# Open Source

Microsoft's automated red teaming framework for AI systems

PyRIT (Python Risk Identification Toolkit) is Microsoft's open-source framework for automated red teaming of generative AI systems. It enables security researchers to probe LLMs for jailbreaks, prompt injection, content safety bypasses, and harmful output generation using multi-turn attack strategies, scoring engines, and orchestrated adversarial workflows. Supports multiple target models and integrates with Azure AI services.

Production RAG engine with hybrid search and knowledge graphs

R2R is a production-grade RAG engine from SciPhi AI that combines hybrid search with knowledge graph extraction and agentic retrieval capabilities. It provides a complete pipeline from document ingestion through retrieval and generation, supporting vector, keyword, and graph-based search strategies. The managed API and self-hosted options make it accessible for both rapid prototyping and production deployments requiring advanced retrieval beyond simple vector similarity.

All-in-one multimodal RAG framework

RAG-Anything is an all-in-one multimodal RAG framework from the University of Hong Kong that processes text, images, tables, and equations through a unified pipeline built on LightRAG. It constructs multi-modal knowledge graphs by extracting multimodal entities and establishing cross-modal relationships. The VLM-Enhanced Query mode integrates visual content into large language models for deeper document understanding beyond plain text retrieval.

Deep document understanding RAG engine

RAGFlow is an open-source RAG engine with 76K+ GitHub stars that provides deep document understanding for building knowledge-based AI applications. Optimizes chunking for 20+ document types including PDFs, Word docs, presentations, and images using layout-aware parsing. Features template-based chunking strategies, citation with source references, multi-recall retrieval combining keyword and semantic search, and a visual knowledge base management interface with drag-and-drop document upload.

Unstyled, accessible React component primitives for building design systems.

Radix UI is an open-source library of unstyled, accessible React component primitives. Provides fully functional components (dialog, dropdown, tooltip, tabs, accordion, etc.) without any styling, letting developers apply their own design. The foundation behind shadcn/ui. WAI-ARIA compliant with keyboard navigation built in.

AI testing and evaluation for agents and LLM apps

RagaAI Catalyst is a comprehensive Python SDK for observability, monitoring, and evaluation of LLM and agentic applications. Provides agent tracing with execution graph visualization, self-hosted dashboard with analytics, synthetic data generation, multi-metric evaluation framework, and guardrail management. Built for teams running production RAG systems and AI agents who need systematic testing, debugging, and performance optimization workflows.

Container-native local AI model serving with Podman

RamaLama is an open-source tool that containerizes AI model inference using Podman or Docker, eliminating host system configuration complexity. It auto-detects GPUs (NVIDIA, AMD, Intel, Apple Silicon), pulls models from HuggingFace, Ollama, and OCI registries, and runs them in isolated rootless containers with read-only mounts and network isolation. Developed under the Containers project (Red Hat ecosystem), it brings familiar container workflows to local LLM serving.

Inspect React component trees

Official browser extension by Meta for inspecting and debugging React component trees, props, state, hooks, and context in real-time. Features component highlighting on hover, profiler for measuring render performance and identifying bottlenecks, and component search/filtering. Supports React 16+ including Suspense, error boundaries, and concurrent features. Available for Chrome and Firefox. Essential for debugging re-renders, state management issues, and understanding component hierarchies.

On-device AI inference for React Native apps

Declarative framework for running AI models on-device in React Native applications, powered by Meta ExecuTorch runtime. Supports LLMs including Llama 3.2, computer vision, OCR, embeddings, and vision-language models on iOS 17+ and Android 13+. Developed by Software Mansion with pre-built optimized models, custom model export support, and privacy-first inference without any cloud dependency for mobile AI development.

Automatically detect and fix slow React re-renders

Open-source tool that highlights unnecessary and slow React re-renders directly in your app — as a browser extension, CLI, or drop-in package, with no code changes required.

DeepSeek-native terminal coding agent with a Go rewrite and MCP support

Reasonix is an open-source terminal coding agent built around DeepSeek workflows, with a newer Go-based 1.0 line, MCP integration, repository-aware code understanding, and BYOK model usage. It fits developers who want a DeepSeek-first CLI agent rather than a Claude- or OpenAI-native workflow.

Cursor for business workflow automation

Rebolt is a Y Combinator W25 company marketed as Cursor for business workflow automation, focusing on generating the business logic and internal UIs needed for complex company operations. It targets the internal tooling problem with an agentic automation approach, helping teams build custom workflow applications that connect existing business systems without traditional development cycles.

OpenAPI-powered developer portals

OpenAPI documentation renderer with a clean three-panel layout that generates beautiful, responsive API reference pages from your OpenAPI spec. Available as open-source React component or CLI-generated static site. Supports code samples in multiple languages, search, and deep linking, making it the go-to choice for teams who want polished API docs without custom development.

