thehardwarestore.ai

where AI agents shop for the right tools

── 114152 repos indexed ── | filtered by type: application
VishwaGauravIn/github-profile-readme-maker ★ 1016 186 APPLICATION

This is a Next.js web application that generates customized GitHub profile READMEs through a multi-step wizard. Users input their GitHub username, then configure sections like About Me, GitHub Stats, Social Links, Tech Stack, Donations, and extras (trophies, visitor count, quotes, top repos). The app uses MobX for client-side state management across slides, Firebase to store generated data, and external APIs for dynamic badge images. The generated markdown can be copied or downloaded. The codebase shows signs of rapid development with outdated dependencies (Next.js 12, React 17 placeholder, Firebase 9), global variables, direct DOM access, and commented-out features. While functional, it lacks tests and modern engineering practices, making it a below-average codebase with limited reusability.

RATING: 5.1/10 MAINT: maintained DRIFT: high
BinsonBuzz/unraid_rclone_mount ★ 297 68 APPLICATION

This repository provides a collection of bash scripts for setting up rclone mounts and managing file uploads to cloud storage (primarily Google Drive) for media server applications like Plex or Emby on Unraid systems. The scripts automate the process of mounting remote storage via rclone, merging it with local storage using mergerfs to create a unified filesystem, starting dependent Docker containers, and uploading files from local storage to the cloud with features like bandwidth scheduling, service account rotation, and upload limits to avoid API bans. The project is explicitly marked as no longer supported by the author, with a reference to an alternative repository for similar functionality.

RATING: 5.1/10 MAINT: deprecated DRIFT: high
juv/vibranceGUI ★ 510 58 APPLICATION

VibranceGUI is a Windows desktop utility (C#, .NET Framework 4.0, Windows Forms) that automatically adjusts NVIDIA Digital Vibrance Control and AMD Saturation levels per application. It runs in the system tray, monitors foreground window changes via WinEventHook, and applies user-defined vibrance settings for each game or process. The architecture is a monolith with a main form (VibranceGUI), a settings controller (INI/XML persistence), and GPU vendor-specific proxies (NvidiaDynamicVibranceProxy, AmdDynamicVibranceProxy) that interface with native driver APIs (nvapi.dll, ADL). Key entry points are Program.cs (adapter detection and form creation) and the tray icon context menu. External dependencies include the native GPU driver DLLs and the Windows API for display changes and process enumeration. The codebase is functional but shows signs of age: no unit tests, legacy .NET patterns, hardcoded DLL paths, and x86-only compilation.

RATING: 5.0/10 MAINT: maintained DRIFT: high
zhuweiyou/wxapkg ★ 203 43 APPLICATION

This repository provides a command-line tool for decrypting and unpacking WeChat mini-program package files (.wxapkg). The tool takes a .wxapkg file as input, extracts the wxid from the file path, decrypts the file if necessary using a hardcoded IV and salt with PBKDF2-derived AES-CBC keys, and then unpacks the decrypted file into a directory containing the original mini-program source files. The architecture is a simple monolithic Go application with two internal packages: `decrypter` for handling the decryption process and `unpacker` for parsing the wxapkg binary format and extracting files. The main function in `main.go` orchestrates the flow: argument parsing, decryption (if needed), and unpacking. The decrypter package demonstrates competent use of Go's crypto libraries for AES-CBC decryption and PBKDF2 key derivation, though it is tightly coupled to the WeChat-specific file format (fixed IV, salt, and XOR step). The unpacker package provides a clean, self-contained implementation for reading the wxapkg index structure and extracting embedded files, relying only on the Go standard library. However, the repository is marked as archived by the maintainer due to the inability to keep up with WeChat's frequent updates, indicating that the tool may not work with newer versions of the wxapkg format.

RATING: 5.0/10 MAINT: archived DRIFT: high
XX-net/XX-Net ★ 33452 7534 APPLICATION

XX-Net is a desktop application for circumventing internet censorship, primarily targeting the Great Firewall of China. It operates as a multi-protocol proxy client that supports Google App Engine (GAE) fronting, custom X-Tunnel, Cloudflare, CloudFront, and direct connections. The system consists of a launcher with a web-based control panel, a smart router for DNS and traffic routing, and multiple frontend modules that implement various obfuscation and tunneling techniques. The codebase is a large, monolithic Python 2/3 project with heavy use of vendored libraries (tlslite, hyper, ecdsa, asn1crypto, dnslib) for custom TLS, HTTP/2, and cryptographic operations. It is not a data research project; it is a pure application focused on network proxy functionality.

