Awesome GitHub RepositoriesStatistical Analysis Tools

Atuin is a command-line tool that replaces standard shell history with a searchable, encrypted SQLite database. By hooking into shell initialization scripts, it provides an interactive, keyboard-driven interface for real-time command filtering and retrieval. The platform ensures data privacy through a client-side encryption layer, securing sensitive history and configuration data before it is synchronized across multiple machines. Beyond history management, Atuin functions as an executable documentation platform that enables teams to create and share interactive runbooks. These documents use

Claude Code Templates is a comprehensive framework for orchestrating specialized AI agents and automating development workflows within local environments. It provides a structured system for defining, configuring, and deploying AI personas that handle specific technical tasks, ranging from backend architecture and frontend implementation to security auditing and infrastructure management. The project distinguishes itself through a configuration-driven approach that allows teams to standardize development environments and share reusable agent definitions across projects. It includes a robust C

ActivityWatch is an open-source, privacy-focused time tracking platform that automatically records computer usage patterns to provide a comprehensive history of personal digital activity. It functions as a background service that monitors system metrics, application focus, and user input to build a detailed log of how time is allocated across various tasks and projects. The platform distinguishes itself through a local-first architecture that stores all activity data as structured files on the user's machine, ensuring that sensitive usage history remains private and accessible offline. It sup

hls.js is a JavaScript player library that enables HTTP Live Streaming playback in web browsers using the Media Source Extensions API. It functions as an adaptive bitrate streaming engine and a media streamer that manages the buffering and playback of video segments. The library features specialized capabilities for low latency streaming and digital rights management, allowing it to decrypt protected content via Encrypted Media Extensions. It includes a metadata processor for handling ID3 tags and date-range elements, as well as a pluggable loader interface to replace default network request

Cachet is a self-hosted, open-source status page system designed to communicate service uptime, incident history, and infrastructure performance to end users. It provides a centralized dashboard for managing the operational lifecycle of system components, tracking service disruptions, and scheduling maintenance windows. The platform distinguishes itself through a comprehensive RESTful API that enables programmatic status page management and automated incident reporting. It supports deep integration with external monitoring tools, allowing for the synchronization of performance metrics and the

Browserslist is a browser compatibility configuration tool and a shared specification that synchronizes target browser versions across front-end build tools. It serves as a centralized system for defining browser support, ensuring consistency across CSS autoprefixers, JavaScript transpilers, and linting tools. The tool integrates browser usage analytics to determine target lists based on real-world traffic statistics and global usage data. It also functions as a user agent regex generator, converting browser version queries into regular expressions for matching and validating browser user age

The AWS Cloud Development Kit is an infrastructure-as-code framework that enables developers to define and provision cloud resources using familiar programming languages. By utilizing construct-based synthesis, it translates high-level, object-oriented code into declarative templates, allowing for the automated management of complex cloud environments through a centralized, code-driven control plane. The framework distinguishes itself through its ability to model infrastructure as a dependency-aware resource graph, ensuring that components are provisioned and updated in the correct order. It

Twemproxy is a lightweight proxy that routes and distributes requests across multiple Redis and Memcached backend servers. It functions as a protocol translation gateway and distributed cache shard manager, partitioning data across clusters to balance load and storage capacity. The system acts as a high-availability cache orchestrator, employing health monitoring and automatic server ejection to maintain continuous access to cached data. It integrates with sentinels for dynamic master and replica discovery and utilizes consistent hashing and tag-based key grouping to manage data distribution

This project is a command-line utility designed to monitor and analyze token consumption and financial expenditure for AI coding assistants. By parsing local session logs directly on the user's machine, it provides a privacy-focused way to track development activity without transmitting sensitive data to external servers. The tool distinguishes itself through its ability to aggregate disparate log formats from multiple coding assistants into a unified, schema-agnostic representation. It features a decoupled pricing engine that allows users to apply custom model-specific cost multipliers, over

This project provides a containerized DNS sinkhole and network-wide traffic filtering solution. It functions as a central network resolver that intercepts domain queries, allowing users to block advertisements, trackers, and malicious domains by returning null responses to connected devices. The platform distinguishes itself through its integrated DHCP server and comprehensive management capabilities, which allow for automated IP address allocation and granular control over network traffic. It supports complex filtering through regular expression matching, hierarchical rule prioritization, an

This project is a cross-platform messaging SDK and client development library used to build custom Telegram applications. It functions as a comprehensive framework that manages network encryption, local data storage, and API communication, providing a C-compatible JSON interface that allows integration with any programming language. The library distinguishes itself by providing a full database manager for encrypted local caching and synchronized state, alongside a dedicated bot framework for creating interactive bots with business account integration. It enables the implementation of speciali