Time-travel debugging for Redux

Browser extension for inspecting and debugging Redux state management in React applications. Features time-travel debugging to replay actions step-by-step, state diff viewer showing exactly what changed, action log with payload inspection, state import/export, and ability to dispatch actions manually. Supports Redux Toolkit and legacy Redux. Available for Chrome, Firefox, and as a standalone Electron app. Essential for debugging complex Redux state flows in production and development.

React meta-framework for enterprise CRUD apps

Refine is an open-source React meta-framework for building data-intensive enterprise applications like admin panels, dashboards, and internal tools. Its headless architecture separates business logic from UI, supporting Ant Design, Material UI, Mantine, and Tailwind CSS. Connects to 15+ backends including REST, GraphQL, Supabase, Firebase, Strapi, and Hasura with built-in authentication and role-based access control. Deploys on Next.js, Remix, React Native, and Electron.

Hundreds of GitHub UI enhancements

Open-source browser extension with hundreds of small UX improvements to GitHub: cleaner diffs, one-click PR merging, reaction avatars, linkified commit SHAs, and much more. Fixes dozens of long-standing GitHub UI annoyances that power users encounter daily, making the GitHub web experience feel polished and efficient without waiting for official feature updates.

Responsive web development tool

Open-source browser for responsive web development that shows multiple device viewports simultaneously with synchronized scrolling, clicking, and navigation. Preview your site on phone, tablet, and desktop sizes side by side in real-time. Features screenshot capture for all viewports, element inspector, network monitoring, and hot-reload support. Built on Chromium. Free alternative to Polypane for developers who need quick responsive testing without paid subscriptions. 23K+ GitHub stars.

Durable execution engine for workflows and AI agents

Restate is a durable execution engine that provides reliable workflow orchestration for AI agents and backend services. It runs as a single binary with no external dependencies, delivering sub-50ms latency and 94K+ actions per second. Supports TypeScript, Python, Go, Java, and Kotlin SDKs with built-in retries, sagas, and virtual object state. MIT licensed with 3,700+ GitHub stars.

Automated PR workflow with AI review and labeling

ReviewPad automates the pull request workflow by applying team-defined rules for labeling, assigning reviewers, and providing AI-powered feedback on code changes. Its open-source GitHub repository supports custom automation scripts that standardize the review cycle, making it essential for mid-to-large teams enforcing governance without sacrificing development velocity across multiple repositories.

Build modular, scalable LLM applications in Rust

Open-source Rust library for building scalable, modular, and ergonomic LLM-powered applications. Rig unifies 20+ model providers (OpenAI, Anthropic, Mistral, DeepSeek, Ollama, and more) and 10+ vector stores behind one trait-based interface, supports completion and embedding workflows, multi-turn streaming, and transcription/audio/image generation, with full GenAI Semantic Convention compatibility and WASM-ready core library — production agentic infra for Rust teams.

Visual AI agent builder by Ironclad

Rivet is an open-source visual AI programming environment and TypeScript library by Ironclad for building, debugging, and deploying AI agents through a node-based graph editor. Complex LLM prompt chains become visual networks with real-time data flow inspection at every node, team collaboration on agent graphs, and a TypeScript library for embedding finished graphs in any application. Transforms agent development from text-editing into visual engineering.

Rust-powered JavaScript bundler for Vite

Rolldown is a high-performance JavaScript and TypeScript bundler written in Rust, built as the next-generation bundler for Vite. Created by Evan You and VoidZero, it offers a Rollup-compatible plugin API with 10-30x faster builds. It combines esbuild-level speed with full Rollup ecosystem compatibility, supporting tree-shaking, code splitting, and advanced optimizations natively. With 13K+ stars and MIT license, it is set to become the default bundler for Vite 8.

Intelligent model router that balances cost and quality across LLM providers

RouteLLM by LMSYS routes LLM requests to the most cost-effective model that can handle each query's complexity. It uses learned routing models to classify whether a query needs a powerful expensive model or can be handled by a cheaper alternative, reducing costs by up to 85% while maintaining quality. Supports OpenAI, Anthropic, and other providers through an OpenAI-compatible API.

Open-source AI coworker with persistent memory and tool use

Rowboat is an open-source AI coworker platform that provides persistent memory, tool use, and multi-agent orchestration in a chat-based interface. It enables teams to build AI assistants that remember context across sessions, access internal tools and databases, and coordinate specialized sub-agents for complex workflows. Over 9,300 GitHub stars.

