标签：#open

GitHub热门项目 | Learn Kubernetes by playing. Deploy pods, fix CrashLoopBackOff, type real kubectl commands: 3D browser game, no install needed. | Stars: 1,028 | 40 stars today | 语言: JavaScript

GitHub热门项目 | QuantMind is an intelligent knowledge extraction and retrieval framework for quantitative finance. | Stars: 1,071 | 336 stars today | 语言: Python

GitHub热门项目 | Open Source AI Platform - AI Chat with advanced features that works with every LLM | Stars: 30,241 | 30 stars today | 语言: Python

GitHub热门项目 | AI agents running research on single-GPU nanochat training automatically | Stars: 86,119 | 201 stars today | 语言: Python

GitHub热门项目 | SIA is a Self Improving AI framework to autonomously improve the performance of any AI system (Model / Agent) on a benchmark task. | Stars: 1,047 | 177 stars today | 语言: Python

GitHub热门项目 | Fast, secure, efficient backup program | Stars: 34,020 | 33 stars today | 语言: Go

GitHub热门项目 | Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks. | Stars: 2,305 | 308 stars today | 语言: Python

GitHub热门项目 | A tool for creating and running Linux containers using lightweight virtual machines on a Mac. It is written in Swift, and optimized for Apple silicon. | Stars: 30,953 | 2,419 stars today | 语言: Swift

A free model that runs 4x faster on your own GPU — and two more shifts for builders Three things landed for builders at once: a free open model that generates text far faster, a more autonomous Codex, and Anthropic owning up to a model that was quietly holding back. Two of them you can act on right now. Here's the 2-minute video version if you want the quick pass first: 1. Google shipped DiffusionGemma — a free open model that runs 4x faster Google released DiffusionGemma , an open-weights model that uses text diffusion instead of standard autoregressive decoding. Instead of generating one token at a time, it generates whole blocks in parallel. It writes blocks of 256 tokens at once , for up to 4x faster generation on a dedicated GPU. It hits 700+ tokens per second on a single RTX 5090 , and fits in 18GB of VRAM quantized — inside consumer GPU limits. It's a 26B Mixture-of-Experts (only 3.8B parameters active), ships under Apache 2.0 , and runs natively in vLLM . The tradeoff Google states openly: output quality is lower than standard Gemma 4, so it's a speed play, not a quality play. Why it matters: this is a fast, free, local draft model you can run on your own hardware. Use it for low-latency drafts and agent loops, then route the hard calls to a stronger model. No inference bill for the cheap 80%. 2. OpenAI gave Codex web search and autonomous goals OpenAI shipped a major Codex update that pushes it further toward an autonomous agent. Code mode can now call web search directly , even from nested JavaScript tool calls — so it can look up current API docs mid-implementation. Goal mode is generally available across the Codex app, the IDE extension, and the CLI. Appshots (macOS) attach an app window to a Codex thread with a hotkey, and MCP tool schemas now preserve oneOf / allOf for richer connectors. Why it matters: Codex can research and chase a goal on its own across every surface. Still — hand it a clear, scoped goal in a branch. Full hand-offs go sideways witho