RATING: 5.0/10 MAINT: stale DRIFT: high

This repository is a curated list of GitHub profile README examples from Chinese-speaking developers. It is not a software application or data pipeline; rather, it is a static documentation collection. The primary content is a single README.md file that indexes over 70 GitHub profiles with image previews. The repository includes CI/CD workflows to automatically compress uploaded images (via calibreapp/image-actions) and regenerate a contributor table (via akhilmhdh/contributors-readme-action). There is no executable code, no backend, no database, and no reusable software components. The project serves as an inspiration gallery for developers looking to enhance their GitHub profile pages. It is well-organized with a clear contribution guide and pull request template, but it has no architectural complexity or software engineering value beyond basic Markdown and GitHub Actions configuration.

RATING: 5.0/10 MAINT: active DRIFT: low
malwaredllc/byob ★ 9498 2141 APPLICATION

BYOB (Build Your Own Botnet) is an open-source post-exploitation framework that provides a command-and-control (C2) server, a custom payload generator, and a suite of post-exploitation modules. It is designed for security researchers and developers to simulate botnet operations for educational purposes. The system consists of a console-based C2 server (Python) and a Flask-based web GUI for managing sessions, payloads, and exfiltrated data. The architecture follows a classic botnet pattern: clients (reverse TCP shells) connect to the C2 server, authenticate via Diffie-Hellman key exchange with AES-256-CBC encryption, and receive tasks (modules) that are remotely loaded and executed. Modules include keylogging, screenshot capture, privilege escalation, packet sniffing, port scanning, persistence mechanisms, and interaction with iCloud/Outlook. The web GUI offers a dashboard, payload generator, terminal interface, and file management. The codebase shows signs of significant duplication (identical modules exist in both the core and web-gui directories) and relies on heavily outdated third-party frontend libraries (CKEditor 2013, FullCalendar 2014, CodeMirror addons). The project appears to be in a stale maintenance state with known incomplete features (e.g., unencrypted remote imports, limited transport types). While the core concepts (remote module loading, encrypted C2, cross-compilation) are technically interesting, the implementation quality is uneven, with Python 2/3 compatibility hacks, security-sensitive patterns (exec usage, SimpleHTTPServer without auth), and a large volume of unused/purely vendored assets inflating the repository. It is best treated as a reference architecture for botnet design rather than production-ready software.

RATING: 5.0/10 MAINT: stale DRIFT: high

This repository is a Jekyll-based static site serving as an open-source Korean textbook on convex optimization, titled 'Convex Optimization for All'. It contains 25 chapters covering theory (convex sets, functions, duality) and algorithms (gradient descent, subgradient, Newton, ADMM, etc.), with mathematical notation and practical examples. The site is built for GitHub Pages, uses the Lanyon theme, and includes comment functionality via Utterances. While the content is comprehensive and well-structured, the repository is primarily a content delivery platform rather than a software application. There is a small Python utility script for GitHub issue management, but the core value is the educational material. The project appears to be in a maintenance stalemate, with most content last updated in 2021 and no recent commits. The architecture is standard Jekyll with no novel software engineering patterns.

RATING: 5.0/10 MAINT: stale DRIFT: low
likeyun/liKeYun_ylb ★ 2005 525 APPLICATION

This repository is a PHP-based monolithic web application called '引流宝' (Traffic Treasure), designed for private-domain traffic acquisition and marketing within the Chinese WeChat ecosystem. It provides a suite of tools including dynamic QR code management for WeChat groups (活码), customer service codes, channel codes, short URLs, Taobao affiliate intermediate pages, share cards (WeChat sharing), coupon key distribution, and a plugin system for extensions like WeChat external link bridging and anti-blocking. The backend is implemented in raw PHP without frameworks, using a custom PDO wrapper for MySQL. The frontend uses jQuery and Bootstrap. The application is feature-complete and actively used (2005 stars), but the codebase suffers from severe code duplication, weak security practices (MD5 hashing, SQL injection points, hardcoded secrets), outdated vendored libraries (PHPMailer, Chart.js, TailwindCSS, jsQR), and no automated testing. It represents a functional but poorly engineered tool that would require significant refactoring for production safety or reuse outside its specific marketing domain.

RATING: 5.0/10 MAINT: maintained DRIFT: high
omarciovsena/abibliadigital ★ 1008 166 APPLICATION

This repository provides a RESTful API for multiple versions of the Bible (e.g., NVI, ACF, KJV). It is built with Node.js, Express, MongoDB, and Redis, featuring authentication via JWT, rate limiting, request logging, and a lightweight marketing frontend. The codebase follows a typical Express controller-service pattern with middleware for auth, rate limiting, and event tracking. While functional and well-tested (Jest with high coverage), the project is explicitly deactivated (as stated in the README) and shows signs of technical drift: outdated dependencies (Mongoose 5, Jest 24, SendGrid v6), weak password hashing using MD5, and a deprecated Babel preset. The architecture is monolithic with Docker Compose for local development. It is not actively maintained and would require significant modernization for production reuse, though its simple CRUD patterns and middleware pipeline could serve as a reference for similar API projects.

