compression, PvP, chat, resource packs, and world options, while chunks save in Anvil, Linear, or the native Pump format. Velocity and BungeeCord forwarding fit proxy networks, and the Query protocol plus Minecraft Server Management Protocol cover monitoring and remote administration. A public parity tracker lists every vanilla block, entity, item, and command as implemented, partial, or planned, so gaps are easy to spot before a world moves. Today it suits private survival worlds, test servers, and plugin development. It is early software, so the project advises backups. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

With 12,600 GitHub stars and 52 releases in under a year of development, InsForge is the fastest-growing open-source backend platform purpose-built for AI coding agents — giving Claude, Cursor, and any MCP-compatible tool direct access to database, authentication, storage, compute, and AI model infrastructure through a single self-hosted stack. The native MCP server exposes every InsForge operation as callable tools, letting coding agents autonomously create database tables, manage user authentication, upload files, deploy edge functions, and ship complete full-stack applications without human intervention. The Model Gateway provides an OpenAI-compatible API that routes requests across multiple LLM providers (OpenAI, Anthropic, Google, and open-source models) with unified billing, rate limiting, and fallback logic. PostgreSQL with pgvector handles both relational data and vector embeddings for RAG pipelines, while S3-compatible storage manages file uploads and static assets. Edge Functions run serverless TypeScript code on Deno with sub-millisecond cold starts for API endpoints, webhooks, and scheduled tasks. The authentication system provides user management, OAuth2 flows, sessions, and magic links with JWT token handling built in. Site Deployment builds and serves frontend applications with automatic SSL and custom domain configuration. The CLI paired with Agent Skills enables terminal-based workflows where agents invoke InsForge operations directly from the command line. Deploy via Docker with PostgreSQL as the only required external dependency. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

With over 32,000 GitHub stars and adoption by DoorDash, Netflix, and Bose, CockroachDB is the distributed SQL database designed to survive disk failures, machine outages, rack losses, and entire datacenter failures while maintaining strongly-consistent ACID transactions with serializable isolation by default. The architecture layers SQL on a transactional key-value store using the Raft consensus protocol for synchronous replication, automatically splitting data into ranges that distribute and rebalance without manual sharding. PostgreSQL wire protocol compatibility means existing drivers, ORMs, and tools including psycopg2, pgx, ActiveRecord, Django ORM, GORM, Hibernate, and Prisma work without modification. Multi-region capabilities include configurable survival goals at region or zone level, table-level locality settings for pinning data to specific geographies for GDPR compliance, and follower reads for low-latency global queries. The built-in DB Console provides cluster overview dashboards, node maps showing geographical distribution, SQL activity pages tracking statement fingerprints, transaction latency percentiles, session details, and real-time metrics for queries per second, storage capacity, and replication status. Change data capture streams row-level changes to Apache Kafka, Google Cloud Pub/Sub, or webhook endpoints for event-driven architectures. Online schema changes execute ALTER TABLE without locking or downtime, and distributed backup supports full and incremental snapshots to S3, GCS, Azure Blob, and NFS. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. CockroachDB Software License (source-available).

Processing billions of operations per second across companies like Twitter, GitHub, Snapchat, and Stack Overflow, Redis is the world's fastest and most widely deployed in-memory data store. Redis 8 unifies previously separate modules into a single distribution: RediSearch for full-text indexing with BM25 scoring and vector similarity search via HNSW and FLAT algorithms, RedisJSON for native JSON document storage with JSONPath queries, RedisTimeSeries for timestamped data with configurable downsampling compaction rules, and RedisBloom for probabilistic data structures including Bloom filters, cuckoo filters, count-min sketches, top-k, and t-digest. The core engine provides strings, lists, sets, sorted sets, hashes, streams, HyperLogLog, bitmaps, bitfields, geospatial indexes, and the new array data structure introduced in Redis 8.8. Pub/Sub delivers lightweight real-time messaging between publishers and subscribers, while Streams provide an append-only log with consumer groups for event sourcing and complex consumption patterns. Redis Cluster distributes data across nodes with automatic sharding using 16,384 hash slots, and Sentinel provides high availability with automatic failover monitoring. Lua scripting and Redis Functions enable server-side computation, and ACL-based security provides granular per-command, per-key access control. Official clients exist for Python, Node.js, Java, Go, .NET, Rust, and PHP. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPLv3 licensed.

