With nearly 14,000 GitHub stars and over 200 releases, Semaphore UI has established itself as the lightweight yet powerful alternative to enterprise automation platforms like Ansible AWX and Jenkins. Unlike AWX's heavyweight Kubernetes-dependent architecture, Semaphore ships as a single Go binary with zero external runtime dependencies — install it, run setup, and you have a production-ready automation server in minutes. The platform natively orchestrates Ansible playbooks, Terraform and OpenTofu infrastructure code, Terragrunt configurations, PowerShell scripts, Bash commands, and Python automation, all from a clean Vue.js web interface that displays task history, execution logs, and scheduling status at a glance. Semaphore supports concurrent task execution across multiple servers using distributed project runners, enabling horizontal scaling of automation workloads without complex clustering. The built-in inventory management system handles both static and dynamic inventory sources, while four-level RBAC (Owner, Manager, Task Runner, Guest) provides granular access control for team environments. Notifications flow to Slack, Microsoft Teams, Telegram, email, Rocket.Chat, and Gotify, keeping operators informed of failed tasks and deployment status. Integration with HashiCorp Vault secures sensitive credentials, and the comprehensive REST API with built-in Swagger documentation enables programmatic automation. Deploy via Docker Compose, Helm chart for Kubernetes, or native packages for Debian, Ubuntu, and RHEL-based distributions. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Send a document, receive a PDF: Gotenberg is a Docker-based, stateless HTTP conversion API trusted in production by thousands of companies and adopted by notable open-source projects. Send files as multipart/form-data, get a PDF back; Chromium, LibreOffice, and fonts are the container's problem, not yours. Headless Chromium handles URLs, HTML templates, and Markdown with pixel-perfect browser rendering: it executes JavaScript, loads web fonts, waits for network idle, a JS expression, or a DOM selector before rendering SPAs, and accepts injected cookies and HTTP headers for authenticated pages. LibreOffice converts 100+ office formats - .docx, .xlsx, .pptx, and legacy formats - with page-range extraction and PDF/A archival conformance. Built-in PDF engines round out the pipeline in every image variant: merge, split, rotate, flatten, encrypt, watermark, stamp, read/write metadata and bookmarks, plus Factur-X/ZUGFeRD e-invoicing and PDF/UA accessibility compliance. Screenshots of URLs and HTML come from the same endpoints. Zero-transfer pipelines stream files directly between S3, MinIO, or GCS presigned URLs and Gotenberg, bypassing your application entirely, and webhooks enable async processing. Statelessness means horizontal scaling is trivial - run as many replicas as your conversion volume demands. Three image variants (full, Chromium-only, LibreOffice-only) trim the footprint to what you actually use.

