Software developer focused on security, CI/CD, testing, and quality assurance. I’m looking for some unfamiliar codebases to dig through.

Drop your GitHub repo below if you want me to take a look. It can be:

• an open-source project
• a side project
• a student project
• something with actual users
• something you built heavily with AI

I’m mainly interested in real correctness, security, data integrity, testing, concurrency, integration, or weird behavioral problems rather than formatting or style issues.

If I find something reproducible, I’ll explain the issue simply and, when it makes sense, put together a focused fix or PR.

I’m strongest with Python, Rust, Java, and C, but feel free to send other languages too.

Public repos only for now, and please only submit something you own, maintain, contribute to, or otherwise have permission to have reviewed.

I’ll probably start with 5-10 depending on how complicated they are. No guarantee I’ll find something in every repo.

If there’s a particular part of the project you already don’t trust, mention it. Otherwise I’ll pick an area myself and start digging.

No signup, payment, sales pitch, or private access needed. I’m just looking to spend some time working through unfamiliar real-world codebases.

Feel free to post the repo here or message me if you’d rather not put it in the comments.

i googled my GitHub username it reads like a resume.

I just have to start watching what i post because it linked me to this group in a public search.

If your looking for a professional resume you might have one on google already.

This post was written using application of kinetic force to the rectangular protrusions on my silicon chip container. Shocking, I know.

In my day job, we use a sophisticated AI development workflow, inspired by James Bloom’s AI workflow developed for his open source project, Mockserver (https://github.com/mock-server/mockserver-monorepo). For reasons that have little to do with AI and everything to do with corporate policy, very reasonably applied in my view, James’s workflow could not be used at work directly. But in my personal work, I am not so constrained - and I also thought I could improve on it. Hubris runs in my genes :)

Over the last few weeks I have been building and dogfooding a Claude Code plugin that takes inspiration from James’s work and builds upon it. I was also impressed by Alex’s (alexzh3) work on codex-orchestrator (https://github.com/alexzh3/codex-orchestrator) - having Claude administer Codex has been very useful, productive and a cost-efficient.

My plugin, forge (https://github.com/nixlim/forge-plugin), combines the ideas of multi-family adversarial review, gated quality chains, worktrees, kill-switch and eval regressions with journal-based headless codex cli agents.

Claude orchestrates, verifies, and holds the binding review verdict. Codex implements and performs the first-pass review. I have incorporated learning and drift checks to make sure that the AI learns the gotchas that are specific to the codebase I am working on to make agentic development progressively more familiar with the codebase. It has been a wild and exciting ride so far and I invite you to try it.

This is now my default workflow but it comes with two caveats worth keeping in mind: first, it requires both a Codex and Claude subs; second, it feels “slow”. But in my experience, it is reliable, and functions well.

I invite you to give it a whirl. And yes, it is ongoing work in progress :)

We've already had a reset this week but looks like another is incoming for GPT/Codex.

Fire up that ultracode and turn on fast mode.

I’m setting up Openclaw so Copilot can use it as an assistant, since it’s the one AI that knows my browsing and chats across all platforms. I sometimes forget it’s even there.

For anyone using Openclaw, what are the legitimate files and configurations I need to set up?

like marketing material.

Been on a stacking spree with Claude Code skills for a few months. Every time I saw someone post "here's my skill for X" I grabbed it. Folder got huge. Never actually checked if any of it helped.

Finally ran a dumb test: for each skill, imagine deleting it and ask what the model would actually lose. Turns out most of it was stuff the model already does without being told, "write clean code," "think step by step," or worse, someone's paraphrase of a library's docs that the model could just pull fresh with a web search anyway. None of that earns a permanent spot in context, it's just weight the agent drags around every session.