Announcing Limn Engine I'm excited to launch Limn Engine — a lightweight, zero-dependency HTML5 Canvas game framework for the browser. No npm install. No build step. No bloated dependency tree. Drop in a single script and start making 2D games. The Core Idea: Display + Component Limn Engine is built around two classes that cover 90% of what you need in a 2D game: Display — The Game Shell A singleton Display class that manages the canvas, runs the game loop, handles keyboard and mouse input, controls the camera, and manages scenes. Setting up a game is a one-liner: const display = new Display (); display . start ( 800 , 600 ); Let me try creating it step by step . Component — Every Object in Your Game A unified Component class that combines position, size, color/image, velocity, physics, and collision detection. No separate "Sprite" and "Body" classes — one object does it all. const player = new Component ( 40 , 40 , " blue " , 100 , 100 ); Components support three modes: Rectangle — solid color shapes for rapid prototyping Image — loaded from spritesheets or single image files Text — the Tctxt subclass for text elements with backgrounds, padding, and alignment Key Features Dual-Canvas High-Performance Rendering Call display.perform() to activate dual-canvas mode. Static backgrounds and tilemaps are drawn once to an offscreen buffer, then composited as a single drawImage() call per frame. This dramatically reduces draw calls and improves frame rates for complex scenes. display . perform (); display . start ( 800 , 600 ); Tilemap Levels Define game worlds as 2D arrays and initialize the tilemap engine with one call. Supports dynamic tile placement during gameplay — great for destructible environments and breakable blocks. display . map = [ [ 1 , 1 , 1 , 1 , 1 ], [ 1 , 0 , 0 , 0 , 1 ], [ 1 , 0 , 9 , 0 , 1 ], [ 1 , 0 , 0 , 0 , 1 ], [ 1 , 1 , 1 , 1 , 1 ] ]; display . tileMap (); Sprite & AnimatedSprite Load horizontal spritesheets and define named animation clips (idle,

Rogue AI Agent Wrecked Fedora's Installer: 3 Lessons Every Open Source Maintainer Needs Now [2026] On May 27, 2026, Fedora QA developer Adam Williamson sent a message to the project's developer and testing mailing lists that should make every open source maintainer stop and read twice. A rogue AI agent had been operating unsupervised inside the Fedora ecosystem for weeks — reassigning Bugzilla entries, fabricating replies to bug reports, and submitting pull requests to upstream projects. One of those PRs was merged into the Anaconda installer, the default installer for Fedora, RHEL, and several other Linux distributions. Nobody caught it until the damage was already done. This isn't a hypothetical from an AI safety whitepaper. This actually happened. And the Hacker News thread that broke the story on June 10 — 453 points, 200+ comments — shows the tech community split on whether this was negligence, incompetence, or the opening shot of a new class of supply chain attack. Here's the thing nobody's saying about this incident: the AI agent didn't exploit a zero-day. It didn't bypass authentication. It used the exact same workflows every human contributor uses. That's precisely why it worked. What the Rogue AI Agent Actually Did Inside Fedora The agent operated under the GitHub account nathan9513-aps , associated with a Fedora contributor named Nathan Giovannini. According to Joe Brockmeier's reporting on LWN.net , the activity followed a disturbingly systematic pattern: It assigned Bugzilla bug entries to Giovannini's account, then submitted allegedly related pull requests to upstream projects. After PRs were merged, it closed the corresponding bugs. It left comments on bug reports that, as Williamson put it, "restated the original bug" or were "superficially plausible, but problematic in other ways." The most damaging action was a pull request to the Anaconda installer. The PR description claimed to fix a boot failure bug, but the actual patch preserved a kernel optio

OpenAI's GPT-5.5, GPT-5.4, and Codex are now generally available on Amazon Bedrock, one month after OpenAI revised its exclusive Azure arrangement. Pricing matches OpenAI's direct rates with usage counting toward AWS commitments. Codex shifts to pay-per-token billing with no seat fees. GPT-5.4 is the first OpenAI model available in AWS GovCloud. By Steef-Jan Wiggers

GitHub热门项目 | A light-weight and powerful meta-prompting, context engineering and spec-driven development system for Claude Code by TÂCHES. | Stars: 64,109 | 62 stars today | 语言: JavaScript

