Track Awesome listModify

2026-05-27 12:45:27

1. Awesome WSL

WSL Tools / Terminals

• KKTerm (⭐9) - A Windows-first, local-first terminal for managing connections, sessions, and workspaces.

2. Awesome Python Typing

Static type checkers

• zuban (⭐1.1k) - A Mypy-compatible Python type checker and Language Server built in Rust.

3. Awesome Neovim

File Explorer / Assembly

• adriancmiranda/glimpse.nvim (⭐2) - Fast multi-format file previewer with inline kitty graphics support, external pane previews, and integrations for file explorers and pickers.

Editing Support / Comment

• kuri-sun/todoage.nvim (⭐15) - Show how old your TODOs are.

4. Awesome Open Hardware

Projects

• pic0rick (⭐65) - an open-source Raspberry Pi pico platform for pulse-echo ultrasound imaging hardware

• Hacker Fab - Nanofabrication tools for making integrated circuits.

• freeDSP - A family of audio digital signal processors.

• Input Labs - Video game controllers featuring gyroscopic sensors.

• SlimeVR - Full-body tracking sensors for virtual reality and motion capture.

• VORON Design - No-compromise 3D printer designs.

• Millennium Machines - A project dedicated to designing desktop CNC mills.

Conferences

• Open Sauce - Annual convention focused on science and technology on on 17-19 July

• KiCon - Annual conferences about KiCad open source EDA organized in different regions

• RISC-V Summits - Annual summits organized by RISC-V International in different regions

• World RISC-V Days - Synchronized global events voluntarily organized by RISC-V communities worldwide

Books

• The Hardware Hacker - Book by Andrew "bunnie" Huang, how to design and manufacture open hardware products.

5. Awesome Readme

Examples

• doomemacs/doomemacs (⭐22k) - Beautiful and well organized. Centered title with section links and useful badges. Screenshot to show off the UI. Well-written introduction with a humorous quote that perfectly describes the project, plus a little demon that says "Yay Evil!" to complete the aesthetic. Concise and informative feature list followed by excellent installation instructions. Ends with helpful links to documentation and built-in shortcuts.

6. Awesome Selfhosted

Software / Software Development - API Management

• Aastro - Extensible API Gateway written in Go. (Source Code (⭐6)) Apache-2.0 Go/Docker

7. Public Apis

Text Analysis

• API: Audexum

  Description: Text-to-speech REST API with 43 voices and 33 languages

  Auth: apiKey

  HTTPS: Yes

  CORS: Yes

8. Awesome Cl

Other DB wrappers

• lmdb (⭐2) - Bindings to LMDB, the Lightning Memory-mapped Database, an ACID key-value database with MultiVersion Concurrency Control.

Portability layers

• DRef (⭐4) - Another definition introspection library with extensive documentation, tests and an emphasis on extensibility. MIT.

Online editors / Third-party APIs

• Try (⭐41) - Try is an extensible test anti-framework with equal support for interactive and non-interactive workflows, as well as Emacs integration. MIT.

9. Awesome Testing

Software / Test Automation Frameworks

• Jumpstarter (⭐28) - Open source hardware-in-the-loop testing framework for automated testing on real and virtual hardware with CI/CD integration.

10. Collective Ai Tools

Image Editing

• BulkPicTools - Free browser-based bulk image workspace. Upload once, chain 40+ tools (compress, convert, crop, background removal, face blur) without re-uploading. Files never leave your device. #free

Resume

• ATS Resume Checker - Free, open-source resume checker that scores your resume against a job description (0–100), flags missing ATS keywords, and runs fully in-browser so nothing is uploaded. #free #opensource

Search Engine

• BestAIFor.com - A curated directory of the best AI tools, organized by use case. #free

11. Awesome Honeypots

Commercial Honepots

• honerix - Honerix is a distributed system for capturing web-based attacks. Honerix works by simulating vulnerable applications, with the goal of pushing attackers into deploying their malicious payload.

Honeypots

• CyberBriefing IOC Feeds API - REST API with 63K+ active IOCs from 20+ feeds. Useful for cross-referencing honeypot-captured IPs and domains against known malicious indicators. Free tier available.

