Sign up for a new service and you face a familiar choice: hand over your real email and get spam-listed forever, or generate a throwaway alias that dies when you close the tab. AliasVault eliminates that trade-off by combining a password manager with a built-in email server, so every website gets a unique identity (random email, generated name, strong password) and incoming emails land directly in your encrypted vault rather than your primary inbox. Creating a new alias takes one click: the system generates a random address on your configured domain, a fake identity with name and birthdate, and a cryptographically strong password, all stored in a zero-knowledge encrypted vault that even the server administrator cannot read. Browser extensions for Chrome, Firefox, Edge, Safari, and Brave detect login forms and autofill credentials or prompt you to create a new alias on the spot. Native iOS and Android apps with biometric unlock provide mobile access to your vault and integrate with the operating system's autofill framework. The built-in TOTP authenticator generates time-based one-time codes without needing a separate app. Import existing credentials from other password managers through standard export formats, and export your vault data at any time for full portability. Self-hosting via Docker with your own email domain gives you complete control over where alias mail is received and stored, with no third-party dependencies. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Claiming 60-80% token cost reduction compared to flat single-model deployments and backed by 6,500+ GitHub stars, OpenSquilla delivers an intelligent AI agent runtime where a local ML classifier evaluates every turn on message length, code blocks, keyword patterns, and semantic embeddings before routing it to the optimal model tier from C0 through C3. The pluggable provider layer connects natively to TokenRhythm, OpenRouter, OpenAI, Anthropic, Ollama, DeepSeek, Gemini, DashScope, Moonshot, Mistral, Groq, Zhipu, SiliconFlow, vLLM, LM Studio, and additional compatible backends with primary-plus-fallback selection. The four-tier cognitive memory architecture spans working, episodic, semantic, and raw layers with vector-semantic and BM25 retrieval powered by on-device ONNX embeddings that never leave your infrastructure. Security isolation operates at the syscall level via Bubblewrap on Linux and Seatbelt on macOS, complemented by policy-based execution controls and prompt injection protections. The unified TurnRunner executes identically across the Vue-based control console Web UI, terminal CLI, and chat channel integrations including Slack and Discord, ensuring consistent tool dispatch, retry logic, and decision logging regardless of entry point. Built-in skills cover deep research, multi-search-engine queries, document generation for DOCX, PPTX, XLSX, and PDF formats, GitHub integration, cron scheduling, and bounded subagent delegation. Per-agent workspaces with durable session storage provide transcript replay, context state management, and per-call cost tracking with automatic quota enforcement. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Designed for developers on the go, Yep Anywhere turns any smartphone browser into a full-featured control center for supervising, steering, and reviewing autonomous AI coding agents. Operators can monitor live execution across multiple active projects simultaneously without sitting at a desktop terminal. Real-time reasoning feeds. Instant push alerts for permission prompts. One-tap tool approvals. Developers can unblock pending tasks mid-turn, redirect active workflows, or queue sequential follow-up prompts for automatic delivery at the next safe milestone. An integrated source control viewer displays syntax-highlighted working-tree and commit diffs, allowing reviewers to attach line-level comment bundles directly back into the agent context. Mobile voice transcription lets users dictate instructions straight into running sessions, while photo library integration makes uploading bug screenshots effortless. All agent credentials, CLI configurations, and repository data remain private on the host server without requiring third-party cloud database accounts or proprietary device pairing. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

A Day One alternative that keeps your most personal writing on your own server: Journiv is journaling purpose-built for self-hosters. The FastAPI backend runs on SQLite by default with optional PostgreSQL, Redis, and Celery for background work, behind a clean, minimal web UI. Unlike general note-taking apps, it ships the features journaling actually needs: customizable moods and mood groups, activity tracking, goals with automated progress from logged activities, and daily writing prompts filterable by category and difficulty so a blank page never stalls you. Quick Log captures a moment in seconds and expands into a full entry later; "On This Day" resurfaces entries from past weeks, months, and years. Multiple journals separate work, gratitude, and personal writing, with tags and full-text search across everything, plus media uploads with automatic thumbnails and an Immich integration for linking photo-library memories. Analytics chart mood trends and writing patterns over time. Data portability is taken seriously: native import of Day One exports, JSON/Markdown/HTML export, and a standalone HTML viewer that opens your archive in any browser with no server running. OIDC single sign-on works with Authentik or Keycloak, and multi-arch images cover amd64 and arm64.

