Design
Preset
Background
Text
Font
Size
Width
Account Pricing

The Git Times

AI Models
Claude Opus 5.5 $20/M —GPT-6.1 Sol $10/M —Gemini 3.1 Pro Preview $12/M —Grok 4.7 $6/M —DeepSeek V4 Pro 0813 $1.98/M ▼53%Qwen3.8 Max Prime $12/M —Kimi K3 $15/M —
Full Markets →

ZML Unifies AI Inference Across Hardware With Zero Code Changes 🔗

Built in Zig with MLIR and Bazel, it compiles models to run optimally on NVIDIA, AMD, Intel, TPU, and Trainium accelerators.

zml/zml · Zig · ▲ 18 in 1d Est. 2024 · Latest: zml-smi-v0.3.0

ZML is a production inference stack designed to eliminate hardware lock-in for AI workloads. By leveraging Zig, MLIR, and Bazel, it enables developers to write model-serving code once and deploy it across diverse accelerators—including NVIDIA CUDA, AMD ROCm, Intel OneAPI, Google TPU, and AWS Trainium—without rewriting or sacrificing performance.

The platform achieves this through a unified compilation pipeline that targets multiple backends via platform-specific flags, allowing the same binary to adapt to different hardware at runtime.

Recent activity shows steady maintenance, with the latest release (v0.3.0) focusing on tooling improvements: the zml-smi utility now includes Prometheus metrics, CSV export, macOS host info, and ARM64 CUDA support. Developers can run LLMs like Llama 3.1 or Qwen 3.5 using a unified CLI, authenticate with Hugging Face for gated models, and load weights from local disks, S3, or HF hubs via a virtual filesystem layer. Examples cover end-to-end flows from MNIST classification to multi-chip sharding with profiling.

Despite its ambition, ZML remains early in adoption. The project has 60 open issues and relies on a niche toolchain—Zig, MLIR, and Bazel—that may present a steep learning curve for teams accustomed to PyTorch or TensorFlow serving stacks. While it promises portability and peak performance, real-world benchmarking at scale across heterogeneous environments is still limited, leaving questions about long-term operational maturity and debugging complexity in production.

The catch: ZML’s reliance on cutting-edge, less-mainstream tools like Zig and MLIR creates a steep onboarding barrier for teams without low-level systems expertise.

Why this leads today ZML’s integration of Zig, OpenXLA, MLIR, and Bazel enables hardware-agnostic AI inference without compromise, marking a novel convergence of systems and compiler technologies not previously covered in AI or infrastructure reporting.

Use Cases
  • Deploy Llama 3 models across cloud and edge hardware
  • Run inference benchmarks on AMD, Intel, and TPU accelerators
  • Serve ML workloads from S3 or Hugging Face with unified CLI
  • Profile sharded model execution with logical mesh partitioning
  • Export hardware metrics via Prometheus for monitoring dashboards

Source: zml/zml — based on the README and release notes.

More on the Front Page

Flux Unifies Omarchy Desktops with Phones for Seamless Cross-Device Control 🔗

Latest release adds unpair feature and patches security findings from full audit

bjarneo/flux · Swift · 407 stars 4d old

Flux connects an Omarchy computer to Android, iPhone, or Mac devices over local network or Tailscale, enabling file sharing, clipboard sync, notification mirroring, media control, and using the phone as a camera or microphone. Built in Swift, it includes a CLI (flux-cli), background daemon (fluxd), native Qt window, Omarchy shell plugin, and platform-specific apps for Android (≥10), iOS (≥17), and macOS (≥14).

The daemon listens on TCP ports 1716–1764 and UDP 1716, designed to work within Omarchy’s default firewall without new inbound rules. Setup involves cloning the repo, running flux-cli setup, and pairing devices via local network or Tailscale. Release v0.8.0 introduces an unpair action in the desktop device header and addresses all findings from a comprehensive security review, improving trust in device permissions and data handling. Checksums are provided for all binaries, including APK, IPA, and package formats.

The catch: Flux requires same-network or Tailscale connectivity and lacks native Windows or Linux phone apps, limiting cross-platform flexibility for non-Omarchy desktop users.

Use Cases
  • Developers sync clipboard code between Omarchy workstation and Android phone
  • Remote workers use iPhone as webcam for Omarchy-based video conferencing
  • Teams share media controls and notifications across desktop and phone during pair programming

Source: bjarneo/flux — based on the README and release notes.

AgentOffice turns GitHub repos into a shared 3D workspace for AI coding agents 🔗

Users assign Claude Code, Codex, or other agents to desks with live terminals and synchronized PRs

AgentSystemLabs/agent-office · TypeScript · 420 stars 4d old

AgentOffice maps each GitHub repository to a floor in a 3D office where AI agents like Claude Code, Codex, and Grok sit at desks. Their live terminals display on in-office laptops, letting multiple users view and interact via keyboard or voice.

Issues and PRs appear on cork-board walls, and agents can be assigned tasks with a keystroke, spawning linked worktrees and PRs across projects. A /lite 2D mode supports phones or low-end devices. The system runs locally or deploys to AWS, Azure, Railway, Fly.io, Dokploy, or any server.
The catch: Built for one developer’s evolving workflow, it expects breaking changes and frequent UI shifts between releases.

Use Cases
  • Developers assign AI agents to debug code across multiple repos
  • Teams review live agent terminals during sprint planning sessions
  • Engineers manage cross-repo PRs via shared 3D office interface

Source: AgentSystemLabs/agent-office — based on the README and release notes.

Rust rewrite fuses MW2, Skate 3, and Minecraft into one playable hybrid 🔗

Runs offline after downloading official Minecraft 26.3 assets on first launch

chasmlol/2010-rust-rewrite-mashup · Rust · 362 stars 2d old

The project chasmlol/2010-rust-rewrite-mashup combines a from-scratch Rust rewrite of Modern Warfare 2 with Skate 3 physics and a full Minecraft 26.3 world.

Press J to switch to skate mode on any map, or fight mobs with MW2 guns in the blocky terrain. It downloads 125 MB of official Minecraft assets from Mojang on first run, then plays offline. Controller support, rebindable buttons, and MW2-style HUD remain intact. Guns appear in a MW2-themed hotbar, and breaking blocks scales with real weapon damage.
The catch: Frame rate drops and stutter occur in bot matches due to upstream IW4L script overhead, and skateboards vanish on some maps.