• Database Honeypots

  • Acra (⭐1.5k) - Effective SQL database protection suite: strong selective encryption, SQL injections prevention, intrusion detection system based on using honeypots/poison records in the database.

  • Delilah - An Elasticsearch Honeypot written in Python.

  • ESPot (⭐28) - An Elasticsearch honeypot written in NodeJS, to capture every attempts to exploit CVE-2014-3120.

  • Elastic honey (⭐191) - A Simple Elasticsearch Honeypot.

  • HoneyMysql - A simple Mysql honeypot project.

  • MongoDB-HoneyProxy (⭐93) - A MongoDB honeypot proxy.

  • NoSQLpot (⭐103) - The NoSQL Honeypot Framework.

  • mysql-honeypotd (⭐37) - Low interaction MySQL honeypot written in C.

  • MysqlPot (⭐22) - A mysql honeypot, still very very early stage.

  • pghoney (⭐20) - Low-interaction Postgres Honeypot.

  • sticky_elephant (⭐13) - medium interaction postgresql honeypot.

  • Delilah (⭐25) - Elasticsearch Honeypot written in Python (originally from Novetta).

  • ESPot (⭐28) - Elasticsearch honeypot written in NodeJS, to capture every attempts to exploit CVE-2014-3120.

  • ElasticPot - An Elasticsearch Honeypot.

  • Elastic honey (⭐191) - Simple Elasticsearch Honeypot.

  • MongoDB-HoneyProxy (⭐93) - MongoDB honeypot proxy.

  • NoSQLpot (⭐103) - Honeypot framework built on a NoSQL-style database.

  • mysql-honeypotd (⭐37) - Low interaction MySQL honeypot written in C.

  • MysqlPot (⭐22) - MySQL honeypot, still very early stage.

  • pghoney (⭐20) - Low-interaction Postgres Honeypot.

  • sticky_elephant (⭐13) - Medium interaction postgresql honeypot.

  • RedisHoneyPot (⭐25) - High Interaction Honeypot Solution for Redis protocol.

• Blockchain honeypots
  • Ethereum-honey-pot (⭐12) - Tool hacking-back hackers who tried to steal tokens.

