Defending against runtime attacks what works?

Runtime threats app-layer, supply chain, and identity often evade standard security measures.

Here’s a blog that explains these attack vectors in a simple way: link

What strategies do you use to detect or prevent runtime attacks?

https://redd.it/1pljhhp
@r_opensource

RelicBin - Open source pastebin with s3 storage, ansi, text, log, code, html, markdown, pdf, excalidraw, images rendering, bookmarks && comments
https://github.com/ovidiuvio/relic

https://redd.it/1plii99
@r_opensource

any-sync-bundle v1.1.3: Self-hosting for Anytype is a personal knowledge base
https://github.com/grishy/any-sync-bundle

https://redd.it/1plmpcp
@r_opensource

GitHub - davidesantangelo/githug: Find your code mate. Discover new GitHub users you don't follow yet, matched by your stack and interests.
https://github.com/davidesantangelo/githug

https://redd.it/1plo3tb
@r_opensource

I want to give a shoutout to VSCodium
https://vscodium.com

https://redd.it/1plpab7
@r_opensource

Open-sourced a production-ready Reddit scraping suite with analytics and dashboard

I’ve released an open-source Reddit scraping suite designed as a full data collection and analysis pipeline.

The project scrapes Reddit content without API keys by using open JSON endpoints exposed by `old.reddit.com` and several Redlib/Libreddit mirrors. It includes rate limiting, failover handling, and pagination for stability.

Features include structured SQLite storage, CSV/Excel export, media downloads, recursive comment parsing, lightweight sentiment analysis, a Streamlit analytics dashboard, and a built-in scheduler. The entire system is Docker-ready and avoids heavy dependencies.

The goal is to provide a practical, self-hostable tool for research, monitoring, and analytics.

GitHub: https://github.com/ksanjeev284/reddit-universal-scraper
Contributions and feedback are welcome.

https://redd.it/1plqo5m
@r_opensource

Idea: OSS Health Score

hey yall

just had an idea bubbling in mind: what if there was a tool that can gives OSS projects health scores as a percentage-grade, based on a variety of key, OSS metrics.


for example:

Neovim - 93% - very healthy

ahmed33033’s repo - 63% - Slow, needs support



The scores are calculated from metrics like the usual # of commits, pull requests, issues reported, but also other interesting metrics like average time between releases, security scores (from OpenSSF), percentage of new contributors, pull request creation to merge time, etc…

all of these metrics can be compiled to one score, which would tell you how vibrant the OSS project is.

this would help direct folks towards great projects they should contribute to, as well as projects that need a bit of help.


thoughts?

https://redd.it/1plw032
@r_opensource

Sharing some OSS utilities in Powershell which add simple missing capabilities to Windows
https://github.com/doclongdong/WinDumpster

https://redd.it/1ply9om
@r_opensource

I built a Neon "Wheel of Fortune" PWA for giveaways and decision making (React + D3 + Web Audio)

Hi everyone!

I built **Asmodeus**, a fully interactive neon-styled wheel picker, purely for fun. It’s designed for giveaways, interactive picks, or just deciding where to eat lunch. It runs entirely in the browser (PWA) and uses the Web Audio API for synthesized sounds (no heavy audio files).

**Live Demo:** [https://d371l.github.io/asmodeus/](https://d371l.github.io/asmodeus/)
**Source Code:** [https://github.com/D371L/asmodeus](https://github.com/D371L/asmodeus)

**Key Features:**

* **Synth Audio:** Real-time generated tick/spin sounds via Web Audio API.
* **PWA Ready:** Installable with offline cache (Service Worker).
* **Smart State:** Persists players, history, and settings in LocalStorage.
* **Modes:** Includes "Elimination Mode" (removes winner) and a "Demo Mode" that auto-spins.
* **Hotkeys:** Space to spin, 'S' for sound, 'D' for demo.

**Tech Stack:** React 18, TypeScript, Vite 5, Tailwind CSS, D3 (for geometry).

It is MIT licensed, so feel free to use it, fork it, or remix it for your own needs. Feedback and stars are appreciated!

https://redd.it/1pm19pm
@r_opensource

Looking for a GitHub alternative that is very different.

No "commits" or "pull requests". "Push request" or "Edit request" is fine.

Screens aren't busy.

The best practice for the README, or alternate, is to have a file that contains a summary of the code, a how-to implement the code, and any other needed information.

That's all I've got off the top of my head.

https://redd.it/1pm38sd
@r_opensource

I built a tiny open-source, local-first flashcard app after bouncing off Anki’s UI. Looking for feedback/possible contributors

As I was studying for the HL7 v2.8 Control Exam, I looked for a flashcard app. There are a LOT of flashcard apps out there, but they aren't all to my taste.