Use Cases
  • Gamers wanting MW2 combat in a destructible Minecraft world
  • Developers studying Rust engine rewrites of legacy titles
  • Players seeking cross-game physics mods with official asset integration

Source: chasmlol/2010-rust-rewrite-mashup — based on the README and release notes.

OpenAI MCP Extensions Let Plugins Feel Like Native ChatGPT Features 🔗

TypeScript and Python SDKs enable sidebar access, custom viewers, and resource search for developers

openai/mcp-extensions · TypeScript · 368 stars 1d old

OpenAI’s MCP Extensions project provides SDKs for building ChatGPT plugins that integrate deeply with the interface. Developers can render custom file viewers, add sidebar panels, and let users search plugin resources directly from the composer.

The TypeScript package @openai/mcp-extensions and Python package openai-mcp-extensions support MCP servers and apps. Examples include the Bits & Bolts plugin for CAD part selection via thumbnails. The project launched with initial Node and Python releases under Apache 2.0.
The catch: The extension is early-stage (v0.1.0) with six open issues and limited real-world adoption beyond examples.

Use Cases
  • Developers build ChatGPT sidebar plugins for CAD tools
  • Teams add custom file viewers for proprietary formats
  • Creators enable in-chat search of plugin documentation and resources

Source: openai/mcp-extensions — based on the README and release notes.

CrossPoint Reader Adds TrueType Font Support for ESP32 e-Ink Devices 🔗

Users can now install .ttf fonts directly without conversion, expanding customization options.

crosspoint-reader/crosspoint-reader · C · 8.1k stars 10mo old

The open-source e-reader firmware CrossPoint Reader released version 1.6.

5 with native TrueType (.ttf) font support for ESP32-based devices like the X4Pro and reTerminal Sticky. Users can drop font files into the SD card’s /fonts/ folder and select them in settings, eliminating the need for proprietary .cpfont conversion. The update also introduces a Cover Grid home theme and improved footnote navigation. Built on C for ESP32C3 and ESP32S3 chips, CrossPoint handles EPUB 2/3, touch gestures, and wireless OPDS sync. The catch: Nearly 600 open issues suggest ongoing stability challenges despite active development.

Use Cases
  • Developers flash e-reader firmware for ESP32 devices
  • Read EPUBs with custom fonts and touch controls
  • Sync reading progress via KOReader and OPDS servers

Source: crosspoint-reader/crosspoint-reader — based on the README and release notes.

Node.js Adds Crypto PKCS12 Parsing in v26.10.0 Release 🔗

New crypto.parsePKCS12() enables secure certificate handling in JavaScript runtime

nodejs/node · JavaScript · 122.2k stars Est. 2014

Node.js v26.

10.0 introduces crypto.parsePKCS12() to securely parse PKCS#12 certificate files, aiding developers in handling encrypted keys and certificates. The release also adds FFI support for mounted VFS filesystems and new fs.openAsBlobSync() for Blob-compatible file access. Performance improvements include SlidingWindowHistogram and QRDE analysis in perf_hooks. Despite active development with bi-annual major releases, the project carries 1,170 open issues, indicating ongoing maintenance challenges.
The catch: High open issue count suggests triage backlog may delay fixes for edge-case bugs in core modules.

Use Cases
  • Backend services parsing user-supplied certificates
  • Electron apps accessing encrypted key stores
  • CLI tools verifying TLS identities in scripts

Source: nodejs/node — based on the README and release notes.

AI Agent Infrastructure Goes Modular, Context-Aware, and Tool-First 🔗

Open source shifts from monolithic LLMs to composable systems with persistent memory and native tool integration

Trendllm-tools
KKKKhazix/AIHOTfeder-cr/dotsAgentSystemLabs/agent-officeopenai/mcp-extensionslangchain-ai/langgraphcomet-ml/opikwshobson/commandsthedotmack/claude-memgoogle-gemini/cookbookAI4Finance-Foundation/FinRLAOrbitron/Eridanusrobotmcp/ros-mcp-servergitleaks/gitleakspbatard/rufusduty1g/x64dbg-mcp-serverddalcu/mlx-serve

The open source LLM tooling landscape is rapidly evolving toward modular, context-rich agent systems. Projects like the dotmack/claude-mem enable persistent context across sessions by compressing and reinjecting agent memories, while AgentSystemLabs/agent-office visualizes this in a 3D workspace where AI agents operate desks with live terminals and voice collaboration.

Tool integration is becoming first-class: openai/mcp-extensions lets developers build ChatGPT plugins that feel native, and feder-cr/dots provides an unbrowsable AI agent with its own browser for uninterrupted web interaction. Evaluation and observability are catching up—comet-ml/opik offers end-to-end tracing and automated evaluations for agentic workflows, critical for debugging complex LLM systems. Meanwhile, language-agnostic protocols are emerging: duty1g/x64dbg-mcp-server and ddalcu/mlx-serve use Zig to expose low-level system and inference capabilities over MCP, enabling AI to control debuggers and run models on Apple Silicon without Python dependencies. This reflects a broader shift: LLMs are no longer endpoints but programmable cores in extensible, observable, agent-driven architectures.

The catch: Much of this remains fragmented—protocols like MCP lack universal adoption, context compression techniques are still lossy, and integrating these tools often requires deep plumbing. Many demos work in controlled settings but falter under real-world complexity, and the ecosystem risks duplicating effort across language-specific implementations before standards solidify.

Use Cases
  • Developers building persistent AI agents with session memory
  • Teams creating collaborative AI workspaces with shared tool access
  • Engineers debugging LLM agents using end-to-end tracing and evals

Open Source Shifts Toward Self-Contained, AI-Native Web Tooling 🔗

Projects integrate browsers, LLMs, and protocols into single-binaries to reduce external dependencies and boost agent autonomy

Trendweb-frameworks
feder-cr/dotspolarsource/polarshopware/shopwarePostHog/posthogWebKit/WebKitgoogle-gemini/cookbookAOrbitron/Eridanuscurl/curljstrieb/github-statsduty1g/x64dbg-mcp-serverddalcu/mlx-servevalleytechsolutions/BWM-Technical-Reference-GuideMewPurPur/GodSVG

A clear pattern emerges in open source web frameworks: projects are bundling browser engines, AI agents, and protocol servers into self-sufficient units. Feder-cr/dots provides an AI agent with its own embedded browser designed to avoid blocking, enabling autonomous web interaction without relying on external browsers or cloud services.

