This repository is a sophisticated build factory for producing hardened, minimal container images. It defines over 100 image recipes (melange.yaml + apko.yaml) covering runtimes, databases, monitoring tools, security scanners, and Kubernetes infrastructure. Each image is built from source or from Wolfi packages, assembled into a distroless (shell-less), non-root OCI image, signed with Cosign, and attested with SLSA v1.0 provenance and SPDX SBOM. The entire pipeline is orchestrated via GitHub Actions: automated version bumps (daily), transitive CVE patching (for Go, Java, Ruby, Rust), vulnerability scanning with Grype, and VEX management. A companion Astro-based static site (minimalcontainers.com) catalogs the images, displays CVE comparisons against competing registries (Minimus, Chainguard, Bitnami), and provides documentation. The repository is not an end-user application but a highly engineered CI/CD system for producing and publishing container images as artifacts.
minimp3 is a minimal, high-performance, ISO-conformant MP3 decoder implemented as a single-header C library (minimp3.h). It provides a low-level frame decoding API and a higher-level streaming/seek API (minimp3_ex.h) with callback-based I/O abstraction. The decoder supports SSE and NEON SIMD acceleration, and compiles to a ~30kB binary with zero external dependencies. The repository includes a comprehensive test suite with over 50 test vectors covering standard and edge-case MPEG audio streams, a fuzzing harness, and a full-featured GUI player (using SDL2 and Nuklear) that demonstrates real-world usage. An additional tool (huffopt) generates optimized Huffman tables for Layer III. The library is designed for embedded systems, game engines, and any environment requiring a lightweight MP3 decoder.