Plunk consolidates transactional emails, marketing campaigns, and drip automation into one platform riding AWS SES at roughly one-tenth of a cent per message, with zero per-contact charges regardless of list size. The Turborepo monorepo architecture separates the Express.js API server (handling REST requests with Prisma ORM against PostgreSQL) from a dedicated BullMQ worker process that consumes email, campaign, and workflow jobs independently for fault isolation and horizontal scaling. Transactional emails support HTML bodies, template variable substitution via React Email components, attachments, and custom headers with dedicated SMTP relay on ports 465 and 587 for integration with existing frameworks. The campaign system sends newsletters and product updates to full contact lists or dynamically segmented audiences based on contact properties and behavioral events, with scheduling, A/B testing, and performance tracking for opens, clicks, and bounces. The workflow automation builder creates event-triggered sequences with delays, conditional branches, and webhook steps for lifecycle campaigns like onboarding drip sequences and re-engagement flows. Contact management stores unlimited contacts with custom data fields, CSV import, full activity history, and dynamic segmentation. Custom domain verification with DKIM and SPF ensures deliverability, while inbound email processing handles incoming messages with custom routing rules. Docker Compose deployment runs five containers including PostgreSQL, Redis, MinIO for S3-compatible storage, and ntfy for notifications. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Every ride, run, hike, and swim you have ever recorded finds a home in Dreeve, a private fitness dashboard that lives on your own server rather than in a social feed. Import FIT, TCX, or GPX files from a watch folder, sync Strava, or add connectors for Garmin Connect, Wahoo, Polar Flow, Hammerhead, and Zepp/Amazfit. Weekly charts follow distance, time, and elevation beside training goals, heart rate zones, and training load analysis, and monthly stats pair per-sport totals with an interactive calendar. A heatmap paints every kilometer you have covered. Best efforts rank your fastest 5k, 10k, 50k, and 100k across every sport, while Eddington numbers, a milestones timeline, and a yearly Rewind mark the long game. Strava sync also brings segments, segment efforts, and challenges. Gear pages total the distance on each bike and shoe, and maintenance tasks send alerts through ntfy, Gotify, Discord, Telegram, Slack, or email when an interval comes due. Automation rules assign gear, flag commutes, and set sport types by device, distance, weekday, time of day, or location, so new imports arrive organized. Ask the AI workout assistant about your training, using cloud models, OpenRouter, or a local Ollama model. An installable mobile app and embeddable badges carry your stats to phones and blogs, and a password-protected admin panel keeps the settings. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Hosting companies that sell VPS plans, game servers, or dedicated machines get a branded storefront, recurring billing, and a ticket desk from Paymenter, running on their own server. A customer browses a category, picks a free, one-time, or recurring plan billed every few days, weeks, months, or years, and shapes the order with select, radio, checkbox, text, number, or textarea options, some of which carry their own price. Prices can differ per currency, and a setup fee is optional. Payment runs through Stripe, PayPal, or Mollie, with tax rates and coupons set from the admin panel. Once it clears, a server extension for Pterodactyl, Virtualizor, VirtFusion, Convoy, cPanel, Plesk, DirectAdmin, or Enhance creates the service. A daily job issues renewal invoices, suspends overdue accounts, and terminates long-overdue ones. The customer portal covers services, invoices, and tickets in 24 languages, and tickets accept replies by IMAP email piping. Staff work with roles, audit logs, email logs, and notification templates, while API keys and OAuth clients connect outside tools. Optional extensions add an affiliate program, announcements, and Discord alerts. Moving over from WHMCS takes one built-in command that imports clients, products, services, tickets, and invoices from a copy of your database. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Powering Facebook, Uber, Twitter, and Booking.com, MySQL processes billions of queries daily as the world's most widely deployed open-source relational database. Its default InnoDB storage engine delivers full ACID compliance with row-level locking, crash recovery, and foreign key enforcement, making it the backbone of mission-critical e-commerce, SaaS, and financial applications. MySQL's Document Store bridges relational and NoSQL paradigms, allowing developers to work with schema-less JSON collections alongside traditional SQL tables through the X DevAPI protocol. For high availability, InnoDB Cluster combines Group Replication, MySQL Router, and MySQL Shell into an integrated solution with automatic failover, while InnoDB ClusterSet extends this across data centers for disaster recovery. The database supports multiple storage engines including MyISAM for read-heavy analytics, Memory for temporary high-speed caching, and Archive for compressed historical data. Native JSON functions like JSON_TABLE() transform document data into relational result sets, and spatial data types enable GIS applications. MySQL integrates with every major programming language through official connectors for Python, Java, Node.js, PHP, C++, and .NET, and works seamlessly with frameworks like Django, Laravel, Rails, and Spring. Replication topologies support read replicas for horizontal scaling, and the new Change Stream Applier in MySQL 26.7 enables configurable parallel transaction application with up to 1,024 workers per channel. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPLv2 licensed.