• Web honeypots

  • Krawl (⭐533) - Lightweight deception server and anti‑crawler that deploys realistic fake web applications with low‑hanging vulnerabilities and randomly generated decoy data.
  • Cloud Active Defense (⭐106) - Cloud active defense lets you deploy decoys right into your cloud applications, putting adversaries into a dilemma: to hack or not to hack?
  • Express honeypot (⭐21) - RFI & LFI honeypot using nodeJS and express.
  • EoHoneypotBundle (⭐38) - Honeypot type for Symfony2 forms.
  • FCaptcha (⭐138) - Self-hosted CAPTCHA that acts as an inline honeypot, detecting bots and vision AI agents through 40+ behavioral signals, headless browser fingerprinting, and SHA-256 proof of work.
  • Glastopf (⭐597) - Web Application Honeypot.
  • Google Hack Honeypot - Designed to provide reconnaissance against attackers that use search engines as a hacking tool against your resources.
  • HellPot (⭐1.1k) - Honeypot that tries to crash the bots and clients that visit it's location.
  • Laravel Application Honeypot (⭐437) - Simple spam prevention package for Laravel applications.
  • Lophiid (⭐27) - Distributed web application honeypot to interact with large scale exploitation attempts.
  • Nodepot (⭐48) - NodeJS web application honeypot.
  • PasitheaHoneypot (⭐4) - RestAPI honeypot.
  • Servletpot (⭐16) - Web application Honeypot.
  • Shadow Daemon - Modular Web Application Firewall / High-Interaction Honeypot for PHP, Perl, and Python apps.
  • StrutsHoneypot (⭐72) - Struts Apache 2 based honeypot as well as a detection module for Apache 2 servers.
  • WebTrap (⭐69) - Designed to create deceptive webpages to deceive and redirect attackers away from real websites.
  • basic-auth-pot (bap) (⭐54) - HTTP Basic Authentication honeypot.
  • bwpot (⭐28) - Breakable Web applications honeyPot.
  • django-admin-honeypot (⭐1.1k) - Fake Django admin login screen to notify admins of attempted unauthorized access.
  • drupo (⭐58) - Drupal Honeypot.
  • flux (⭐4) - Dynamic Web Honeypot with Canary Token Integration that is being actively maintained by LLMs.
  • galah (⭐648) - an LLM-powered web honeypot using the OpenAI API.
  • honeyhttpd (⭐54) - Python-based web server honeypot builder.
  • honeyup (⭐29) - An uploader honeypot designed to look like poor website security.
  • modpot (⭐63) - Modpot is a modular web application honeypot framework and management application written in Golang and making use of gin framework.
  • nginx-honeypot - A simple honeypot based on NGINX configuration that logs and blocks bots scanning for vulnerabilities.
  • owa-honeypot (⭐70) - A basic flask based Outlook Web Honey pot.
  • phpmyadmin_honeypot (⭐68) - Simple and effective phpMyAdmin honeypot.
  • shockpot - WebApp Honeypot for detecting Shell Shock exploit attempts.
  • smart-honeypot (⭐18) - PHP Script demonstrating a smart honey pot.
  • Snare/Tanner - successors to Glastopf
    • Snare (⭐479) - Super Next generation Advanced Reactive honeypot.
    • Tanner (⭐230) - Evaluating SNARE events.
  • stack-honeypot (⭐24) - Inserts a trap for spam bots into responses.
  • tomcat-manager-honeypot (⭐12) - Honeypot that mimics Tomcat manager endpoints. Logs requests and saves attacker's WAR file for later study.
  • WordPress honeypots
    • HonnyPotter (⭐35) - WordPress login honeypot for collection and analysis of failed login attempts.
    • HoneyPress (⭐8) - Python based WordPress honeypot in a Docker container.
    • wp-smart-honeypot (⭐29) - WordPress plugin to reduce comment spam with a smarter honeypot.
    • WebDecoy (⭐1) - Zero-configuration WordPress plugin with invisible honeypot fields, behavioral analysis, and SHA-256 proof-of-work challenges to detect bots, headless browsers, and automation frameworks.
    • wordpot (⭐185) - WordPress Honeypot.
  • Python-Honeypot (⭐479) - OWASP Honeypot, Automated Deception Framework.

• Space/Satellite honeypots

  • HoneySat (⭐0) - Mimics multiple satellite missions

• Dynamic Deception Tool

  • Mimicry (⭐60) - Mimicry is a dynamic deception tool that actively deceives an attacker during exploitation and post-exploitation.

Guides

• The Security Canary Maturity Model

2026-05-26 12:23:20

1. Awesome Game Remakes

Action

• heretic2 (⭐29) - Heretic2 playground sandbox.

• Speed-Academy (⭐16) - Source port of the singleplayer of Star Wars Jedi Knight: Jedi Academy.

• Speed-Outcast (⭐10) - Source port of the singleplayer of Star Wars Jedi Knight II: Jedi Outcast.

FPS

• DOOM64EXUltra (⭐4) - A fork of DOOM 64 EX+ with new stuff and fixes

• OpenQ4 (⭐27) - The definitive source-port and game binary replacement to run QUAKE 4 on modern systems) - The definitive source-port and game binary replacement to run QUAKE 4 on modern systems..

• Q2RTXPerimental (⭐16) - My 'Experimental' fork of NVIDIA’s implementation of RTX ray-tracing in Quake II

• QuakeLive (⭐3) - A full source code reconstruction effort for QUAKE LIVE, based upon the QUAKE III: ARENA GPL source [WIP]

2. Awesome Osint

DNS / GitHub

• dnsx (⭐2.7k) - A fast and multi-purpose DNS toolkit from ProjectDiscovery for running DNS probes, resolving records and filtering DNS responses.

3. Awesome Github Wiki

Popular AI Tools

• CodeWiki (Google)

• DeepWiki

• RepoWiki (⭐130)

• LLM Wiki

• Github Wiki Generator (⭐13)

• OpenDeepWiki (⭐3.3k)

4. Awesome Cakephp

Plugins / Navigation

• Menu plugin (⭐3) - Composable menu builder and renderer for nested navigation, active-state matching, and breadcrumbs - and zero dependencies.