Similarly, duty1g/x64dbg-mcp-server and ddalcu/mlx-serve use Zig to deliver single-binary, zero-dependency tools—the former exposing debugger functions over MCP for AI control, the latter serving LLMs on Apple Silicon without Python. PostHog/posthog exemplifies this shift by packaging analytics, AI observability, and session replay into a platform that agents can steer via Slack, web, or MCP, reducing context-switching for developers. Even commerce tools like shopware/shopware are evolving, leveraging Symfony and Vue to support extensible, agent-ready storefronts. This convergence points to a future where web tooling isn’t just modular but self-contained—minimizing attack surfaces, simplifying deployment, and enabling AI systems to operate independently within trusted boundaries.
The catch: Much of this remains experimental; single-browser agents face scalability limits, MCP adoption is still niche, and Zig-based tooling, while efficient, lacks the library maturity of Python or JavaScript ecosystems—raising questions about long-term maintainability and real-world efficacy beyond demo environments.

Use Cases
  • Developers deploy autonomous agents for blocked-site testing
  • Teams integrate AI with debuggers via HTTP for remote control
  • Engineers run LLMs on Macs without Python or cloud reliance

Rust Expands Beyond Systems into Game, UI, and ROS Domains 🔗

Projects show Rust’s safety and performance now driving diverse open-source innovation

Trendrust-systems
chasmlol/2010-rust-rewrite-mashupradzenhq/radzen-blazordiesel-rs/dieselunicode-org/icu4xmicrosoft/mxcros2-rust/ros2_rustrust-lang/rust

Rust is proving its systems-language strengths in unexpected corners of open source. The chasmlol/2010-rust-rewrite-mashup project demonstrates this by combining rewrites of MW2, Skate 3, and Minecraft into a single Rust-based game engine, leveraging Rust’s memory safety for complex, real-time graphics without garbage collection pauses.

Meanwhile, diesel-rs/diesel continues to mature as a type-safe ORM, enabling reliable database interactions in Rust backend services with zero-cost abstractions. On the internationalization front, unicode-org/icu4x delivers a lightweight, data-driven i18n library designed for client-side and embedded use, avoiding the bloat of traditional ICU. In robotics, ros2-rust/ros2_rust provides idiomatic Rust bindings for ROS 2, letting safety-critical systems benefit from Rust’s ownership model. Even in policy-driven security, microsoft/mxc uses Rust to build layered isolation mechanisms where correctness is non-negotiable. These projects collectively show Rust moving beyond infrastructure into domains where safety, performance, and fine-grained control are converging.
The catch: While promising, many of these efforts remain experimental or niche—game rewrites often lag behind originals in feature parity, ROS 2 Rust bindings lack full tooling support, and ICU4X’s adoption is still limited by ecosystem inertia, meaning widespread production use in these areas is unproven.

Use Cases
  • Game developers building safe, high-performance engines
  • Backend services requiring type-safe database access
  • Embedded apps needing lightweight internationalization
  • Robotics engineers writing safety-critical ROS 2 nodes
  • Security teams implementing policy-driven isolation layers

Quick Hits

dots An AI agent with a built-in browser that navigates the web without being blocked, enabling autonomous browsing and task execution. 1.2k
hypoarena A scientific workbench that discovers hypotheses through evidence graphs, synthetic literature, debate loops, and Elo-ranked model evaluation for causal reasoning. 544
floorplan-3d A tool for generating interactive 3D floor plans from 2D layouts, enabling spatial visualization and design exploration in HTML. 816
xgoduck_hardware Hardware integration suite for the xGoduck robotics platform, enabling sensor control, actuation, and real-time feedback for embedded AI systems. 422
SolidWorks Connects AI assistants to SolidWorks via MCP to sketch, model, fillet, export STEP/STL, and generate macros — turning natural language into CAD actions. 379
Offensive-Security-AI-Models Provides uncensored or cybersecurity-fine-tuned AI models for offensive security tasks like vulnerability discovery, exploit generation, and threat simulation. 456
awesome-opus-5-5-videos A curated, source-linked guide to 1,000+ videos made with Claude Opus 5.5, detailing their content, visual style, and frame-by-frame creation process. 362
langgraph A framework for building resilient, stateful AI agents with graph-based workflows that handle errors, retries, and dynamic reasoning reliably. 42.5k
Who shipped it

The Business Desks

Fresh on Hugging Face

Model Drops

The newest model releases builders are picking up right now.
Beyond GitHub

The AI Wire

What builders are reading today — the headlines, papers, and announcements that aren't trending repos.

From the labs & arXiv

AutoGPT Adds Approval Queues to Prevent Costly Autonomous Agent Mistakes 🔗

New gating modes let builders review irreversible actions before execution in hosted platform

Significant-Gravitas/AutoGPT · Python · ▲ 13 in 1d Est. 2023 · Latest: autogpt-platform-beta-v0.8.2

AutoGPT’s latest release introduces AutoPilot action gating modes—Ask First, Auto, and Unsupervised—to give developers finer control over autonomous agents. Workflows now pause before irreversible actions, with a queue of pending approvals visible per chat.

Late results from held calls appear after user review, and read-only blocks run without interruption. The platform also added credential swap proxies for E2B boxes and parallel-search blocks via AnySearch. These updates aim to reduce unintended side effects from long-running agents, especially in workflows involving file writes, API calls, or model usage with spend ceilings. Builders can now define when agents act autonomously versus when they seek human input, improving safety in production-like scenarios. The hosted platform remains usage-based, while self-hosting requires managing infrastructure and model API keys.
The catch: Despite improved safeguards, complex agent chains still risk accumulating silent errors or costly loops, particularly when external tool outputs are misjudged or approval queues grow unmonitored during high-volume runs.

Previously in The Times “covered” — Sep 27

Use Cases
  • Developers automating multi-step code reviews with human oversight
  • Teams scheduling data pipeline agents that require approval before deployment
  • Startups testing LLM-driven workflows without risking unintended resource spend

Source: Significant-Gravitas/AutoGPT — based on the README and release notes.

