Code in Response to “The Trouble with Symlinks.”

What it does

safepath is tiny library written in C, targeting POSIX systems. Its core functionality is concentrated in a single function safepath_check . safepath_check performs one function: it takes a filename consisting of one or more path components, and returns an indication whether that name is safe for the process to use. Safe means that the pathname doesn't contain any component which could be tampered with by a user other than the effective user ID of the caller, or else root. Checking the permissions of an object is insufficient. Suppose we are a superuser process such as a server trying to access some application- specific password file /data/path/to/passwd . If we check that the permissions…from kylheku.com

In the maker’s words, at launch

See: https://news.ycombinator.com/item?id=32190032 This was written in about the past hour or so; it has no documentation or test cases yet. Think twice before relying on it in production. The idea is that we can perform a detailed validation of the trustworthiness of an absolute or relative path, as a…

• 
  Justpath – a simple utility to explore the PATH environment variable2024 · github.com · ▲76

  Inspect and refine PATH environment variable on Windows, Linux and MacOS. - epogrebnyak/justpath

• 
  TRUST – Coding Rust like it's 1989May 2026 · github.com · ▲178

  TRUST – Coding Rust like it's 1989. Contribute to wojtczyk/trust development by creating an account on GitHub.

• 
  TrustedRouterAug 2026 · trustedrouter.com · ▲157

  Every model with a unified interface. Privacy with proof.

• 
  Trustroot2018 · trustroot.io · ▲85

  Fraud and theft protection for cryptocurrency

• CS
  Checksum.sh verify every install script2022 · checksum.sh · ▲119

  The pattern of downloading and executing installation scripts without verifying them has bothered me for a while. I started messing around with a way to verify the checksum of scripts before I execute them. I've found it a really useful tool for installing things like Rust or Deno. It's written entirely as a shell script, and it's easy to read and understand what's happening. I hope it may be useful to someone else!

• 
  A context-aware permission guard for Claude CodeMar 2026 · github.com · ▲127

  We needed something like --dangerously-skip-permissions that doesn’t nuke your untracked files, exfiltrate your keys, or install malware. Claude Code's permission system is allow-or-deny per tool, but that doesn’t really scale. Deleting some files is fine sometimes. And git checkout is sometimes not fine. Even when you curate permissions, 200 IQ Opus can find a way around it. Maintaining a deny list is a fool's errand. nah is a PreToolUse hook that classifies every tool call by what it actually does, using a deterministic classifier that runs in milliseconds. It maps commands to action types…

• 
  /dev/null▲490

  a social network for devs

  Dev tools · 3d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 28d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 26d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 23d ago · openbot.run

• 
  Talanoa▲346

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 21d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 29d ago · corespeed.io

• 
  Locofy.ai▲720

  Hey there, I am Honey - Co-founder at Locofy. We, along with other makers, have been building Locofy.ai to help massively accelerate the builders - the designers, developers, product managers & founders, and we're excited to share it today with the HN Community. Locofy.ai simply converts designs into production-ready frontend code for web and mobile apps. It adapts to your preferred design tools, tech stack, and workflows with ease and lets you launch upto 4x faster, while letting designers design the way they want and giving high-quality responsive code that developers love. With this…

  Dev tools · 2022 · locofy.ai

• PO
  Porting OpenBSD Pledge() to Linux▲571

  Life & fun · 2022 · justine.lol

• 
  PocketBase – Open Source realtime backend in one file▲563

  Open Source realtime backend in 1 file. Contribute to pocketbase/pocketbase development by creating an account on GitHub.

  Dev tools · 2022 · github.com

• 
  ruttl▲552

  Visual & Design Feedback Tool that helps you review design, content and report bugs on websites, applications, PDFs and images.

  Dev tools · 2022 · ruttl.com

• 
  Pipes puzzle (a.k.a. Net) on a hexagonal grid▲537

  Hello, HN - I wanted to share this puzzle game I made during my vacation. I'm rather fond of the pipes puzzle where your goal is to restore a scrambled network of connections by rotating tiles. It's usually played on a grid of squares and this all started when I decided to make a programmatic solver for that kind of puzzle. Then I realized that with some minor changes the solver could generate new puzzle instances. I thought about what kind of puzzle to make and someone suggested a hexagonal grid. Adapting the generator wasn't too hard but then I had to create a way to play this variant. So…

  Life & fun · 2022 · hexapipes.vercel.app

• 
  Parsnip – Duolingo for Cooking▲536

  We're building Parsnip to create a "tech tree" of cooking skills that allows anyone to level up on the building blocks of cooking knowledge while tracking their progress over time. It took us a few iterations to figure out the right product; here's the story of our latest pivot: [https://parsnip.substack.com/p/a-new-hope] The goal is to create a personalized way to learn any recipe on the Internet, then use this as a springboard to help home cooks of all levels solve the problem of repeated meal planning in a 10x better way:…

  Work · 2022 · parsnip.ai