Hister is a private search engine for everything you have read or saved, indexing the full text of visited pages, local files, and imported browser history so one query finds the page you only half remember. Firefox and Chrome extensions capture each page as you browse, while a crawler and importers for browser history and bookmarks backfill earlier reading. Watched directories add local files to the same collection. Queries accept field filters, quoted phrases, wildcards, negation, date ranges, and aliases, with a readable stored preview beside each result. Opt-in semantic search matches documents by meaning through an Ollama, llama.cpp, or OpenAI-compatible embeddings endpoint. The same index answers in the browser, a terminal interface, the command line, an HTTP API, and an MCP server for AI assistants. Multi-user mode gives each person separate documents, rules, and access tokens, with password or OAuth sign-in, and public mode lets anonymous visitors search a curated index. Rebuild a research trail, recover a half-remembered article, or share one searchable knowledge base, with no telemetry. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Windshift packs boards, sprints, roadmaps, test runs, time tracking, and a customer portal into one open-source tracker that replaces Jira on a server you control. Epics, stories, and sub-tasks form a hierarchy you can view as a board, list, tree, or map, and backlog items drag into dated sprints. The roadmap stretches across weeks, months, or quarters, and milestone pages show completion percentage with a status breakdown. Each workspace defines its own item types, custom fields, screens, statuses, priorities, workflows with conditions and approvals, and permissions, while JQL-style queries save as shared views. Event-driven rules update fields, notify people, and create work. Customers file requests through a public portal, and your team works them through queues with SLAs and approvals. Reusable test cases roll into test runs with success rates, and timers log billable and internal hours against projects and customers. GitHub, GitLab, Gitea, and Forgejo connections put branches and pull requests on the work item, and the importer brings over Jira projects, comments, attachments, and worklogs. A knowledge base and an asset register keep documentation and inventory next to the work. The interface speaks nine languages, including right-to-left Arabic, and sign-in supports OIDC single sign-on and passkeys. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Radar is an open-source Kubernetes management dashboard and Model Context Protocol server that gives engineering teams complete cluster visibility, automated issue diagnosis, and GitOps controls through a unified web interface. Operators explore live interactive cluster topology maps rendered with automated layout engines, grouping workloads by namespace or custom application labels to trace network communication pathways. The unified event timeline retains Kubernetes activity and state change diffs well beyond default one-hour limits, allowing site reliability engineers to diagnose historical CrashLoopBackOff states and investigate failed deployment rollouts. Teams manage Helm releases by inspecting deployed values, comparing manifest revisions side by side, and initiating rollbacks or upgrades with a single click. The built-in GitOps workspace correlates ArgoCD and Flux applications, surfacing synchronization health, field-level configuration drifts, and automated remediation suggestions. Developers inspect container image filesystems directly from pod detail panels without pulling images locally or establishing interactive terminal sessions, browsing permissions and downloading specific files. Native Model Context Protocol endpoints expose cluster telemetry and operational tools to artificial intelligence coding assistants, enabling external agents to diagnose failing pods and inspect access controls securely. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Memory that survives the session: Hindsight extracts facts, entities, and timestamps from everything an AI agent retains, then lets the agent search or reason over it later. Adding it to an existing LLM client takes a two-line wrapper, and more than 60 integrations cover Claude Code, Cursor, LangGraph, CrewAI, and n8n. Every bank also exposes its own MCP endpoint. Retain sends text, images, or files through an LLM that extracts facts, timestamps, entities, and relationships. Recall runs semantic, keyword, graph, and temporal searches in parallel, merges them with reciprocal rank fusion, reranks with a cross-encoder, and trims to a token budget. Reflect reasons across memories for questions that need synthesis, shaped by per-bank skepticism, literalism, and empathy traits. In the background, related facts consolidate into observations that keep exact quotes and proof counts and are refined, never silently overwritten. Mental models and wiki-style knowledge pages hold standing answers that rewrite themselves as the bank learns. Each user, agent, or project gets an isolated bank with no cross-bank leakage, and Memory Defense redacts or blocks secrets and PII against 45 patterns. The Control Plane adds a Recall Analyzer with traces, a memory constellation graph, and a knowledge page editor. Extraction and reasoning can run on 25+ LLM providers, including local Ollama and llama.cpp. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Tools and applications that already speak S3 can use RustFS as their storage backend, so backup jobs, data pipelines, and services keep working while the data stays on infrastructure you control. A built-in web console on port 9001 manages buckets, object uploads and downloads, access keys, users, groups, and IAM policies, with a status page for cluster health, capacity, and scanner activity. Versioning, Object Lock retention, bucket quotas, and server-side encryption with Vault or AWS KMS backends protect objects once they land. Lifecycle rules expire or transition data, and tiering moves cold objects to remote targets such as Amazon S3 or Wasabi. Bucket replication and site replication keep clusters in sync, and event notifications call webhooks when objects change. Single-node mode suits a lab or small server, while distributed mode adds erasure coding, bitrot protection, background healing, and pool expansion or decommissioning as capacity grows. Sign-in works with local users, OIDC single sign-on, or OpenStack Keystone, and FTPS and WebDAV are available by default, with SFTP and the Swift API as opt-in builds. A preview of S3 Tables exposes an Iceberg REST catalog for tools such as DuckDB and PyIceberg, and a documented migration path moves existing MinIO deployments across. Typical uses include backups, container registries, logs and traces, data lakes, and AI training sets. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Modern engineering teams and busy households deploy Octop to run private, autonomous AI agents equipped with persistent memory workspaces, scheduled cron jobs, and direct browser automation. Users can orchestrate specialist agents tailored for software development, IT operations, content generation, and system diagnostics through an interactive React dashboard. The platform connects directly to Discord, Feishu, DingTalk, and WeCom, allowing team members to delegate complex tasks without leaving their everyday messaging apps. An integrated remote desktop and browser control engine lets agents navigate websites, capture screenshots, fill forms, and operate graphical software autonomously. Administrators can assign distinct MBTI personality profiles to agents, establish granular role-based permissions, configure scheduled cron workflows, and integrate custom Model Context Protocol servers for external tool access. Long-term memory persists across conversations through dedicated workspace files, ensuring contextual continuity whenever switching between underlying language models or team collaborators. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Any existing relational database becomes a collaborative, Airtable-style smart spreadsheet under NocoDB. It connects to PostgreSQL, MySQL, MariaDB, SQL Server, or SQLite, introspects the schema - tables, relationships, indexes - and renders it as interactive Grid, Gallery, Kanban, Calendar, and Form views without migrating a single row. Your business data stays in your database; NocoDB keeps only its own metadata (view configs, permissions, webhooks) in a separate store. Every connected table automatically gets REST APIs with Swagger documentation, effectively turning legacy databases into modern backends. The spreadsheet layer adds 20+ field types including formulas, lookups, rollups, links, attachments, and currency, plus sorting, filtering, grouping, and multi-field editing. Views can be locked or shared publicly with password protection, role-based access control scopes permissions per user, and webhooks plus CSV, Excel, and Airtable import round out integration. An ERD view visualizes the schema. Built with Node.js and Vue, deployed via Docker, handling millions of rows.