With over 2,100 GitHub stars in its first month and benchmarked at 30-75% lower cost than Claude Managed Agents on enterprise task suites, TrueForge is the open-source agent harness that provides the complete runtime layer for turning any LLM into a working production agent on your own infrastructure. The TypeScript server runs the full execution loop — streaming every step, routing tool calls through MCP servers with centralized header-auth and in-chat OAuth, delegating parallelizable work to isolated subagents, and pausing for human approval on sensitive actions. Context engineering keeps token costs low: deferred tool-schema loading delays MCP schemas until invoked, large-result offloading moves oversized outputs to files, Code Mode processes structured data through sandboxed execution, and automatic compaction summarizes older history at a configurable 50,000-token threshold while preserving the full transcript. The sandbox-as-a-tool architecture provisions isolated Daytona environments only when code execution is required, allowing one server to run many concurrent agents without idle overhead. Agents are configured from shipped YAML catalogs of models, MCP servers, git-backed SKILL.md instruction packs, and sandbox providers, then saved to an Agents Library accessible via the chat UI, TypeScript SDK, or embeddable React UI SDK. Run locally with SQLite via a single npx command, or deploy for teams with Docker Compose or Helm using Postgres and Redis with OIDC authentication. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Built on Elixir's fault-tolerant OTP runtime, Tymeslot delivers the complete scheduling toolkit that Calendly charges for and Cal.com relicensed away from open source in 2026. Share one booking link and let clients pick available slots — your calendar stays synchronized and double-bookings disappear automatically through real-time availability checking against Google Calendar, Microsoft Outlook, and any CalDAV server including Nextcloud. Meeting types support configurable durations, buffer times, and availability windows that clients can book without email back-and-forth. Phoenix LiveView powers the real-time UI with WebSocket connections that update instantly as bookings arrive, without client-side JavaScript framework overhead. The platform attaches Zoom video rooms to confirmed bookings through your own Marketplace app credentials, sends confirmation and reminder emails via SMTP, Postmark, SendGrid, Mailgun, or AhaSend, and supports custom booking page themes with embed options for integration into existing websites. Circuit breakers, connection pooling, and graceful degradation maintain availability during provider outages. Authentication supports local accounts, GitHub OAuth, and reCAPTCHA protection on public booking forms. Self-hosting deploys as a single container with PostgreSQL embedded — no separate database container required. Two named volumes persist uploads and database state, while the same image powers the managed cloud at tymeslot.app so self-hosted users get identical features without a crippled community edition. Deploy via Docker, Cloudron with automatic updates, or Railway from a community template. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With 17,000 GitHub stars, 460+ contributors, and deployments across telecommunications, automotive, and financial services running on over 10,000 CPU cores at the largest known installations, Apache APISIX delivers a fully dynamic API gateway achieving 140,000 QPS on eight cores with sub-millisecond latency through NGINX's event-driven architecture and LuaJIT-compiled plugin execution. The 100+ open-source plugins cover authentication (JWT, OAuth 2.0, OIDC, Keycloak, LDAP), observability (Prometheus, Datadog, SkyWalking, OpenTelemetry), traffic management (rate limiting, circuit breaking, canary releases, traffic splitting), and security (CORS, IP restriction, CSRF protection) — all hot-reloadable without process restarts via etcd-based real-time configuration synchronization. Multi-protocol support handles HTTP, gRPC, MQTT, TCP, UDP, and WebSocket traffic for both north-south API access and east-west service mesh communication. AI gateway capabilities proxy requests to 20+ LLM providers with semantic caching, token-aware rate limiting, provider failover routing, and content moderation. Custom plugins extend the gateway in Lua, Go, Java, Python, or WebAssembly. Radixtree route matching handles 100,000+ routes without performance degradation. Functions as a Kubernetes ingress controller with native service discovery for Consul, Nacos, and Eureka. Deploy via Docker or Helm charts with horizontal scaling through etcd cluster coordination. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

OpenSearch is a search and analytics platforms, powering full-text search, log analytics, observability, and AI-powered vector retrieval at petabyte scale. The distributed engine provides BM25 full-text search alongside k-NN vector search using NMSLIB, Faiss, and Lucene libraries, enabling semantic search, hybrid search combining keyword and vector scoring through normalization processors, neural sparse search, and retrieval-augmented generation workflows with built-in ML Commons for model hosting. OpenSearch Dashboards delivers interactive visualization with Discover for log exploration, custom dashboards, alerting, anomaly detection using Random Cut Forest algorithms, and Security Analytics with detection rules mapped to MITRE ATT&CK. Native Prometheus integration with full PromQL support unifies metrics alongside logs and traces in a single observability interface, while Data Prepper handles telemetry ingestion from OpenTelemetry collectors, Fluent Bit, and Logstash-compatible pipelines. SQL and Piped Processing Language queries with a visual PPL builder enable analysts to query data without learning the native DSL. Index State Management automates index lifecycle with rollover, shrink, and delete policies, while cross-cluster replication and searchable snapshots on S3-compatible storage provide disaster recovery. Scoped API keys, field-level security, document-level security, and audit logging deliver enterprise-grade access control. Docker Compose deploys multi-node clusters alongside the Kubernetes operator for orchestrated production environments. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