Dawarich is a self-hosted location history manager and travel journaling platform. It functions as a personal travel archive that collects GPS coordinates and movement data, providing a private alternative to proprietary tracking services. The system utilizes a PostgreSQL geospatial database to store coordinates, visits, and custom geofence boundaries. The project distinguishes itself as a geospatial data converter and visualization tool, capable of transforming location history between formats such as GPX, KML, and GeoJSON. It allows users to organize GPS tracks and geotagged photos into nam

ntopng 是一个基于 Web 的网络流量监控工具和流数据聚合器。它可用作网络安全监控器、SNMP 网络管理系统，以及 OT 和 SCADA 环境的工业协议分析器。 该系统为 Modbus、DNP3 和 IEC 60870 等工业协议提供专门的检查功能。它通过行为威胁检测、通过握手特征指纹识别的加密流量分析，以及使用 DHCP 和 MAC 地址模式识别硬件和操作系统的能力而脱颖而出。 其更广泛的功能包括实时流量分析和数据包捕获、网络拓扑映射以及分层收集器架构的编排。该平台还通过强制门户 (captive portals) 管理网络访问控制，执行流量配额，并将流和警报数据导出到 ClickHouse、Elasticsearch 和 Kafka 等外部数据库。 该项目支持在单个主机上使用隔离配置执行多个独立的监控实例。

MTProxy 是一个代理服务器，使用 MTProto 协议将流量路由到 Telegram 服务器，以绕过网络限制。它作为一个用于管理安全连接并在客户端和目标服务器之间转发协议流量的系统运行。 该项目通过在数据包中添加随机填充来实现流量混淆，以掩盖数据模式并向互联网服务提供商隐藏代理使用情况。它还包括一个连接管理器，通过验证特定的身份验证密钥来限制用户访问。 该系统通过本地端口公开实时性能指标和系统健康数据，提供运营可观测性。它处理原始字节流中继和专门的协议路由以保持连接。

Hazelcast is a distributed data platform that combines an in-memory data grid with a stream processing engine to support real-time analytics and event-driven applications. It functions as a partitioned, distributed key-value store that replicates data across cluster nodes to provide low-latency access and high availability. The platform also serves as a distributed SQL query engine, allowing users to execute standard SQL statements against both in-memory datasets and external data sources. What distinguishes Hazelcast is its use of a distributed consensus subsystem to maintain strongly consis

Tinyproxy 是一个专为 POSIX 操作系统设计的轻量级 HTTP 和 HTTPS 代理守护进程。它作为一个系统级网络代理，以最小的资源开销管理 Web 流量。 该项目支持多种路由模式，包括用于将请求转发到后端服务器的反向代理，以及用于在无需客户端配置的情况下拦截网络流量的透明代理。它还包括一个头过滤器，用于修改或阻止特定的 HTTP 头以保护隐私和安全。 该软件结合了基于客户端子网的网络访问控制和协议过滤。为了系统安全，它实现了权限降级，在绑定到端口后以非特权用户身份运行。其他功能包括用于管理服务器和客户端之间速度差异的响应缓冲，以及用于监控代理统计信息的远程接口。

Helicone is an AI gateway and observability platform designed to intercept, manage, and monitor interactions with large language models. By acting as a reverse-proxy, it provides a centralized layer for routing requests across multiple AI providers, allowing developers to maintain consistent application logic while gaining deep visibility into model performance, usage, and costs. The platform distinguishes itself through a robust suite of traffic management and prompt engineering tools. It enables policy-driven control, including automatic failover between providers, rate limiting, and edge-b

dash.js is a browser-based JavaScript player for streaming adaptive video and audio content using the MPEG-DASH standard. It functions as an adaptive bitrate streaming client that adjusts media quality in real time based on network conditions and buffer levels. The project includes a playback engine capable of decrypting protected content through digital rights management systems and a specialized player for reducing latency in live broadcast events. It also serves as a playback metrics engine for monitoring and reporting real-time quality-of-experience data. The software covers a broad rang

This project is a network security tool providing an application network firewall, a DNS blocklist manager, and a VPN client with multi-hop capabilities. It functions as a traffic controller that allows or blocks internet access for specific applications on a device. The system distinguishes itself through a DNS-over-HTTPS firewall and traffic obfuscation tools that inject random packets to mask communication patterns and bypass regional internet censorship. It utilizes multi-hop routing to hide the origin of network traffic by chaining connections through multiple remote servers. The softwa