Extremely fast Python linter and formatter written in Rust

Ruff is a Python linter and code formatter written in Rust by Astral that runs 10-100x faster than existing tools like flake8, isort, and Black. It implements over 800 lint rules from dozens of popular plugins in a single binary, handles auto-fixing for most violations, and includes a built-in formatter compatible with Black. Adopted by FastAPI, Hugging Face, Pandas, and Apache Airflow, Ruff has over 38,000 GitHub stars and processes entire codebases in milliseconds.

Cross-platform on-device AI inference SDK

RunAnywhere SDK is a production-ready toolkit for running AI models entirely on-device across iOS, macOS, Android, Web, React Native, and Flutter. It provides a unified C++ core with platform-specific bindings for LLM text generation via llama.cpp, vision-language models, Whisper speech-to-text, Piper text-to-speech, and on-device image generation. All processing stays local with zero cloud dependency, ensuring privacy and low latency for mobile and edge AI applications.

Fast serving framework for LLMs and vision models

SGLang is an open-source serving framework for large language and vision-language models, designed for low latency and high throughput. It features RadixAttention for automatic KV cache reuse, compressed finite state machines for fast structured output generation, continuous batching, and tensor parallelism. With over 25,000 GitHub stars, it supports models like LLaMA, Mistral, Qwen, and Gemma on NVIDIA and AMD GPUs.

Build full-stack apps on your own infra

Open-source framework for building and deploying full-stack applications on AWS with infrastructure-as-code. Supports Next.js, Remix, Astro, and more with zero-config deployments. Manages Lambda, DynamoDB, S3, and other AWS services through a clean TypeScript API, giving developers the power of AWS without the complexity of CloudFormation or CDK.

Super-fast Rust-based JavaScript compiler

SWC is a super-fast JavaScript and TypeScript compiler written in Rust that serves as a drop-in replacement for Babel. It compiles modern JavaScript and TypeScript to backward-compatible versions up to 20x faster than Babel by leveraging Rust performance and parallelism. SWC handles JSX transformation, TypeScript stripping, module transpilation, and minification in a single tool, and powers major frameworks including Next.js, Parcel, and Deno.

Benchmark for evaluating AI coding agents on real GitHub issues

SWE-bench is a benchmark from Princeton NLP that evaluates AI coding agents by testing their ability to resolve real GitHub issues from popular open-source projects. Each task provides an issue description and repository state, and the agent must produce a working patch that passes the project's test suite. With 4,600+ GitHub stars, it has become the standard yardstick for comparing autonomous coding tools like Devin, Claude Code, and OpenHands.

Component toolkit for live code playgrounds

Sandpack is a component toolkit by CodeSandbox for building live-running code editing experiences directly in the browser. It bundles a full in-browser JavaScript bundler, CodeMirror editor, and preview pane into embeddable React components with npm dependency support, hot module reloading, and error overlays. Sandpack powers the interactive examples on the official React documentation and supports templates for React, Vue, Svelte, and vanilla JavaScript.

LLM-powered web scraping with graph-based extraction pipelines

ScrapeGraphAI is a Python library that uses LLMs and graph-based logic to build automated, self-healing web scraping pipelines. Developers describe desired data in natural language and ScrapeGraphAI constructs a processing graph that extracts structured information from any website. It supports multiple LLM providers, achieves 96%+ accuracy on semantic extraction benchmarks, and adapts to layout changes automatically. Over 20,000 GitHub stars.

AI-native state store with hybrid vector and full-text search

SeekDB is an open-source AI-native state store from the OceanBase ecosystem that combines MySQL-compatible data access with hybrid vector and full-text retrieval. It targets agent and AI application teams that need embedded or server deployment, copy-on-write style sandboxes, and searchable state without gluing together several separate storage layers.

Microsoft's AI orchestration SDK for .NET, Python, and Java

Microsoft's open-source AI SDK that lets you combine AI models with conventional programming. Supports plugins, planners, memory, and function calling with availability for .NET, Python, and Java. Designed for enterprise developers building AI-powered applications within the Microsoft ecosystem, offering deep integration with Azure AI services and existing business logic.

Self-hosted UI and API for Ansible, Terraform, and scripts

Semaphore UI provides a web interface and REST API for running Ansible playbooks, Terraform and OpenTofu configurations, Bash scripts, and PowerShell commands from a centralized self-hosted platform. With over 13,000 GitHub stars and 2 million Docker pulls, it replaces AWX and manual terminal execution with a polished dashboard for scheduling, access control, notifications, and execution history across mixed infrastructure automation environments.

Promise-based Node.js ORM

Mature, promise-based ORM for Node.js supporting PostgreSQL, MySQL, MariaDB, SQLite, and SQL Server. Features model definitions with validations, eager/lazy loading, transactions, migrations, raw queries, and lifecycle hooks. Supports soft deletes, scopes, and virtual fields. One of the oldest and most battle-tested Node.js ORMs, widely used in enterprise apps though increasingly succeeded by Prisma and Drizzle in new projects.

