OpenSSF Scorecard assesses open source projects for security risks through a series of automated checks. It evaluates practices such as branch protection, dependency update tooling, code review, CI tests, fuzzing, signed releases, and known vulnerabilities, producing a score that helps maintainers and consumers understand a project's security posture.

chkrootkit is a tool to locally check for signs of a rootkit installed on a Unix system. It contains a shell script that checks system binaries for rootkit modification, and several programs that perform various security checks including examining network interfaces for promiscuous mode, checking for deleted files still being accessed, and scanning for known rootkit signatures in log files and system binaries.

OSV-Scanner finds existing vulnerabilities affecting a project's dependencies. It is the official frontend to the OSV database and supports a wide range of languages and package managers including npm, pip, cargo, go modules, maven, composer, and many more. It can also scan container images and OS packages on Linux systems.

A command line driven installer with sane defaults.

Guix System installer. Boot a Guix ISO, run one binary, get a working system---libre Guix, Nonguix, PantherX, or an enterprise config from a server.

This is the living area and distribution channel for SOF firmware and topology binaries. It's still very much WiP and may churn a little until things settle down.

Ghostty is a terminal emulator that differentiates itself by being fast, feature-rich, and native. It uses platform-native UI and GPU acceleration. This package repackages the unofficial Debian binary build maintained at https://github.com/dariogriffo/ghostty-debian.

OpenTofu is a community-driven fork of Terraform, providing a declarative infrastructure-as-code workflow. It lets you define cloud and on-premises resources in human-readable configuration files that can be versioned, reused, and shared. OpenTofu generates an execution plan, builds a dependency graph, and applies changes in the correct order.

LXQt Theme based on Arc by horst3180 and LXQt dark theme

Paper is an open source FreeDesktop icon project

Forked version of breeze style theme with additional color-schemes for PantherX.

SDDM theme from Darkine KDE collection, a pure QtQuick2 based SDDM login theme

Chili login theme for SDDM.

Bun is a modern JavaScript runtime built for speed and compatibility. It serves as a drop-in replacement for Node.js while providing a unified toolkit that includes a package manager and bundler, making it ideal for building fast and scalable JavaScript applications.

Google Workspace CLI (gws) is a single command-line tool for Drive, Gmail, Calendar, Sheets, Docs, Chat, Admin, and other Google Workspace services. Its command surface is dynamically built from the Google Discovery Service, and it includes AI agent skills.

Broot is a command-line tool for navigating directory trees and managing files. It provides fast fuzzy searching, file preview capabilities, Git status integration, and customizable panels. Broot helps you quickly overview and navigate large directory structures.

WakaTime CLI is a command line interface used by all WakaTime text editor plugins to track coding activity. It provides automatic time tracking for programmers, with dashboards showing metrics and insights about coding habits.

Biome is a toolchain for web projects that formats and lints JavaScript, TypeScript, JSX, TSX, JSON, CSS, GraphQL, and HTML. It aims to be a fast, single-binary replacement for tools such as Prettier and ESLint.

Vatic is a TOML-configured AI agent framework. It runs prompts through LLM backends like Claude CLI and Ollama on cron schedules or channel triggers, with templated prompts, conversation memory, and multiple output targets including Telegram, Matrix, and email.

D2 is a modern diagram scripting language that turns text into diagrams. It supports flowcharts, sequence diagrams, class diagrams, and more with a readable syntax. D2 includes multiple layout engines and can output to SVG, PNG, and PDF formats.

Shelf is a command-line tool that walks input folders, extracts file metadata (EXIF, QuickTime/MP4, PDF info), and sorts files into a structured destination via configurable templates. It deduplicates by sha256 content hash and tracks run state in SQLite so re-runs are cheap and deterministic. Profile-driven TOML configuration targets photos, videos, documents, invoices, or any files with extractable metadata.