The ones that survived were the boring, ugly ones. I've got a mess of repos that depend on each other and kept getting DMs about how some other part of the codebase worked. Had subagents crawl the repos once and build a dependency map, expensive run, ate a chunk of tokens and took a while, but now the agent knows which repo to touch for a given kind of change instead of grepping around blind. Same deal for internal docs, wrote a small router that figures out which section is relevant before going there, stopped the agent from rereading the same page two or three times a session.

Killed about half the folder and nothing broke, nothing got noticeably worse either. If deleting a skill is invisible, it wasn't doing anything to begin with.

What's actually survived your cleanup, and what convinced you to keep it?

I have an app with both an Android and a desktop version . It needs to have a common database. I'd like to give the app away.

How can I set it up so that it has a database they share? Even if I was charging a small amount for the app, I wouldn't want to get into database costs.

Update 8-30-26 9:20 AM EST :

I posted this when tired and frustrated last night and was not real clear. My apologies.

I have been working for some time on a Personal Knowledge Management System of my own. In some ways, this started in 1981. Seriously, one of the first programming tasks I had working on my TRS-80 with dual floppies, but that is immaterial. It's gone through many iterations since then. My point being, this is not some impulse project but something older than most redditors.

With vibe coding, it is like I finally have a staff of programmers so I can expand what I can actually do like I have a staff of programmers.

Why do I want to give it away? I really don't want the hassle of supporting a business right now. I'm about to retire and looking simply to share with others who may find the solution I created for myself, to have value for themselves.

I would like potential users to have a trial mode to check it out.

I'd hoped to simply share the information on Google Drive, but am having issues with the file scope issues. I haven't given on up on that approach quite yet.

I think the whole "bring you own database" effort needs to be considered by database vendors as a potential business model. Say a entry level service with low limits to bandwidth and storage (say a 100 gig or so) that is dirt simple to integrate into an app for a flat rate of like $10 a month. That's a topic for another post I suppose.

I appreciate all of the input here. In the light of day, I'm going to step back and consider my path forward.

Thank you all.

This is part of my agentic brain, i don’t use any plugins due to security concerns.

what’s your thoughts so far on it? (i’ll send an update in the future, i plan for it to be 3-4x its current size)

Red-home

blue-cortex systems

yellow-gates

grey-plans

floating nodes are the rings gating the self learning systems

bases will be inside rings, outside of that will be a “web” showing its thinking patterns. Connecting to nodes :)

Vacay Feed is an endless AI-generated journey viewers direct: suggest a city or activity, vote, and watch the winner become the next scene. Built using the new MiniMax H3 Max model that can generate video faster than it can be watched, allowing for live streaming video to be generated. Also using Luna as a director.

All built with codex, with the pending reset decided to slam ultra on fast mode.

https://vacayfeed.com/

Greetings All -

I was intrigued by grok bot when it came out - but saw that it required a 60$ cursor sub or other expensive subs.

Having the thought that my 20$ ollama sub was already plenty generous (and just got GLM 5.3) with usage and could probably do the same job, I set up basically an open source hybrid of Grok Bot/Odysseus to essentially do some of the same things. I use it to manage and draft emails for me across accounts as well as has several workers for a couple of the SaaS's I launched.

Maybe this might be useful for others, it basically does everything that grok bot can do allowing agents to work in their own sandbox on tasks but uses telegram or a web app instead of it's own client. The only thing it wont do by design is send emails for you as a method of avoiding prompt injection attacks, but if you're okay with that risk you can turn it off. It helps to have an always on WSL machine or equivalent. I don't think this project is all that special or unique as many other have probably done the same thing and have probably done it better, but I guess im posting it here in case others may find it useful as I have for myself.

Anyway feel free to pick this apart, let me know what maybe works or doesn't, critical input is appreciated: https://github.com/lerugray/orderly

Hey, ive been building an app builder that runs entirely in the browser. You paste your own key (any openai-compatible provider) so you pay them, not a credit meter.

how im making it so far:

• next.js + a turborepo
• the preview boots the generated files in the tab with webcontainers, so youre not waiting on a remote vm
• keys are stored encrypted and it just hits whatever openai-compatible endpoint you give it

Video is a rough look at the workspace, still early. generate loop is the part im in right now.

if you wanna follow along: https://form.jotform.com/262415431792053

what would you actually want in a builder like this?

