LegacyFixer

What it does

LegacyFixer scans Python dependencies for security vulnerabilities. Review findings first, with optional validated fix pull requests controlled per repository.

LegacyFixer scans selected Python repositories, records dependency-security results, and creates review-ready pull requests only when repository settings explicitly allow it. Start with scan results only. No code changes are made during the recommended first onboarding run. When enabled, fixes are proposed through isolated branches and pull requests for human review. Each repository controls whether PR creation is enabled and how many LegacyFixer PRs can be open. LegacyFixer is a self-service GitHub App. Begin with passive dependency-security scans and enable pull requests only when you're ready. The trial ends after seven days, even if fewer than three repositories are connected. Access…from legacyfixer.ai

• 
  A curated list of insecure Python packages2016 · github.com · ▲94

  A curated database of insecure Python packages. Contribute to pyupio/safety-db development by creating an account on GitHub.

• IM
  I made a bot that suggests fixes for Python bugs right inside the PR2021 · codereview.doctor · ▲9
• 
  I built a tool for policy driven vetting of open source packages2023 · github.com · ▲7

  Linux Foundation survey says 70-90% of modern software constitute OSS code. Yet we are stuck with tools that scan only for vulnerabilities in 3rd party libraries and that too with high degree of false positives. I built `vet` for policy and data driven analysis of 3rd party packages that goes beyond only vulnerability and allows codifying organisational policies related to OSS consumption. https://github.com/safedep/vet Looking forward to feedback and suggestions from HN :)

• SS
  SemVer Sentry: Protect open src projects from backward-incompat changes2017 · semver-sentry.com · ▲5
• FF
  Fixbounty – Find security issues in open source projects2021 · spatcher.io · ▲8
• 
  NPMScanNov 2025 · npmscan.io · ▲7

  Automated github dependency security scanner

• 
  /dev/null▲484

  a social network for devs

  Dev tools · 3d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 28d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 26d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 23d ago · openbot.run

• 
  Talanoa▲346

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 20d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 28d ago · corespeed.io

• 
  SimCity, but with Permits▲911

  A free city-building game in your browser. You are the mayor. You know what the city needs. Now get it past the zoning board, the neighbors, the appeals court and the next election.

  Life & fun · 2d ago · permit.petercai.com

• IV
  I've been paying for a rural Tanzanian's education for 10 years▲778

  Life & fun · 14d ago · tanzaniaeducationproject.org

• 
  Bigwords.page – Turn any screen into a sign. The URL is the app▲728

  Turn a phone, tablet or TV into a sign. Type a message and it fills the screen: welcome signs, timers, Wi-Fi passwords and more. No app, no account, free.

  Life & fun · 15d ago · bigwords.page

• 
  Spira Maxima▲578

  Video model that turns script into viral social media videos

  AI · 17d ago · spira.ai

• 
  Guitoro, a virtual guitar you strum with your keyboard▲573

  Play a free virtual guitar online with your keyboard or by touch. Slow songs down and see every chord, string and strum. Acoustic, classic, electric and bass.

  Life & fun · 9d ago · guitoro.com

• 
  Rill Browser▲540

  The browser where Claude Code and Codex work beside you

  AI · 17d ago · rill.love