More Stories

Claude-Mem Enables Persistent Agent Memory Across Sessions with AI Compression 🔗

Latest update fixes non-interactive installs for CI pipelines and automated agent workflows

thedotmack/claude-mem · TypeScript · 95k stars Est. 2025

Claude-Mem captures agent tool usage, compresses observations via AI, and injects relevant context into future sessions for Claude Code, OpenClaw, Codex, and other agents. It uses ChromaDB or SQLite backends with semantic summarization to maintain project knowledge continuity.

The v13.28.0 release resolves non-interactive install failures in CI environments by deferring sign-in links and validating saved providers. Agents can now run npx claude-mem install without TTY and receive a browser sign-in prompt post-install. The catch: 210 open issues suggest unresolved edge cases in provider validation and memory recall accuracy under heavy concurrent use.

Use Cases
  • Developers maintaining context across Claude Code sessions
  • AI agents preserving knowledge in automated CI/CD pipelines
  • Teams sharing persistent memory between OpenClaw and Gemini agents

Source: thedotmack/claude-mem — based on the README and release notes.

Hugging Face Diffusers Adds MiniMax-H3 for Synced Video-Audio Generation 🔗

Modular Diffusers graduates to stable with tensor-parallel support in v0.40.0

huggingface/diffusers · Python · 34.6k stars Est. 2022

The 🤗 Diffusers library now includes MiniMax-H3, a pipeline generating video and audio from a single transformer denoising packed latents, eliminating separate vocoders. Built on Qwen3VLForConditionalGeneration, it supports text-to-video-audio (t2va), image-to-video-audio (fl2va), and reference-based workflows.

Modular Diffusers, previously experimental, is now stable, enabling block-level customization. Tensor-parallel support is minimal but present. Developers can mix pretrained models and schedulers via from_pretrained to construct end-to-end systems. The release follows 4.3 years of active development, with recent commits showing sustained maintenance.
The catch: Audio quality in MiniMax-H3 remains unbenchmarked against dedicated vocoder pipelines, leaving real-world fidelity uncertain for music or speech-heavy outputs.

Use Cases
  • Researchers prototyping synchronized video-audio diffusion models
  • Artists generating short films with embedded sound effects via text prompts
  • Engineers building custom pipelines using interchangeable noise schedulers

Source: huggingface/diffusers — based on the README and release notes.

RAGFlow's Go rewrite slashes resource use with NATS and Kvrocks 🔗

v1.0.0-rc1 drops Redis, reimplements CLI, and enables irreversible data upgrade from v0.27.2

infiniflow/ragflow · Go · ▲ 53 in 1d Est. 2023

RAGFlow v1.0.

0-rc1 delivers a comprehensive rewrite in Go, replacing Redis with NATS for messaging and Kvrocks for cache and checkpoints, significantly reducing system resource consumption. The release includes an automatic, irreversible data upgrade from v0.27.2 upon container startup, requiring prior backup. The CLI is now Go-based, while Python SDK compatibility is preserved. DeepDoc remains CPU-only, and the local sandbox is discontinued.
The catch: DeepDoc's CPU-only limit may hinder GPU-accelerated workflows despite the engine's broader efficiency gains.

Previously in The Times “covered” — Sep 17

Use Cases
  • Enterprises building production RAG systems with LLMs
  • Developers deploying context engines for knowledge-intensive AI
  • Teams ingesting and compiling unstructured data into structured knowledge artifacts

Source: infiniflow/ragflow — based on the README and release notes.

Quick Hits

cookbook Provides ready-to-use Jupyter notebooks demonstrating how to integrate and leverage the Gemini API for multimodal AI tasks. 17.8k
supabase Offers a full-featured Postgres-based backend with authentication, storage, and real-time APIs to accelerate web, mobile, and AI app development. 110.9k
pytorch Delivers a powerful Python library for tensor computation and dynamic neural networks with industry-leading GPU acceleration. 103.5k
cosmos Supplies open world models, datasets, and tools to enable developers to build Physical AI for robotics, autonomous systems, and smart infrastructure. 12k
firecrawl Enables AI agents to fetch, scrape, and synthesize real-time web data through a unified API for enhanced reasoning and decision-making. 186.9k

Kornia v0.8.3 Boosts Half-Precision Support for PyTorch Vision Workflows 🔗

New XFeat and ALIKED feature detectors join batched VisualPrompter inference in latest patch

kornia/kornia · Python · ▲ 2 in 1d Est. 2018 · Latest: v0.8.3

Kornia’s v0.8.

3 release sharpens its edge in differentiable computer vision by adding half-precision (float16/bfloat16) support and test infrastructure, critical for efficient training on modern GPUs and Apple Silicon. The update introduces two new local feature detectors and descriptors—XFeat and ALIKED—expanding Kornia’s toolkit for robust keypoint matching in SLAM and AR applications. VisualPrompter now enables batched inference, streamlining AI-driven image editing pipelines. Core geometry operations like depth-to-normals and point transformations see up to 3x speedups, while MPS device fixes improve macOS compatibility. Documentation and docstring coverage have been broadened across modules, reducing integration friction. With over 500 differentiable operators spanning filters, augmentations, and pre-trained models like SAM and MobileViT, Kornia remains a foundational layer for spatial AI pipelines built on PyTorch.
The catch: Despite active development, 153 open issues suggest ongoing challenges in maintaining backward compatibility as the library rapidly expands its scope across vision tasks.

Previously in The Times “covered” — Sep 28

Use Cases
  • Train segmentation models with differentiable augmentations
  • Deploy real-time feature matching on edge devices
  • Build end-to-end visual SLAM systems in PyTorch

Source: kornia/kornia — based on the README and release notes.

More Stories

Orbbec SDK ROS1 Wrapper adds depth colorization and frame queue controls 🔗

v2.10.6 update enhances camera profiling and device status monitoring for ROS1 users

orbbec/OrbbecSDK_ROS1 · C++ · 127 stars Est. 2023

The OrbbecSDK ROS1 Wrapper v2.10.

6 introduces depth image colorization via the depth_colorizer_mode parameter, supporting none, jet, jet_inv, and gray modes. It adds color frame queue size limits and overflow statistics for Left, Right, and Color streams. The device_status topic now reports subscription status, frame rate, and latency for compressed image, point cloud, and IMU streams. Users can configure heartbeat and firmware log polling with monitor_poll_interval_sec. The release includes a new --topics option for common_benchmark_node.py and Left/Right Color support in ROS tools. Gemini 435Le now has a URDF model previewable via view_model.launch.
The catch: Legacy OpenNI devices require the deprecated main branch, creating a split maintenance path for older hardware.