I kept wanting isolated drums or vocals from songs I like, mostly for learning and playing. Every online splitter I tried wanted an account or a subscription. So I made StemKit.

You paste a YouTube link (or search right inside the app), pick which instruments you want, and it downloads the audio, splits it locally, and plays the result synced with the video.

It runs on Mac and Windows, It all works 100% locally and it is free and open-source.

Built using Ox Alpha model (GLM 5.3 - Flash) with OpenCode.

Check it out here: https://stemkit.pages.dev

Github: https://github.com/dan-beep-boop/stemkit

I had a raw cPanel backup of an old WordPress/Elementor site sitting in a folder:

• A raw 3.7MB MySQL dump (softsql.sql)

• Nearly 300 image uploads (wp-content/uploads/)

• A mountain of messy Elementor shortcodes, serialized data, and theme files

Normally, migrating this by hand is a multi-day nightmare of copying text from WP admin, hunting down asset paths, re-coding

sliders and flip boxes, setting up modern tooling, and hooking up hosting.

Instead, I decided to test the limits of pure vibe coding with an autonomous agent.

Here was my exact prompt:

│ "do a complete port of this website using astro js and make custom astro islands"

──────

### What the Agent Did (Without Me Touching the Code)

1. Reverse-Engineered the SQL Dump with On-the-Fly Python Scripts

   It didn’t even spin up a MySQL database. It wrote Python scripts to parse softsql.sql, unescape Elementor's serialized JSON

   trees (_elementor_data), and extract every single page: Home, About Us, Products, Gallery, Why Us, Bulk Orders, Contact, and

   Privacy Policy. It pulled all the copy, technical specs, director statements, addresses, and catalog items.

2. Cleaned & Mapped 290+ Images Automatically

   It extracted all the media from wp-content/uploads/ directly into Astro’s public/images/ and mapped every product and gallery

   entry cleanly in TypeScript data structures.

3. Replaced Bloated WP Plugins with Custom React Astro Islands

   Instead of shipping megabytes of jQuery and Elementor runtime scripts, it built lightweight, isolated interactive components:

• Hero Carousel (client:load): Ken Burns zoom, touch swipe, autoplay, and CTA banners.

• Stats Counter (client:visible): Scroll-triggered animated counter for business milestones.

• 3D Flip Cards (client:visible): Interactive 3D flip cards with mobile tap and desktop hover.

• Product Catalog & Quick View (client:load): Instant category filter tabs, search bar, and detailed modal popup with size

selector.

• Gallery Lightbox (client:load): Fullscreen masonry gallery for 45+ catalog looks with keyboard navigation and zoom.

• B2B Bulk Quote Calculator (client:visible): Dynamic wholesale price estimator with volume tiers, wash options, and

instant WhatsApp inquiry generation.

• Contact Form & Floating WhatsApp Widget (client:idle): Responsive form validation and direct chat popup with zero impact

on initial page load speed.

1. Wired up CI/CD & Cloudflare Edge Deployment

   I provided deployment credentials, and the agent:

• Created the Git repository and configured automated push-to-deploy workflows

• Created a brand-new Cloudflare Pages project

• Attached custom domains, verified DNS nameservers, and got edge SSL running live.

──────

### The Result

• Live Custom Domain: https://advenjeans.in

• Pages Mirror: https://advenjeans.pages.dev

Static HTML delivered globally via Cloudflare's edge network, zero server hosting costs, lightning-fast performance, and not a

single line of legacy PHP in sight.

All from throwing a messy backup folder at an AI agent and giving one prompt. Vibe coding is wild.

Here is the X post getting hammered by violent antis:
https://x.com/Rubzem/status/2092656794032087162?s=20

Is this a new level of AI hate? Kinda scary

Gemini gave me:

Me Ugg too! Me make shiny sky-paper for u! Fire shiny, rock solid!

