Onedump is a Go-based CLI tool for database administration, specializing in backup, restore, and migration workflows. It supports MySQL (with a zero-dependency native dumper and mysqldump) and PostgreSQL (via pg_dump), and can persist backups to local files, AWS S3, Google Drive, Dropbox, or SFTP endpoints. The architecture follows a clean pipeline pattern: YAML configuration drives concurrent job execution, each job uses a dumper interface to stream database content through gzip compression and fan-out to multiple storage backends. Beyond core backup, it includes advanced features: MySQL binlog streaming to S3 with checksum-based deduplication, point-in-time restore via binlog replay, a MySQL slow query log parser with query masking and deduplication, and a resumable/concurrent SFTP file transfer utility with exponential backoff. The codebase is well-structured, heavily tested, and uses modern Go idioms, making it suitable as a reference for building database-adjacent infrastructure tooling.
Google2FA is a standalone PHP library implementing the Time-based One-Time Password (TOTP) algorithm as specified in RFC 6238, fully compatible with Google Authenticator and similar authenticator apps. It provides secure secret key generation (base32-encoded), HMAC-based OTP computation with configurable algorithms (SHA1, SHA256, SHA512), and OTP verification with a sliding window to accommodate clock drift. The library also includes a helper for generating otpauth:// URLs for QR code integration. It has zero external runtime dependencies beyond a constant-time base32 encoder and is designed as a single-class library with traits for modularity. The codebase is well-tested across PHP 7.4 to 8.6 (beta), employs static analysis (PHPStan, Psalm), and follows a clean, maintainable architecture with clear exception hierarchies. It is not a framework but can be used in any PHP project.
SAP Privileges is a production-grade macOS utility suite for temporarily granting, automatically expiring, and revoking administrator rights. In normal operation, a user clicks the menu bar icon to request admin privileges for a configurable interval; a privileged daemon performs the actual group membership change via CSIdentity, and expiration is enforced by timers, login/logout hooks, screen-lock observers, and clock-change detection. The tool is designed for enterprise fleets where users run as standard users and elevation is a temporary, auditable, policy-governed act approved by IT via MDM configuration profiles. Architecturally, the system is a multi-process macOS application with strict privilege separation. The sandboxed GUI app communicates over XPC to a background agent (PrivilegesAgent), which owns policy evaluation, authentication (password, Touch ID, smart card/PIV), expiration timers, and remote logging. A privileged daemon (PrivilegesDaemon) mutates admin group membership; a privileged helper (PrivilegesHelper) manages the Endpoint Security system extension that protects the app's binaries and launchd plists from tampering; a Dock tile plugin (PrivilegesTile) gives quick status access; and a CLI (PrivilegesCLI) supports scripting with JSON status/history output. All IPC is brokered through an XPC service with code-signing validation on every connection. Policy is delivered via Apple .mobileconfig profiles exposing roughly 40 preference keys: expiration intervals, renewal policies, authentication requirements, revocation triggers, user/group exclusions, reason-required justification, post-change executables, and remote logging to RFC 5424 syslog or webhooks. The repository also ships a fully client-side web configurator (docs/index.html) that generates, validates, and imports signed mobileconfig profiles, including a custom ASN.1 DER/CMS parser for unwrapping PKCS#7 payloads. The codebase is Objective-C/AppKit, tightly coupled to macOS platform APIs (XPC, Endpoint Security, LocalAuthentication, Authorization Services, OpenDirectory) and requires Apple code-signing/notarization infrastructure. It has been actively maintained since 2016 (last commit 2026-10-12), supports macOS 12-27, and contains documented workarounds for Apple platform bugs. Technical drift is moderate: a few deprecated APIs (NSTask launchedTaskWithLaunchPath, private SecTaskValidateForRequirement declaration) and a large per-target build-config duplication exist, but the project tracks new macOS releases closely and the security-critical paths are carefully hardened.
AIStore (AIS) is a production-grade distributed object storage system engineered by NVIDIA primarily for AI workloads. The system is deployed as a cluster of proxy and target nodes and provides an S3-compatible HTTP API with multi-cloud backend support (AWS S3, GCS, Azure Blob, OCI). Key capabilities include erasure coding, mirroring, ETL data transformation pipelines, distributed sorting (dsort), batch multi-object retrieval (MOSS), native bucket inventory, and a full authentication server (AuthN) with JWT/RSA/HMAC signing. The codebase is primarily Go (server, CLI, internal SDK) and Python (client SDK with PyTorch dataset integrations). It also includes a comprehensive benchmarking tool (aisloader) and extensive shell-based integration tests.
