Mirim is an embedded SQL database encrypted at rest with XChaCha20-Poly1305 and Argon2id. It supports ML-KEM-768 sealed exports, ML-DSA-87 detached signatures and a durable write-ahead log. This package installs the mirim command line interface and mirim-sign.

Loopback web GUI that forces one local user's traffic through Tor's TransPort and DNSPort and drops everything else from that user (a fail-closed killswitch). It automates the upstream torando iptables rules together with torrc and resolv.conf management, adds an ip6tables IPv6 killswitch so v6 cannot leak around Tor, and reports live bootstrap, DNS-leak and exit status. Built from source (pure Python); the shims and systemd unit are rewired to the store, so the package is self-contained. This is the Linux build of a project that also targets macOS, the BSDs and Windows.

btpctl (command-line client) and btpd (daemon) from the BTP project, built from the v0.7 source release. Built-from-source dynamic binaries relinked against Guix's glibc.

Zupt is a pure-C11 backup compressor with post-quantum hybrid encryption. Since 4.1.0 it is a source-only build with no vendored binary SDKs: recipient modes are the native ML-KEM-768 + X25519 hybrid (--pq, recommended) and pure ML-KEM-768 with no classical component (--pq-only, for CNSA 2.0-style postures); the SDK-backed --pq-sdk and --pq-box modes are unsupported stubs, and password mode uses PBKDF2-SHA256. 5.0.0 makes the ML-KEM-768 implementation genuinely FIPS 203-conformant (earlier releases shipped round-3 CRYSTALS-Kyber under that label), cross-validated byte-for-byte against OpenSSL 3.5 during this package's build; BREAKING: --pq/--pq-only keys and archives from 4.2.1 or earlier no longer decrypt — regenerate keys and re-encrypt (password mode and plain compression are unaffected). 4.2.0 fixed a critical AES-CTR keystream-reuse flaw in --dedup archives (re-encrypt any written by 4.1.0 or earlier). Payload protection is AES-256-CTR + HMAC-SHA256 Encrypt-then-MAC with measured constant-time tag comparison and runtime AES-NI/SHA-NI dispatch; it embeds the VaptVupt LZ+ANS codec, which is a codec component rather than a compatibility command.

PySide6 (Qt 6) graphical frontend for Zupt: create, inspect and extract .zupt archives with password (PBKDF2-SHA256) or post-quantum recipient encryption via the native ML-KEM-768 + X25519 hybrid (--pq). The launcher pins the matching zupt CLI from the store via ZUPT_BIN, so GUI and CLI versions can never drift apart.

guixvis indexes every GNU Guix package and exposes the set through a keyboard-first terminal UI and a local web application. It fuzzy-searches name and synopsis, shows package details, licenses and source locations, browses dependency and reverse-dependency trees, and draws a force-directed dependency graph whose bubbles open the selected package. The web UI (guixvis web) serves the same graph on 127.0.0.1 with clickable bubbles, deep links and browser history.

MoneyPrinterTurbo generates short-form videos from a topic: an LLM writes the script and keywords, stock B-roll is pulled from Pexels/Pixabay, edge-tts adds a voice-over, subtitles are burned in, and FFmpeg assembles the final clip. This package ships the upstream v1.3.7 source (bundled fonts and music removed; WenQuanYi Zen Hei supplied as the default subtitle font) plus self-contained moneyprinterturbo (Streamlit WebUI) and moneyprinterturbo-api (FastAPI) launchers. On first run each launcher copies the app into $XDG_DATA_HOME/moneyprinterturbo and pip-installs the pinned requirements.txt into a local virtualenv, fetched over Tor via torsocks; thereafter all egress (LLM, material, TTS) is routed through Tor, the local server binds 127.0.0.1, and the store ffmpeg is pinned so no binaries are auto-downloaded. Keep subtitle_provider = "edge" to avoid a multi-GB Whisper model download.