Rust-powered coding agent and pair programmer by OVH

ShAI (Shell AI) is a CLI that brings natural language to the command line, turning plain English descriptions into executable shell commands tailored to your OS and shell. Offers command generation plus command explanation (paste an unfamiliar command, get a breakdown). Adapts syntax for macOS, Linux, and Windows across bash, zsh, fish, and PowerShell. The OVH shai variant extends further into a full pair-programming coding agent with support for multiple LLM providers.

Browser-based AI SQL editor with modern UX

Sheeta.ai is a browser-based AI SQL editor designed to modernize the data workflow with a simple, intuitive interface and high-accuracy query generation. It addresses the UX gaps of traditional database tools like DBeaver by providing a clean, modern interface with AI-powered query suggestions, schema visualization, and result exploration built for the contemporary data stack.

AI-powered command-line productivity tool

ShellGPT (sgpt) is a command-line productivity tool powered by OpenAI models that generates shell commands, code snippets, and documentation directly in the terminal. Integrates with Bash, Zsh, PowerShell, and CMD; places AI-suggested commands into the terminal input via hotkeys. Supports persistent chat sessions, a REPL mode, and custom Python functions for extending capabilities. Accepts stdin and arguments for pipe-based workflows where command output can be piped to the AI.

Hunt down social media accounts by username across 400+ platforms

Sherlock is a Python CLI tool that searches for a given username across 400+ social networks and websites simultaneously. It is widely used in OSINT investigations, security audits, red teaming exercises, and digital footprint analysis. Sherlock is included in Kali Linux and Parrot Security distributions and has over 76,000 GitHub stars, making it one of the most popular open-source security tools.

YC-backed cloud deployment platform for Rust and Python applications

Shuttle is a YC-backed cloud deployment platform that simplifies deploying Rust and Python backend applications. Developers annotate their code with Shuttle macros to declare infrastructure needs like databases, caches, and secrets, and Shuttle provisions the resources automatically on deployment. Features instant deployment, automatic HTTPS, and infrastructure-from-code. Over 6,100 GitHub stars.

Visual agent builder with 1000+ integrations

Sim is an open-source platform for building, deploying, and orchestrating AI agents with a visual workflow editor. Connects 1,000+ integrations and LLMs with drag-and-drop canvas design, AI-assisted Copilot for generating nodes from natural language, and built-in knowledge base for RAG. Trusted by 100K+ builders. Includes 11 pre-built workflow templates for quick deployment.

Run AI workloads on any cloud with automatic cost optimization

SkyPilot is an open-source framework for running LLMs, AI, and batch jobs on any cloud with automatic cost optimization. It supports AWS, GCP, Azure, Lambda Cloud, and more, automatically selecting the cheapest available GPUs and managing spot instance preemption. Features include multi-cloud job scheduling, managed spot jobs with automatic recovery, and cluster autoscaling with 6,000+ GitHub stars.

Package manager for MCP servers and agent skills

Smithery is a CLI tool and registry for discovering, installing, and managing MCP servers and agent skills. It lets developers search thousands of available servers, install them with one command, inspect available tools, and connect their AI coding agents to external capabilities through the Model Context Protocol standard.

Hugging Face's lightweight agent framework

smolagents is Hugging Face's lightweight agent framework for building AI agents that can use tools, write and execute code, and collaborate in multi-agent setups. Designed for simplicity with minimal abstractions — agents are just LLMs that write Python code to orchestrate tool calls rather than using JSON-based function calling. Supports any LLM provider, integrates with Hugging Face Hub for sharing tools and agents, and runs with as few as 1,000 lines of core library code.

ByteDance high-performance JSON library

Sonic is ByteDance's blazingly fast JSON serialization library accelerated by JIT compilation and SIMD instructions. It achieves 3x faster throughput than Go's standard library while using 75% less memory and 99% fewer allocations. Drop-in compatible with encoding/json, it handles both simple Marshal/Unmarshal operations and streaming APIs for high-throughput services processing millions of events.

Self-hosted code understanding for humans and agents

Sourcebot is a self-hosted code intelligence platform that helps developers and AI agents understand large codebases through intelligent search, navigation, and inline-cited answers. Deployed as a Docker container with MCP server support, it indexes thousands of repositories without source code leaving your infrastructure.

Google Zanzibar-inspired authorization database

SpiceDB is an open-source authorization database inspired by Google's Zanzibar system, providing relationship-based access control (ReBAC) at scale. It defines permissions through a schema language that models relationships between users, resources, and roles, then evaluates authorization checks in single-digit milliseconds. Used by companies like Netflix and GitHub, SpiceDB handles millions of permission checks per second.