The integrations your SaaS product offers its own users - that is what Nango, an open-source product-integrations platform, exists to build. It solves the repetitive infrastructure work behind every third-party API connection: OAuth flows, API key handling, token refresh, encrypted credential storage, rate-limit backoff, retries, and multi-tenant connection management. It ships pre-built auth configurations for 800+ APIs. Your users connect their accounts through an embeddable, white-label Connect UI, and your backend then reads or writes data through Nango's proxy, SDKs, or REST API without ever touching raw credentials. Integration logic is written as TypeScript functions covering actions, scheduled data syncs, and webhook processing - all running on one runtime with retries, checkpointing, and per-connection logs built in. Syncs pull records incrementally on a schedule, one-way or two-way, which suits RAG pipelines, search indexing, and keeping local copies of external data current. Selected actions can also be exposed as tool schemas or through a built-in MCP server, so AI agents operate on user-connected accounts without ever handling provider credentials. Auth support spans OAuth 2.0, OAuth 1.0a, API keys, basic auth, and JWT, and observability - logs, metrics, failure detection, and a reconnect flow for expired credentials - is scoped per customer connection for easier support debugging. Works with any backend language. Self-hosting on RepoCloud keeps all customer credentials and synced data on infrastructure you control, which matters for data residency and compliance requirements.

Your Gmail, Google Workspace, or Outlook inbox, worked by an AI assistant: Inbox Zero sits on top of the account you already have. Its core idea is rules written in plain English - tell the assistant "label invoices and file the PDF to Drive" or "archive cold outreach unless they mention my company" - and it executes against every incoming message. Emails that need a response arrive with a pre-drafted reply written in your tone, learned from your email history and calendar context. Reply Zero tracks what you owe responses to and what you're waiting on; the Bulk Unsubscriber surfaces newsletters you never read (with read-rate analytics) for one-click unsubscribe-and-archive; the Cold Email Blocker auto-archives unsolicited pitches based on your own definition of "cold." Smart Filing routes attachments - receipts, contracts, PDFs - into the right Google Drive or OneDrive folder, and Slack/Telegram integration lets you read, draft, and triage without opening a mail client. Email analytics show top senders and volume trends. It is not a new email client: everything happens in your real mailbox using native filters. Self-hosting means your mail content and the LLM calls that process it run on infrastructure you control.