DataHub maps your entire data ecosystem into a searchable, governed catalog where every table, pipeline, dashboard, and metric is discoverable and traceable from source to consumer. Originally built at LinkedIn to manage metadata at hyperscale and proven to handle 10 million+ assets and billions of relationships in production, the platform is now trusted by 3,000+ organizations including Netflix, Visa, Slack, and Pinterest. The Spring Java backend (GMS) exposes both GraphQL and OpenAPI REST endpoints, while the React frontend delivers an intuitive interface for searching, browsing, and governing data assets. The Python-based ingestion framework provides 80+ production-grade connectors extracting deep metadata from Snowflake, BigQuery, Redshift, Databricks, dbt, Airflow, Spark, Kafka, Looker, Tableau, Power BI, Superset, PostgreSQL, MySQL, Hive, Glue, S3, Iceberg, and Unity Catalog through pull-based scheduled crawls and push-based emission via Python and Java SDKs. Automatic table-level and column-level lineage detection uses SQL parsing with 97-99% accuracy, tracing data flows from ingestion pipelines through warehouses to BI dashboards. Real-time metadata streaming via Kafka keeps the catalog continuously synchronized as schemas evolve and pipelines execute. The governance layer provides business glossary management, tag propagation along lineage graphs, domain-based organization, and fine-grained access control policies. DataHub Actions triggers automated responses to metadata changes, enabling notifications, quality checks, and downstream workflows. Elasticsearch powers full-text search with faceted filtering across entities. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Stitching together separate SaaS subscriptions for applicant tracking, time-off requests, expense approvals, and monthly payroll creates fragmented employee records and costly per-seat bills; Frappe HR consolidates over 13 human resource modules into one self-hosted platform. People operations teams manage the complete employee lifecycle from job openings, interview assessments, and offer letters through structured onboarding, internal transfers, promotions, and exit interviews. Shift planners organize rotational rosters and capture geolocation-verified attendance check-ins, while employees request leave against regional holiday calendars and multi-tier policies. Finance and payroll managers build custom salary structures, configure regional income tax slabs, process regular or off-cycle payslips, and reconcile employee expense claims and cash advances directly with ERPNext accounting ledgers. Goal tracking and appraisal cycles align individual key result areas (KRAs) with self-evaluations and manager feedback scores. A progressive web app interface lets staff submit leave requests, log attendance, and file expense receipts from their phones. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

From a PDF plan set to a waste-adjusted material order takes one browser tab: OpenTakeoff measures floors, walls, and fixtures at the drawn scale and never uploads a single drawing. Drag in a PDF, image, or zip plan set, view up to four sheets side by side, and search sheet text, while stitching joins floors split across a match line. Scale comes from the drawn scale note or a known dimension, and a check tool reports percent error before a wrong scale can skew a bid. Area, linear, and count tools carry condition colors, CAD hatches, waste percentages, and wall heights, and a marquee over the architect's finish schedule turns approved rows into conditions. Supporting materials convert coverage rates into rounded-up order quantities, and roll-goods mode lays out lanes, seams, and cuts to scale. Totals in SF, SY, LF, and EA export to CSV, JSON, Excel, print, or a marked-set PDF, while named revisions compare addenda as quantity deltas. Highlighters, revision clouds, callouts, and notes mark up sheets on a layer that is never counted, and dimension lines label measured lengths at the sheet scale. An MCP server with more than 50 tools lets AI agents open plans, set scale, and measure rooms, and each shape they draw stays a dashed proposal until a person accepts it. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

The leading open-source headless CMS with over 72,800 GitHub stars and more than 20 million npm downloads, Strapi has powered content APIs for thousands of organizations since its creation in 2015, providing a complete backend for websites, mobile applications, IoT devices, and any frontend framework through auto-generated REST and GraphQL endpoints. The visual Content-Type Builder lets editors define collections, single types, components, dynamic zones, and relations without code, while Strapi AI introduced in 2026 generates complete content schemas from natural language descriptions, Figma file uploads, or existing JavaScript application code analysis. Version 5 rewrote the platform with a TypeScript-first architecture, replacing the Entity Service with the Document Service API, switching admin panel builds from Webpack to Vite, and integrating internationalization directly into core with unlimited locale support. Database flexibility spans PostgreSQL, MySQL, MariaDB, and SQLite with automatic migration handling. The media library manages uploads to local storage, Amazon S3, or Cloudinary with image optimization and responsive formats. Granular role-based access control defines permissions per content type, field, and locale. The plugin marketplace extends functionality with GraphQL, SEO, email, custom fields, and community contributions, while lifecycle hooks, custom controllers, and middleware enable arbitrary backend logic. Draft and publish workflows, webhooks for external system integration, API token authentication, data import and export, and CRON job scheduling round out a platform that handles content operations from prototype to production. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Kortix Suna is an AI management system where autonomous agents run on isolated Linux sandbox computers, producing finished deliverables that humans review through a change request workflow before anything merges. With 20,000+ stars, it positions itself against Claude Cowork and ChatGPT Work by storing every agent persona, skill, memory artifact, and connector in a git repository: versioned, diffable, and shared across an organization. Each session launches a dedicated sandbox with full terminal access, Playwright-controlled Chromium, writable filesystem, and internet connectivity. Over 3,000 app connectors are available through MCP, OpenAPI, GraphQL, and raw HTTP, with credentials brokered server-side so tokens never enter the sandbox. Skills (reusable markdown-plus-script packages encoding company workflows) load automatically into every session, compounding institutional knowledge over time. Bring-your-own-key model routing through LiteLLM connects to OpenAI, Anthropic, Google, Mistral, or local models without vendor lock-in. The deployment runs as a single Docker Compose stack bundling the Next.js frontend, FastAPI backend, Supabase, Redis, and Caddy with automatic TLS certificates. Enterprise features include SAML/OIDC SSO, SCIM provisioning, RBAC, and audit logging. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Elastic License 2.0.