With 13,800 GitHub stars, adoption by OpenAI for ChatGPT's authentication infrastructure serving 800 million weekly active users, and governance under the Ory open-source ecosystem, Ory Kratos provides enterprise-grade identity management as a headless API server that separates authentication logic from user interface — enabling any frontend framework to consume standardized self-service flows for registration, login, recovery, verification, and profile management. Multi-factor authentication supports passkeys, WebAuthn security keys, TOTP authenticator apps, SMS one-time codes, email magic links, and backup recovery codes with configurable Authenticator Assurance Levels enforcing step-up authentication for sensitive operations. Social sign-in connects to any OpenID Connect provider including Google, GitHub, Apple, and Microsoft, plus enterprise SAML 2.0 federation for B2B single sign-on. Customizable identity schemas using JSON Schema define user profiles with flexible trait structures, while pre- and post-flow webhooks enable integration with CRMs, analytics, and compliance systems. The courier system handles email and SMS delivery for verification codes and password recovery links. Session management provides device tracking, forced logout, and configurable lifespans with privileged session elevation. Deploy alongside Ory Hydra for OAuth2/OIDC token issuance and Ory Keto for fine-grained permissions to build a complete identity platform. Docker Compose deployment with PostgreSQL. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

With over 14,000 GitHub stars, 1 million managed identities on Logto Cloud, and continuous releases through version 1.42.0 in July 2026, Logto has emerged as the most credible open-source alternative to Auth0, Clerk, and AWS Cognito by packaging OIDC, OAuth 2.1, enterprise SSO, multi-tenancy, and RBAC into a single MPL-2.0 codebase that self-hosts for free with no per-MAU pricing surprises. Every Logto tenant operates as a fully compliant OpenID Provider supporting PKCE-only public clients, DPoP token binding, and RFC 9068 JWT access tokens. Pre-built sign-in flows handle email, phone, social login via Google, Facebook, Azure AD, and dozens of connectors, passkey authentication, and multi-factor verification through TOTP and WebAuthn. Organizations enable first-class multi-tenancy where users belong to multiple tenants with per-organization RBAC scopes on API resources. Enterprise SSO connects to Okta, Entra ID, and any SAML or OIDC identity provider. SDKs for over 30 frameworks including React, Next.js, Angular, Vue, Flutter, Go, and Python integrate authentication into SPAs, web apps, mobile apps, APIs, machine-to-machine, and CLI tools. The admin console provides user management, audit logs, webhook event subscriptions, and custom domain configuration. Personal Access Tokens and token exchange support AI agent architectures and MCP server authentication. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MPL-2.0 licensed.

Backed by over 21,800 GitHub stars and more than 1,000 community contributors, Airbyte has become the standard open-source data movement platform, powering ELT pipelines for organizations ranging from startups to Fortune 500 enterprises. The platform provides 600+ pre-built connectors covering PostgreSQL, MySQL, MongoDB, Snowflake, BigQuery, Redshift, S3, Salesforce, HubSpot, Stripe, Shopify, Google Analytics, and hundreds of additional APIs, databases, and SaaS applications. The no-code Connector Builder lets practitioners create new source connectors in minutes by pointing at an API documentation URL, while the Python CDK enables custom connectors with full programmatic control for complex authentication flows and pagination strategies. Airbyte's AI agent capabilities include the MCP Gateway for Model Context Protocol integration, the open-source Agent SDK compatible with pydantic-ai, LangChain, OpenAI Agents, and FastMCP, and a Context Store that lets AI agents query business data across connected systems without runtime API stitching. Change Data Capture streams incremental updates from PostgreSQL, MySQL, and SQL Server using Debezium, while dbt integration handles post-load transformations within the pipeline. Self-hosted deployment uses Kubernetes via the abctl CLI tool, which bootstraps a local kind cluster with a single command, or Helm charts for production clusters with Keycloak OIDC authentication and secrets management through AWS Secrets Manager, Google Secrets Manager, or HashiCorp Vault. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. ELv2 licensed with MIT-licensed connectors.

