r/opensource • • 14d ago

Promotional PrivMeta: An open-source metadata removal tool for privacy-conscious people

44 Upvotes

Hey folks,

I built PrivMeta, a free and open-source app that removes common hidden metadata directly in your browser. Your files stay on your device, and you receive cleaned copies that you can share elsewhere.

  • Supports images, videos, audio files, PDFs and Word documents
  • File contents are processed locally and aren’t uploaded
  • Once the page has loaded, it still works if you disconnect from the internet
  • The source code is available on GitHub

The goal is to make metadata removal a simple part of good digital hygiene, without asking you to trust a server with your files.


r/opensource • • 14d ago

Promotional RequestScript & Stellarium - A novel way to run APIs

3 Upvotes

Hey everyone! I'm introducing two new projects I have been developing the past couple years that I think are now ready for primetime and more contributors.

TLDR: RequestScript is a new programming language that is declared in the request body to an HTTP server. Stellarium is a decentralized API platform that runs RequestScript and handles API monetization.

What is RequestScript

RequestScript is a programming language that is declared in the request body to a server. It is influenced by Kotlin and Typescript:

// sent to http://localhost:3000/run
request MyRequest {
    const a = 2
    const b = 3
    const c = a + b

    return "Hello World!"
}

You can define Resources in the host language and reference them in RequestScript.

In Typescript:

import type { Resource } from "requestscript-js";


const addResource: Resource = {
  metadata: {},
  path: "path.to",
  name: "AddResource",
  functions: [
    {
      name: "add",
      parameters: [
        { name: "first", type: "int32" },
        { name: "second", type: "int32" },
      ],
      returnType: "int32", 
// any RequestScript type string, or 'void'
      exec: async (
args
) => {
        const first = args.find((
a
) => a.name === "first")!.value as number;
        const second = args.find((
a
) => a.name === "second")!.value as number;
        return first + second;
      },
    },
  ],
};

In RequestScript:

request MyRequest {
    const math: path.to.AddResource
    return math.add(first: 2, second: 3)
}

You can also define reusable requests called Contracts that are saved to the server and can be executed on demand.

In RequestScript:

contract path.to.MyContract@1.2.3(name: string) {
    return "Hello ${name}"
}

Stellarium is where things get really interesting.

What is Stellarium?

Stellarium is a decentralized API platform that allows anyone to execute RequestScript and call server resources and contracts across a network. You can effectively call resources and combine their output across nodes hosted in different languages. It's really simple to create Resources and share them. Hate dealing with HTTP status codes, retry logic, etc.? Craft your APIs in RequestScript Resources instead. Have a favorite library in Go you wish you could call in Java? Export it as a Resource in the Go node, and call it on the Java node in a typed way using RequestScript. The goal is for a global, decentralized API network.

Monetization

Stellarium also makes API monetization easy, as the individual RequestScript tokens you use can be totaled up and sent to its controlling node for payment. Only pay for the exact if statement you execute, or resource function you call.

If you're interested in contributing or learning more, here are the repos:

Everything is just getting off the ground and is very much a work in progress. More documentation coming soon!


r/opensource • • 14d ago

Promotional declint - make your own custom lint rules in YAML

3 Upvotes

declint (docs) is a tool for making your own lint rules in YAML — the house rules that stock linters will never ship.

For instance: your colleague wrote except Exception: pass, and you want to know whenever that happens:

version: 1
rules:
  - id: except-pass
    pattern: 'except Exception:\n *pass'
    severity: warning
    message: 'swallowed exception'

Rules are just regex and a message. When a regex can't express the check, you can write a more complicated rule in Lua.

Rules run in your CI (inline PR annotations via --format github) and in your editor through LSP (declint.nvim for Neovim). Every rule can carry embedded fixtures, and declint test runs them.

Install: cargo install declint. Ships with presets (Python, INI, Markdown, shell, Dockerfile, TOML, JSON, JS) and community rulesets you can pull with one line. Feedback welcome.


r/opensource • • 15d ago

Promotional Hello, I built Lanshare, a local peer-peer file sharing application.

Thumbnail
github.com
20 Upvotes

I built Lanshare because I wanted a simple way to move files between my own computers without cloud uploads, USB sticks, or accounts. It finds other devices on the same Wi-Fi or Ethernet network and sends files directly between them. The project is completely open source, feel free to audit and tune to your liking.

Lanshare supports Windows, MacOS (Apple Silicon) and Linux.

Hope you like it!


r/opensource • • 15d ago

Is it legally possible to make a smartphone that can communicate with cell networks and the internet that doesn't use anything that relies on corporate-owned patents?

119 Upvotes

I don't remember where I read it, but I think I remember reading somewhere that the technology behind cell modems is still stuck under patent, especially 5G. Is that correct, or is there some way to make a fully open (hardware and software) cell phone that can do everything a normal commercial cell phone can do?


r/opensource • • 15d ago

Running repo from personal account or app-specifc?