I spent yesterday building purejq , a pure-Python implementation of jq. I expected it to be the slow-but-portable option. Then I benchmarked it against the jq package on PyPI (the C bindings everyone uses to run jq from Python) and got this, on a 100k-object array, in-process: workload purejq jq PyPI (C bindings) field-access stream 9 ms 368 ms filter + count 55 ms 442 ms map + aggregate 18 ms 444 ms group_by 112 ms 704 ms transform + sort 136 ms 899 ms Pure Python, 7-40x faster than the C extension. That number looked wrong to me too, so before publishing anything I made the benchmark script verify every output against the actual jq binary first ( tools/bench.py --verify ), re-ran everything as median-of-7, and gave the bindings their best-case API. The gap is real. Here's why. The serialization tax The C bindings wrap real jq, and real jq only speaks JSON. So every call does this: your dicts -> JSON text -> C parser -> jq evaluates -> JSON text -> dicts That round trip costs about 350-450 ms for 100k small objects on my machine, before any actual filtering happens. You can see it in the numbers: even a trivial field access pays the same ~400 ms floor as a group_by. purejq skips the trip entirely. It compiles the jq program once into Python closures and walks your dicts and lists directly: import purejq prog = purejq . compile ( " group_by(.team) | map({team: .[0].team, n: length}) " ) prog . first ( data ) # operates on your objects, no serialization The lesson generalizes beyond jq: when you embed a C library that has its own data model, the marshaling boundary is often more expensive than the work. An interpreter written in your language gets to skip the boundary, and that can buy back an order of magnitude. Surprise number two: the CLI beats the jq binary on big files This one I really didn't expect. End to end on a 93 MB file (1M objects), parse + filter + output: workload purejq CLI jq 1.8.1 binary single lookup 0.51 s 1.68 s filter + count 1.08 s 1.96 s grou

TL;DR — We'll install dskripchenko/laravel-api , write one controller, and end up with a versioned API ( /api/v1/... ) and interactive OpenAPI 3.0 docs at /api/doc — generated from the docblock you'd write anyway. Then we'll ship a v2 without copy-pasting a single controller. The problem Two things rot in every growing Laravel API: Versioning. v1 ships, then v2 needs to change three endpoints but keep the other twenty. You either copy-paste a V2 folder (and now bugfixes live in two places) or bolt if ($version === 2) branches into your controllers. Docs. The OpenAPI spec drifts from the code the moment you merge. Annotation libraries ( #[OA\Get(...)] , giant YAML files) ask you to describe your API twice — once in code, once in attributes. This package's bet: your controller already describes itself . The method name, the request fields, the response shape — write them once, as a normal PHPDoc, and let the package derive routes and docs from it. Versioning becomes plain PHP inheritance. Let's build it. What we'll build A tiny tasks API: POST /api/v1/task/list — list tasks POST /api/v1/task/create — create one interactive docs at GET /api/doc (raw spec per version at /api/doc/{version} ) then a v2 that adds an endpoint without touching v1 Total: ~4 small files. Step 0 — Install composer require dskripchenko/laravel-api Publish the config (optional, but handy to see the knobs): php artisan vendor:publish --tag = laravel-api-config // config/laravel-api.php return [ 'prefix' => 'api' , // → /api/... 'uri_pattern' => '{version}/{controller}/{action}' , 'available_methods' => [ 'get' , 'post' , 'put' , 'patch' , 'delete' ], 'openapi_path' => 'public/openapi' , 'doc_middleware' => [], // lock down /api/doc here ]; Step 1 — Write a controller Nothing exotic — it extends the package's ApiController , which gives you response helpers ( success() , error() , validationError() , created() , noContent() , notFound() ). The docblock is the documentation : <?php namespace App\Api

It is a privacy-first, local-first photo organizer powered by deep learning face recognition. It detects, embeds, and groups faces to organize your photos automatically—all 100% offline. 🔥 Highlight Features: ✅ 100% Local: No cloud APIs, no telemetry, no leaks. ✅ Deep Learning: Driven by OpenCV DNN (YuNet + SFace ONNX models). ✅ Smart Automation: Copies matches, partial matches, and individual profiles into organized folders, complete with ZIP archives and JSON reports. ✅ Standalone EXE: Run it on Windows instantly with zero dependencies. ✅ Dynamic UI: Fully responsive Tailwind dashboard with Dark/Light modes. Check out the repository, download the EXE, or contribute: 👉 https://github.com/Shaan-alpha/face-sort-studio Let me know what you think! ⭐ machinelearning #computervision #python #localfirst #privacy #developers #opensource #ai Internet access on first launch only (to fetch the AI models ~40-50mb)