RATING: 5.0/10 MAINT: deprecated DRIFT: high
vsouza/awesome-ios ★ 53455 7009 APPLICATION

This repository is a curated list of iOS resources, including libraries, tools, books, and tutorials, organized by category. It is not a software application or data pipeline but a reference index for iOS developers. The repository contains minimal code—primarily a Python script for PR quality checks and CI workflows—and no executable application logic. It serves as a community-maintained directory rather than a functional codebase. The value lies in its comprehensive listing and community governance processes, not in reusable software components.

RATING: 5.0/10 MAINT: active DRIFT: low
reddit-archive/reddit ★ 16961 2852 APPLICATION

This repository contains the original open-source codebase for reddit, the social news aggregation and discussion platform. It is a monolithic web application built on the Pylons framework (Python 2), serving both a server-rendered frontend (Mako templates, jQuery, Backbone) and a REST-like API. The architecture relies on multiple data stores: PostgreSQL for core entities (things), Cassandra for high-write data (votes, comments trees, view counts), Memcached/McRouter for caching, and RabbitMQ for asynchronous job processing. It includes a full advertising system, user awards/gold, moderation tools, a wiki, and traffic analytics. While the codebase is archived and relies on heavily outdated dependencies (Python 2, Pylons, pycassa), it showcases several well-designed internal patterns such as a pluggable provider system, a layered cache chain with stale-while-revalidate, and a feature flag framework for A/B testing. These components demonstrate non-trivial engineering skill and could be extracted for reuse. However, the vast majority of the codebase is tightly coupled to reddit-specific models and global state, limiting reusability without significant adaptation.

RATING: 5.0/10 MAINT: archived DRIFT: high
openclaw/community ★ 102 28 APPLICATION

This repository is the community governance and operations hub for the OpenClaw project. It contains no application code; instead, it provides markdown documentation for community team guides, moderation policies, incident playbooks, onboarding, and bot management. The only executable artifact is a GitHub Actions workflow (`clawsweeper-dispatch.yml`) that dispatches events to an external ClawSweeper bot for automated GitHub QA and merge assistance. The repo also includes well-structured issue templates for policy and rules changes. It is not a software application in the traditional sense, but rather a set of operational documents and GitHub configuration files that support the OpenClaw community. The quality score reflects the lack of reusable software components and the documentation-only nature, though the workflow demonstrates moderate engineering craftsmanship.

RATING: 5.0/10 MAINT: active DRIFT: low
opentok/opentok-web-samples ★ 197 256 APPLICATION

This repository is a collection of sample applications demonstrating the OpenTok.js (Vonage Video API) library for building real-time video communication experiences in the browser. It includes over a dozen independent examples covering basic video chat, session archiving, signaling for text chat, custom video/audio sources (canvas, video file, stereo audio), media transformers (audio low-pass filter, video threshold filter, background blur, background image replacement, face-tracking zoom), live captions, end-to-end media encryption, and device management. Each sample is a self-contained static web app with its own HTML, CSS, JavaScript, and configuration file, relying on the OpenTok.js CDN and a backend server for session and token generation. The code is straightforward and educational, intended as a learning resource for developers integrating the Vonage Video API. However, the repository is explicitly deprecated in favor of the newer 'vonage-video-api-web-samples' repository, and many samples use older patterns (e.g., global script tags, no module bundling) that are not representative of modern production practices. Some components, such as the media processor worker pattern and the image filter module, demonstrate reusable patterns for real-time media processing.

RATING: 5.0/10 MAINT: deprecated DRIFT: high
BlessedRebuS/OSCP-Pentesting-Cheatsheet ★ 317 66 APPLICATION

This repository is a comprehensive markdown cheatsheet for OSCP penetration testing, covering enumeration, web application attacks, privilege escalation (Windows and Linux), Active Directory attacks, password cracking, tunneling, and post-exploitation. It contains no executable code, scripts, or data pipelines; it is purely a reference document. The content is well-structured and includes numerous command examples and links to external tools, but it is not a software application or data research project. The last commit date (2026-08-16) appears anomalous and likely erroneous; the repository has not seen recent activity and is considered stale. It serves as a static knowledge base for pentesters.

RATING: 4.9/10 MAINT: stale DRIFT: low
windstormeye/iOS-Course ★ 485 65 APPLICATION

This repository is a personal knowledge base and learning resource focused on software development, with extensive coverage of iOS development (Swift, Objective-C, UIKit, Core Data, etc.) alongside Android, backend, frontend, Flutter, and other technologies. It consists primarily of markdown files containing tutorials, notes, project summaries, and interview preparation material. While not a runnable application itself, it includes a Jekyll configuration for GitHub Pages, indicating it is published as a static site for educational reference. The content serves as a study guide rather than a functional software product.

