Projects sharing features with Cloud Custodian

KRR is an open-source tool for analyzing Kubernetes resource requests and recommendations. It evaluates how pods are currently configured and provides suggestions for optimizing CPU and memory allocations based on actual usage patterns. The project focuses on helping teams right-size their Kubernetes workloads by identifying over-provisioned and under-provisioned resources. It scans clusters and generates reports that highlight where adjustments can reduce costs or improve performance without compromising reliability. KRR is distributed as a Python command-line tool that can be run directly

Gatekeeper is a Kubernetes admission control and policy enforcement engine used to ensure cluster resources comply with organizational security and configuration standards. It intercepts API requests to validate or reject non-compliant resources before they are persisted in the cluster. The project uses a parameterized policy library and custom resource definitions to create reusable templates and enforcement rules. It distinguishes itself through a hub-and-spoke management model, allowing a controller in a management cluster to enforce policies across separate target clusters. Beyond admiss

This project is a multi-cloud security auditor and configuration audit tool designed to identify misconfigurations and vulnerabilities across various cloud service provider environments. It functions as a cloud security posture management tool and a vulnerability remediation engine, allowing users to scan resources against security best practices and industry compliance standards. The system distinguishes itself by combining detection with a remediation engine that executes corrective actions to fix discovered security gaps. It employs a plugin-based audit engine and a provider-agnostic abstr

Steampipe is a cloud infrastructure query engine and API-to-SQL mapper that translates REST and GraphQL API responses into relational rows and columns. It allows for the retrieval and joining of real-time data from multiple cloud service providers using a relational database interface. The project functions as a PostgreSQL foreign data wrapper and an SQLite API extension, mapping external API endpoints to virtual tables. This enables the use of standard SQL to query live cloud services and aggregate data from different providers and service accounts into a single unified dataset. The system

ScoutSuite is a multi-cloud security audit and configuration tool designed to identify security risks and misconfigurations across cloud environments. It functions as a security posture manager and compliance auditor, gathering resource metadata from cloud APIs to evaluate infrastructure against security benchmarks. The tool provides auditing capabilities for AWS, Google Cloud, DigitalOcean, and Kubernetes clusters and control planes. It distinguishes itself by decoupling data collection from analysis, allowing users to cache cloud configurations locally for offline auditing and iterative rul

Albert is a keyboard launcher that opens files, applications, and runs commands by typing search queries into a search bar. It functions as a keyboard-driven workflow tool, enabling users to navigate their file system, launch installed applications, and execute shell commands without touching a mouse. The launcher processes user input through a plugin-based modular architecture, where functionality is extended by dynamically loaded C++ and Python plugins. Queries are dispatched to all enabled handlers in parallel, with results merged and ranked by a combination of match quality and historical

CKEditor 4 is a browser-based WYSIWYG rich text editor that enables users to create and format HTML content directly in the browser. It operates on a plugin-based architecture with a configurable toolbar system, DOM-based content editing, and an event-driven lifecycle, all delivered through a CDN-based distribution model. The editor supports skin-based theming and includes a legacy plugin compatibility layer for backward compatibility. The editor distinguishes itself as a cross-platform framework that integrates natively with Angular, React, Vue, Electron, Android, and iOS environments. It of

Gephi is an open-source desktop application for visualizing and analyzing large-scale network graphs. It provides an interactive platform for exploring complex relational data, combining hardware-accelerated rendering with real-time layout controls and a plugin-based modular architecture. The platform distinguishes itself through its ability to handle networks of up to 100,000 nodes and 1,000,000 edges using a custom OpenGL rendering engine, enabling smooth real-time interaction. It includes a force-directed layout engine with real-time adjustment, a dynamic filter pipeline for selecting node

Lexical is a modular rich text editor framework used to build extensible web-based editors. It functions as a state-driven content editor that maintains a serializable, immutable snapshot of document content to ensure predictable updates and accessibility compliance. The framework is distinguished by its plugin-based architecture and customizable node framework, which allow developers to extend editor behavior through specialized content nodes and encapsulated runtime logic. It also includes a collaborative editing engine capable of synchronizing document state across multiple clients in real