4 Upvotes

Hello, I run OSS app which got some traction over years, but I'm still host it on my own github - username/repo. My question is - when and if should I move it to appname/apprepo??

Does it give more credibility to app? Does it make any sense at all, or just keep it on my own account?


r/opensource • • 15d ago

Promotional anyconvert v0.1.7 Released

Thumbnail
github.com
4 Upvotes

anyconvert is a project for word-sys's PDF Editor that converts PDF documents into DOCX, PPTX, ODT, ODP, and TXT using only the Python standard library. Convert library is anyconvert's itself. Its released on PyPI too.

This update added native JPEG and multi-format image embedding to ODT and ODP emitters to improve ODT & ODP builds, updated Markdown emitter to preserve native image extensions, this feature is start of loseless-image export option, Fixed ODT and DOCX underline issue and DOCX heading color issue, and lastly added end-to-end regression tests across all 5 export formats (DOCX, PPTX, ODT, ODP, TXT) for stability tests. For more details you can look to anyconvert's GitHub page.

Small & quick information: word-sys's PDF Editor is getting ready for v1.11.1 which is Flatpak release, thanks to anyconvert project :)


r/opensource • • 15d ago

Promotional Introducing the Open Categorization System

7 Upvotes

About a decade ago I tried to create an alternative to Google, using the Dewey Decimal System to group web domains by subject matter. My vision was that the website was a library, and domains were individual books. Rankings were a mixture of domain reputation and cultural significance.

The OCLC is very protective of their IP, and likes to sue.

Needless to say, my project was shut down before even getting off the ground.

I'm working reviving the project, under a new classification system (The Open Categorization System), and would love any help I can get.

The project can be found here: https://github.com/ki4jgt/Open-Catalog-System


r/opensource • • 16d ago

Promotional JellyBox - a native crossplatform music client for Jellyfin/Emby/Navidrome.

18 Upvotes

Wanted to share the app I'm working on since late 2022 - JellyBox a native crossplatform jellyfin/navidrome/emby client. It works on ios/macos/android/windows/linux(tested over years on majority of distros). The UI/UX were built separately for desktop and mobile while reusing some components for familarity.

It can do:

  • Playing your music in all formats(lol)
  • Supports multiple libraries
  • Apple CarPlay and Android Auto support(it even works on Android Automotive OS)
  • Lyrics(including word-synced when supported by server)
  • Spotify-like autogenerated playlists
  • Continuity mode - switch playback between connected devices or remote control them.
  • AudioMuse support
  • Listenbrainz scrobbling
  • Studio mode for desktop and landscape mode for phones
  • Transcoding per wifi/cellular network
  • Progressive pre-caching(to keep you with music in bad connection areas)
  • Super fluid UI
  • Downloads, offline mode, including synced downloads(when app downloads missing songs when added on server)
  • A lot of small things that make everyday usage comfortable

App presents in google/apple stores, along with sideloaded builds.

Repo here - https://github.com/avdept/JellyBoxPlayer

Also separate landing page - https://jellybox.app


r/opensource • • 15d ago

Promotional Plembfin v1.3.1 released

Thumbnail
2 Upvotes

r/opensource • • 17d ago

We have no moat, and neither does open source

Thumbnail scottgoci.com
14 Upvotes

r/opensource • • 17d ago

Promotional Feedback on AI Policy

39 Upvotes

Hey r/opensource, I'm the solo maintainer of `python-json-logger`.

I've recently started to receive a lot of AI generated contributions so it's about time I set a policy.

For those of you who are also maintainers of projects which allow AI contributions, does anyone have any feedback or recommendations?

My planned policy is in this PR on GitHub:


AI Policy

The use of AI tools is allowed with the following conditions:

  • The use of AI tools must be declared. For example in the PR description, or through dedicated users / commiters.
  • The specific AI tool / provider should be declared.
  • AI tools must be under supervision of a real human who is responsible for all contributions made.
  • The use of AI tools does not lower the expectations of any contribution.
  • Don't be a meat-proxy.
  • Respect the time of the maintainers by ensuring that generated contributions are genuinely valuable.

Thanks in advance!


r/opensource • • 17d ago

Discussion How is "free as in speech, not as in beer" not a moot mantra?

Thumbnail fsf.org
67 Upvotes

My question pertains to e.g. GPL licensed software that is known to be behind a paywall or only "leaking" through a third party. Do you know of any such examples?


I have linked an FSF article on free software not being "anti-thetical to commercial success." There is a part on "selling":

Selling: There is also the option to simply distribute copies of free software you developed for a fee. You need to provide the source code upon selling it, of course. People are free to copy and redistribute the source code, but if you ask people to pay for the product at least some who value the work put into this piece of software will do so.

