List of all projectsOpen-source and client projects by Damián Búho — what each one does, its status, and where to find the code.

Projects

The Projectfile specification describes “projectfile”, a simple hierarchical file about a project. It can be YAML, TOML or JSON. There is a CLI tool that hides formats from you, reads and writes keys and supports includes, interpolation and other interesting stuff.

MaintainedPinned

SpiderlintMaintained

  • 600+ distinct checks
  • Fact/rule engine: you can override everything and create your own rules declaratively
  • Page-specific and site-specific checks
  • A11Y, SEO, GEO, Lighthouse
  • Validations for every used format
  • Even uncompressed images!
  • Well-known files, TLS, HTTP Headers, Semantic Markup
  • Can and should be self-hosted

Report RelayMaintained

Accepts 16 report formats and sends them to stdout or an OpenTelemetry collector as logs.

  • CAA IODEF incident reports
  • Cross-Origin-Embedder-Policy and Cross-Origin-Opener-Policy reports
  • Browser crash and Deprecation reports
  • Legacy CSP report-uri, HPKP pin validation failure and Expect-CT reports
  • Content Security Policy and Document Policy reports
  • Permissions Policy and Subresource Integrity reports
  • Browser intervention and Network Error Logging reports
  • SMTP TLS reports
MaintainedFeaturedMIT

IgnorelintMaintained

  • Validates 20+ different kinds of ignore files
  • Automatically fixes errors that could be fixed deterministically
  • Informs about dead rules
MaintainedFeaturedMIT

B19 / UbuntuMaintained

B19 is a set of conventions and slightly opinionated tools, with Ubuntu as its foundation and around 100 images built on it. Healthchecks, tests, benchmarks, reports, commands, bootstraps, everything is pre-set and extremely extendable. Perfect for creating in-house manageable image inventories.

MaintainedFeaturedMIT

CustodioWIP, release in Q1'27

Warns you about:

  • natural disasters: fires, floods, volcanos
  • important weather events, UV risks, air quality issues warnings from authorities
  • crashes on markets that can affect you personally
  • holidays, closures, special regimes in your location
  • risks related to crossing borders and travel, expired docs, delayed planes
  • health-related risks: epidemic situation, acclimatization, dehydration, etc
  • crime stats in places where it's available
  • god damn snakes on god damn planes

Risks are recalculated for current geolocation and time, precision and intervals set by user. And you also can calculate in advance for your next destination.

WIP, release in Q1'27FeaturedAGPL-3.0-or-later

Repolinter checks your repo against rulesets. It can check if file exists, if it contains a specific string, determines languages used in project, etc. It also has rudimentary subsystem of collecting facts about repository, that you can use in your rules.

  • Shows randomly selected Ukrainian charity
  • You can choose kinds of charities: military, civilian, animal-related
  • Supports 16 languages, detects visitor's language and respect RTL
  • Respects accessibility norms
MaintainedMIT

Uwindaji KitMaintained

Uwindaji can automatically find facts about intelligence targets, keep them tamper-proof, maintain provenance, monitor developments.

You specify a person or organization, you get a report from multiple distributed tools that work together. Every domain, email, phone number and address triggers “specialist” services (non-LLM), which enrich them and share findings between themselves. You can analyze it manually or use it with agents as MCP/CLI (LLMs love to play spies).

Currently this system monitors and prevents sanctions compliance violations.

Maintainedproprietary

F5M / I2PMaintained

  • runs fresh I2P (java version)
  • fully controllable via environment variables
  • intergrated with Traefik for easy deployment of eepsites/mirrors
  • runs on Temurin
  • generates keys and certificates
  • integrates with Traefik (via labels)
  • populates NetDB
  • has a proper healthcheck

O9S / NginxMaintained

  • works fast, compiled from freshest source
  • templates driven by ENVs for all the basic use cases
  • integrated brotli / otel / acme
  • http/3 ready
  • automatically pre-compresses static
  • generates preload hints
  • dark theme error pages!

Full list in FEATURES.md

MaintainedMIT
  • syncronizes your projectfile with dozen of formats: from NPM's package.json and CITATION.cff to Crystal's shard.yaml and browserlistsrc.
  • generates config for all the tools that can yet use projectfile directly
  • generates READMEs, Code Of Conduct, CONTRIBUTING/SUPPORT/SECURITY.md, AI Policy and many others (with localization)
  • pushes metadata to all forges
  • keeps everything synced and consistent with single source of truth
MaintainedMIT
  • generates near-identical workflows for Github and Forgejo from one agnostic definition.
  • same definitions used by M6E makefile framework, you get predictable behaviour locally and in CI
  • in a nutshell, it's portable CI pipelines that could work anywhere
MaintainedMIT

Projectfile CLIMaintained

  • unifies projectfile formats, no matter if you use YAML, TOML or JSON
  • validates projectfiles
  • converts them between formats
  • reads and writes keys in multiple formats, supports complex queries
  • supports local and http includes
  • optimizes redundant fields
MaintainedMIT
  • Caching proxy that works via url glueing (for the places where you can't put typical proxy)
MaintainedMIT