Software / Development Environment

• Vagrant - A portable development environment utility.

5. Awesome Bioie

Tools, Platforms, and Services / Repos for Specific Datasets

• II-Commons (⭐2) - A Node.js CLI and agent skill for deterministic, daily-updated retrieval across PubMed/PMC, arXiv, and supported US policy corpora, with metadata lookup and full-document Markdown retrieval.

6. Awesome Love2d

Development

• feather (⭐31) - Extensible Development Toolkit for LÖVE. Step by step debugger, hot reloading, remote log inspection, easy android and ios development builds, assisted release and upload, shader graph, particle system playground, and more!

Platforms

• lovejs-player - LÖVE ported to the web using Emscripten.

• Lutro - Portable game engine implementing a subset of the LÖVE API for retro games, runnable through RetroArch on many platforms.

UI

• LuaJIT-ImGui (⭐293) - LuaJIT bindings for Dear ImGui with a LÖVE module; supports all cimgui widgets using cpp names for easy example copying.

7. Awesome Mac

Voice-to-Text / Audio Record and Process

• Parakey (⭐3) - Native push-to-talk local dictation app for Apple Silicon Macs using Parakeet TDT v3 (CoreML/ANE).

8. Awesome Django

Hosting / PaaS (Platforms-as-a-Service)

• Upsun

9. Awesome Rust

Applications / Finance

• longbridge/longbridge-terminal (⭐837) - AI-native CLI for Longbridge Securities: real-time quotes, portfolio, trading for HK/US/A-share/SG.

Applications / Productivity

• AlexsJones/llmfit (⭐27k) [llmfit] - Terminal tool that right-sizes LLM models to your system's RAM, CPU, and GPU. Interactive TUI with hardware detection, multi-dimensional scoring (quality/speed/fit/context), community leaderboard, and support for Ollama, llama.cpp, MLX, vLLM, and more.

• AlexsJones/llmserve (⭐254) [llmserve] - Interactive TUI to serve local LLM models with auto-detected backends (llama-server, KoboldCpp, LocalAI, MLX, Ollama, vLLM, LM Studio). Features source tree navigation, per-backend presets, live logs, and vision model support.

Resources / Web programming

• Performance
  • How to avoid bounds checks in Rust (without unsafe!) - All you need to know about optimizing bounds checks
  • Performance of Rust language - An overview of Rust's performance-oriented language features
  • The Rust Performance Book - Tips for optimizing Rust programs

10. Awesome Crystal

Implementations/Compilers

• GiavaScript (⭐1) - Open-source, cross-platform JavaScript runtime

11. Awesome Selfhosted

Software / Media Management

• Downtify ⚠ - Download Spotify music with album art and metadata. (Source Code (⭐234)) GPL-3.0 Docker

12. Public Apis

Books

• API: Amanah Sunnah

  Description: Semantic search across Quran, Hadith, Tafsir & 18K+ Rijal narrators

  Auth: apiKey

  HTTPS: Yes

  CORS: Yes

Geocoding

• API: HackMyIP

  Description: IP geolocation, ISP and privacy/VPN scoring, email breach checks, DNS and WHOIS lookups

  Auth: No

  HTTPS: Yes

  CORS: Yes

Transportation

• API: Orizn Visa

  Description: Visa requirements for 199 countries, 39K+ passport-destination pairs in 15 languages

  Auth: apiKey

  HTTPS: Yes

  CORS: Yes

2026-05-25 12:47:18

1. Awesome Gemini Cli

Commands & Extensions

• gemini-discord (⭐3) - Turn your local Gemini CLI agent into an always-on Discord presence that also doubles as your personal server admin.

2. Awesome Iot

Software / Frameworks

• Iotellect - A low-code IoT platform for device integration, data collection, and real-time visualization. Supports MQTT, OPC UA, Modbus, and 50+ industrial protocols with drag-and-drop UI builder.

Software / Miscellaneous

• BirdNET-Go (⭐1.2k) - Realtime wildlife soundscape analyser with multi-model AI inference, MQTT publishing with Home Assistant discovery, and web dashboard.