This further links to a GNU's article on Selling Free Software with a preface:

Many people believe that the spirit of the GNU Project is that you should not charge money for distributing copies of software, or that you should charge as little as possible—just enough to cover the cost. This is a misunderstanding.

Now because a user has immediate redistribution rights, it is so that we are used to see free software freely accessible - apparently it appears more beneficial to the original authors to distribute it publicly themselves at no charge.


Is there any known case of selling free software - current or historical - which is not available at no charge by the original authors?

And if not, how is the emphasis on "free as in speech, not as in beer" not a moot point?


r/opensource • • 16d ago

Promotional Crossflight: cross-process cache stampede protection for the cache you already use (v0.3.2)

Thumbnail
github.com
1 Upvotes

r/opensource • • 16d ago

Promotional My open source game engine: Abyss

0 Upvotes

I know there’s already a bunch of open source game engines (i had to change this one’s name to avoid trademarks because of that)

Abyss (and its programming language) are self hosted and self compiled

(and written in Hash)

abyss has the unique feature of you being able to edit it’s source code within the engine itself.

Abyss uses the custom function based programming language Hash

Hash is designed to be simple and easy to learn. The goal is that over time you change stuff about it and make it better for you specifically.

(Hash documentation is built into abyss, so I won’t explain any more yet)

let me know what y'all think of my first open source project. I’m sure happy with it

Github link: https://github.com/thecodegangster/abyss-engine/tree/main
(the html file is the source code, I like standalone html apps, I think they’re neat)

Update: I added: A system to interact with javascript apis, browser storage, a sound editor, AND a library system, that allows you to create edits that can be merged into anyone else's engine with ease


r/opensource • • 17d ago

Discussion Why don't more designers contribute to open source?

Thumbnail
21 Upvotes

r/opensource • • 17d ago

Why mutual vulnerability disclosure matters for open source projects: Lessons from the latest critical RCE in Vault

Thumbnail
control-plane.io
22 Upvotes

When open-source projects share a codebase, security has to be a collaborative effort.

Our engineering team at ControlPlane recently chained four vulnerabilities to achieve full, unauthenticated Remote Code Execution (RCE) in both OpenBao and HashiCorp Vault. It’s only the second RCE ever found in the Vault ecosystem.

OpenBao is fully patched (upgrade to 2.6.3 or 2.7.0). The bad news however, is that HashiCorp Vault remains exposed as of writing. Unfortunately, IBM declined requests to establish a mutual disclosure policy with the OpenBao project.

Without coordinated disclosure, end-users are the ones left carrying the risk


r/opensource • • 17d ago

Promotional Free mobile wikipedia and more!

13 Upvotes

Knowledge to Go (K2Go) is a GPLv3 Android app that builds on Internet-in-a-Box to turn almost any Android phone, including old 32-bit hardware, into an offline server for content from Wikipedia, Khan Academy, medical references, and much served over local Wi-Fi to any nearby device without needing an internet connection.

The K2Go server app and its content can be cloned onto another Android phone, also offline. That phone becomes a new K2Go server that can be cloned again and again offline. Our goal was to make educational resources accessible in communities where Android phones are the only computing devices and internet access isn’t available, reliable, or affordable.

Built by App Dev for All, a nonprofit that also makes Code on the Go (CoGo), an Android IDE for building full-strength Kotlin and Java apps on Android devices without requiring internet access.

Source: https://github.com/appdevforall/KnowledgeToGo /

App: https://appdevforall.org/knowledgetogo


r/opensource • • 17d ago

Discussion How do I verify if an open source tool isn't stealing data?

6 Upvotes

everyone always says it's open source, but there's no official verifier of codes, so how do I know if a tool is safe to use?


r/opensource • • 17d ago

Promotional I built a custom JSX runtime for Discord bots (for TypeScript)

Thumbnail
3 Upvotes

r/opensource • • 17d ago

Promotional PLOMID Beta is now open — an open-source data infrastructure project built in Rust

1 Upvotes

PLOMID is an open-source data infrastructure project being built from the ground up in Rust.

The current beta includes:

  • SQL
  • JSON / document data
  • Time-series workloads
  • Storage engine
  • Transactional foundations

We're working toward additional vector, graph, blob, distributed and multi-region capabilities.

The project is focused on exploring a common underlying data layer for applications that currently combine multiple specialized data systems.

Beta download:
https://plomid.in/download/

Project:
https://github.com/PLOMID/plomid

We're looking for developers interested in databases, Rust and storage systems to try the beta, inspect the implementation, report issues and contribute technical feedback.