Track every recurring payment you have, from streaming services to SaaS tools, and get AI-powered recommendations on where to cut costs. Wallos manages subscriptions with automatic due date reminders delivered through email, Discord, Telegram, Pushover, Gotify, or custom webhooks so renewal charges never catch you off guard. Multi-currency support handles international subscriptions while the Fixer API converts everything to your primary currency for unified budget visibility. The statistics dashboard breaks down monthly and yearly spending by customizable categories, revealing consumption patterns and highlighting savings opportunities. AI analysis via ChatGPT, Gemini, or a locally-hosted Ollama instance reviews your subscription portfolio and suggests alternatives or consolidation strategies. Logo search automatically fetches brand imagery so your subscription list stays visually organized without manual uploads. Authentication supports OIDC with OAuth for enterprise environments, and the mobile-responsive interface works on any device with customizable themes and multi-language support. The PHP 8.3 application with SQLite backend runs from a single Docker container (bellamy/wallos image) with two persistent volumes for database and logos on port 8282. Deploy on RepoCloud with a dedicated VPS, keeping all financial data private under the GPL-3.0 license.

2FAuth generates TOTP, HOTP, and Steam Guard codes from any web browser, freeing your two-factor authentication from dependence on a single smartphone or app. Lose your phone, switch devices, or sit at a desktop computer, and your 2FA codes remain accessible through the web interface. The Laravel and Vue.js application stores account secrets in an encrypted SQLite database that backs up as a single file. Adding accounts works through camera-based QR scanning or manual secret key entry for services that only provide text codes. Group organization with drag-and-drop sorting keeps large collections navigable, categorized however you prefer. WebAuthn authentication with FIDO2 hardware keys protects vault access with phishing-resistant passwordless login, meaning the tool that secures your accounts is itself secured by the strongest available method. Automatic screen lock triggers after configurable idle time, and OTP obfuscation dots out generated codes until you tap to reveal them, preventing shoulder surfing in shared spaces. The REST API enables browser extensions and external applications to request codes programmatically. Import compatibility with Google Authenticator, Aegis, and 2FAS ensures painless migration without re-enrolling every account from scratch. PWA installation places 2FAuth on your device home screen for native-app-like instant access. Runs on a dedicated RepoCloud VPS with guaranteed resources and full root SSH access. AGPL-3.0 licensed.

Carbon delivers a unified manufacturing operating system that eliminates the integration tax of running separate ERP, MES, and QMS platforms. The Remix and TypeScript frontend paired with Supabase PostgreSQL backend provides full-stack type safety from database schema to React components, with real-time subscriptions pushing production floor updates to every connected client. The built-in MCP server exposes 1,374 operations across 15 modules through three discovery tools, enabling AI agents to interact with manufacturing data while respecting attribute-based access control. Nested bill of materials with unlimited depth supports complex assemblies, while the MRP engine calculates material requirements across multi-level structures with configurable lead times and safety stock. The configurator handles configure-to-order scenarios with rule-based variant generation. Full lot and serial traceability from receiving through shipping satisfies AS9100, ISO 13485, CFR Part 11, and ITAR compliance requirements. Custom fields extend any entity without schema modification, and the app framework lets integrators build domain-specific modules that plug into the core navigation, permissions, and data layer. Typed API clients for TypeScript, Python, C#, and cURL enable programmatic access to every manufacturing operation. Docker-based local development boots Postgres, Redis, Inngest, and the application stack with a single CLI command. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Built on Elixir's fault-tolerant OTP runtime, Tymeslot delivers the complete scheduling toolkit that Calendly charges for and Cal.com relicensed away from open source in 2026. Share one booking link and let clients pick available slots — your calendar stays synchronized and double-bookings disappear automatically through real-time availability checking against Google Calendar, Microsoft Outlook, and any CalDAV server including Nextcloud. Meeting types support configurable durations, buffer times, and availability windows that clients can book without email back-and-forth. Phoenix LiveView powers the real-time UI with WebSocket connections that update instantly as bookings arrive, without client-side JavaScript framework overhead. The platform attaches Zoom video rooms to confirmed bookings through your own Marketplace app credentials, sends confirmation and reminder emails via SMTP, Postmark, SendGrid, Mailgun, or AhaSend, and supports custom booking page themes with embed options for integration into existing websites. Circuit breakers, connection pooling, and graceful degradation maintain availability during provider outages. Authentication supports local accounts, GitHub OAuth, and reCAPTCHA protection on public booking forms. Self-hosting deploys as a single container with PostgreSQL embedded — no separate database container required. Two named volumes persist uploads and database state, while the same image powers the managed cloud at tymeslot.app so self-hosted users get identical features without a crippled community edition. Deploy via Docker, Cloudron with automatic updates, or Railway from a community template. