Projects sharing features with Commento

Remark42 is a self-hosted, privacy-focused commenting engine designed for websites and blogs. It functions as a standalone application that can be deployed as a single binary or a containerized image across different operating systems. The system allows a single instance to host commenting services for multiple distinct domains through multi-site management. It utilizes an identity layer that verifies users via email, anonymous accounts, or social providers using OAuth authentication. The platform supports threaded conversations with Markdown formatting and provides administrative tools for

Isso is a self-hosted commenting system that provides a server and client-side script for adding interactive discussion threads to websites. It functions as an independent platform for managing site-wide comment sections and user profiles on private infrastructure, utilizing a JSON API and a Markdown rendering engine to handle user-generated content. The system is designed to support multi-site comment management, allowing a single server installation to serve independent threads for multiple different domains. It includes a dedicated moderation tool featuring signed URLs and an administrativ

Giscus is an open-source discussion widget and website commenting system that uses GitHub Discussions as its backend for storing and managing conversations. It provides an embeddable web component that connects static or dynamic websites to the GitHub API, allowing users to authenticate and write responses using a Markdown-based commenting engine. The system operates by mapping specific website page paths to unique remote discussion threads. This integration enables community engagement and social interaction on websites without the requirement of hosting a private database or backend server.

Authlogic is a Ruby authentication framework designed to manage user identities, session persistence, and secure password hashing. It provides a system for verifying user credentials against stored records using configurable identity fields. The framework distinguishes itself through its provider-based identity integration, allowing applications to connect authentication flows to external services including OAuth, OpenID Connect, LDAP, and various social media platforms. It also includes an extensibility model that executes custom user-defined code via hooks and callbacks during identity veri

This project is a blockchain education platform that integrates a React frontend with Solidity smart contracts to create a decentralized application. It functions as a learning system that generates personalized educational roadmaps and tracks user progress using decentralized technology. The platform employs a hybrid identity integration system, verifying users through both traditional email providers and blockchain wallet connections. This allows for user identity management and account verification to control access to protected areas of the application. The codebase covers the deployment

Pomerium is an identity-aware reverse proxy designed to provide zero-trust access control for internal infrastructure. It functions as a centralized gateway that verifies user identity, device context, and group membership for every request before granting access to protected applications, services, or API servers. By integrating directly with external identity providers, it replaces traditional VPNs with granular, policy-based access enforcement. The platform distinguishes itself by extending zero-trust principles beyond standard web traffic to include non-HTTP protocols, such as TCP and UDP

Octelium is a zero-trust network access platform and identity-aware proxy designed to secure private HTTP, SSH, and SQL resources. It functions as a secure gateway that validates human and workload identities using OIDC, SAML, and FIDO2 passkeys before granting access to internal applications and SaaS APIs. The system is distinguished by its secretless access broker, which injects credentials—such as API keys, passwords, and AWS Sigv4 signatures—at the gateway level so users can access databases and cloud resources without managing secrets. It further specializes in AI gateway administration,

Dex is an OpenID Connect provider and identity federation proxy that translates authentication signals from various upstream sources into a unified OpenID Connect interface. It functions as a multi-protocol identity broker, enabling client applications to implement a single standard while delegating user verification to external identity providers. The project distinguishes itself through a pluggable connector architecture that bridges disparate protocols including LDAP, SAML, and OAuth2. It provides specific integrations for services such as GitHub, Google, GitLab, and Microsoft, while offer

This project is a full-stack TypeScript framework and boilerplate designed for building subscription-based software services. It provides a pre-configured development environment that integrates a React frontend with a Node.js and Express server and a MongoDB data layer. The framework includes integrated modules for managing subscription billing, multi-tenant user management, and secure identity verification via social logins and passwordless authentication. It further enables real-time application synchronization through a WebSocket server for bidirectional data streaming between clients and

Kanboard is a self-hosted Kanban project management tool and productivity suite designed for tracking software tasks and team collaboration. It provides a visual system for managing workflows through the use of boards, columns, and cards. The project features an extensible plugin framework and a comprehensive API for programmatic task and project administration. It includes specialized identity management through LDAP integration, allowing for the synchronization of user accounts and group permissions from directory servers. The system covers a wide range of capabilities, including event-dri

This project is an Android password manager application that provides an end-to-end encrypted vault for storing and synchronizing login credentials, secure notes, and identities. It functions as a secure storage system using zero-knowledge encryption to ensure that only the user can decrypt their stored data. The application integrates directly with the Android system to provide an autofill service that populates usernames and passwords into mobile apps and browser login fields. It also serves as a passkey management wallet for FIDO2 cryptographic passkeys and a time-based one-time password a

edx-platform is a comprehensive learning management system designed for authoring, hosting, and delivering online courses. It functions as an LTI compliant learning platform that manages student progress and profiles while delivering educational content at scale. The system is divided into a dedicated course authoring environment for creating structured learning paths and a learner-facing platform for course delivery. It includes a centralized identity platform that provides single sign-on authentication across these components. The platform's capabilities cover online course authoring, larg

Homeland is an open-source community engine built with Ruby on Rails, designed for hosting interactive discussion forums. It provides a comprehensive platform for managing threaded conversations, user profiles, and rich-text content through a structured server-side framework. The platform distinguishes itself through integrated identity management, functioning as an OAuth provider and supporting single sign-on protocols to synchronize user sessions across distributed services. It facilitates active community participation by combining social interaction tools, such as user-following, with a m

Termix is a centralized web-based gateway for managing remote SSH connections and terminal sessions. It provides a browser-based interface that enables users to access, control, and monitor remote servers, containerized applications, and file systems from a single, unified dashboard. The platform distinguishes itself through robust security and session management capabilities. It integrates with external identity providers for single sign-on and enforces role-based access control to manage user permissions. To ensure reliable administration, it maintains stateful session persistence, allowing

Lsky Pro is a self-hosted image hosting platform and digital asset management system. It provides a web application for uploading and organizing images into albums, while functioning as an image hosting API and processing gateway for programmatic asset management. The system distinguishes itself by supporting monetized storage services, integrating payment gateways and coupon systems to manage user subscriptions and storage quotas. It features a decoupled storage architecture that integrates with S3, OSS, WebDav, and other cloud providers to separate file storage from the application server.

