🛠️ All DevTools

[Build/Deploy] Show HN: Mushak – Zero config zero downtime Docker/Compose to server deployment

[API/SDK] Reachy Mini's SDK

[Other] User profiles and long-term memory for your AI agents Self-hosted and open-source user profiles and long-term memory for your AI agents. Unlike generic memory solutions that store blobs of text, GetProfile extracts natural language summary, typed traits with confidence scores and relevant memories with importance levels into a structured user profiles stored in your own PostgreSQL database.

[Other] A curated list of JS/TS ready-to-use array filters A curated list of ready-to-use (functional programming) array filter functions in JavaScript and TypeScript (TS / ESM / CJS). fp-filters allows you to stop rewriting the same code over and over again and greatly improves readability. So that you will probably never write another filter function 🚀! fp-filters functions are designed API-first and leveraging high-order predicates are super easy to use and to combine.

[IDE/Editor] Real-time dependency health monitoring for vs code Monitor dependency health, detect vulnerabilities, track outdated packages, and ensure license compliance directly in VS Code. Free, open-source, and works offline.

[IDE/Editor] Extension that notifies you when PRs need your attention GitHub notifications don't work for busy developers. This extension puts review requests and your open PRs in your browser toolbar where you'll actually see them. Badge shows review count | PR count. Completed reviews auto-remove. 100% open source. Setup takes 60 seconds. Perfect if you're juggling multiple repos and tired of missing review requests or losing track of your PRs.

[Other] I wrote a code editor in C and now I'm a changed man

[Other] Comptime – C# meta-programming with compile-time code generation and evaluation

[Monitoring/Observability] Show HN: Cerberus – Real-time network monitor with eBPF Hi HN! I&#x27;m Mo, a platform engineer at Deltaflare working on critical infrastructure protection.<p>I built Cerberus because traditional packet capture tools (tcpdump, Wireshark) have too much overhead for production CNI environments. eBPF lets us filter and classify packets at the kernel level with near-zero performance impact.<p>Some interesting challenges: - eBPF verifier is <i>strict</i> - every memory access needs bounds checking - Limited to 32 bytes of L7 payload (tradeoff between inspection depth and overhead) - TC vs XDP decision (chose TC for compatibility)<p>Looking for contributors, especially on: - Redis backend for distributed deployments - Prometheus metrics export - Anomaly detection<p>Happy to answer questions!

[Other] A GPT-empowered penetration testing tool

[Database] Show HN: Dbzero – Code as if you have infinite RAM (Python persistence engine)

[Other] Convert hex to tailwind v4 colors Convert any hex color to the closest Tailwind CSS class using the CIEDE2000 (ΔE00) perceptual color difference algorithm. Supports the Tailwind v4 OKLCH palette. Free and unlimited.

[Other] Next Js and Prisma Visulizer Code Eye is a personal tool that visualizes large Next.js codebases to make architecture easy to understand. It maps routes, file dependencies, and reverse dependencies, and generates clear ER diagrams if your Next.js project uses Prisma. It works with local projects and GitHub repositories. Useful for: onboarding into large codebases, safe refactoring, impact analysis, debugging, and understanding complex system architecture at a glance.

[Other] Build Your Own React

[DevOps] Show HN: Netrinos – A keep it simple Mesh VPN for small teams I&#x27;m the founder at Netrinos. I built a WireGuard-based mesh VPN because remote access has always been a pain. After years of SSH tunnels, IPsec headaches, and the ssh log horror movie, I wanted something simpler: install, sign in, get work done.<p>Netrinos creates a LAN-like overlay network across your devices. Connections are direct P2P via WireGuard, with no central server routing traffic. Each device gets a stable IP and DNS name (pc.you.netrinos.com). When direct connections fail, they fall back to a relay server that&#x27;s still encrypted end-to-end. We can&#x27;t see your traffic.<p>The most challenging problem to solve was NAT traversal. UDP hole punching works most of the time. The rest is a cocktail of symmetric NAT, CGNAT, and serial NATs. We use STUN-style discovery and relay fallback for the edge cases. I was surprised by how unreliable low-end ISP routers really are, and how much technical wizardry it takes to hide that behind a clean, simple UX.<p>Our stack is a Go backend for client and server, WireGuard kernel mode for Linux and Windows (macOS is userspace), Wails.io for cross-platform UI. WireGuard does all the heavy lifting. Go ties it all together.<p>Popular use cases include: RDP to home PCs, accessing NAS without exposing it, and SSH into headless Linux boxes. One customer manages hundreds of IoT devices in the field, eliminating the need to deal with customer routers.<p>We just released Pro with multi-user, access control, and remote gateway routing. Personal is free (up to 100 devices).<p>I&#x27;d love to hear what you expect from a simple mesh VPN, what&#x27;s missing from current tools, and what&#x27;s lacking from your remote access setup. Use code HNPRO26 for a 30-day trial of Pro.<p><a href="https:&#x2F;&#x2F;netrinos.com" rel="nofollow">https:&#x2F;&#x2F;netrinos.com</a>

[API/SDK] An open-source, code-first Typescript toolkit for building, evaluating, and deploying sophisticated AI agents with flexibility and control.

