Garnet is Microsoft Research's cache-store built on .NET that speaks the Redis RESP wire protocol while delivering up to 10x higher throughput and 4x lower tail latency than comparable alternatives on identical hardware. The Tsavorite storage engine provides a cache-friendly, shared-memory architecture scaling linearly across CPU cores, supporting both in-memory operation and tiered storage across local SSDs and Azure Storage for datasets exceeding available RAM. Cluster mode enables sharded deployments with replication, dynamic key migration for live rebalancing, non-blocking checkpointing, and automatic failover using standard Redis cluster commands. The RESP implementation covers raw strings, sorted sets, lists, hashes, sets, bitmaps, HyperLogLog, streams, pub/sub, Lua scripting, and client-side transactions, allowing StackExchange.Redis, Jedis, redis-py, and other Redis clients to connect without modification. C#-based extensibility lets developers define custom commands and new data types as server-side stored procedures, compiled and loaded at runtime without restarting the server. TLS encryption, ACL-based access control, and operation logging complete the production feature set. Deployed across Microsoft services including Windows & Web Experiences, Azure Resource Manager, and Azure Resource Graph. Nearly 12,000 GitHub stars. MIT licensed.

Watch YouTube without the ads, accounts, or tracking, from a server you own: TubeHaus is a private YouTube client that keeps the familiar layout, URLs, and keyboard shortcuts. Your subscriptions, watch history, resume positions, Watch Later, and playlists live as files on the server, so every device in the house shares one library and picks up a video where another screen left it. Live streams play with segments fetched ahead of the player, and captions are transcribed on the fly when a stream has none. Chapters, storyboard previews, a mini player, and theater mode make long videos easy to navigate, while sponsors are skipped automatically and dislike counts come back to the page. Save videos offline in 1080p or 4K for trips, send playback to a TV from your phone without a separate casting dongle, and drive the television interface entirely from a remote. Imports arrive from a Google Takeout export, Invidious, NewPipe, or FreeTube, so years of subscriptions move over in minutes instead of being rebuilt by hand. A calm mode hides recommendations and Shorts when you only want to search and watch deliberately. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Certificate lifetimes are collapsing toward 47 days, which turns TLS from a yearly chore into a weekly one, and CertMate is the control plane that makes that schedule boring. It issues and renews certificates from Let's Encrypt, ZeroSSL, Google Trust Services, Actalis, DigiCert, SSL.com, Sectigo, or your own private CA, validating by DNS-01 through 29 DNS providers, HTTP-01, or a CSR whose private key never leaves the device. Renewals run automatically, earlier when a certificate's life is short or the CA moves the date through ARI, and deploy hooks push each renewed certificate where it is actually served, then probe the live endpoint to prove the new certificate answers. Discovery watches hosts and certificate transparency logs for certificates you did not issue, folding them into one inventory of what is served where and when it expires. Certificates rest on local disk or in Azure Key Vault, AWS Secrets Manager, HashiCorp Vault, Infisical, or S3 storage, with encrypted backups copied off-site. Its built-in CA issues client certificates for mTLS with OCSP and CRL, and can serve ACME itself, so certbot, lego, acme.sh, and cert-manager get internal certificates under EAB rules you define. Every action lands in a tamper-evident, hash-chained audit trail you can export and verify independently. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Cold outreach dies in the spam folder long before a prospect reads it, and Warmbly is the open-source platform that keeps your mailboxes warm, capped, and credible while campaigns run from the accounts you already own. Connect Google Workspace, Microsoft 365, or any SMTP and IMAP mailbox, and Warmbly checks SPF and DMARC records, scores mailbox health, then warms each account gradually, starting near 10 messages a day and ramping toward a 40-per-day ceiling instead of blasting from day one. Campaigns run as multi-step sequences spread across many mailboxes, with per-mailbox daily caps, minimum spacing between sends, and weekday sending windows, so volume grows without one account absorbing all the risk. Opens, clicks, bounces, and complaints stream into a deliverability view with suppression handling, while every reply from every mailbox lands in one unified inbox your whole team can work in real time. A built-in CRM tracks contacts, pipelines, deals, tasks, and meetings next to the conversations that created them. Visual playbooks react the moment a reply, booking, bounce, or warmup dip arrives: branch on intent or confidence, let an AI step read the reply and act only with the actions you allow, open the deal, post to Slack, update HubSpot or Pipedrive, and test the whole path on a canvas before it goes live. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