InkyPi is a digital signage management system designed to schedule and display rotating content and dynamic data across network-connected screens. It functions as a networked display controller and external data integration engine, allowing for the fetching and rendering of third-party plugins, calendars, and news feeds. The system includes a hardware display driver manager that installs and configures model-specific drivers for various electronic paper display controllers. It utilizes a web-based interface for remote configuration, enabling the management of display settings and content upda

Cerebro is a cross-platform productivity tool and keyboard-driven command palette. It serves as a central search interface and desktop application launcher for finding and initiating the execution of local files, installed software, and web services. The application is an extensible search tool that supports a plugin system, allowing third-party modules to register custom search providers and new functional capabilities. The software covers several capability areas, including local file system navigation and preview, integrated web search, and productivity utilities for natural language mat

PlotJuggler is an interactive time series visualization tool that loads, streams, and renders large datasets using hardware-accelerated OpenGL graphics. It functions as a multi-format data loader, supporting file formats such as CSV, ULog, and ROS bags, and also serves as a live data stream viewer that subscribes to real-time sources via MQTT, WebSockets, ZeroMQ, and UDP. The tool distinguishes itself through a plugin-based extensibility platform that allows users to add custom data sources, file formats, and processing capabilities. It includes a Lua scripting engine for creating custom data

GLPI is an open-source IT asset management platform and helpdesk ticketing system. It provides a centralized engine for handling incidents and service requests with structured workflows, SLA tracking, and service catalog integration, while also managing the full lifecycle of IT assets including hardware, software, and inventory tracking. The platform distinguishes itself through agentless network discovery that scans networks and collects inventory data from devices without requiring installed agents, and a plugin-based modular architecture that extends core functionality through a community-

ImagePy is a Python-based framework designed for scientific image analysis and processing. It provides a modular environment where users can perform complex tasks such as image segmentation, morphological operations, and volumetric reconstruction on multidimensional data. The platform distinguishes itself through a plugin-based architecture that decouples processing logic from the host environment. It utilizes reflection to automatically generate user interfaces from plugin attributes, allowing for the integration of custom tools without modifying core source code. Users can record sequences

Guard is a command-line file watcher that monitors the filesystem from the terminal and automatically executes user-defined tasks when files are modified, added, or deleted. It functions as a file change watcher and test runner that triggers test suite execution immediately when source or spec files are saved, providing instant feedback during development. The tool is configured through a Ruby-based domain-specific language in a Guardfile, and it can send visual desktop notifications when watched file actions complete or fail. The project distinguishes itself through a plugin-based extension

Goss is an infrastructure validation tool and testing framework used to verify that a server's current state matches a desired configuration. It compares live system output against YAML or JSON specifications to validate components such as packages, services, users, and network ports. The tool enables the automated generation of test specifications by capturing the existing state of a system. It supports diverse deployment environments through the use of dynamic templates and variable files. Beyond point-in-time validation, the framework can execute retrying tests that poll for state converg

Domoticz is a home automation platform and multi-protocol IoT orchestrator designed for controlling smart home devices and automating routines. It functions as an event-driven automation engine and a centralized system for managing connected sensors and hardware across Linux, Windows, and Raspberry Pi. The system acts as a Zigbee and Z-Wave controller and an MQTT IoT gateway, bridging disparate hardware ecosystems through a flexible plugin system. This allows for the unification of various communication standards into a single management interface. The platform covers broad capabilities incl

LiteMonitor is a customizable desktop system dashboard and hardware performance monitor. It provides a visual overlay for tracking real-time CPU, GPU, memory, and network metrics, including temperature and power consumption. The application is an extensible system monitor that uses a modular plugin system to integrate third-party data sources, such as weather, stocks, and cryptocurrency, alongside core hardware telemetry. The tool includes a theme engine for adjusting colors, fonts, and layout, as well as window management controls for transparency and click-through behavior. It supports sys