3. Awesome Dart

Tools

• FlutterTrends - Daily download trends, rankings, and repository health for 20k+ Flutter packages on pub.dev.

4. Awesome Terraform

Tutorials and Blog Posts / Google Cloud

• Self-host n8n on Google Cloud Run (⭐605) - Terraform configuration and guide for deploying n8n workflow automation on Cloud Run with Cloud SQL, Secret Manager, and optional Queue Mode via Redis.

5. Awesome Playcanvas

3D Gaussian Splatting / YouTube Playables

• LichtFeld Studio Gallery - Example scenes trained by LichtFeld Studio.

• SplatTour - Photorealistic 3D tours of any space, generated from a video shot with the user's phone.

6. Awesome Integration

Projects / API Management

• Gravitee.io API Management (⭐416) (⭐416) - A lightweight, open-source platform offering flexible API governance, robust security, and straightforward configuration.

• WSO2 API Manager (⭐981) (⭐979) - A fully open-source API platform offering robust governance, flexible deployment, and community-driven innovation.

Projects / API Documentation

• Zudoku (⭐536) (⭐531) - A customizable framework built on OpenAPI, focused on delivering exceptional developer experiences through quality documentation.

Projects / API Gateway

• Higress (⭐8.4k) (⭐8.5k) - A next-generation cloud-native gateway based on Envoy and Istio, offering high performance, easy-to-use, and rich plugin extensibility.

Projects / Data Integration

• Estuary Flow (⭐927) (⭐922) - Versatile, scalable platform that provides both real-time and batch data integration for ETL and ELT pipelines.

Projects / Data Mapping Solution

• DataSonnet (⭐37) - A template-based data transformation library built on Jsonnet, tailored for system integration.

Projects / Enterprise Service Bus

• WSO2 Enterprise Integrator (⭐399) (⭐400) - API-centric, cloud-native integration platform offering robust, distributed capabilities for modern software architectures.

Projects / Message Broker

• LavinMQ (⭐950) (⭐943) - High-performance message queue server implementing AMQP 0-9-1 and MQTT protocols, built with Crystal for exceptional throughput and minimal resource usage.

Projects / Self-Service Integration

• n8n (⭐189k) (⭐188k) - Open-source workflow automation tool with 400+ connectors, giving you full control over your data and integrations.

Resources / API Specification

• Arazzo Specification (⭐433) (⭐433) - A standard, programming language-agnostic representation for describing sequences of API calls (workflows) and their dependencies.

• TypeSpec (⭐5.7k) (⭐5.7k) - A highly extensible language for describing API data shapes and protocols, capable of compiling to OpenAPI, JSON Schema, Protobuf, and other formats.

Resources / Data Formats

• YAML (⭐471) (⭐467) - A human-friendly and easy-to-read data serialization format that is widely used for configuration files and data exchange. It supports rich data types and is compatible with most programming languages.

7. Awesome Cli Apps

Productivity / Note Taking, Lists, Task Management

• gtasks (⭐151) - Manage Google Tasks.

Productivity / Calendars

• ical (⭐53) - Manage macOS Calendar.

• rem (⭐103) - Manage macOS Reminders.

Utilities / Calendars

• amazon-orders (⭐146) - Retrieve Amazon order history.

Utilities / Science

• birda (⭐23) - Identify bird species from audio recordings.

8. Awesome Go

Other Software / Libraries for creating HTTP middlewares

• tldx (⭐1.8k) - Bulk domain availability checker using RDAP, DNS, and WHOIS fallback with keyword permutation generation.

Standard CLI

• memsh (⭐7) - Virtual bash shell in Go: executes shell commands against an in-memory filesystem (afero), with WASM plugin support and an embeddable HTTP server.

Game Development

• GOKe (⭐35) - Data-Oriented (DOD), archetype-based ECS engine utilizing an L1 cache-aligned chunked SoA layout for predictable, stepless memory growth and zero-allocation execution paths.

Workflow Frameworks / Libraries for creating HTTP middlewares

• Flowbaker (⭐198) - Self-hosted execution engine for building, connecting, and automating no-code workflows.