With over 7,000 GitHub stars and active community maintenance through version 0.26.0 released in June 2026, Homebox fills the gap between inadequate spreadsheets and overcomplicated enterprise asset management by providing a purpose-built inventory system designed specifically for home users, families, and small groups. The Go backend with SQLite storage deploys as a single Docker container consuming under 50MB of RAM at idle, running on hardware as modest as a Raspberry Pi while the responsive web interface adapts seamlessly across desktops, tablets, and smartphones. The entity-based architecture introduced in v0.26 unifies items and locations into a shared structure supporting custom fields, attachments, entity types, and reusable templates for consistent data entry across inventory categories. QR code generation creates printable labels that scan with any smartphone camera to instantly display item details, photos, serial numbers, and associated documents. Warranty tracking records purchase dates, prices, and expiration dates while maintenance scheduling sends reminders for recurring service tasks. Location hierarchies organize items spatially with nested sub-locations, and flexible label tagging enables cross-cutting categorization beyond physical placement. Multi-user support shares collections with family members or roommates with OIDC single sign-on integration for Active Directory, Okta, and other identity providers. CSV import and export handles bulk operations, while the full REST API enables automation and third-party integrations. Collection-level ZIP export packages complete inventories with attachments for backup or migration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Every screen in the house (browser, TV, game console, or phone) can open the same library of videos, music, and photos once Universal Media Server shares it, with transcoding handled automatically for whichever device asks. A file the device can already play passes through untouched. Anything else is converted on the fly to suit the network, the device, and the preferred language. Folders open at once, with no wait for library scans, and disc drives and disc images play directly. In the web interface, every title gets a page with cover art, cast, and genre details from TMDB, Discogs, and MusicBrainz, and filters narrow the library by actor, director, genre, year, or artist. YouTube channels, online radio, podcasts, and RSS feeds appear beside local files on every connected device. Users and groups, with optional avatars and four-digit PINs, decide which shared folders each person sees; content for children stays apart from the library for adults. A list of detected renderers shows every connected device, and the configuration file of each device can be edited to fix browsing, playback, or transcoding on an unsupported TV. Builds exist for Windows, Linux, and macOS, with AppImage and Docker options for servers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.

Memory OS gives Hermes Agent a permanent memory, so a new session opens with your projects, decisions, and working style already in context instead of introductions. Seven layers divide the job: workspace files carry your standing instructions into every turn, and a full-text index makes every past conversation searchable in place. Durable facts about your stack, your projects, and your patterns live in a structured store that resolves entities and scores how much each fact can be trusted, promoting what proves itself and demoting what does not. Cross-session recall pulls relevant moments from older threads, while a vector store with hybrid dense and keyword search finds the right memory even when the wording has changed. A self-curating wiki turns raw material into concept, entity, and comparison pages that are re-ingested automatically, and a Ground Truth hierarchy tells the agent to treat injected memories as authoritative instead of re-checking them. Scheduled jobs keep the system honest: hourly ingestion, weekly curation and decay scans, dead-letter reporting, and health heartbeats. It all runs beside the agent on your own machine with whichever provider you already use, from OpenRouter and Anthropic to a local Ollama. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With over 77,000 GitHub stars accumulated in under five months since its March 2026 launch, Paperclip has become the default control plane for teams running multiple AI agents in production. Rather than juggling dozens of terminal tabs with Claude Code sessions, Codex instances, and Gemini CLI workers, Paperclip organizes all agents into a company structure with org charts, reporting lines, role-based permissions, and per-agent monthly budgets that trigger hard-stops when exceeded. The platform supports any runtime through its adapter system — Process adapters manage local CLI agents like Claude Code, Codex, Cursor, Pi, and OpenCode as child processes, while HTTP adapters trigger remote agents via webhooks to OpenClaw, serverless platforms, or custom endpoints. Heartbeat-based execution wakes agents on configurable schedules, injecting goal context, budget state, and workspace paths directly into the invocation payload. The Work and Task System provides atomic checkout with execution locks, first-class blocker dependencies, and structured work products to eliminate duplicate effort. Governance features include approval workflows, decision tracking, emergency stops, and full audit trails tracing every mutation to an actor. Deployment runs as a single Node.js process with embedded PostgreSQL locally or scales to external Postgres for production, installable in one command via npx paperclipai onboard. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