Use Cases
  • Robotics teams integrating Orbbec depth cameras into ROS1 navigation stacks
  • Developers configuring color and depth stream synchronization for 3D perception
  • Engineers monitoring real-time device health and stream latency in industrial setups

Source: orbbec/OrbbecSDK_ROS1 — based on the README and release notes.

OpenKAI Enables Rapid Prototyping of Unmanned Vehicles in Pure C++ 🔗

Framework supports Jetson, Pixhawk, and RealSense with modular threading

yankailab/OpenKAI · C · 261 stars Est. 2015

OpenKAI provides a lightweight, multi-threaded C++ framework for rapid development of drones and robots. It abstracts sensors and actuators—including UART, CAN, Ethernet, and Intel RealSense—into unified objects for easy integration.

Tested on x86 Ubuntu, NVIDIA Jetson, and Raspberry Pi, it scales from embedded to high-performance platforms. Despite its age, the project saw activity as recently as yesterday, indicating ongoing maintenance. The catch: Its reliance on C++ and specific dependencies like Eigen 5.x and Google glog may deter teams preferring modern Rust or Python stacks.

Use Cases
  • Developers building custom drone control systems
  • Robotics teams integrating multiple sensor modalities
  • Engineers prototyping unmanned ground vehicles quickly

Source: yankailab/OpenKAI — based on the project README.

Quick Hits

autoware_universe Provides a comprehensive ecosystem of open-source autonomous driving components, enabling scalable development and testing of self-driving systems in simulation and real-world environments. 1.8k
IsaacLab Offers a unified, extensible framework for training and evaluating robot learning algorithms across diverse physics simulations and rendering backends. 8.3k
autoware Delivers a full-stack autonomous driving software suite in Dockerized form, supporting perception, planning, and control for self-driving vehicle development. 12.1k
webots Enables high-fidelity robot simulation with physics-based modeling, sensor emulation, and cross-platform support for research, education, and industrial prototyping. 4.7k
MissionPlanner Provides a powerful ground control station for planning, monitoring, and tuning ArduPilot-based unmanned vehicles via intuitive graphical interfaces. 2.4k
ros-mcp-server Bridges large language models with robotic systems via MCP and ROS, allowing natural language control and real-time interaction with robots. 1.5k

Wazuh Tightens Security with Path Validation Fixes in Latest Release 🔗

v4.14.8 patches critical flaws in agent message handling and SCA policy enforcement

wazuh/wazuh · C++ · ▲ 8 in 1d Est. 2015 · Latest: v4.14.8

Wazuh’s latest release v4.14.

8 addresses two high-impact security gaps in its manager components. Fixes now restrict upgrade commands accepted from agents via the analysis daemon, preventing potential privilege escalation through compromised endpoints. Additionally, SCA policy source validation was strengthened to properly enforce remote command restrictions, closing a loophole that could allow unauthorized script execution during compliance checks. The update also resolves a deadlock in wazuh-analysisd that halted alert generation when the active response queue filled— a scenario likely under sustained attack or misconfiguration. Path validation was added for CDB list file operations and rule/decoder deletions, mitigating risks from malicious input manipulation. These changes follow a pattern of hardening agent-server communication seen across recent commits, reflecting ongoing focus on supply chain and internal threat surfaces. Built in C++ and deployed as agent-manager pairs, Wazuh continues to unify log analysis, file integrity monitoring, and threat detection across hybrid environments. Its integration with the Wazuh Indexer enables real-time alert correlation and visualization, supporting use cases from PCI-DSS audits to container runtime protection. Despite active maintenance— with a commit just zero days ago and over 3,100 open issues— the project’s complexity remains a barrier for teams seeking lightweight, out-of-the-box SIEM/XDR. The catch: Wazuh’s strength in depth comes with operational overhead; effective use requires significant tuning of rules, agents, and infrastructure, making it less suitable for small teams without dedicated security engineers.

Previously in The Times “covered” — Sep 29

Use Cases
  • Securing cloud workloads with agent-based intrusion detection
  • Monitoring file integrity for PCI-DSS compliance
  • Detecting malware via log analysis and anomaly scanning

Source: wazuh/wazuh — based on the README and release notes.

More Stories

Gitleaks Shifts Focus to Security Patches as Feature Development Ends 🔗

Creator directs efforts to Betterleaks while maintaining secret detection tool

gitleaks/gitleaks · Go · 29.6k stars Est. 2018

Gitleaks, the Go-based secret scanner for Git repositories, files, and stdin, is now feature complete. Maintainer zricethezav confirms future releases will deliver only security patches, with active development moving to the Betterleaks project.

The tool detects passwords, API keys, and tokens via regex patterns and integrates as a pre-commit hook or GitHub Action. Latest release v8.30.1 updates Go to 1.24 and refines report templates.
The catch: No new features are planned, limiting adaptation to emerging secret types or detection methods beyond current regex-based engine.

Use Cases
  • Developers scanning commits for accidental API key leaks
  • Security teams enforcing pre-commit secrets checks in CI/CD
  • Auditors verifying historical repos for exposed credentials

Source: gitleaks/gitleaks — based on the README and release notes.

Sniffnet adds latency monitoring and CIDR support for network blacklists 🔗

Latest release expands real-time diagnostics and filtering precision for traffic analysis

GyulyVGC/sniffnet · Rust · 41.3k stars Est. 2022

Sniffnet v1.5.

1 introduces connection latency visualization, helping users pinpoint delays in real-time traffic flows. The update also enables CIDR notation in imported IP blacklists, improving granular control over threat detection. Built with Rust and Iced, the cross-platform packet sniffer now supports 30+ languages, including recent Hungarian and Sinhala additions. Developers and sysadmins use it to diagnose bandwidth hogs, verify firewall rules, and trace suspicious connections across LAN and WAN interfaces. The catch: Deep packet inspection for 6000+ protocols relies on community-maintained signatures, which may lag behind emerging threats or obscure applications.