Code Analysis / Libraries for creating HTTP middlewares

• structalign (⭐1) - Shows how a struct's fields could be reordered to use less memory, printing a diff instead of rewriting files.

9. Awesome Mac

Security Tools / Audio Record and Process

• PureSnitch (⭐9) - Open-source application firewall with a Little Snitch-style world map, rule manager, DNS over HTTPS, and pf-based blocking, with no telemetry.

10. Awesome Rust

Applications / Web

• konippi/servo-fetch (⭐107) - A self-contained browser engine that fetches, renders, and extracts web content as Markdown, JSON, or screenshots — no Chromium, no API key. CLI, Python, MCP server.

Libraries / Parsing

• firecrawl/pdf-inspector (⭐1.3k) - Fast Rust library for PDF classification and text extraction.

11. Awesome Selfhosted

Software / Games

• DDraceNetwork - Cooperative platformer version of DDRace, a Teeworlds modification featuring unique cooperative gameplay. (Source Code (⭐780)) Zlib C++

12. Free for Dev

APIs, Data, and ML

• vatnode - EU VAT number validation REST API with VIES and national tax-registry fallback, returning the official VIES consultation number for audit records. Free tier of 100 validations/month, no credit card.

2026-05-24 12:35:39

1. Awesome Bitcoin

Utilities

• CryptoCalk - Bitcoin profitability and on-chain calculators: ASIC/GPU mining ROI, hash rate converter, halving countdown, Mayer Multiple, Stock-to-Flow (S2F), Rainbow chart, profit/loss, DCA simulator, tax estimator, liquidation price. Client-side, no signup, available in 6 languages.

2. Awesome Playcanvas

3D Gaussian Splatting / YouTube Playables

• Heritage Expolorer - Archive of cultural heritage and other interesting sites.

3. Awesome Rust

Applications / Productivity

• tw93/Pake (⭐49k) - Turn any webpage into a desktop app with one command using Rust and Tauri. Lightweight, fast, and supports macOS, Windows, and Linux.

Applications / Text processing

• brevity1swos/rgx (⭐198) [rgx-cli] - Terminal regex debugger with real-time matching, step-through debugger, 3 engines, code generation, and live stream filtering.

4. Awesome Readme

Examples

• yeaight7/awesome-ai-devtools (⭐4) - Auto-Generated README built from structured metadata, with a custom SVG header, comparison matrix, category index, tool tables, and review-backed summaries.

Articles

• "Top ten reasons why I won't use your open source project" - Adam Stacoviak

Tools

• GPRM (⭐958) - A tool to generate a customized GitHub Profile README with a modern UI.

• README Typing SVG (⭐8.9k) - Dynamically generated, customizable SVG that gives the appearance of typing and deleting text. Perfect for profile READMEs.

• READMINE (⭐78) - A thorough, clear and self-describing README file template for software projects; copy it and edit it as needed.

• user-statistician (⭐129) - A GitHub Action that generates SVG of detailed GitHub user activity for profile readmes.

5. Awesome Selfhosted

Software / Games

• Razzia (⭐800) - Quiz game platform, designed for smaller self-hosted events (alternative to Kahoot!). MIT Nodejs/Docker

Software / Personal Dashboards

• Nimbus - Modern drag-and-drop homelab dashboard with visual editor and simple configuration. (Demo, Source Code (⭐102)) AGPL-3.0 Docker

6. Awesome Cpp

Database

• Doltlite (⭐107) - Version Controlled SQLite. [PublicDomain/Apache2]

2026-05-23 12:05:25

1. Awesome Iot

Software / Frameworks

• ForestHub.ai - Platform for building, deploying and orchestrating embedded and edge AI agents on machines, controllers, sensors and industrial edge devices. Visual builder, local runtime, generated embedded code, hybrid edge-cloud orchestration.

2. Awesome V

Command-line

• PhoneSnatchProof (⭐1) - An FS that encrypts your app data and keeps them on RAM (with a backup).

3. Awesome Rails

External Resources / Video tutorials

• TutorialSearch - Free cross-platform search engine indexing 50,000+ tutorials from Udemy, Skillshare, Pluralsight, and other major learning platforms across 45+ categories.