Client, server, agent, and key tools from the official Evelin x86_64 musl-static release: ML-KEM-1024 key exchange, ML-DSA-87 authentication, ChaCha20-Poly1305 AEAD. Binaries are fully static and carry no runtime dependencies.

Turbo Recorder captures the screen and audio into a quality-first FFmpeg pipeline, auto-detecting the best hardware encoder (NVIDIA NVENC, then Intel/AMD VAAPI, then software x264), the native screen resolution, and the default microphone and system-audio sources. turborec is a cross-platform Python CLI with a Tkinter GUI (turborec gui); turborecorder is a Linux X11/Wayland bash launcher. Built from source and self-contained: the launchers pin the store python3/bash and the tools they call (ffmpeg, pactl, xrandr, xdpyinfo, lspci).

WirePlumber is a modular session / policy manager for PipeWire and a GObject-based high-level library that wraps PipeWire's API, providing convenience for writing the daemon's modules as well as external tools for managing PipeWire.

PipeWire is a project that aims to greatly improve handling of audio and video under Linux. It aims to support the usecases currently handled by both PulseAudio and Jack and at the same time provide same level of powerful handling of Video input and output. It also introduces a security model that makes interacting with audio and video devices from containerized applications easy, with supporting Flatpak applications being the primary goal. Alongside Wayland and Flatpak we expect PipeWire to provide a core building block for the future of Linux application development.

Esquema provides declarative Scheme containers backed by Linux user, mount, PID, UTS, IPC, network and cgroup namespaces. Its C library applies capability removal, seccomp-BPF, Landlock and descriptor isolation. Optional strict policies verify cgroup and open-file limits before payload execution, and PID-1 supervision provides signal forwarding and bounded teardown. The package includes Guile modules and a GNU Shepherd service definition.

This Emacs build implements graphical UI purely in terms of GTK.

GNU Emacs is an extensible and highly customizable text editor. It is based on an Emacs Lisp interpreter with extensions for text editing. Emacs has been extended in essentially all areas of computing, giving rise to a vast array of packages supporting, e.g., email, IRC and XMPP messaging, spreadsheets, remote server editing, and much more. Emacs includes extensive documentation on all aspects of the system, from basic editing to writing large Lisp programs. It has full Unicode support for nearly all human languages.

LibreWolf is designed to increase protection against tracking and fingerprinting techniques, while also including a few security improvements. This is achieved through our privacy and security oriented settings and patches. LibreWolf also aims to remove all the telemetry, data collection and annoyances, as well as disabling anti-freedom features like DRM.

Glances is a curses-based monitoring tool for a wide variety of platforms. Glances uses the PsUtil library to get information from your system. It monitors CPU, load, memory, network bandwidth, disk I/O, disk use, and more.

foot is a terminal emulator for systems using the Wayland display server. It is designed to be fast, lightweight, and independent of desktop environments. It can be used as a standalone terminal and also has a server/client mode.

Swaybg is a wallpaper utility for Wayland compositors.

Wayland is a project to define a protocol for a compositor to talk to its clients as well as a library implementation of the protocol. The compositor can be a standalone display server running on Linux kernel modesetting and evdev input devices, an X application, or a wayland client itself. The clients can be traditional applications, X servers (rootless or fullscreen) or other display servers.

libevdev is a wrapper library for evdev devices. it moves the common tasks when dealing with evdev devices into a library and provides a library interface to the callers, thus avoiding erroneous ioctls, etc.

The eventual goal is that libevdev wraps all ioctls available to evdev devices, thus making direct access unnecessary.

Wayland-Protocols contains Wayland protocols that add functionality not available in the Wayland core protocol. Such protocols either add completely new functionality, or extend the functionality of some other protocol either in Wayland core, or some other protocol in wayland-protocols.

Xwayland is an X server for running X clients under Wayland.

wlroots is a set of pluggable, composable, unopinionated modules for building a Wayland compositor.

Mako is a lightweight notification daemon for Wayland compositors that support the layer-shell protocol.