LogicFlow is an SVG-based flowchart editing framework and visual graph editor used for building customizable business process diagrams. It serves as a customizable diagramming engine for rendering business process models, entity relationship diagrams, and unified modeling language charts. The system is characterized by a plugin-based architecture that allows developers to define specialized graphical elements and register pluggable modules. A distinctive feature is its overlay system, which positions standard HTML components on top of the SVG canvas to create interactive menus and control pan

Walker is a centralized search interface and application launcher designed to find and start installed software, system tools, and local files. It functions as a single entry point for executing desktop applications, running shell commands, and managing system scripts. The project uses a provider-based plugin architecture to extend its capabilities via independent modules. It allows for deep visual and behavioral customization through CSS styling, XML-defined layout templates, and layered configuration overrides. The system includes integrated productivity tooling for mathematical calculatio

Xboard is a containerized service orchestrator and management platform. It provides a Docker-based administrative dashboard for monitoring and controlling backend system services and configurations through a unified interface for operators and users. The platform utilizes a modular architecture and a dedicated plugin system, allowing for the registration of custom logic and the extension of core administrative functionality. It includes utilities for legacy data migration to transfer records and configurations from previous versions or alternative implementations into the current system sche

Packer is a machine image builder and multi-platform image orchestrator used to create identical virtual machine images for multiple platforms from a single source configuration. It functions as an infrastructure as code tool, utilizing the HashiCorp Configuration Language to define versioned and reproducible templates for cloud image provisioners. The tool is distinguished by its plugin-based extension model, which allows it to load external binaries for builders and provisioners to support various cloud platforms and virtualization environments. It includes a post-processor pipeline to tran

Chunjun is a distributed data integration framework and SQL-based ETL pipeline designed to synchronize data between heterogeneous sources. It functions as a change data capture tool and a heterogeneous data synchronizer, utilizing a distributed processing environment to move and transform data across different database types. The system is distinguished by its plugin-based connector architecture, which allows for the development of custom source and sink plugins to extend connectivity to unsupported data systems. It supports real-time change data capture from relational database logs and impl

This project is a comprehensive library and framework for autonomous mobile robot navigation, providing a suite of geometric, heuristic, and optimization-based algorithms. It enables robots to calculate collision-free global paths and generate smooth, kinematically feasible local trajectories within complex environments. The system is built on a modular plugin architecture that allows developers to integrate and configure custom motion planning algorithms directly into the Robot Operating System. By utilizing a layered spatial representation, the framework aggregates heterogeneous sensor data

Converse.js is an embeddable, self-hosted XMPP chat client that runs entirely in the browser. It communicates with XMPP servers using standard XML stanzas over WebSocket or BOSH transports, and provides end-to-end encryption through the OMEMO protocol with double ratchet algorithm and X3DH key exchange. The client is built on a plugin-based architecture that allows extending core functionality at runtime without modifying the client itself, and uses a DOM-based rendering approach with an event-driven message bus for internal coordination. The client manages message history through XEP-0313 Me

OpenClawChineseTranslation is a framework for building conversational assistants that functions as a cross-platform chat gateway. It synchronizes conversational data between multiple external messaging applications and a centralized core, allowing users to interact with an assistant across different platforms. The system utilizes a plugin-based extension architecture to integrate external services such as note-taking and password managers. It features a model-agnostic provider interface, which enables the underlying intelligence to be swapped by selecting different large language model provid

Countly is a self-hosted product analytics and engagement platform that tracks user behavior across mobile, web, and desktop applications. It collects and analyzes device properties, user actions, and session lifecycle data to understand engagement patterns, while also providing crash reporting, push notification delivery, and A/B testing capabilities. The platform is designed for privacy-first deployment, with built-in consent management and the ability to run entirely on private infrastructure. The platform distinguishes itself through its comprehensive feature set that combines analytics w