4. Webcomponents the Right Way

Design Systems

• NVIDIA Elements (⭐8) - The Design Language and UI Agent Harness for AI/ML Factories, Robotics, and Autonomous Vehicles.

5. Awesome Mac

Translation Tools / Audio Record and Process

• Live Translator (⭐14) - Real-time on-screen translation of any system audio (YouTube, podcasts, meetings) using OpenAI or Gemini.

6. Awesome Cpp

Miscellaneous

• ffc.h (⭐186) - Single-header c99 accelerated float/double parsing. Port of the fast_float library. [Apache-2.0/BSL-1.0/MIT]

2026-05-22 12:33:02

1. Awesome Iam

Cryptography

• Real World Crypto Symposium - Aims to bring together cryptography researchers with developers, focusing on uses in real-world environments such as the Internet, the cloud, and embedded devices.

Zero-trust Network / Identifiers

• What is BeyondCorp? What is Identity-Aware Proxy? - More companies add extra layers of VPNs, firewalls, restrictions and constraints, resulting in a terrible experience and a slight security gain. There's a better way.

Password-less auth / Security key

• Getting started with security keys - A practical guide to stay safe online and prevent phishing with FIDO2, WebAuthn and security keys.

Password-less auth / JWT

• JWT, JWS and JWE for Not So Dummies! - A signed JWT is known as a JWS (JSON Web Signature). In fact a JWT does not exist itself — either it has to be a JWS or a JWE (JSON Web Encryption). Its like an abstract class — the JWS and JWE are the concrete implementations.

Authorization / Policy models

• GCP's IAM syntax is better than AWS's - The minutiae of permission design in GCP improves the developer's experience.

Authorization / ReBAC frameworks

• Zanzibar: Google's Consistent, Global Authorization System - Scales to trillions of access control lists and millions of authorization requests per second to support services used by billions of people. It has maintained 95th-percentile latency of less than 10 milliseconds and availability of greater than 99.999% over 3 years of production use. Other bits not in the paper. Zanzibar Academy is a site dedicated to explaining how Zanzibar works.

Authorization / Macaroons

• Macaroons: Cookies with Contextual Caveats for Decentralized Authorization in the Cloud - Google's original paper.

OAuth2 & OpenID / Other tools

• Descope - Drag and drop your auth. Add authentication, user management, and authorization to your app with a few lines of code.

Secret Management / Hardware Security Module (HSM)

• HSM: What they are and why it's likely that you've (indirectly) used one today - Really basic overview of HSM usages.

Competitive Analysis / GDPR

• 163 AWS services explained in one line each - Help makes sense of their huge service catalog. In the same spirit: AWS In Plain English.

2. Awesome Billing

Pricing

• The Network Monetization Map: Aligning Incentives with Revenue - 6 models of monetization relying on network effect.

• The 5 Pillars of PriceOps - A manifesto inspired by the DevOps movement in which pricing is no longer ossified, but is practiced as a responsive iteration process, and implemented as a flexible property of the system.

Pricing / Usage-based Pricing

• Credyt - Real-time monetization infrastructure for AI products: meter usage, charge from prepaid balances, and ship a branded customer portal without writing frontend. Commercial SaaS.

• Reconcile Your Monthly GCP Invoice with BigQuery Billing Export - Behind the quest of this developer to track its expenses, you get a glimpse on cloud billing difficulties. While not explicitly pointed out, pricing cloud resources is hard and the result of quantization, granularity and rounding, between space, time and currencies.

• Electropedia: Tariffs for electricity - Before the cloud, there was another metered resource priced by its usage: electricity. Here is a detailed (and multi-lingual) taxonomy of its vocabulary from the International Electrotechnical Commission.

Pricing / Market Research

• Finding the max revenue price mark for digital products - “To find the optimal price that provides maximum revenue for your product you will need to field-test several price points; you then reconstruct the revenue curve and find the peak.”

Accounting / Double-Entry Model

• The Double-Entry Counting Method - Same premise as above, but way more detailed and complete, as it adds reporting and implementation details.