GPUReshape is a GPU debugging and instrumentation tool for DirectX 12 and Vulkan APIs. It provides a modular desktop application with backend layers for API interception, shader analysis and transformation capabilities, resource tracking and validation systems, and a plugin-extensible architecture built with Avalonia UI. The system includes automated testing infrastructure and message-passing communication between components.
Liffy is a comprehensive Local File Inclusion (LFI) exploitation tool designed for security testing and penetration testing. It provides a modular command-line interface that supports multiple LFI techniques including data://, expect://, input://, filter:// wrappers, log poisoning, null byte attacks, ZIP wrapper exploitation, and blind LFI detection. The tool features advanced capabilities such as WAF bypass techniques, encoding layers, multi-threading with rate limiting, custom headers, POST request support, and rich terminal output. Architecture follows a modular design with core techniques isolated in separate modules, coordinated by a main orchestrator (liffy.py) that handles argument parsing, configuration loading, and execution management.
MsgVault is a self-hosted, local-first personal communications archive system. It ingress messages from email (IMAP, Gmail, mbox, PST), chat (Slic, Discord, Matrix, Beeper, WhatsApp, Facebook Messenger), SMS, meeting ttranscripts (Granola, Circlback, Plaud, Muelsi), and contacts (CardDAV, vCard). It store them in SQLite or PostgreSQL with full-text and vector embeddings search, provides a rich HTTP API, a Svelte web UI, a CLI, and an MCP serve for AI tools. The system es also feature person identity matching across source, contact syn, document indexing, and telemetry. Technically, it is a monolithic Go binary with modular packages, abdecking both interactive use and automated daemon operation. While it is alpha software with frequent API changes, its architecture is well-structure, extensively tested, and includes several reusable component like robust error classification, HTTP retry logic, and cross-process cache locking. The frontend uses generated TypeScript clients from the OpenAPI spec, and the entire system is deployable via Docker or native binaries.
EDT-MCP is an Eclipse/OSGi plugin that implements a Model Context Protocol (MCP) server for 1C:Enterprise Development Tools (EDT). It exposes over 95 MCP tools enabling AI agents (Claude, Copilot, Cursor) to inspect and manipulate EDT workspaces – reading metadata, editing BSL code, running tests, managing debug sessions, performing git operations, and configuring infobases. The server runs as a plugin inside EDT, uses JSON-RPC 2.0 over HTTP/SSE transport, and supports progressive tool disclosure via toolsets. A separate proxy component allows routing MCP calls across multiple EDT backends with hot-plug failover. The architecture is layered: a protocol layer (session management, origin validation, JSON schema building), a tool registry with atomic catalog replacement, utility services for EDT model access (BmTransactions, ProjectContext, DebugSessionRegistry), and UI extensions (metadata tagging, virtual groups, call history view). The build uses Maven/Tycho and produces a p2 update site for EDT 2026.1 and 2026.2. Test coverage includes headless unit tests (JUnit/Mockito), Python e2e tests against a live server, conformance tests against the official MCP conformance suite, and ratchet tests that enforce coding standards, error quality, schema parity, and mutation safety. Key engineering patterns include: idempotent tool execution with destructive consent gates, PII redaction via HMAC pseudonymization, optimistic locking via ContentHash for read-modify-write cycles, bilingual Russian/English FQN normalization, and strict separation of read/write transactions (reads use IBmModel.executeReadonlyTask, writes use execute). The codebase is well-maintained with active issue triage and CI/CD pipelines.
xyOps is a self-hosted, full-stack platform for job scheduling, workflow automation, server monitoring, alerting, and incident response. It is the next generation of Cronicle, built on Node.js with a custom pixl-server framework. The architecture follows a conductor/satellite model: a central master server (conductor) manages job execution, scheduling, and monitoring, while lightweight satellite agents run on remote machines to execute jobs and report metrics. The system includes a rich web-based SPA for administration, real-time WebSocket communication, a RESTful API, and a plugin/extension marketplace. Key features include visual workflow DAGs (split, join, decision, multiplex), multi-master high-availability clustering, SSO integration, ticketing, secrets management with AES-256-GCM encryption, and comprehensive alerting with JEXL expressions. The codebase is well-structured with mixin-based API modules, consistent patterns for CRUD operations, and extensive integration tests. It is actively maintained with frequent releases and security hardening.