JobNavigator runs your whole job hunt as an automated pipeline, scraping career pages and job boards, scoring every posting against your résumés, and tracking each application to its outcome. Discovery fans out across company career pages through twelve ATS handlers, aggregators like LinkedIn, Indeed, and ZipRecruiter, and a Chrome extension that saves any posting you stumble on. Each new job is scored against your base résumés, lightly for a quick number or in full, with keyword coverage and requirement mapping that show exactly where you match and where you do not. Strong matches get a tailored résumé from eight PDF templates and a cover letter written from your persona, ready for your review before anything is sent. The extension then auto-fills application forms and drafts answers to free-text questions from your stored Q&A bank. Every application moves through stages and interviews in one tracker, while Gmail polling spots replies and updates the status for you, and Telegram delivers new-job alerts and a daily digest. A household can share one install with up to five accounts, each keeping its own jobs, résumés, and PIN, while scraping runs once for everyone. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

A private ChatGPT built with Next.js: Lobe Chat is the open-source AI chat interface teams self-host instead. Its main advantage is provider breadth: one interface connects to 40+ model providers, including OpenAI, Anthropic Claude, Google Gemini, Mistral, Groq, AWS Bedrock, Azure, and local models served through Ollama, so you can switch models per conversation and compare outputs. It handles multi-modal work: image recognition, image generation, text-to-speech, and speech-to-text. A plugin system based on function calling and the Model Context Protocol (MCP) adds external tools like web search and code execution. Run it in standalone mode as a single container with settings in browser storage, or in database mode with PostgreSQL and S3-compatible storage for persistent history, multi-user auth, and RAG knowledge bases built from uploaded documents with pgvector retrieval. Because tools arrive through function calling and MCP rather than a proprietary plugin format, custom internal tools can be exposed to the assistant with a standard server over STDIO or HTTP. Hundreds of pre-configured assistant roles import from the community marketplace. For teams the cost model matters: provider API keys billed per token typically undercut a ChatGPT Plus seat per person, and self-hosting keeps API keys, uploaded files, embeddings, and conversation history entirely on your own server.

Self-hosted and plugin-based, DVinyl keeps vinyl, CDs, cassettes, books, movies, video games, LEGO sets, and board games in one catalog, with cover art and metadata fetched for every item. Adding an item takes an ID, a camera scan of its barcode, or a bulk import from Discogs or Goodreads. Each media type is a plugin that switches on per collection, with Discogs behind music, TMDB behind film, IGDB behind games, and Rebrickable behind LEGO. Once cataloged, a collection appears as a grid, a compact table, or virtual shelves with spine view and customizable furniture. Custom lists, track playlists, and a wishlist of items still being hunted sit alongside. Music collections get live value estimates with price history charts, games show completion times, and printable QR codes and barcodes label the physical copies. Separate collections can belong to you, the family, or a room, each with admin, editor, and viewer roles and optional OIDC single sign-on through Authentik, Keycloak, Authelia, or pocketID. Read-only links and QR codes let anyone browse a whole collection or just one section. Fourteen themes in light and dark, a modular dashboard, and a Markdown info page with photos make each instance personal. A no-code editor adds custom item types. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

