Awesome GitHub RepositoriesAutomatic Software Updates

Kubescape is a Kubernetes security posture management platform designed to scan clusters, manifests, and images for misconfigurations, vulnerabilities, and compliance risks. It functions as a comprehensive security suite incorporating a compliance scanner, a container image vulnerability scanner, an admission controller for policy enforcement, and a runtime security monitor. The platform distinguishes itself through runtime-aware vulnerability filtering, which maps libraries loaded in memory to determine if vulnerabilities are actually reachable. It also integrates with AI assistants via a Mo

EmDash is an open-source content management system built on Astro that combines a visual admin panel with a plugin-driven architecture and server-side rendering. It provides a complete content management system with structured content modeling, a rich text editor using Portable Text format, and a TypeScript API for type-safe content queries. The system supports authentication through passkeys, OAuth 2.1, and external providers, with role-based access control and fine-grained permission scopes. What distinguishes EmDash is its plugin development framework, which supports both native plugins ru

This repository provides a collection of interactive sample applications and reference implementations for the Electron framework. It serves as a library of API reference demos designed to help developers learn how to implement core desktop features. The project features visual demonstrations of cross-platform GUI management and practical examples of native operating system integration. It includes dedicated samples for handling native modules, crash reports, and the configuration of security implementations such as content security policies and process sandboxing. The codebase covers a broa

OctoPrint is a web-based platform for remotely controlling and monitoring 3D printers. It provides a browser dashboard to start, pause, cancel, and track print jobs, while streaming real-time printer status, temperature, and progress updates. The system is built around a plugin-based architecture that allows extending core functionality, and it offers a documented REST API for programmatic printer control and data management. The platform distinguishes itself through its comprehensive automation and extensibility capabilities. It supports event-driven workflows that automatically execute cust

This project is a cross-platform desktop application that serves as a graphical wrapper for the youtube-dl command line tool. It functions as a web media extractor and batch video downloader, allowing users to save video files, audio tracks, subtitles, and metadata from supported online platforms. The application provides a visual interface to manage download quality, output formats, and file naming. It supports the retrieval of restricted or private content through browser cookie files, basic authentication, or video passwords. The software includes capabilities for bulk playlist archiving

Squirrel.Windows is a framework for installing and updating Windows desktop applications via HTTP. It functions as an application installer, background software updater, and distribution system that operates without the use of traditional installation wizards. The framework uses NuGet packages to distribute software and reduce download sizes through delta updates. It manages software releases by organizing updates into distinct HTTP channels to control how different user groups receive new versions. The system handles deployment through user-mode directory installation to avoid administrativ

Bazzite is an immutable, atomic-image-based operating system designed for gaming performance and handheld hardware. It utilizes a read-only root filesystem and versioned images to provide atomic updates and instant system rollbacks, ensuring a stable core environment. The system is distinguished by its deep optimization for portable gaming devices, featuring dedicated handheld hardware management for CPU undervolting, fan control, and display refresh rate overclocking. It includes a specialized gaming mode that boots directly into a console-like interface with integrated input mapping and a t

Podman Desktop is a graphical user interface for building, managing, and deploying containers and Kubernetes clusters from a local workstation. It serves as a container engine manager and a Kubernetes cluster dashboard, providing a visual environment for tasks typically handled via the command line. The project includes a container extension framework that allows users to integrate additional tools and capabilities into the management environment through a plugin system and extension catalog. The software covers the full container lifecycle, including image building and pushing to registries

The Operator SDK is a framework for building, packaging, and managing custom controllers that extend the Kubernetes API. It serves as a toolset for defining new API types and implementing reconcile loops to automate the lifecycles of complex applications. The project provides specialized support for creating operators based on Helm charts or Ansible playbooks, allowing users to maintain a desired cluster state using existing automation tools. It includes a dedicated system for packaging controllers into standardized container image bundles for distribution via the Operator Lifecycle Manager.