Apache Dubbo is a mature, actively maintained Java-based RPC framework and microservices platform. It is not a data research project. The codebase implements a complete distributed service communication solution, including multiple RPC protocols (Dubbo2/TCP, Triple/gRPC-compatible, REST, WebSocket), service discovery and registration (ZooKeeper, Nacos, Apollo, multicast), traffic management (routing, load balancing, circuit breaking), observability (metrics, tracing, monitoring), security (authentication, TLS), and a large set of extension points via a custom SPI mechanism. The architecture is modular and layered, organized into distinct Maven modules for remoting, RPC, cluster, config, registry, metadata, metrics, serialization, and Spring Boot integration. Key entry points include DubboBootstrap for programmatic startup, ServiceConfig/ReferenceConfig for service export/import, and various protocol and registry factories loaded via SPI. The system relies heavily on URL-based configuration, extension loading, and a scope model (framework, application, module, service) for lifecycle and classloader isolation. The codebase is massive (4870 files), with extensive test coverage and active development (last commit 2026-06-29). It demonstrates strong engineering practices: clean abstractions, consistent patterns, backward-compatibility layers (dubbo-compatible), and support for modern Java versions and Spring Boot 3.
swift-power-assert is a Swift library that provides a `#assert` macro, delivering detailed diagnostic diagrams for assertion failures. The macro, built on SwiftSyntax, rewrites expressions to capture intermediate values and renders a tree of sub-expression results on failure, including word/line diffs for string comparisons. It supports sync and async evaluation, short-circuiting, and custom operators, aiming to replace multiple assertion APIs (XCTest, Nimble, etc.) with a single, universal assert. The package also includes a `StringWidth` module for accurate Unicode width calculations and a comprehensive test suite (2300+ lines) covering diverse expression types. Additionally, the repository contains an interactive web playground with a Deno backend and Monaco editor, allowing users to test the macro in a browser. The codebase is well-structured, with clean abstractions in the runtime library and plugin, though the macro rewriter is tightly coupled to the capture pattern and the generated Unicode width table is large.
FirebaseUI Web is a multi-package library that provides pre-built authentication UI components for web applications using Firebase Auth. It supports multiple frameworks (React, Angular, shadcn) with a shared core package that handles auth logic, state management, error handling, and internationalization. The library includes ready-to-use sign-in, sign-up, phone, email link, OAuth, and multi-factor authentication (SMS/TOTP) flows, all customizable via a composable behavior system. It is published as npm packages (@firebase-oss/ui-*) and includes extensive examples and end-to-end tests with Playwright against the Firebase Auth Emulator.
VxeTable is a Vue 3 component library for building complex, enterprise-grade data tables and grids. It provides a comprehensive set of features including virtual scrolling for millions of rows, inline editing, Excel-style copy-paste, column resizing/dragging, filtering, sorting, pivot tables, tree/gannt views, and export/import/print. The library is architected as a set of Vue components (VxeTable, VxeGrid, VxeColumn, VxeToolbar, VxeColgroup) with an extensible plugin system based on hooks and renderers. It relies on a companion UI library (vxe-pc-ui) for modals, buttons, selects, and other controls, and uses xe-utils for utility functions. The codebase is large and well-organized, with separate modules for editing, filtering, keyboard navigation, validation, column customization, and export. Performance is a key focus, with virtual scrolling implemented for both X and Y axes. The library supports i18n with over 20 languages and includes a comprehensive theming system with light/dark modes. While primarily a UI component library, it also includes proxy-based server-side data operations in the VxeGrid component. The repository includes a demo application (examples/) for testing features, though the main artifact is the published npm package.
osqp-eigen is a C++ wrapper library for the OSQP (Operator Splitting Quadratic Program) solver. It provides an intuitive interface for formulating and solving quadratic programming problems using Eigen data types for matrices and vectors. The library handles the conversion between Eigen's sparse matrix format and OSQP's internal CSC format, manages solver initialization and configuration, and supports advanced features like warm-starting and iterative problem updates without full reinitialization. The architecture is modular with separate Data, Settings, and Solver classes, and includes robust version compatibility handling for different OSQP releases.