Anki seems to be the most popular open-source project; however, the UI left something to be desired.
Quizlet seems to have a good user interface, but I was turned off by its ad-heavy, closed setup.
Everything else seemed to be too complex.

So... as a one-week project, I built a tiny flashcard app named BaraBara. I built it with the following in mind:

A single-user experience that runs entirely in the browser.
No accounts or backend! Only `localStorage.`
Decks, with front/back of cards.
Simple "I knew it/I forgot it" spaced repetition.
Static build, you can self-host anywhere.


I'm not trying to compete with Anki/Quizlet. I'm aiming for something smaller and simpler. Thus, the scope is intentionally tiny. I'm sharing it here because:

I'd love some feedback from people who use and develop learning tools.
I'd like to grow this slowly and thoughtfully, and see if this is useful to anyone else.
I'm looking for a few contributors who like working on small projects. This project already attracted one generous contributor, who greatly improved the UI.

🔗Live Demo: [https://barabara.megafarad.com](https://barabara.megafarad.com)

🔗Repo (MIT): [https://github.com/megafarad/barabara](https://github.com/megafarad/barabara)


I'm especially interested in feedback on:

Does the "local only," no back-end approach resonate with you, or do you prefer to have a real back-end from day one?
What is the minimum feature set you expect from an open-source flashcard app (import/export, tags, richer media - like images)?
For anyone who has implemented SRS tools, I simply have two actions on cards: "I knew it," and "I forgot." Is that enough in your view? Additionally, are there any "gotchas" around scheduling, UX, or data modeling that I should know about?


I'm happy to answer any questions about the implementation or direction. If you can see a way for this project to be more useful (or even useful at all!) I'd love to hear it.

https://redd.it/1pm57ve
@r_opensource

I got tired of subnoscription-based finance apps, so I built a local-first alternative. I also did it to practice more and for my portfolio.
https://github.com/Jean-EstevezT/Aritmo-Budget-Planner

https://redd.it/1pm5wxr
@r_opensource

modern opensource smartphone?

I am looking for a modern open source smartphone (hardware)

https://redd.it/1pm78jm
@r_opensource

KV and Wide-column database with CDN-scale replication

Building https://github.com/ankur-anand/unisondb, a log-native KV/wide-column engine: with built-in global fanout.

I'm looking forward to your feedback.

https://redd.it/1pm85r5
@r_opensource

Tired of Vue toast libraries, so I built my own (headless, Vue 3, TS-first)

Hey folks 👋 author here, looking for feedback.

I recently needed a toast system for a Vue 3 app that was:

modern,
lightweight,
and didn’t fight my custom styling.

I tried several Vue toast libraries and kept hitting the same issues: a lot of them were Vue 2–only or basically unmaintained, the styling was hard-wired instead of properly themeable, some were missing pretty basic options, and almost none gave me predictable behavior for things like duplicates, timers, or multiple stacks.

So I ended up building my own: Toastflow (core engine) + vue-toastflow (Vue 3 renderer).

# What it is

Headless toast engine + Vue 3 renderer
Toastflow keeps state in a tiny, framework-agnostic store (`toastflow-core`), and `vue-toastflow` is just a renderer on top with `<ToastContainer />` \+ a global `toast` helper.
CSS-first theming
The default look is driven by CSS variables (including per-type colors like `--success-bg`, `--error-text`, etc.). You can swap the design by editing one file or aligning it with your Tailwind/daisyUI setup.
Smooth stack animations
Enter/leave + move animations when items above/below are removed, for all positions (`top-left`, `top-center`, `top-right`, `bottom-left`, `bottom-center`, `bottom-right`). Implemented with `TransitionGroup` and overridable via `animation` config.
Typed API, works inside and outside components
You install the plugin once, then import `toast` from anywhere (components, composables, services, plain TS modules). Typed helpers: `toast.show`, `toast.success`, `toast.error`, `toast.warning`, `toast.info`, `toast.loading`, `toast.update`, `toast.dismiss`, `toast.dismissAll`, etc.
Deterministic behavior
The core handles duplicates, timers, pause-on-hover, close-on-click, `maxVisible`, stack order (`newest`/`oldest`), and `clear-all` in a predictable way.
Extras
Promise/async flows (`toast.loading`), optional HTML content with `supportHtml`, lifecycle hooks, events (`toast.subscribeEvents`), timestamps (`showCreatedAt`, `createdAtFormatter`), and a headless slot API if you want to render your own card.

