aquasecurity / trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
aquasecurity / trivy
anchore / syft
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
margelo / react-native-mmkv
⚡️ The fastest key/value storage for React Native. ~30x faster than AsyncStorage!
bombshell-dev / clack
Effortlessly build beautiful command-line apps
InternLM / lmdeploy
LMDeploy is a toolkit for compressing, deploying, and serving LLMs.
codesenberg / bombardier
Fast cross-platform HTTP benchmarking tool written in Go
openscopeproject / InteractiveHtmlBom
Interactive HTML BOM generation plugin for KiCad, EasyEDA, Eagle, Fusion360 and Allegro PCB designer
DependencyTrack / dependency-track
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
RetireJS / retire.js
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
e-m-b-a / emba
EMBA - The firmware security analyzer
Source-Robotics / PAROL6-Desktop-robot-arm
BOM, STL files and instructions for PAROL6 3D printed robot arm
aboutcode-org / scancode-toolkit
:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!
PragmaticFlow / NBomber
Distributed load-testing framework for .NET. Create distributed load test scenarios entirely using plain C# or F#. It is designed to test any system regardless of the protocol or a semantic model (Pull/Push).
Bouni / kicad-jlcpcb-tools
Plugin to generate BOM + CPL files for JLCPCB, assigning LCSC part numbers directly from the plugin, query the JLCPCB parts database, lookup datasheets and much more.
oss-review-toolkit / ort
A suite of tools to automate software compliance checks.
microsoft / sbom-tool
The SBOM tool is a highly scalable and enterprise ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts.
zarf-dev / zarf
The Airgap Native Package Manager for Kubernetes
ossf / cve-bin-tool
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
guacsec / guac
GUAC aggregates software security metadata into a high fidelity graph database.
antithesishq / bombadil
Property-based testing for web and terminal UIs
aklofas / kicad-happy
AI coding agent skills for KiCad electronics design. Works with Claude Code and OpenAI Codex. Analyze schematics, review PCB layouts, EMC pre-compliance, SPICE simulation, download datasheets, source components, and prep boards for fabrication.
owasp-dep-scan / dep-scan
OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.
Tavish9 / any4lerobot
🎁 A collection of utilities for LeRobot.
package-url / purl-spec
A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby
cdxgen / cdxgen
Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server
ZeroDayEvil / ai-security-tool
🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepSeek, OpenAI) for automated security workflows, CTF & DevSecOps. Cross-platform & Web UI.
robomechanics / quad-sdk
Software tools for agile quadrupeds, developed by the Robomechanics Lab at Carnegie Mellon University.
hyochan / react-native-nitro-sound
react-native native module for audio recorder and player with nitromodule!
rust-secure-code / cargo-auditable
Make production Rust binaries auditable
LubomirGeorgiev / cloudflare-workers-nextjs-saas-template
Cloudflare Workers/Next.js SaaS Template
OWASP / cve-lite-cli
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
hudl / statsbombpy
Easily stream StatsBomb data into Python
efroemling / ballistica
The BombSquad Game Engine
LuwuDynamics / xgoduck_hardware
Build your own robot duck. XGO-Duck is a 3D-printable biped powered by Arduino UNO Q and 15 servos, adapted from Pollen Robotics' Microduck. Includes mechanical models, PCB designs, a BOM, and an assembly guide. Build it, explore its motion, and make it your own.
ARPSyndicate / puncia
Panthera(P.)uncia - Official CLI utility for Subdomain Center & Exploit Observer.
kdeldycke / meta-package-manager
🎁 snapshot every package on your machine to one file, restore it on a new one
chainloop-dev / chainloop
Agentic SDLC infrastructure. Define guardrails. Collect signals. Enforce continuously. Signed records of what your AI coding agents and CI/CD pipelines did, checked against policies as code, with the loop closed in CI/CD. AI sessions, SBOMs, VEX, SARIF and SLSA provenance, built on Sigstore and in-toto. Apache 2.0.
fsfe / reuse-tool
This is a mirror of https://codeberg.org/fsfe/reuse-tool
CycloneDX / specification
OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX
microsoft / component-detection
Scans your project to determine what components you use
CycloneDX / cyclonedx-cli
CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.
Caffreyfans / IRbaby
基于 ESP8266 利用 IRext 开源红外库实现万能红外遥控，已对接 MQTT 协议，可轻松接入 HomeAssistant :bomb:
BOMWiki / partmode
Open-source, local-first 3D parametric CAD that runs in the browser for people and permissioned typed agents, powered by OpenCascade WASM.
nmatt0 / moria
IoT firmware identification and extraction
nmatt0 / mithril
IoT static scanner for secrets, SBOM, CVEs and more.
roboninecom / SO-ARM-102
Open-source leader + follower robot arm kit: 5 DOF + gripper, PET-CF frame, parallel gripper, LeRobot-compatible. STEP/STL, BOM, print and assembly guide.
kingenbomb / Nodes
节点注册机
Abomination81 / copybot
Abomination81 Copybot — self-hosted Polymarket copy-trading execution engine.
MatheusBomtempo / JornAI
Open source AI-assisted Instagram publishing for newsrooms - draft, review, and post breaking-news content fast, with a human always in the loop.
ciceroyang / agentgate
Control plane for the tools agents run: inventory, evidence, policy, enforcement. Clean is only emitted when every check ran. · agent 工具层的控制面：清单、证据、策略、执行；只有每个检查都跑完，才会给出 clean。
angel291592 / caddiff
git diff for CAD assemblies — two STEP files in, a picture of what changed plus a machine-readable change list out.
malabomns5460-star / administer-next
Open Source Modular Admin Panel Framework for Roblox Developers 2026
molanocortes / takto-one
Open-source hand exoskeleton that reads twelve finger joints with magnetic encoders and drives them through tendons. Full build (TAKTO ONE) or sensing-only (TAKTO Lite). CAD, KiCad PCBs, Teensy firmware, live 3D twin in browser, phone and AR, BOM, EMG.
solderable / storm-tracker-hardware
Open-source-ready Storm Tracker hardware design, documentation, BOM, and manufacturing package
vanyu0710 / Varen-AI-CAD
AI CAD 建模 Agent：一句话需求进来，调研、提问、出 BOM，逐件完成真实 CAD 建模并导出装配 STEP（参数化 BRep，不是图片或网格）；几何与碰撞检查不过关就不交付。Windows 封闭 Beta。An AI CAD modeling agent: real parametric geometry from a one-line brief, gated by geometry and interference checks.
ogwitgoed-source / rock-paper-scissors-and-bombs-arena
Rock Paper Scissors Bombs Online Game 2026 - Play Multiplayer Strategy Fun
agentscope-ai-java / json-guard
JSON.parse with hard limits on nesting depth, key count, string length and input size. Refuses parser bombs before they are allocated.
san3ncrypt3d / vulnometry
Measure what a vulnerability is worth to your business, not how severe it is in the abstract. Business Exposure Index scoring over NVD, EPSS, CISA KEV, OSV and GHSA.
PortSwigger / css-the-bomb-inside-your-inbox
All the materials for Gareth Heyes' Black Hat talk: CSS: the bomb inside your inbox.
bomfather / agent
An eBPF runtime security agent