Loco is a batteries-included, Rails-inspired web framework for Rust, built on Axum, Sea-ORM, and Tera. It provides a full-stack MVC architecture with built-in authentication (JWT, API tokens, magic links), background job processing (Redis, Postgres, SQLite queues), mailer (SMTP/stub), caching (in-memory, Redis), storage (local, S3, Azure, GCS), cron scheduling, and code generation via CLI. The framework emphasizes convention over configuration and includes an interactive project generator (`loco new`) that scaffolds complete SaaS or API apps with optional React frontend. It also ships an agent skill system (`.claude/skills/loco/`) for AI-assisted development, alongside a dedicated evaluation harness for measuring code-generation quality. The repository contains two example applications (`demo`, `reference_spa`), a code generation crate (`loco-gen`), a project scaffolding crate (`loco-new`), an Astro documentation website, and an integrated eval framework. The codebase is well-structured with clean trait abstractions, extensive snapshot testing, and a clear separation between generated and hand-written model code. It is actively maintained with recent commits, responsive issue triage, and regular releases tracked in a detailed CHANGELOG.
Rustical is an open-source CalDAV and CardDAV server written in Rust, providing a lightweight, self-hosted alternative for calendar and addressbook synchronization. It implements the core WebDAV extensions (RFC 4791, 6352) with support for CalDAV scheduling, CardDAV group membership, WebDAV Push (web-push) notifications, and a built-in web frontend for management. The architecture is a modular Rust workspace with separate crates for DAV infrastructure, protocol handlers (caldav, carddav), storage abstraction, SQLite backend, XML serialization, OIDC authentication, and a Lit-based web UI. The server exposes RESTful HTTP endpoints via Axum, uses SQLite for persistence with `sqlx`, and supports app tokens, OIDC, and Nextcloud login for authentication. The codebase demonstrates solid engineering with thorough integration tests, snapshot testing, CI/CD pipelines, and a clear separation of concerns. However, it contains some workarounds and TODOs indicating active development rather than a polished final product. The custom XML derive macros and store trait pattern are particularly well-crafted and potentially reusable.
Ibis is a federated wiki platform built entirely in Rust, enabling users to create, edit, and discuss articles across ActivityPub-enabled instances. The application follows a full-stack architecture with a Leptos-based frontend (compiled to WASM for client-side hydration) and an Axum backend serving both the API and server-side rendering. PostgreSQL is used as the database via Diesel ORM, and federation is implemented using the `activitypub-federation` crate, allowing articles, edits, comments, and user profiles to be synchronized between independent instances. The codebase is organized as a Cargo workspace with separate crates for backend, frontend, federation logic, database access, API client, markdown rendering, and reusable UI components. Key features include markdown-based article editing with custom extensions (LaTeX, table of contents, article links), edit conflict resolution via three-way merge, user authentication (JWT, OAuth, email verification), in-app and email notifications, and Wikipedia article import. The frontend uses Tailwind CSS with DaisyUI components and supports internationalization via `leptos-fluent`. Ibis demonstrates strong software engineering practices: modular crate structure, comprehensive integration tests with multi-instance federation scenarios, CI pipeline with formatting and linting, and Docker-based deployment. While the codebase is actively maintained and well-architected, it contains some production `expect` calls and relies on beta versions of key dependencies, which introduces minor risk. Overall, it is a polished, production-ready federated application with reusable patterns in frontend components, database abstractions, and ActivityPub object handling.
summer-rs is a Rust application framework inspired by Spring Boot, built on top of Axum. It provides a comprehensive plugin system for web servers, scheduled jobs, stream processing, gRPC, database access, messaging, and observability. The framework uses procedural macros for declarative routing, dependency injection, component registration, and configuration. It features automatic route discovery via the `inventory` crate, TOML-based configuration with environment variable interpolation, and a modular architecture with over 16 official plugins. The codebase is actively maintained, with examples covering common use cases and a documentation site.
axum-login is a Rust library providing user identification, authentication, and authorization as tower middleware for Axum web applications. It enables pluggable authentication backends through well-designed traits (AuthUser, AuthnBackend, AuthzBackend) and offers flexible route protection via both macro-based and builder-based middleware APIs. The library uses tower-sessions for secure session management and includes features like session fixation mitigation and constant-time password verification. Examples demonstrate usage with various backends including SQLite, OAuth2, and permission-based systems.
Ret2Shell is a full-featured CTF (Capture The Flag) challenge platform built with a Rust backend (Axum web framework) and a SolidJS frontend. It manages the entire lifecycle of CTF competitions: game creation, challenge authoring (with Git-backed storage), team management, dynamic scoring (decay curves, milestones), and dynamic per-player challenge environments orchestrated on Kubernetes. The backend includes a custom Rune scripting engine for extensible challenge checkers, OAuth providers, and lifecycle hooks. It provides a REST API, a CLI client, event streaming (NATS), and a comprehensive admin web UI. Deployment is supported via Helm charts, docker-compose, or raw Kubernetes manifests. The platform handles authentication, captcha, email verification, media uploads, audit logging, and real-time communication via WebSocket/WSRX tunnels.