Droid-ify is an Android app installer and client for browsing, installing, and updating open-source software from F-Droid repositories. It functions as a searchable repository browser that enables the discovery and deployment of community-maintained software packages. The project supports diverse installation pathways, routing requests through different system conduits based on the device's privilege level. It provides support for root access, session-based modes, and Shizuku to bypass standard system permission limitations. The system includes a background service that monitors repositories

Make Zotero effective for us LaTeX holdouts

Stylus is a browser extension for installing, managing, and editing user-created CSS themes that customize the appearance of websites. It provides a central interface for organizing, enabling, disabling, and removing installed styles, and includes a built-in CSS editor with syntax highlighting and linting support. The extension supports the UserCSS format, allowing users to install themes from .user.css files or URLs, and generates a basic UserCSS template with required metadata fields when creating new styles. Stylus can watch local .user.css files for changes and automatically apply edi

Cromite is a privacy-focused browser built as a fork of Chromium that embeds a network-level content blocking engine to intercept advertisements, pop-ups, and tracking scripts before they reach the page. It applies community-maintained public filter lists directly within the browser, eliminating the need for external extensions, and uses a curated patch system applied to the Chromium source tree at build time to add or modify features without maintaining a separate codebase. The browser is hardened against tracking and data leakage through a comprehensive set of privacy and security measures.

This repository contains the comprehensive documentation for a code editor focused on AI-assisted software development and remote development workflows. It covers the implementation of AI agents and language models used for autonomous code generation, large-scale refactoring, and task iteration. The project is distinguished by its deep integration of autonomous AI agents capable of web navigation, application logic validation, and orchestrating multi-step development processes. It provides specialized frameworks for tailoring AI behavior through custom instructions, model context protocols, a

Bromite is a privacy-focused fork of the Chromium browser for Android that blocks advertisements and tracking scripts by default, enforces encrypted HTTPS connections, and prevents browser fingerprinting without requiring any extensions or manual configuration. It applies a patch-based build system to layer privacy and security modifications directly onto the upstream Chromium codebase during compilation, integrating a filter list engine for network-level ad blocking and adding noise to browser APIs to mask device identity. The browser distinguishes itself through comprehensive privacy harden

Prek is a Git hook manager written in Rust that runs configured hooks as a single binary without requiring Python or other external runtimes. It executes hooks faster than standard tools through parallel processing and bundled Rust implementations, and includes a built-in hook repository that enables fully offline operation without network access or environment setup. The tool supports both TOML and YAML configuration formats with identical semantics, and can run hooks from existing pre-commit configuration files without modification. Prek distinguishes itself through workspace-aware monorepo

MusicPlayer2 is a desktop music player for Windows built on the BASS audio engine, designed for high-quality local audio playback with real-time spectrum visualization. It functions as a local music library manager, organizing tracks by artist, album, and genre, while also serving as an online metadata and artwork downloader that fetches lyrics and album covers automatically. The player features a fully customizable interface defined through XML configuration files, and includes a synchronized lyrics display with desktop overlay and karaoke-style highlighting. The player distinguishes itself

Cocoindex is an incremental data processing engine that builds and maintains live indexes for AI agents, with a core focus on codebase indexing and knowledge graph extraction. The engine uses a function-graph execution model where user-defined Python functions are composed into a directed acyclic graph, and it processes data incrementally so only changed source records or code paths are re-computed, avoiding full recomputation at any scale. It supports automatic schema inference from transformation pipeline type annotations and provides full data lineage tracing, tagging every output record wi

weweChat is an unofficial desktop client for WeChat, developed as a cross-platform messaging wrapper. It uses a React-based user interface within an Electron shell to provide a dedicated environment for managing conversations on desktop operating systems. The application introduces custom capabilities not found in the official client, such as the ability to intercept and archive messages that have been recalled by the sender. It also includes bulk messaging automation to send the same message to multiple recipients simultaneously. The client is designed for power-user workflows, featuring ke