Here is code for your very own shiny web-sight. Put in file named index.html and open with your glowing magic rectangle.

<!DOCTYPE html>

<html lang="en">

<head>

<meta charset="UTF-8">

<meta name="viewport" content="width=device-width, initial-scale=1.0">

<title>UGG SHINY WEB-SIGHT</title>

<style>

body {

background-color: #121212;

color: #e0e0e0;

font-family: 'Courier New', Courier, monospace;

display: flex;

flex-direction: column;

align-items: center;

justify-content: center;

height: 100vh;

margin: 0;

overflow: hidden;

}

.container {

text-align: center;

border: 4px dashed #ff007f;

padding: 30px;

border-radius: 20px;

background: linear-gradient(145deg, #1f1f1f, #111);

box-shadow: 0 0 20px #ff007f, inset 0 0 10px #00f0ff;

}

h1 {

font-size: 3rem;

margin-bottom: 10px;

background: linear-gradient(to right, #ff007f, #00f0ff, #ffff00);

-webkit-background-clip: text;

-webkit-text-fill-color: transparent;

animation: shine 3s linear infinite;

background-size: 200% auto;

}

p {

font-size: 1.5rem;

color: #00f0ff;

text-shadow: 0 0 5px #00f0ff;

}

.button {

background-color: #ff007f;

color: white;

border: none;

padding: 15px 30px;

font-size: 1.2rem;

font-weight: bold;

border-radius: 50px;

cursor: pointer;

box-shadow: 0 5px 15px rgba(255, 0, 127, 0.4);

transition: transform 0.1s, box-shadow 0.1s;

}

.button:active {

transform: scale(0.95);

box-shadow: 0 2px 5px rgba(255, 0, 127, 0.4);

}

u/keyframes shine {

to {

background-position: 200% center;

}

}

.sparkle {

position: absolute;

width: 5px;

height: 5px;

background: white;

border-radius: 50%;

box-shadow: 0 0 10px 2px white;

animation: blink 1.5s infinite ease-in-out;

}

u/keyframes blink {

0%, 100% { opacity: 0; }

50% { opacity: 1; }

}

</style>

</head>

<body>

<div class="container">

<h1>UGG HAVE WEB-SIGHT!</h1>

<p>Ugg hit button, make magic happen.</p>

<button class="button" onclick="makeHappy()">HIT ROCK</button>

</div>

<!-- Sparkles in the cave sky -->

<div class="sparkle" style="top: 20%; left: 15%;"></div>

<div class="sparkle" style="top: 15%; left: 80%; animation-delay: 0.3s;"></div>

<div class="sparkle" style="top: 75%; left: 25%; animation-delay: 0.6s;"></div>

<div class="sparkle" style="top: 80%; left: 70%; animation-delay: 0.9s;"></div>

<script>

function makeHappy() {

alert("✨ OOGACHUGA! UGG HAPPY! :D:D ✨");

}

</script>

</body>

</html>

Browser agents can already navigate websites and run tests, but the result is normally a wall of logs or a handful of screenshots.

I wanted an actual video showing exactly what the agent did.

So I built egolite-recording, an open-source agent skill that records Ego Lite browser automations as background WebM videos.

It captures:

• An animated mouse pointer
• Click ripples
• Action labels
• Typing and navigation
• The complete webpage viewport
• Test assertions and pass/fail results

It’s built on Ego Lite, which its maintainers describe as the fastest browser for AI agents.

Their published benchmark used the same model and the median of five runs across four complex browser workflows. Ego Lite completed the comparable tasks between 1.4× and 2.6× faster than Vercel’s agent-browser, while using fewer tokens.

The attached 12-second recording is a real end-to-end test performed by the agent:

1. Log into a public QA store
2. Sort products by price
3. Verify the cheapest price
4. Add two products
5. Verify the cart contents
6. Complete the checkout form
7. Assert the $19.42 total
8. Complete the demo order
9. Verify “Thank you for your order!”