# Quick taste

// main.ts
import { createApp } from 'vue'
import App from './App.vue'
import { createToastflow, ToastContainer } from 'vue-toastflow'

const app = createApp(App)

app.use(
createToastflow({
// optional global defaults
position: 'top-right',
duration: 5000,
}),
)

// register globally or import locally where you render it
app.component('ToastContainer', ToastContainer)

app.mount('#app')

<!-- Somewhere in your app -->
<noscript setup lang="ts">
import { toast } from 'vue-toastflow'

function handleSave() {
toast.success({
noscript: 'Saved',
denoscription: 'Your changes have been stored.',
})
}
</noscript>

<template>
<button @click="handleSave">Save</button>
<ToastContainer />
</template>

# Links

Playground / demo: https://toastflow.adrianjanocko.sk
GitHub: [https://github.com/adrianjanocko/toastflow](https://github.com/adrianjanocko/toastflow)
npm (Vue renderer): https://www.npmjs.com/package/vue-toastflow

https://redd.it/1pmamrw
@r_opensource

I just created an open source Reddit Nuke extension!

https://github.com/edoardoCame/RedditNuke

Try it out!

https://redd.it/1pmc1ki
@r_opensource

n8n vs Nyno (open-source alternative) for Python Code Execution: The Benchmarks and why Nyno is much faster
https://nyno.dev/n8n-vs-nyno-for-python-code-execution-the-benchmarks-and-why-nyno-is-much-faster

https://redd.it/1pmg0fw
@r_opensource

I built Preso – a free & open-source AI presentation generator (Gamma-like, but OSS)

Hey everyone, 👋
I just launched **Preso**, an **AI-powered presentation generator** that turns prompts, notes, or documents into fully designed slide decks.

**What it does:**

* **Prompt → Deck**: One sentence → researched, structured slides
* **Text → Deck**: Messy notes or articles → clean narrative
* **Doc → Deck**: PDFs / MD / TXT → extracted insights

**Design & Editing:**

* Curated themes (Modern, Luxury Noir, Cyberpunk, etc.)
* AI-generated color palettes
* Fixed **1920×1080 pixel-perfect canvas**
* Drag / resize / rotate elements
* **AI Remix**: edit slides using natural language

**Export:**

* Interactive HTML (standalone)
* PDF, PPTX
* High-res PNGs



**Why I built it:**

I make **a lot of presentations for college assignments**, and Gamma kept hitting limits - restricted exports, locked features, and paywalls for basic things.

I wanted:

* Full control over layouts (not template-locked)
* Proper editing like real design tools
* No usage limits
* Something I could actually extend and improve

So I built **Preso** as a **Gamma alternative**, but **free and open-source**, where AI handles structure and design instead of forcing predefined templates.

This is something I actively use for my own assignments.

**It’s completely free and open-source.**

🔗 Live: [https://preso-ai.vercel.app/](https://preso-ai.vercel.app/)
🐙 GitHub: [https://github.com/atharva9167j/preso](https://github.com/atharva9167j/preso)

Would love feedback - especially on UX, missing features, or performance issues.

https://redd.it/1pmh184
@r_opensource

Challenge Integrate BRSCPP (Non-Custodial Fiat-to-Crypto Payments) in your dApp & Compete for 200 USDC Prize Pool

I am challenging young Web3 developers to integrate BRSCPP (a Non-Custodial infrastructure for Fiat-to-Crypto payments) into their dApps and web stores.

Anyone who successfully integrates, processes payments, or discovers a bug can compete for a 200 USDC prize pool and an option for future project collaboration.

BRSCPP is an MVP project on Sepolia and BSC Testnet developed be me, supporting ETH/BNB, USDC, USDT, and accepting payments in 12 different fiat currencies.

If you are interested, please send a DM.

Regards ;)

https://redd.it/1pmiry4
@r_opensource

I built a simple automatic app updater that uses WinGet
https://github.com/ELowry/WinGet-Updater

https://redd.it/1pmggv8
@r_opensource

How do you share open source work without it feeling like self-promotion

Hi everyone :),

I’ve been working on a small open source CLI tool in my spare time and recently reached a point where it feels “done enough” to share — but I’m unsure what the right next steps are.

So far I’ve tried:
\- Writing a clear README with examples
\- Adding documentation and usage guides on my docs website
\- Sharing it in one or two relevant discussions (without spamming)

I’m explicitly not trying to market it aggressively — I’d rather get it in front of the right people and receive honest feedback.

For those of you who’ve shipped open source projects that actually got adopted: What made the biggest difference early on? What do you wish you had done sooner?

If it helps, the project it's the link if you have any tips

Thanks!

If you want to check my project out or contribute feel very welcome to do so

https://github.com/Chrilleweb/dotenv-diff

https://redd.it/1pmks4y
@r_opensource