MikroTik Manager is a web control plane for whole RouterOS fleets, built so that a bad VLAN change reverts itself instead of costing you a drive to the site. Before any risky edit, Change Guard saves a restore point on the device and arms a scheduler; if a fresh connection cannot reach the router afterwards, it rolls itself back. Lockout prediction simulates each change against live device state and refuses one that would cut management access, naming the exact port and VLAN at fault. Config Health audits for settings RouterOS accepts but silently ignores. Day to day, a live dashboard tracks availability, wireless clients, and alerts delivered by email, Slack, Discord, Telegram, or ntfy. Switch faceplates, per-port client views, VLAN copy wizards, bulk SSID deployment, RF health charts, rogue AP detection, and a guest Wi-Fi captive portal wizard cover the wired and wireless side. A rule builder handles firewall and NAT, topology maps come from LLDP, CDP, and MNDP, and a built-in NetFlow collector attributes traffic to clients and applications. Firmware rolls out in canary waves that halt on failure, and every configuration snapshot supports diffs and one-click rollback. OIDC single sign-on, TOTP two-factor, role-based access, and scoped API tokens protect the console, while sites group devices per customer network. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

OpenList gathers every place your files live, local disks, S3 buckets, OneDrive, Google Drive, Dropbox, NAS shares, and forty-odd other services, into one browsable file list behind a single login. Mount each storage at its own path and the whole collection behaves like one tidy drive: documents open in the browser, whether PDF, Markdown, source code, or Office files, images get a gallery mode, and videos and audio play in place with subtitle and lyric support. Everyday file work happens in the same window: upload, delete, rename, move, and copy, including copying directly between two storages when you are migrating off a cloud plan. Offline download tasks let the server fetch links for you in the background, and multi-threaded acceleration squeezes speed out of sluggish single connections. Every folder can also be mounted as a real drive on your computer through the built-in WebDAV and FTP servers, with per-user permissions deciding who may read, upload, rename, or delete. Protected routes add passwords in front of sensitive shares, permalinks hand out direct download links, and granular user rules can hide files or open archive contents without extracting them. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Worklenz delivers an all-in-one project management platform purpose-built for teams that bill clients for their time and expertise. The task management system supports list, Kanban board, and timeline Gantt views with priorities, due dates, assignees, labels, and subtasks. Built-in time tracking offers both start-stop timers and manual entry, logging billable hours directly against tasks and automatically aggregating time data into project-level cost reports. The resource management module provides a visual team utilization dashboard showing capacity allocation across all active projects, helping managers avoid overallocation and balance workloads. Client portals give external stakeholders direct visibility into project progress, task status, and deliverables without requiring internal account access. Financial insights track budgets versus actuals, showing project profitability, cost breakdowns, and burn rate in real time. The analytics engine generates reports on project health, team workload distribution, task completion trends, and time allocation patterns. Project templates enable one-click setup of common agency workflows with pre-configured task structures, milestones, and assignments. The React frontend uses Ant Design components with TypeScript, while the Express.js backend connects to PostgreSQL for data and Redis for caching. Docker Compose deployment includes Nginx reverse proxy with SSL/TLS support, automated database backups, health checks on all services, network isolation, and MinIO for object storage. On RepoCloud, deploy Worklenz on a dedicated VPS with root SSH access, persistent PostgreSQL storage for your project data, and complete control over client portal access and team configurations, all under the AGPL-3.0 license.

SkillHub gives teams a private, npm-style registry for AI agent skills, so a useful skill package is published once, reviewed, versioned, and installed into a compatible agent from the command line. Upload a package from the web console, the CLI, or the REST API, pick PUBLIC, NAMESPACE_ONLY, or PRIVATE visibility, and track releases with semantic versions plus tags such as beta and stable. Team namespaces keep their own members with Owner, Admin, and Member roles and publishing policies, while full-text search filters by namespace, downloads, ratings, and recency and hides whatever a user may not see. Every submission enters a review queue: namespace admins approve or reject team skills, platform admins decide promotions to the global scope, and each governance action lands in the audit log. A built-in Skill Scanner inspects published packages and shows its report on the skill page, with optional behavioral, LLM, VirusTotal, and Cisco AI Defense engines. Members can star and rate skills, follow download counts, receive notifications, and report problem packages. Skill suites bundle several skills into one versioned collection with an entry skill, scoped API tokens serve the CLI and scripts, and the interface speaks English, Simplified Chinese, Russian, and Korean. Packages live on local disk or S3-compatible storage such as MinIO. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