Cockpit puts Linux server administration in a web browser, rendering storage, networking, containers, and virtual machines as visual panels you click through instead of command-line syntax you memorize. It ships in every major Linux distribution and activates through systemd socket activation, consuming zero resources until someone connects on port 9090. What makes it different from other admin panels: every change through the web interface appears instantly at the command line, and every terminal change reflects in the browser in real time. No abstraction layer sits between the UI and the operating system, which means no configuration drift. Storage management covers disk partitioning, RAID arrays, LUKS encryption, LVM volumes, and NFS shares. Network configuration handles bonds, bridges, VLANs, and firewall zones through visual editors. Native Podman integration pulls images, creates containers, manages pods, and provides terminal access into running processes. KVM/libvirt support handles VM creation, cloning, snapshots, and live migration with console access. A built-in terminal provides shell access when the web interface is not enough, and the journal viewer filters systemd logs by severity and unit. Multi-server management connects additional hosts over SSH, presenting a unified dashboard across your entire infrastructure from one browser tab. Runs on a dedicated RepoCloud VPS with full root SSH access and browser serial console. LGPL licensed.

With over 11,500 GitHub stars, 20 contributors, and nine releases through version 1.4.0 in May 2026, Aureus ERP has established itself as the modern Laravel-powered alternative to legacy ERP systems like Odoo and ERPNext by packaging accounting, inventory, manufacturing, HR, sales, procurement, and project management into a modular MIT-licensed platform where you install only the plugins your business actually needs. Built on Laravel 13 with FilamentPHP 5 admin panels and TailwindCSS, each module installs via a single Artisan command that automatically resolves dependencies, runs migrations, seeds default data, and generates role-based permissions through Filament Shield integration. The Accounts module defines chart of accounts, journals, ledgers, currencies, and fiscal structures while the Accounting module handles journal entries, financial reports, period closing, and reconciliation workflows. Inventory management provides warehouse operations with stock tracking, transfers, and adjustments while Manufacturing handles bills of materials, manufacturing orders, work orders, and work center scheduling. The Sales module manages pipeline stages and opportunity tracking while Purchases handles procurement workflows and vendor management. HR capabilities span employee management, recruitment with applicant tracking, leave management through Timeoffs, and employee hour tracking via Timesheets. The Projects module provides planning and task management with the Maintenance module covering preventive and corrective equipment maintenance with calendar views. Docker deployment pulls a single image bundling PHP, MySQL, Apache, and Node.js for immediate browser access. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Track every recurring payment you have, from streaming services to SaaS tools, and get AI-powered recommendations on where to cut costs. Wallos manages subscriptions with automatic due date reminders delivered through email, Discord, Telegram, Pushover, Gotify, or custom webhooks so renewal charges never catch you off guard. Multi-currency support handles international subscriptions while the Fixer API converts everything to your primary currency for unified budget visibility. The statistics dashboard breaks down monthly and yearly spending by customizable categories, revealing consumption patterns and highlighting savings opportunities. AI analysis via ChatGPT, Gemini, or a locally-hosted Ollama instance reviews your subscription portfolio and suggests alternatives or consolidation strategies. Logo search automatically fetches brand imagery so your subscription list stays visually organized without manual uploads. Authentication supports OIDC with OAuth for enterprise environments, and the mobile-responsive interface works on any device with customizable themes and multi-language support. The PHP 8.3 application with SQLite backend runs from a single Docker container (bellamy/wallos image) with two persistent volumes for database and logos on port 8282. Deploy on RepoCloud with a dedicated VPS, keeping all financial data private under the GPL-3.0 license.