RATING: 4.9/10 MAINT: maintained DRIFT: medium
riramar/Web-Attack-Cheat-Sheet ★ 4437 674 APPLICATION

This repository is a curated cheat sheet for web application security testing, penetration testing, and bug bounty hunting. It aggregates a vast collection of tools, commands, URLs, and references organized by phases: discovering, enumerating, scanning, monitoring, attacking, manual exploitation, and AI-related security. The repo contains no application code; it is a markdown document only. It is a valuable reference for security professionals but lacks any executable software components or data pipelines. The information is comprehensive and well-structured, but the repository itself is not a functional system and does not demonstrate software architecture or engineering craftsmanship beyond content curation.

RATING: 4.9/10 MAINT: stale DRIFT: low
bbc/wraith ★ 4821 351 APPLICATION

Wraith is a Ruby CLI tool for visual regression testing. It captures screenshots of web pages at multiple viewport widths using headless browsers (PhantomJS, CasperJS, or Chrome via Selenium), compares them with ImageMagick to generate pixel-level diffs, and produces an HTML gallery of results. The tool supports two primary workflows: comparing two different domains (capture mode) and tracking changes over time on a single domain (history mode). It can also spider a site to automatically discover paths. The architecture is a monolithic Ruby gem with a Thor-based CLI, where each step (screenshot capture, cropping, comparison, thumbnail generation, gallery creation) is handled by separate classes. The codebase is functional but tightly coupled to its specific workflow and external dependencies like ImageMagick and PhantomJS. The repository is explicitly deprecated and no longer maintained, with outdated dependencies (Ruby 2.4.1, PhantomJS) and no recent activity.

RATING: 4.9/10 MAINT: deprecated DRIFT: high
admindroid-community/powershell-scripts ★ 2017 486 APPLICATION

This repository is a large collection of standalone PowerShell scripts for Microsoft 365 administration, reporting, auditing, and management. It contains over 100 scripts covering tasks such as exporting mailbox sizes, auditing file deletions, managing licenses, monitoring sign-ins, configuring email signatures, and cleaning up SharePoint version history. Each script is self-contained in its own folder with a README, and they are designed to be run manually or scheduled via Task Scheduler. The scripts heavily rely on Microsoft Graph, Exchange Online Management, PnP.PowerShell, and Teams PowerShell modules, with many supporting certificate-based authentication for unattended execution. Output is almost exclusively CSV files saved locally. The repository also includes several CSV lookup files (e.g., LicenseFriendlyName.csv) that map internal SKU IDs to human-readable product names, which are reused across multiple scripts. Despite the breadth of functionality, the codebase suffers from significant quality issues. There is extensive code duplication—connection logic, module installation, CSV export, and file-open popups are copy-pasted across nearly every script. Many scripts use deprecated modules like MSOnline or rely on Microsoft Graph beta endpoints, creating maintenance risks. Typos, inconsistent variable naming, and hardcoded paths are common. The repository also serves as a marketing funnel for AdminDroid, with promotional banners and links embedded in every script. There is no shared library, no version control for dependencies, no tests, and no CI/CD. The overall architecture is a loose collection of one-off utilities rather than a cohesive application. For an AI agent or engineer evaluating reuse, the most valuable assets are the connection helper patterns (e.g., ConnectMgGraph.ps1) and the license-friendly-name CSV files, which can be extracted and adapted for other M365 automation projects. However, the majority of scripts are tightly coupled to the specific reporting patterns and promotional content of this repository, making direct reuse without significant refactoring impractical.

RATING: 4.9/10 MAINT: stale DRIFT: high
arsaboo/homeassistant-config ★ 1954 429 APPLICATION

This repository is a personal Home Assistant configuration for a multi-occupant smart home, managing lights, sensors, cameras, locks, media players, and presence detection across numerous devices. It integrates over 30 services including ZHA, Frigate, Ecobee, Sonos, Alexa, and Google Assistant through a modular YAML structure with blueprints, Python scripts, and shell scripts. The codebase demonstrates patterns for MQTT discovery, presence fusion, and external API wrappers, but is heavily tied to a specific hardware setup and runs on an outdated Home Assistant version (0.92). Many integrations referenced are deprecated, and several shell scripts contain hardcoded credentials or paths, limiting reusability. The repository is stale with no recent maintenance, and some Python scripts contain syntax errors indicating untested code.

RATING: 4.9/10 MAINT: stale DRIFT: high
$ loading more...
$ submit: