I built a tool for policy driven vetting of open source packages

What it does

Protect against malicious open source packages 🤖. Contribute to safedep/vet development by creating an account on GitHub.

• 
  Bor – Open-source policy management for Linux desktopsAug 2026 · getbor.dev · ▲197

  Hi HN! I've been working on Bor, an open-source system for centralized Linux desktop management. Bor consists of a lightweight Go agent and a central server. Policies are streamed to clients over mTLS/gRPC in real time—no polling—and currently support Firefox, Chrome, KDE, dconf, polkit and package management, with more coming. Version 0.8 introduces several new policy types - Thunderbird, Microsoft Edge for Business and FirewallD zones, along with a number of improvements and fixes. I'd love feedback on the architecture, policy model, and whether this is something you'd consider for…

• 
  SafeDep Vet2023 · safedep.io · ▲72

  GitLab CI Component that lets you seamlessly protect your pipelines from vulnerable and malicious open source dependencies. The component integrates directly into your CI/CD workflow through the GitLab CI Catalog and allows you to establish policy-driven guardrails using Common Expression Language (CEL). Key features: - Set your own opinionated security policies as code using CEL - Detect and block risky OSS components before they enter your codebase - Seamless integration as a native GitLab CI Component - Available directly in the GitLab CI Catalog Try and lets us know our thoughts!

• 
  gpt-oss-safeguardOct 2025 · openai.com · ▲119

  Open safety reasoning models with custom safety policies

• 
  A simple, highly commented, rootkit which attacks GCC and Python2014 · github.com · ▲94
• 
  A curated list of insecure Python packages2016 · github.com · ▲94

  A curated database of insecure Python packages. Contribute to pyupio/safety-db development by creating an account on GitHub.

• 
  I built an OSINT tools directory2025 · r00m101.com · ▲53

  I work on R00M 101, a Reddit-based OSINT profiler. While building it, I realized most open-source intelligence (OSINT) tools are scattered across GitHub, outdated blog posts, or random Discords. So I put together a public-facing directory of 100+ OSINT tools used by analysts, journalists, and security folks, free, filterable, and categorized by risk, platform, and use case. The idea was to make something useful and no-friction. Built with static HTML + SQL backend + a lot of caffeine. Would love feedback on how to improve the UX or tool curation. If anyone wants to contribute tools or help…

• 
  Run full iOS 16.5 firmware on Android Devices▲513

  Contribute to oosexgang/hackios-xnu-kernel development by creating an account on GitHub.

  Dev tools · 1d ago · github.com

• 
  /dev/null▲492

  a social network for devs

  Dev tools · 4d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 29d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 27d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 24d ago · openbot.run

• 
  Talanoa▲346

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 22d ago · talanoa.email

• 
  Flowla▲1,119

  Digital sales rooms that wow buyers

  Growth · 2023 · flowla.com

• 
  Passionfroot Discovery▲962

  Discover & book top creators to promote your product

  Growth · 2023 · passionfroot.me

• 
  Re:catch▲939

  If Google Form & Calendly had a baby

  Growth · 2023 · recatch.cc

• 
  Pitch 2.0▲886

  Create, share and analyze presentations faster than ever

  Work · 2023 · pitch.com

• 
  LeadDelta 3.0▲883

  CRM built for modern teams & creators powered by AI

  AI · 2023 · leaddelta.com

• 
  SpeedVitals▲829

  Hi HN, I’m Kashish, one of the co-founders of SpeedVitals, a platform for testing & monitoring website performance with a major emphasis on Core Web Vitals. Until now, our platform has only focused on Synthetic/Lab testing, such as Lighthouse tests and TTFB tests. But now, we have developed a Real-User Monitoring platform that doubles up as a Web Analytics tool. One major feature we have that most RUM tools lack is Performance Audits. Just like Lighthouse audits work on Lab test data, our audits work across all the real-user visits and gives suggestions on what task to prioritize first.…

  Dev tools · 2023 · speedvitals.com