Translated🐟 The complete book of Chinese second-hand trading slang and a guide to avoiding pitfalls and staying compliant (4,476+ real-world code word variants on Xianyu / Zhuanzhuan / Xiaohongshu, insight into sellers' subtext, and a guide for buyers on inspecting goods and avoiding being ripped off)
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
Oracle3: open-source trading engine and MCP server for prediction markets. Finds fee-adjusted no-arbitrage violations across related event contracts and trades them live on Kalshi, Polymarket and Solana, or on paper, under pre-trade risk limits. 13 MCP tools, JSON CLI, agent skills, 600+ tests.
Catch risky npm dependency changes before they merge.
The fastest automatic differentiation library for C++, with Python bindings. Forward, adjoint and higher-order derivatives, checkpointing, Eigen support and JIT. Reproducible benchmarks against CppAD, Adept and autodiff.
- automatic-differentiation
- aad
- algorithmic-differentiation
- autodiff
Cross-platform C++20 GUI framework featuring MVVM architecture, reactive capabilities, and scalable, accelerated GPU rendering.
- cpp20
- cross-platform-gui
- gui
- modern-cpp
High-performance Valorant aimbot with adaptive smooth tracking and precise auto aim. Fully configurable, low detection risk design, clean modular structure. Easy setup for current patch.
Open source Android, iOS and Web app for learning about and managing digital and physical security. From how to send a secure message to dealing with a kidnap. Umbrella has best practice guides in over 40 topics in multiple languages. Used daily by people working in high risk countries - journalists, activists, diplomats, business travelers etc.
- opensource
- security
- risk
- human-rights-defenders
Tomorrow Theme for Vim
Lea's kitchen sink of form components. WIP. Try at your own risk or come back later.
Open Source SIEM (Security Information and Event Management system).
- siem
- risk-management
- risk-assessment
- vulnerability-management
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
.NET Cross platform and highly composable middleware for building web request handlers in F#
Small, focused, awesome methods added to core Ruby classes. Home of the endlessly useful nil_chain.
A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.
A collection of awesome papers, articles and various resources on credit and credit risk modeling
- credit-scoring
- credit-modeling
- financial-machine-learning
- sample-selection
a curated list of useful threat modeling resources
Know the risk of merging a pull request, and where it lives. Free, open-source CLI and GitHub Action: after your AI review, farol shows the riskiest files, what they reach, diff coverage and contract breaks. TypeScript/React, Go, Python.
A tool for quantitative risk analysis of Android applications based on machine learning techniques
- android
- risk
- android-permissions
- quantitative-risk-analysis
Public repository for improvements to the EXTRABACON exploit
Safety in Embodied AI: A Survey of Risks, Attacks, and Defenses | 500+ Papers | Perception, Cognition, Planning, Interaction, Agentic System
- adversarial-attacks
- ai-safety
- autonomous-driving
- backdoor-attacks
In the midst of all the tools out there that you can possibly use to keep track of them. Here's a "shovel" that just works to try them all out.
Mitigate security concerns of Dependency Confusion supply chain security risks
Asterisk to MQTT Bridge