[Other] Sandbox: Run untrusted AI code safely, fast

[Other] Show HN: I open-sourced my Go and Next B2B SaaS Starter (deploy anywhere, MIT) Hi HN, I&#x27;m Mohammed, a technical founder who loves shipping and giving back to the community. I&#x27;m open-sourcing the full-stack engine that powers my B2B product, apflow.co.<p>What it is: A production B2B starter with a Go backend and Next.js frontend. Both are fully Dockerized with separate containers. No Vercel. No Supabase. Deploy the whole thing on a $6 VPS, or split frontend and backend across different providers. You own the infrastructure.<p>The problem I was solving:<p>Every SaaS starter I evaluated had the same issue: they locked me into someone else&#x27;s platform. Vercel for hosting. PlanetScale for the database. Serverless functions billing per invocation. Fine for prototypes, but costs become unpredictable at scale and migrating away is painful.<p>I wanted something I could deploy on any Linux box with docker-compose up. Something where I could host the frontend on Cloudflare Pages and the backend on a Hetzner VPS if I wanted. No vendor-specific APIs buried in my code.<p>Why Go for the backend:<p>Go gives me exactly what I need for a SaaS backend:<p>Tiny footprint. The backend idles at ~50MB RAM. On a cheap VPS, that headroom lets me run more services without upgrading. Concurrency without complexity. Billing webhooks, file uploads, and AI calls run concurrently without callback hell. Compile-time type safety. Using SQLC, my SQL compiles to type-safe Go. If the query is wrong, it fails at build time, not in production. Predictable performance. No garbage collection pauses that surprise you under load. The architecture (Modular Monolith):<p>I didn&#x27;t want microservices complexity for a small team, but I needed clean separation. I built a Modular Monolith: features like Auth, Billing, and AI are isolated Go modules with explicit interfaces, but they deploy as a single binary.<p>This structure also made AI coding tools (Cursor, Claude Code) dramatically more effective. Because every module has strict boundaries, the AI knows exactly where new code belongs and doesn&#x27;t break other modules.<p>Full-stack, not just backend:<p>Backend: Go 1.25 + Gin + SQLC (type-safe SQL, no ORM) + PostgreSQL with pgvector Frontend: Next.js 16 + React 19 + Tailwind + shadcn&#x2F;ui Communication: The frontend consumes a clean REST API. You can swap Next.js for any framework that speaks HTTP. Infrastructure: Separate Dockerfiles for frontend and backend. Deploy together or apart. What&#x27;s pre-built:<p>The boring infrastructure is solved so you can focus on your actual product:<p>Auth + RBAC: Stytch B2B integration with Organizations, Teams, and Roles. Multi-tenant data isolation enforced at the query level. Billing: Polar.sh as Merchant of Record. Handles subscriptions, invoices, and global tax&#x2F;VAT. No Stripe webhook edge cases. AI Pipeline: OpenAI RAG using pgvector. The retrieval service enforces strict context boundaries to minimize hallucinations. OCR: Mistral integration for document extraction. File Storage: Cloudflare R2 integration. Each feature is a separate module. Don&#x27;t need OCR? Remove it. Want Stripe instead of Polar? The billing interface is abstracted.<p>Real-world proof:<p>This isn&#x27;t a template I made for GitHub stars. It&#x27;s the exact code running apflow.co in production. When I added document OCR, I built it as a new module without touching Auth or Billing. The architecture held.<p>How to try it:<p>Clone the repo, read setup.md to check the prerequisite, run .&#x2F;setup.sh, and you have a working B2B environment locally in minutes.<p>Feedback I want:<p>I&#x27;d appreciate feedback from Go developers on the module boundaries and cross-module interfaces. Also curious if anyone has suggestions for the Docker setup in production deployments.<p>GitHub: <a href="https:&#x2F;&#x2F;github.com&#x2F;moasq&#x2F;production-saas-starter" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;moasq&#x2F;production-saas-starter</a><p>Live: <a href="https:&#x2F;&#x2F;apflow.co" rel="nofollow">https:&#x2F;&#x2F;apflow.co</a>

[Other] Making web security accessible, automated, and actionable At zdelab, we believe that security shouldn't be a barrier to building great web applications. Our mission is to democratize web security by providing automated, comprehensive security diagnostics that anyone can understand and act upon. We're committed to helping developers, businesses, and organizations protect their web applications from common security vulnerabilities, ensuring a safer internet for everyone.

[Other] A faster path to container images in Bazel