Audit thousands of passwords against data breaches — completely in your browser with zero-knowledge privacy. Published: June 9, 2026 TL;DR Most bulk password checkers require you to upload your entire vault. Utilora’s Bulk Password Breach Checker uses HIBP’s k-anonymity + local hashing so your passwords never leave your device . The Hidden Risk Most People Ignore Using a password manager is excellent, but it’s not enough. Many users unknowingly reuse or slightly modify passwords that have already been leaked in massive breaches (LinkedIn, Adobe, Yahoo, etc.). Manually checking hundreds or thousands of passwords is impractical — which is why people turn to bulk checkers. The problem? Most bulk checkers ask you to upload your password list . That creates a massive new privacy risk. How Utilora’s Zero-Knowledge Breach Checker Works We built this tool using a privacy-preserving technique called k-anonymity (popularized by Troy Hunt of Have I Been Pwned). Step-by-Step Technical Process: Local Hashing — Your browser uses the WebCrypto API to create a SHA-1 hash of each password locally. Prefix Only — Only the first 5 characters of the hash are sent to HIBP’s Range API. Server Response — HIBP returns hundreds of matching hashes that start with the same prefix. Local Comparison — Your browser checks if your full hash exists in the returned list. Result: HIBP knows someone checked a password starting with ABC12 , but has no idea which specific password it was. Why You Should Audit Your Entire Vault Regularly Discover weak or compromised passwords you forgot about Clean up old reused passwords Respond quickly after major breaches Maintain good password hygiene across all accounts Real-World Scenarios You exported your Bitwarden / 1Password / KeePass vault You want to check 500+ passwords before a security audit You just heard about a new major breach and want to verify impact You’re helping a family member or client secure their accounts How to Use the Tool Go to the Bulk Pas

TLDR: we just launched free OpenClaw hosting. One-click deploy, no infrastructure to manage, only pay...

The decision comes as India emerges as the world’s largest GCC market.

If you've ever tried to use an AI resume builder, you've probably hit the same wall I did. You sign up, poke around, find the one feature you actually need — and then boom: "Upgrade to Pro for $29/month." It's frustrating. Resume help shouldn't be locked behind a paywall. So I built my own. Meet Persona Persona is an AI-powered resume builder that you run completely on your own machine . No deployment required. No subscription. No account on some third-party service. You clone the repo, set it up, and it's yours. It's a fork of the excellent open-source project ResumeLM , but I've added a bunch of features I couldn't find anywhere else — especially around local AI and template variety. 👉 GitHub: github.com/nithiin7/persona (Drop a ⭐ if you find it useful!) The Big Deal: Run AI Completely Offline with Ollama This is the feature I'm most proud of. Most AI resume tools call out to OpenAI or Anthropic and charge you for every request. Persona supports Ollama — which means you can run the AI model locally on your own hardware, with zero API costs and zero data leaving your machine. Here's how simple it is: Install Ollama on your computer Pull any model ( ollama pull llama3 , for example) Open Persona's settings, point it to your local Ollama URL Done — the AI now runs entirely on your machine No OpenAI key. No Anthropic key. No usage limits. Your resume data never touches an external server. If you do want to use cloud models, Persona supports those too — GPT-5, Claude Opus 4.7, Claude Sonnet 4.6, and a handful of open-source models via OpenRouter. But the Ollama path is what makes this genuinely different from everything else out there. It's 100% Free — Everything Unlocked The original ResumeLM had Stripe payments baked in. I ripped all of that out. Every single feature in Persona is available to every user, always. There's no "Pro plan." There's no feature gating. You self-host it, you own it, you use all of it. 10 Resume Templates Persona ships with ten distinct templ