@antv/hierarchy is a TypeScript library providing layout algorithms for visualizing hierarchical data. It implements four primary layout types: compact box, dendrogram, indented, and mindmap layouts. The library takes tree-structured data as input and returns positioned nodes with x/y coordinates for rendering. Built with a modular architecture, it separates core tree construction from layout algorithms and directional handling, enabling clean extension and customization. The package is published as an ES module with UMD fallback and includes comprehensive type definitions.
This library provides encoding and decoding for the Concise Binary Object Representation (CBOR) serialization format (RFC 8949). It features a hybrid architecture with core implementation in Rust for performance and safety, exposed through Python bindings. The library supports advanced CBOR features including value sharing for cyclic references, string referencing for deduplication of repeated strings, canonical encoding, and extensive semantic tag support for types like dates, UUIDs, IP addresses, and more. It provides both a programmatic API and a command-line diagnostic tool.
This is a production-ready Node.js/Express web application boilerplate designed to jumpstart hackathon projects. The codebase implements a complete user authentication system supporting local email/password, OAuth 2.0/OAuth 1.0a (10+ providers including Google, Facebook, GitHub, Discord, Microsoft), WebAuthn passkeys, and two-factor authentication (TOTP + email). It includes session management with MongoDB, CSRF protection, rate limiting, and custom security measures like timing-safe token comparisons and IP-bound token consumption. Beyond auth, it ships working demos for ~20 third-party API integrations (Stripe, Twilio, GitHub, NYT, Wikipedia, etc.) and AI features powered by LangChain and Groq, including a ReAct agent with SSE streaming, a RAG pipeline with vector search, and LLM-based classification/vision. The repository also provides a sophisticated Playwright-based e2e testing framework using nock-recorded HTTP fixtures, enabling deterministic offline tests without live API keys. All features are organized as deletable modules with a removal checklist to facilitate trimming for production use.
cubeb is a cross-platform C library for low-latency audio playback and recording, originally developed by Mozilla for Firefox. It provides a simple callback-based API and supports a wide range of backends including ALSA, PulseAudio, WASAPI, CoreAudio, OpenSL ES, AAudio, JACK, and others. The library handles device enumeration, resampling (via vendored Speex), channel mixing, and real-time streaming. Its architecture uses a vtable pattern ('cubeb_ops') to abstract backend implementations, and includes several high-quality lock-free data structures. While primarily a production library, it includes extensive test suites and debugging tools like audio dumping. The codebase is actively maintained, with ongoing migrations of some backends to Rust, but retains legacy backends (WinMM, OSS) with limited functionality.
VibeTunnel is a production-grade, cross-platform remote terminal access platform. It allows users to connect to terminal sessions from a browser, macOS native app, or iOS app. The Node.js/TypeScript server manages PTY sessions via a custom forked node-pty, supports session recording in asciinema format, and integrates with multiple tunneling services (Tailscale, ngrok, Cloudflare, Pinggy, Pangolin) for remote access. A Rust forwarder handles terminal title sanitisation, and the CLI wrapper (`vt`) enables transparent session creation. Authentication supports PAM, SSH keys, JWT, Tailscale identity, and local bypass. The macOS app (SwiftUI) provides menu bar control, system permission management, Git worktree follow-mode, and Sparkle-based updates. The web frontend (Lit + Tailwind CSS) offers a full terminal UI with quick keys, file browser, and push notifications. The project demonstrates strong engineering with extensive test coverage (unit, integration, Playwright e2e) across all platforms, though multi-platform duplication and vendored native dependencies introduce some maintenance overhead.
butterchurn is a browser-based, real-time music visualizer that faithfully reimplements the classic MilkDrop visualizer using WebGL2. It consumes audio from the Web Audio API, runs FFT analysis to derive frequency/amplitude data, and drives a shader-based render pipeline from JSON presets that encode MilkDrop-style equations. The core library exposes a minimal `createVisualizer()` entry point, after which consumers load a preset and call `render()` with audio level data each animation frame. The library supports two equation execution paths: a JS-based expression runner and a WebAssembly/AssemblyScript-based EEL runner, with a custom Rollup plugin that compiles AssemblyScript to base64-encoded WASM at build time. It also includes deterministic seeded RNG for reproducible rendering, which is used by its visual regression test suite to compare JS and WASM paths pixel-for-pixel across a curated set of presets.