With over 46,000 GitHub stars and one of the largest communities in data engineering, Apache Airflow is the workflow orchestration platform that lets teams define, schedule, and monitor complex data pipelines as Python code through directed acyclic graphs. Airflow 3.x introduced a modernized architecture with a task execution API, the Language Task SDK for writing task implementations in Java and Go alongside Python, asset-based partitioning with FanOutMapper and FixedKeyMapper for data-driven scheduling, a first-class state store for tasks and assets, pluggable retry policies, and a redesigned React-based web UI built on FastAPI. The provider ecosystem ships 80+ packages covering AWS, Google Cloud, Azure, Snowflake, Databricks, Apache Spark, Apache Kafka, PostgreSQL, MySQL, MongoDB, Slack, HTTP, SSH, Docker, Kubernetes, and dozens more, enabling a single deployment to orchestrate jobs across multi-cloud and on-premises infrastructure. The scheduler supports cron expressions, timetable plugins, data-aware scheduling triggered by asset events, and dynamic task generation through Python loops and conditionals. Built-in operators include BashOperator, PythonOperator, DockerOperator, KubernetesPodOperator, and sensor operators that poll external systems. The web UI provides DAG visualization with Gantt charts, grid views, and graph views, task instance logs, SLA monitoring, connection and variable management, and role-based access control. Deployment options include standalone mode, Docker Compose with CeleryExecutor or KubernetesExecutor, Helm charts for Kubernetes, and managed cloud services. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache License 2.0 licensed.

OpenBB stands as the world's most popular open-source finance repository — an Open Data Platform that evolved from a pandemic-era Reddit post into a full-blown infrastructure layer challenging Bloomberg's $25 billion empire. The "connect once, consume everywhere" architecture consolidates proprietary, licensed, and public financial data sources into multiple consumption surfaces simultaneously: Python environments for quants building models, OpenBB Workspace and Excel for analysts creating dashboards, MCP servers for AI agents performing automated research, and REST APIs for custom applications. The modular extension system supports dozens of data providers including Yahoo Finance, Alpha Vantage, FRED, Intrinio, Polygon, and Tradier with standardized schemas that normalize responses across vendors. The CLI offers a terminal-style interactive interface with autocomplete, parameter hints, and chart rendering for rapid data exploration. Provider routing handles authentication, rate limiting, and response normalization transparently so switching between free and premium data sources requires changing a single parameter. The platform covers equities, options, fixed income, crypto, forex, ETFs, mutual funds, economics, technical analysis, quantitative analysis, and alternative data across global markets. AI agent integration exposes every data endpoint as tool-callable functions with schema discovery enabling LLMs to query financial data programmatically. Install via pip with Python 3.9+ and deploy the REST API server for team access. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Analysts explore data where it lives with Apache Zeppelin, a web notebook where each paragraph can speak a different language: run Spark in Scala, query through SQL, prototype in Python, and plot the results without leaving the page. Pluggable interpreters connect notebooks to Spark, Flink, JDBC databases, Neo4j, Elasticsearch, and dozens of other engines, all sharing variables through the ZeppelinContext so a DataFrame built in one paragraph feeds the next in another language. Built-in visualizations turn query output into bar, pie, line, and scatter charts with pivot controls, while dynamic forms add dropdowns and inputs that make notebooks reusable reports for colleagues. Multiple Spark and Scala versions coexist in one instance, with interpreter binding modes from globally shared to isolated per note, and execution on local, standalone, YARN, or Kubernetes clusters. Teams collaborate through multi-user support with authentication and note permissions, schedule notebooks as jobs, and drive everything through a REST API. The 0.12.1 maintenance release hardens JWT validation and path traversal defenses, upgrades the Angular frontend, and stabilizes the Spark, Flink, Python, Neo4j, and File interpreters. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.