Previously in The Times “covered” — Sep 17

Use Cases
  • Network engineers troubleshoot latency spikes in VoIP and gaming traffic
  • Security analysts correlate local apps with foreign ASNs and geolocations
  • DevOps teams validate container network policies using live packet filters

Source: GyulyVGC/sniffnet — based on the README and release notes.

OWASP MASTG v2.0.0 Delivers Machine-Readable Mobile Security Testing Framework 🔗

Modular guide now links MASVS, MASWE, tools, and techniques with automated demos and cross-references

OWASP/mastg · Python · 13.2k stars Est. 2016

The OWASP Mobile Application Security Testing Guide (MASTG) v2.0.

0 completes a multi-year refactor into modular, machine-readable components with structured metadata. It enables automated verification of MASWE weaknesses aligned with MASVS controls through integrated demos and cross-linked tests, tools, and best practices. The release spans January–June 2026 and is the first stable non-beta version of the new framework. MAS Advocates including NowSecure, Guardsquare, and Vulnit contributed key portions, with Vulnit earning advocate status via 2026 test porting efforts. The project remains Python-based with broad mobile security coverage across Android and iOS.
The catch: Despite its comprehensiveness, the guide’s depth and technical density may present a steep learning curve for newcomers to mobile security testing without prior reverse engineering or pentesting experience.

Use Cases
  • Security engineers verify iOS/Android app weaknesses using MASWE-aligned tests
  • Pentesters automate mobile app security checks via MASTG’s machine-readable components
  • Teams align app security testing with MASVS controls using structured MASTG guidance

Source: OWASP/mastg — based on the README and release notes.

Quick Hits

authelia Authelia provides secure single sign-on with multi-factor authentication, OpenID certification, and post-quantum cryptography readiness for protecting web applications. 29.1k
sherlock Sherlock enables rapid discovery of social media accounts linked to a username across numerous platforms for investigative and security purposes. 93.1k
keepassxc KeePassXC offers a cross-platform, community-maintained password manager that securely stores and manages credentials across devices. 29k
yakit Yakit delivers an all-in-one TypeScript-based cybersecurity platform integrating tools for scanning, exploitation, and threat analysis. 7.8k
nuclei Nuclei is a fast, YAML-driven vulnerability scanner that detects flaws in apps, APIs, networks, DNS, and cloud setups using community-contributed templates. 31.6k

tmux 3.7c fixes critical session detachment bugs on macOS and Linux 🔗

Patch resolves race conditions causing lost panes after network interruptions

tmux/tmux · C · ▲ 11 in 1d Est. 2015 · Latest: 3.7c

The tmux project released version 3.7c, a bug fix update addressing session stability issues on macOS and Linux.

This patch resolves a race condition where tmux sessions could detach incorrectly during brief network interruptions, leading to lost pane configurations and unresponsive clients. The fix improves the utempter integration when enabled via --enable-utempter, ensuring accurate utmp(5) updates during detach/reattach cycles. Build requirements remain unchanged: a C compiler, make, pkg-config, and yacc/bison, with dependencies on libevent 2.x and ncurses. The release notes direct users to the CHANGES file for detailed fixes, including corrections to window resizing behavior in nested sessions and improved handling of SIGWINCH signals in headless environments. These updates enhance reliability for developers using tmux in remote workflows over SSH or in containerized setups where transient network drops are common. The project maintains broad compatibility across OpenBSD, FreeBSD, NetBSD, Linux, macOS, and Solaris, with binary packages available though often outdated, encouraging source builds for the latest fixes. Despite its maturity, tmux’s reliance on autotools for version control builds presents a friction point for newcomers, requiring autoconf, automake, and pkg-config to compile from Git—a step that can deter casual contributors.
The catch: Building from source demands autotools familiarity, creating a barrier for developers expecting a simple make workflow in modern C projects.

Previously in The Times “covered” — Sep 28

Use Cases
  • Remote developers maintaining persistent terminal sessions over unstable SSH
  • System administrators managing multiple server consoles via single terminal
  • DevOps engineers nesting tmux inside containers for isolated debugging environments

Source: tmux/tmux — based on the README and release notes.

More Stories

x64dbg-MCP Server lets AI control debuggers over HTTP with zero dependencies 🔗

Built in Zig, it exposes full x64dbg functionality via MCP 2024-11-05 with Bearer Auth

duty1g/x64dbg-mcp-server · Zig · 2.2k stars 1mo old

The x64dbg-MCP Server plugin turns x64dbg into an HTTP-accessible debugger for AI agents. Built with Zig, it produces a single binary with no runtime dependencies, supporting both x32 and x64 architectures.

It implements MCP 2024-11-05 over Streamable HTTP and SSE, offering 84 tools for breakpoint control, memory inspection, register dumps, and PE analysis, plus 22 event callbacks. Authentication requires a bearer token, auto-generated on first run. The server auto-starts with x64dbg and configures via a Plugins menu dialog. Recent work added Windows 7/8 compatibility and unit-tested JSON helpers.
The catch: Despite zero dependencies, the plugin’s reliance on MCP means adoption hinges on AI assistant support for the protocol, which remains niche outside Claude-centric workflows.

Use Cases
  • Reverse engineers automate malware analysis via AI-driven breakpoint stepping
  • Security researchers extract strings and scan patterns using natural language prompts
  • Developers debug binaries remotely by instructing AI to dump registers and modules

Source: duty1g/x64dbg-mcp-server — based on the README and release notes.

Bitcoin Core v31.1 Released with Security Fixes and P2P Improvements 🔗

Maintains MIT-licensed full-node validation while addressing 748 open issues

bitcoin/bitcoin · C++ · ▲ 4 in 1d Est. 2010

Bitcoin Core version 31.1 is now available, delivering security patches and peer-to-peer network stability updates.

The release includes fixes for transaction relay efficiency and block validation timing, critical for maintaining consensus across the network. Developers can compile from source or use the deterministic binaries at bitcoincore.org, with unit tests runnable via ctest. Despite recent activity, the project carries 748 open issues, indicating ongoing challenges in scaling review capacity. The catch: Testing remains a bottleneck, with more pull requests than can be promptly verified, posing risks in this security-critical system where errors could lead to financial loss.

Use Cases
  • Developers building full-node blockchain applications
  • Enterprises validating Bitcoin transactions securely
  • Researchers studying peer-to-peer network behavior and consensus rules

Source: bitcoin/bitcoin — based on the README and release notes.