Processing over one billion tasks per month on Hatchet Cloud and holding 7,600+ GitHub stars, Hatchet is the open-source orchestration engine that replaces fragile legacy queues with durable, fault-tolerant task execution built entirely on PostgreSQL — no Redis, RabbitMQ, or Kafka required. Born from the creators' experience scaling Uber's Cadence-inspired patterns, the v1 engine achieves 10,000 tasks per second sustained throughput with 20ms average queue latency through dynamic buffer flushing and batch insert optimization. Define tasks, durable workflows, and DAG pipelines as code using native SDKs for Python, TypeScript, Go, and Ruby — every function gets automatic retries with configurable backoff, concurrency control with group round robin or cancellation policies, priority queuing, and dynamic rate limiting for third-party API protection. Durable execution persists the complete history of every task and state transition, enabling replay from failure, debugging via full event timelines, and complex pause/resume conditions using durable sleep and event waits. The real-time web dashboard provides workflow run visualization with DAG timeline rendering, worker health monitoring with slot utilization, queue depth metrics, task throughput charts, and error rate tracking — all filterable by status, workflow, or time window. OpenTelemetry integration and Prometheus metrics export enable advanced observability. Multi-tenant by default with users, roles, and namespace isolation. Self-host via Docker Compose with PostgreSQL and optional RabbitMQ, or use the single-container Hatchet Lite image for development. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With over 29,000 GitHub stars and deep integrations into LangChain, LlamaIndex, and CrewAI, Chroma has become the default vector database for developers building retrieval-augmented generation pipelines and AI agent memory systems. Its core API consists of just four functions — create, add, query, and delete — making it the fastest path from zero to semantic search, while the underlying Rust engine handles tokenization, embedding, HNSW indexing, and similarity scoring automatically. Chroma supports dense vector search via HNSW with configurable distance metrics including L2, cosine similarity, and inner product, sparse vector search using SPLADE, full-text BM25 keyword search, and regex matching, all combinable in hybrid queries through a single unified interface. Metadata filtering at query time uses MongoDB-style operators including $eq, $ne, $gt, $lt, $in, and logical combinators $and and $or, enabling precise result scoping without post-processing. The multimodal pipeline powered by OpenCLIP embeds text and images into a shared vector space, allowing cross-modal retrieval where text queries return relevant images and vice versa. Deployment options range from embedded mode via PersistentClient for notebooks and prototypes, to client-server mode with Docker for production, to Chroma Cloud for serverless scalability. Official Python and JavaScript SDKs provide identical APIs, and embedding function integrations support OpenAI, Cohere, Hugging Face, Google, Ollama, and custom models. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

With over 14,000 GitHub stars, 1 million managed identities on Logto Cloud, and continuous releases through version 1.42.0 in July 2026, Logto has emerged as the most credible open-source alternative to Auth0, Clerk, and AWS Cognito by packaging OIDC, OAuth 2.1, enterprise SSO, multi-tenancy, and RBAC into a single MPL-2.0 codebase that self-hosts for free with no per-MAU pricing surprises. Every Logto tenant operates as a fully compliant OpenID Provider supporting PKCE-only public clients, DPoP token binding, and RFC 9068 JWT access tokens. Pre-built sign-in flows handle email, phone, social login via Google, Facebook, Azure AD, and dozens of connectors, passkey authentication, and multi-factor verification through TOTP and WebAuthn. Organizations enable first-class multi-tenancy where users belong to multiple tenants with per-organization RBAC scopes on API resources. Enterprise SSO connects to Okta, Entra ID, and any SAML or OIDC identity provider. SDKs for over 30 frameworks including React, Next.js, Angular, Vue, Flutter, Go, and Python integrate authentication into SPAs, web apps, mobile apps, APIs, machine-to-machine, and CLI tools. The admin console provides user management, audit logs, webhook event subscriptions, and custom domain configuration. Personal Access Tokens and token exchange support AI agent architectures and MCP server authentication. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MPL-2.0 licensed.

Why split your entertainment life across half a dozen siloed apps when Floppy tracks every movie, television episode, anime season, book, comic, video game, board game, album, and podcast in one unified self-hosted library? A configurable home dashboard shows exactly how much runtime remains in your current shows alongside personalized recommendation rows driven by your genre, studio, cast, and tag history. Music and podcasts are first-class citizens backed by MusicBrainz discography metadata, track-level scoring, Last.fm scrobble polling, and live Pocket Casts episode synchronization. Collectors can catalog physical and digital media ownership down to the exact disc format, video resolution, HDR standard, audio codec, and bitrate, complete with automated Plex collection syncing. Live webhooks and scheduled jobs connect directly to Plex, Jellyfin, Emby, Audiobookshelf, Sonarr, Radarr, and Seerr so watches, listens, and library additions log themselves automatically. You can curate public or private lists with programmable smart-list rules, RSS and JSON feeds, Trakt watchlist imports, and barcode ISBN scanning for physical books. Recap-style statistics let you compare custom date ranges across reading streaks, pages read, listening hours, and top actors or authors, while a REST API and built-in Model Context Protocol server power custom automations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.