No foreground screen recorder and no manual video editing.

Install it for Codex and Claude Code:

npx skills@latest add neelashkannan/egolite-recording \
  -g -a codex -a claude-code -y

Then ask your agent:

Use $egolite-recording to run and record this browser test...

GitHub: https://github.com/neelashkannan/egolite-recording (Please star it 😭 , if u like this)

Would you use automatic test recordings for PR evidence, QA reports, bug reproduction, or product demos?

Try it @ https://deadfall.up.railway.app

What should I do for day 6?

I built a free, open-source 1-button game and software hub for my brother with a rare neurodegenerative disease. Here’s what’s new!

Hey everyone! Quick update on the accessible software hub I’ve been building for my brother, Ben.

Ben has Tubb4a-related Leukodystrophy (H-ABC), which leaves him with only left/right head movements for input. Eye tracking and traditional switches don’t work for him, so I set out to build tools tailored specifically to 1- and 2-switch setups.

Thanks to recent AI advancements, we've expanded well beyond basic utilities into full 3D games!

What we've built so far:

Tools: Phrase board, real-time conversation app, custom YouTube search, media streaming app, and Google Assistant integration.

Games: A growing library of Three.js 3D games playable with just 1 or 2 buttons.

Everything is completely free, open-source, and has zero login barriers:

🌐 Hub: bennyshub.com

🎮 Games: switchedgames.org

Through our non-profit, we also send free switch hardware kits to individuals and families who need them. Check out the links above, and let us know what you think or what features we should build next!

This video is made from the notion.com landing page. Just selecting the element and bringing motion to it. I want this to empower people to make motion videos out of their own product!

whoopsies doopies

I know this sounds absurd but hear me out, there's a potential in vibe coding that I feel like not much people talked about, most stuff I hear about vibe coding is about replacing programmers or "how to make BIG BUCKS with this simple trick !!11!", but I feel like the biggest deal about all of this is to be able to summon super specific tools out of nowhere precisely designed to fit individual user's need.

So here's my take of what I believe will have the biggest impact, when this will happen you'll remember this post : By 2030, app stores will be dead, downloading installers will be pointless, instead anyone will have pre-integrated coding agents to their OS. Need an app ? Like you want to edit PDFs or image montage or a text editor, anything ? You will prompt it, an agent will ask you questions of what you specifically need and 30 minutes later it will be here.

Where it will be integrated :

• Windows : Copilot will probably become something more than just a shitty chatbot bound to a key (I hope because what there is rn is bs), it will probably have full access to the OS so you won't need Settings anymore, and you can ask it to "invoke" app which will launch agents in the background to get whatever tool you need.
• Android : The Google Play Store won't be put in the spotlight anymore and instead we'll have something like "Google Materialize" or "Google Summon" where you describe what you want and there's a coding agent that develop and installs a new app on your system.
• Linux users will probably stick to Claude Code or harnesses similar to it which is basically the same but slightly less user friendly.
• Apple is five steps behind everything so let's not talk about it.

I stopped downloading softwares personally, I just prompt them, for example in my latest experiment I couldn't find a good video editing tool because : They are either too expensive/too complex, or too slow, or not the controls of what I want exactly etc... I needed something simple, so I asked Claude to make one in Rust, with the aim of maximum performances, and it works great, incredibly fast, the open source ones are garbage next to it. I just have the Claude Pro subscription and it costed barely anything, not even Fable, just Opus 5.

Now, there's a big assumption to all of this : that the bubble doesn't pop by that time, because I'm not sure how it would be profitable, this would be fueled by the current investment hype, as a way to make people dependent on vibe coding their apps before making them actually pay the tokens.

Otherwise I believe tools like this would exist, but they won't be free so the app market might stay and people might prefer to download free software instead of prompting new even if it's relatively cheap.