Quick Hits

syncthing Syncs files continuously across devices in real time, ensuring your data stays consistent without manual intervention or cloud dependency. 89k
PowerToys Enhances Windows productivity with customizable utilities like window management, keyboard shortcuts, and system tweaks for power users. 139.1k
linux Provides the core operating system foundation enabling hardware abstraction, process management, and secure multitasking for all Linux-based systems. 250.6k
clash-verge-rev Offers a sleek, cross-platform proxy GUI with Tauri-powered performance, letting users finely control network routing on Windows, macOS, and Linux. 148.5k
ghostty Delivers a lightning-fast, GPU-accelerated terminal with native UI integration for a smooth, responsive command-line experience across platforms. 61.7k
rust Enables developers to write safe, high-performance systems code with zero-cost abstractions and fearless concurrency for reliable software at scale. 119.3k

Black Wire Guide Consolidates Hardware Pinouts Into One Offline-First Desktop App 🔗

Version 0.14.0 replaces ZIP-based installs with a unified Windows installer and persistent library updates

valleytechsolutions/BWM-Technical-Reference-Guide · JavaScript · 31 stars 5d old · Latest: v0.14.0

Valleytech Solutions’ Black Wire Technical Reference Guide solves a daily frustration for embedded developers: scattered, unverified pinout data across dozens of vendors. The Electron-based desktop app aggregates board diagrams, sensor specs, and connection guides for ESP32, Arduino, Raspberry Pi, and RP2040/RP2350 modules into a searchable, offline-first reference.

Each entry tracks source files, revision history, and review status, with explicit flags for missing documentation.

The v0.14.0 release streamlines installation by replacing multipart ZIP extraction with a single Windows installer and adding in-app update checks via Updates & offline library. Users can download the complete library on demand, with SHA-256 verification and retry logic for failed transfers. Saved boards, measurements, and downloaded references persist across updates. Linux users receive DEB packages updated through system package managers, while image and PDF previews now support pinch, drag, and keyboard controls.

Built for workbenches, the app targets makers, educators, and engineers who need reliable hardware data without relying on live internet access. Recent activity shows three forks and no open issues, with the last commit two days ago.

The catch: No verified macOS package is offered, leaving Apple users dependent on the web app or manual setup despite cross-platform Electron foundations.

Use Cases
  • Educators teaching embedded systems with standardized pinout references
  • Field technicians troubleshooting sensor wiring without internet access
  • Hardware designers validating module compatibility across vendors

Source: valleytechsolutions/BWM-Technical-Reference-Guide — based on the README and release notes.

More Stories

Microsoft MakeCode "Maker" Board Editor Gains Docker Builds for C++ 🔗

Local server now serves documentation and enables offline development for breadboard-friendly microcontrollers

microsoft/pxt-maker · TypeScript · 130 stars Est. 2017

The Microsoft/pxt-maker project provides a TypeScript-based MakeCode target for maker boards like micro:bit and Arduino-compatible devices. It lets developers code visually or in JavaScript/Python, then compile to machine code for breadboard-ready hardware.

A local server runs the editor and serves docs offline after installing Node.js 8.9.4+, Docker for .cpp edits, and linking PXT repositories. Recent activity shows steady maintenance with a commit one day ago and 55 open issues.
The catch: Setup requires manual repo cloning, dependency linking, and environment tweaks that deter casual contributors despite the web editor’s simplicity.

Use Cases
  • Educators teaching embedded coding with visual blocks
  • Hobbitists prototyping sensor circuits on breadboards
  • Developers compiling TypeScript to C++ for microcontrollers

Source: microsoft/pxt-maker — based on the project README.

ESPectre SDK now supports ESP-IDF 6.x for Wi-Fi motion sensing 🔗

Firmware remains on ESP-IDF 5.5.5 while SDK adds compatibility with latest Espressif framework

francescopace/espectre · Python · ▲ 19 in 1d 11mo old

The francescopace/espectre project released version 3.0.

0-rc3, adding ESP-IDF 6.x support to its C++ SDK for Wi-Fi CSI motion sensing on ESP32 devices. This update enables developers to build motion detection firmware using the latest Espressif framework while official binaries stay on ESP-IDF 5.5.5 for stability. The SDK is now available as an ESP Component Registry package, simplifying integration into custom ESP32 firmware. ESPectre turns ESP32 boards into private, local motion sensors by analyzing Wi-Fi channel state information—no cameras, microphones, or cloud dependency required. It works with Home Assistant via ESPHome or MQTT, appears as a Matter occupancy sensor, and provides browser-based flashing and CLI tools for full device lifecycle management.
The catch: Detection sensitivity varies with Wi-Fi environment stability, limiting reliable use in high-interference or frequently reconfigured networks.

Previously in The Times “covered” — Sep 25

Use Cases
  • Home automation triggers lights on room entry
  • Security alerts for unexpected movement in empty rooms
  • Occupancy-based HVAC control in smart buildings

Source: francescopace/espectre — based on the README and release notes.

IMSProg Adds FT232H v1.2 Support for EEPROM Programming 🔗

Release v1.9.1 enables SPI/I2C bus speed tuning via chip delay database

bigbigmdm/IMSProg · C++ · 698 stars Est. 2023

IMSProg v1.9.

1 adds support for the FT232H v1.2 programmer device, expanding hardware compatibility beyond CH341A and CH347T. The update uses the chip's delay database parameter to dynamically adjust SPI and I2C bus speeds, improving reliability with diverse EEPROM and Flash chips. Built with C++ and Qt, it requires libusb, CMake, and either Qt5 or Qt6 for compilation. Despite active maintenance, the project notes that MicroWire (93Cxx) protocol remains unsupported on CH347T devices.
The catch: MicroWire chip support is missing for CH347T users, limiting use with certain legacy EEPROMs.

Use Cases
  • Firmware engineers reading/writing BIOS chips via USB programmers
  • Hardware hackers updating EEPROMs in embedded systems
  • Developers testing SPI Flash chips during prototype bring-up

Source: bigbigmdm/IMSProg — based on the README and release notes.