Contracts / Currencies

• CUDs vs. Commit Contracts vs. SUDs in Google Cloud - Explains the differences between various types of discounts and usage commitments in GCP.

Taxes / European VAT

• How to correctly setup SaaS subscriptions to charge VAT in Europe - “If you think you can just setup a simple Stripe integration and move on, like us, you'd be sadly mistaken.”

Invoice / Structure

• Content of EU invoices - The information required on a EU invoice is detailed by Article 226, Section 4 (Content of invoices) of Council Directive 2006/112/EC on the common system of VAT.

Invoice / Integrity

• Digital signatures: how Sleek leverages Cloud HSM to guarantee the integrity of legal documents - Here is a great way to rely on GCP's HSM to digitally sign documents and provide an immutable audit-trail. Might be applied to invoices as well as contract agreements.

Payments / Electronic invoices

• Avoiding Double Payments in a Distributed Payments System - RDBMS were build for banks around transactions to solve that specific issue. Then NoSQL came forcing us to carefully implement systems to avoid double spending.

• How ACH works: A developer perspective, part 1, part 2, part 3, part 4, part 5.

Fraud / Cards

• Credit Card Fraud Detection using Autoencoders in Keras - Tutorial on how to rely on anomaly detection to implement suspicious card transactions.

UX/UI / Billing

• Apple In-app purchase Human Interface Guidelines - Guide and recommendation on how to make auto-renewable subscriptions user-friendly.

Business Intelligence / Metrics

• 16 Startup Metrics - The 2 critical metrics being Customer Acquisition Cost (CAC) and Customer Lifetime Value (CLV).

Business Intelligence / Customer Lifetime Value

• You're all calculating churn rates wrong - “On the surface, churn rate may seem like a natural proxy for changes in customer lifetimes. Let's dig into why that is not true.” Churn rate is not a meaningful metric to compute CLV: during the customer lifetime, the churn probability is not constant. Most of the time because of your free trial and vouchers. This article illustrate the influence of the distribution used to model the probability of a customer quitting.

3. Awesome Fuzzing

Tools / API

• WuppieFuzz (⭐200) - A coverage-guided REST API fuzzer developed on top of LibAFL.

4. Awesome Lowcode

Educational

• TutorialSearch - Free cross-platform search engine indexing 50,000+ tutorials from Udemy, Skillshare, Pluralsight, and other major learning platforms across 45+ categories.

Misc

• ShopSavvy - Product data API with real-time pricing from thousands of retailers and price history.

5. Awesome Windows

Command Line Tools

• Fastfetch (⭐23k) - A maintained, feature-rich and performance oriented, neofetch like system information tool.

• winfetch (⭐1.8k) - Command-line system information utility written in PowerShell.

6. Awesome Bitcoin

Additional Resources

• BitcoinCompanies - Corporate Bitcoin treasury map and leaderboard with claimed vs verified holdings.

7. Awesome Cli Apps

Development / Chat

• dotenv-diff (⭐49) - Validate environment variable usage in a codebase.

8. Awesome Osint

Email Search / Email Check / GitHub

• MailAccess (⭐30) - Free email OSINT tool, checks 800+ platforms, breach exposure via HIBP, infostealer logs via Hudson Rock, and builds a cross-platform identity graph with confidence scoring. pip install mailaccess

Academic Resources and Grey Literature / GitHub

• Wiley

9. Awesome Datascience

Tutorials

• TutorialSearch - Free cross-platform search engine indexing 50,000+ tutorials from Udemy, Skillshare, Pluralsight, and other major learning platforms across 45+ categories.

10. Awesome Rust

Applications

• mmalmi/nostr-vpn (⭐581) [nvpn] - Tailscale-style private mesh VPN built on Nostr identities and a FIPS-backed data plane. Features native cross-platform apps (macOS, Linux, Windows, Mobile) and a CLI/daemon.

11. Awesome Go

DevOps Tools / Libraries for creating HTTP middlewares

• Updatecli (⭐913) - A universal declarative update policy engine.

12. Awesome Cpp

Database

• Zvec (⭐9.7k) - A lightweight, lightning-fast, in-process vector database. [Apache2] website