Piwigo is a modular, open-source photo gallery and media management platform built as a PHP web application. It provides a self-hosted environment for organizing, managing, and displaying digital image collections through a web browser. The system is distinguished by its plugin-based architecture, which allows the core functionality to be extended with third-party themes and functional extensions. It leverages artificial intelligence for automatic image content recognition and tagging to automate the categorization of large libraries. The platform covers a wide range of capabilities includin

Nightingale is a Prometheus-compatible monitoring and alerting platform designed to centralize telemetry management across multiple time-series databases. It functions as a multi-source alerting engine and metric data pipeline that ingests telemetry via remote write protocols and triggers alarms based on data from sources such as Prometheus, Elasticsearch, Loki, and ClickHouse. The system is distinguished by its automated alert healing system, which executes predefined scripts and RPC-based corrective actions when monitoring thresholds are breached. It supports distributed alert processing, a

Libredesk is an omnichannel support management system designed to unify live chat and email communications into a single dashboard. It provides a comprehensive environment for managing customer interactions, agent roles, and team assignments to organize support workloads. The project distinguishes itself through AI customer support automation, which includes generating automated responses and refining message tones. It also supports the development and integration of custom chat widgets using WebSockets and JavaScript APIs. The system covers a broad set of capabilities, including customer re

Planka is an open-source Kanban project management tool designed for organizing tasks and tracking team productivity across multiple workflows. It provides a centralized platform where users can manage projects and monitor progress through visual boards. The system distinguishes itself through its focus on data consolidation and secure identity management. It supports the migration of project boards and task lists from external services, allowing teams to unify their work items within a single environment. Furthermore, the platform integrates with external identity providers using standard au

This project is a public key infrastructure management system designed to automate the issuance, renewal, and revocation of X.509, TLS, and SSH certificates. It functions as a machine identity provider and certificate authority, enabling the establishment of private PKI to secure inter-service communication and remote access. The system distinguishes itself through hardware-bound identity attestation, which ties cryptographic keys to physical device silicon or TPMs to prevent credential exfiltration. It supports a wide array of identity verification mechanisms, including OIDC, cloud-provider

2FAuth is a self-hosted two-factor authentication server and credential vault. It functions as a web-based authenticator app used to organize and generate time-based one-time passwords and other security codes for multiple accounts in a central location. The system distinguishes itself as an API-driven security manager, allowing authentication codes to be integrated into automated workflows and external applications. It also supports shared security credentialing through the use of isolated vaults and shared folders for team collaboration. The project covers a broad range of security and dat

PowerDNS-Admin is a web-based management interface and administration tool for PowerDNS. It provides a graphical dashboard to manage DNS zones and resource records, replacing the need for manual configuration file edits or command line tools. The system implements a role-based access control layer to restrict zone visibility and administrative functions based on assigned user permissions. It includes a dedicated server monitor for tracking the health, configuration, and performance statistics of PowerDNS backend servers. The platform covers a broad range of administrative capabilities, inclu

Lobsters is a link aggregator platform and social news engine designed as a technical community forum. It serves as a threaded discussion board where users share external web links and engage in nested conversations and debates. The platform maintains a curated environment through an invitation-only membership model, restricting account creation to users with valid referral codes. It employs a vote-weighted ranking system and user reputation management to highlight high-quality technical content and trusted contributors. The system includes comprehensive community management tools, including

WebContainer is a browser-based runtime environment designed to execute server-side code, operating system commands, and full-stack development toolchains directly within a web tab. It provides the infrastructure for cloud IDEs and zero-install development workflows by simulating a runtime that eliminates the need for local installations or remote virtual machines. The system leverages WebAssembly to map system calls and implements a virtual POSIX-compliant filesystem and network interception layer. This allows the runtime to spawn command-line processes, execute shell commands, and route int

Giscus is a comment system that enables websites to host interactive discussion sections by leveraging GitHub Discussions as a backend. It functions as a web component that maps specific page URLs or metadata to discussion threads, allowing visitor messages and reactions to be stored and retrieved directly from a linked repository. The system operates by injecting a sandboxed iframe into the host page, which isolates the interface from the parent website's styles while maintaining secure communication through browser messaging protocols. Configuration is handled declaratively via HTML data at

This project is a reference implementation and boilerplate for managing user authentication and session state within the Next.js framework. It serves as a practical example of how to integrate NextAuth.js to protect routes and handle identity verification. The repository demonstrates several authentication workflows, including OAuth identity integration with third-party providers, passwordless authentication using email magic links, and traditional credentials-based sign-in. It specifically showcases how to replace default authentication screens with custom branded sign-in pages. The impleme

HackerNews-React-Native is a cross-platform mobile client and news aggregator designed for iOS and Android. It provides a mobile interface for browsing paginated news stories and reading nested community discussions by fetching data from the Hacker News API. The application includes an embedded web viewer to render external articles and source pages directly within the interface. It implements a hierarchical discussion system to display nested comment threads. The project is built using a React Native codebase and utilizes a modular UI composition. It incorporates list virtualization for sto