Quick Hits

venus-os_dbus-serialbattery Enables precise battery monitoring by integrating serial-connected batteries into VenusOS GX systems via a Python DBus driver. 272
AIOsense Provides a unified, ESPHome-powered sensor solution combining multiple environmental measurements in a single compact device. 162
TuyaOpen Offers a next-gen C framework for rapid AI and IoT hardware integration across T2/T3/T5AI, ESP32, and similar platforms. 1.9k
p3a Lets you display and play pixel art animations directly on ESP32-P4 hardware with minimal overhead and high visual fidelity. 95
firmware Delivers a community-driven, open-source IP camera firmware alternative that enhances functionality and transparency over stock options. 2.2k

PlayCanvas Engine Adds WebGPU Support for Real-Time Gaussian Splatting Rendering 🔗

v2.22.6 fixes mesh instance handling while expanding immersive 3D capabilities across browsers and XR devices

playcanvas/engine · JavaScript · ▲ 9 in 1d Est. 2014 · Latest: v2.22.6

PlayCanvas Engine now delivers first-class support for 3D Gaussian Splatting through its WebGPU-powered graphics pipeline, enabling high-fidelity, real-time rendering of complex point-cloud scenes directly in the browser. The latest v2.

22.6 patch resolves a critical issue where mesh instances lacking materials caused failures in Layer#addMeshInstances, improving stability for dynamic scene composition. Built on WebGL2 and WebGPU, the engine continues to stream glTF 2.0 assets with Draco and Basis compression, while maintaining integrated physics via ammo.js and spatial audio through the Web Audio API. Developers can script behaviors in TypeScript or JavaScript and deploy to any device with immersive AR/VR via WebXR. The engine remains actively maintained, with commits as recent as zero days ago and broad adoption across industries including gaming, automotive, and visualization.
The catch: Gaussian Splatting performance is highly dependent on GPU capabilities and may fall back to WebGL2 with reduced fidelity on older or mobile devices, limiting consistent real-time quality across all target platforms.
USE_CASES:

  1. Game developers creating browser-based 3D titles with advanced lighting
  2. Visualization teams rendering real-time Gaussian Splats in product demos

Previously in The Times “covered” — Sep 29

Use Cases
  • Game developers creating browser-based 3D titles with advanced lighting
  • Visualization teams rendering real-time Gaussian Splats in product demos
  • XR builders deploying immersive AR/VR experiences across headsets and mobile

Source: playcanvas/engine — based on the README and release notes.

More Stories

Assimp Adds GLTF Skinning Export in Latest Patch Release 🔗

v6.0.5 improves mesh processing and fixes FBX output precision for game asset pipelines

assimp/assimp · C++ · 13.2k stars Est. 2010

The Open-Asset-Importer-Library (assimp) released v6.0.

5 with extended GLB/GLTF skinning data export and improved vertex cache locality. It now handles 40+ 3D formats via C/C++ APIs, with bindings for Python, C#, and Java. Recent commits reduce memory usage in JoinVerticesProcess and fix FBX floating-point output. Used in Unity and Unreal plugins, assimp remains central to cross-platform asset pipelines.
The catch: Active issue count remains high at 558 open, indicating ongoing stability challenges despite frequent patches.

Use Cases
  • Game developers importing FBX/GLTF models into engines
  • CAD engineers converting IFC/STL for visualization pipelines
  • Mobile apps loading 3D assets on Android/iOS via assimp bindings

Source: assimp/assimp — based on the README and release notes.

Godot Engine 4.7.2 stabilizes cross-platform game builds with bug fixes 🔗

Maintenance update resolves stability and usability issues without breaking compatibility

godotengine/godot · C++ · ▲ 51 in 1d Est. 2014

Godot 4.7.

2 delivers a maintenance patch addressing reported bugs and enhancing editor reliability across Linux, macOS, Windows, Android, iOS, and web targets. The release ensures backward compatibility with prior 4.x versions while refining export workflows and scene system performance. Developers benefit from one-click deployment to multiple platforms under the permissive MIT license, with no royalties or engine code restrictions. The update reinforces Godot’s position as a community-driven, open-source alternative to proprietary engines, supported by the Godot Foundation and active contributor channels. The catch: Despite frequent commits, over 18,900 open issues indicate persistent challenges in prioritizing and resolving long-standing feature requests and edge-case bugs.

Previously in The Times “covered” — Sep 25

Use Cases
  • Indie studios shipping 2D/3D games to mobile and desktop
  • Educators teaching game design with accessible open-source tools
  • Prototyping cross-platform experiences for web and console deployment

Source: godotengine/godot — based on the README and release notes.

Rust GUI Library Egui Adds Text Filtering for Safer Input Handling 🔗

New `TextEdit::event_filter` blocks unwanted keystrokes without breaking focus

emilk/egui · Rust · ▲ 11 in 1d Est. 2019

Egui’s latest patch introduces TextEdit::event_filter, letting developers intercept and reject specific input events—like non-numeric keys in a number field—before they reach the widget. This improves form validation in apps built with egui’s immediate mode paradigm, where state is rebuilt each frame.

The change arrived alongside fixes for NaN-related hit-test panics and thin-rectangle rendering glitches. Despite active maintenance—1,127 open issues and daily commits—egui’s reliance on per-frame reconstruction can strain performance in complex UIs.
The catch: Immediate mode GUI rebuilds every frame, making it less suited for dense, animated interfaces than retained-mode alternatives.

Previously in The Times “covered” — Sep 17

Use Cases
  • Game devs tuning in-engine settings menus
  • Embedded systems engineers building WASM dashboards
  • Rustaceans creating cross-platform internal tools

Source: emilk/egui — based on the README and release notes.

Quick Hits

GodSVG Enables precise vector SVG editing across desktop and web platforms, ideal for structured graphic design workflows. 2.8k
Slay-The-Robot Provides a flexible Godot framework to streamline roguelike deckbuilder development with reusable systems and mechanics. 285
godot-road-generator Generates drivable 3D roads and highways with automated lane-following traffic simulation for immersive environments. 1.2k
openage Recreates the Age of Empires II engine in Python, enabling faithful gameplay and modding on modern systems. 14.5k
OpenRA Offers an open-source RTS engine for classic Westwood titles, supporting cross-platform play and modding of C&C: Red Alert and similar games. 17.5k
The Git Times AI Desk
Ask about today's stories — or hit “Ask about this” on any article to focus on one.

Unlock the Git Times AI desk to ask about today's stories and the AI model market.

Upgrade to Premium
Answers by the Git Times AI desk · verify before you ship