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Google Analytics without the cookie banner or the maze of menus: Rybbit puts web and product analytics for every site you run on one readable dashboard, hosted on your own server. Pageviews, sessions, unique users, bounce rate, session duration, traffic sources, campaigns, devices, and countries update in real time beside a live visitor count. Session replay lets you watch the visits behind the numbers, and user profiles tie identified visitors to their sessions and events. Funnels pinpoint where conversions leak, journeys chart the paths people take through a site, retention reports show who comes back, and goals track conversions from page visits, custom events, and autocaptured clicks. Custom events carry JSON properties, filters slice every report across more than 15 dimensions, saved segments reapply them in one click, and location tracking drills from country to region to city on interactive maps, with optional 3D globe views through a Mapbox token. Error tracking connects JavaScript failures to the affected sessions, so a spike in errors leads straight to the visits that explain it. One install serves unlimited sites and organizations with role-based access, public dashboards share a site's stats through a link, and a tracking script of about 11 KB compressed collects data with no cookies and no consent banner. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With 13,800+ GitHub stars and active releases through 2026, Casdoor is the open-source identity platform that ships OAuth 2.0, OIDC, SAML 2.0, CAS, LDAP, SCIM 2.0, WebAuthn passkeys, TOTP multi-factor authentication, and Face ID biometric login in a single Go binary with a React web console — covering every authentication protocol your organization will ever need. Social login connects 50+ identity providers including Google, GitHub, Microsoft Azure AD, Facebook, WeChat, DingTalk, Apple, Twitter, and LinkedIn without custom code. The AI-first architecture includes a Model Context Protocol gateway for AI agent authentication and Agent-to-Agent protocol support for securing LLM-powered workflows. Built-in Casbin integration delivers authorization primitives beyond basic RBAC: attribute-based access control, relationship-based access control, and custom policy models through a unified engine. The organization-scoped multi-tenancy model isolates users, applications, and identity providers per tenant with customizable login pages, branding, and SMTP configuration. SCIM 2.0 endpoints automate user provisioning from HR systems and Active Directory. Official SDKs for Go, Java, Node.js, Python, and PHP accelerate application integration. The RESTful API exposes every resource for programmatic management. Comprehensive audit logs record authentication events and administrative actions. Deploy via Docker Compose with MySQL or PostgreSQL, the all-in-one SQLite Docker image for quick trials, or the official Kubernetes Helm chart for production clusters. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Puter delivers a complete cloud operating system that runs entirely in the browser — turning any device with internet access into a full-featured personal computer with desktop environment, file management, application hosting, and developer platform. The familiar desktop interface presents windows, taskbar, right-click menus, drag-and-drop, and multi-window management indistinguishable from native operating systems. The hierarchical filesystem supports file creation, uploads, sharing, permissions, and trash recovery with storage backends ranging from local SQLite for self-hosting to S3 and DynamoDB for production scale. Built-in AI integration provides access to GPT-4, Claude, and other models directly from the desktop for text generation, code assistance, and image creation. The developer platform offers a JavaScript SDK, REST APIs, cloud storage, key-value database, and serverless workers for building and hosting web applications without managing infrastructure. Sandboxed applications run in iframes with IPC communication and permission-based access to filesystem, AI, and system services. The app store enables publishing, discovering, and monetizing applications built on the Puter platform. Website hosting publishes static sites with custom domains directly from the file manager. Multi-user support provides individual accounts with authentication, resource isolation, and sharing capabilities. Deploy via Docker with a single command, Docker Compose for production, or npm for development — the one-line install script handles everything automatically on Linux, macOS, and Windows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.