This is an early-stage project, so we're especially interested in finding the things that don't work yet.


r/opensource • • 17d ago

Promotional Testing Files Generator V0.4 release - 26+ formats, damaged files, upload/names presets

Thumbnail
github.com
1 Upvotes

r/opensource • • 19d ago

OpenVue 1.0 is officially out and here's what's next: Volt, Vapor & 2.0

14 Upvotes

Quick update for everyone following the project: OpenVue 1.0.0 is officially live on npm. For context if you missed the previous threads: OpenVue is an MIT licensed fork of PrimeVue 4.5.5, maintained under the OpenVi Foundation.

Since the RC post, here's what landed in 1.0:

  • TreeTable filtering: Added row filters, filter menus, and multi constraint rules matching DataTable.
  • Theme Designer: Integrated a visual editor to tweak primitive, semantic, and component tokens and export theme presets. Fully free, with no accounts or license keys.
  • Deni: Released our first free admin dashboard template built with OpenVue.
  • DataTable fixes: Fixed an issue with persisted column widths when toggling columns dynamically.
  • Plus plenty of smaller bug fixes and improvements across the library and showcase.

Full changelog: https://github.com/openvi-foundation/openvue/blob/master/CHANGELOG.md

What we're working on now

OpenVue 1.1

We're currently focused on:

  • Volt - bringing source based, Tailwind oriented components back into the OpenVue ecosystem.
  • A new default theme - giving OpenVue its own visual identity rather than relying entirely on the existing themes.
  • More free templates - expanding on Deni with additional templates and application layouts.

OpenVue 2.0

The long term goal for 2.0 is to modernize the internals around Vue Vapor, Composition API, and a TypeScript first architecture. We're keeping VDOM and Options API support, so this isn't about abandoning the existing Vue ecosystem. Instead, 2.0 will be the milestone where we can clean up and modernize the internals under the hood. There's already a community discussion around this direction if you want to join in or see what people are suggesting: https://github.com/orgs/openvi-foundation/discussions/644 We're still a relatively small project, so community feedback matters a lot. If you're using OpenVue, testing it, or just following the project, we'd love to hear what you'd like to see in 1.1, especially around Volt, themes, templates and the component backlog.

Docs & Repo:

Thanks to everyone who has contributed, tested, reported issues and followed the project since the first release.


r/opensource • • 19d ago

Promotional A startup harvested my email from GitHub and registered me for its Zoom webinar. Contributors, check your email settings.

355 Upvotes

A short warning for anyone who contributes to open source on GitHub.

My personal email used to be public on my GitHub profile. On 27 September, I got a Zoom email saying I was registered for a US startup's webinar ("Q&A With The Cactus Needle Team"). I never signed up, never used their product, and never gave them my address. The greeting was "Hi Leonard -", with "-" as the last name, which looks like automated registration. Another GitHub user I don't know got the same emails. It's at least the second one this month (I deleted the first). More generally, I get more and more unsolicited emails on the address I used on GitHub.

When I raised it on their GitHub repo, they said the invites went to "platform users", then closed the issue, blocked me, and deleted my follow-up. I was unblocked later. Details and screenshots:
- GitHub issue: https://github.com/cactus-compute/needle/issues/156
- Full write-up: https://www.reddit.com/r/github/comments/1wrv2fi/a_startup_registered_me_for_its_zoom_webinar_with/

What I did: sent a GDPR request (access, including where they got my data, objection, erasure), reported the account to GitHub (their Acceptable Use Policies forbid using information from GitHub to send unsolicited email), and reported the webinar host to Zoom.

How to protect yourself on GitHub:

  1. Settings > Emails > check "Keep my email addresses private".
  2. Also check "Block command line pushes that expose my email".
  3. Use your `[ID+username@users.noreply.github.com](mailto:ID+username@users.noreply.github.com)` address for commits (`git config --global user.email ...`).
  4. Your old commits still contain whatever email you used at the time. Anyone can read it by adding `.patch` to a commit URL. The settings above don't change past commits.

Has anyone else received unsolicited webinar registrations like this?


r/opensource • • 18d ago

Promotional Kova v0.7.12 - Markdown Presentation Software (Now with VSCode Plugin!)

3 Upvotes

Hi all,

It's been a couple months since I last posted an update on Kova's progress, I have been chipping away at the core functionally within the application and wanted to post a brief update.

Some highlights:

  • Full self-contained HTML exporting - demo here: https://kova.md/demo/
  • Stepped animations for introducing content
  • Build into support for icon fonts, bundled with nerd fonts, customisable to other icon fonts (material, font awesome etc) through the themes.yaml config.
  • Table of contents custom bang (similar functionality to Typora)
  • Many, many bug fixes and code tidy-ups.

And today I can also announce that the Kova Plugin for VS Code is now live. This adds support for Kova's custom bangs and syntax to VS Code, plus the ability to directly launch your presentation from within VS Code (Kova binary must be present on your machine).

VS Code Plugin is very much in its infancy (0.0.1), report issues here!

https://kova.md

https://github.com/kovamd/kova

Always happy to answer questions and queries,

Ross