标签：#contributorswanted

For the past few weeks, I have been building Soterios , an open-source, local-first security and system maintenance suite for Windows. The idea started simple: most security tools either lock features behind paywalls or collect unnecessary data. I wanted something different, so I built a privacy-first application with: No telemetry No analytics No network activity unless you explicitly enable it Current Features Malware scanning with ClamAV, quarantine, and reporting Windows security audits Firewall management and network monitoring Credential safety tools with local password checks and breach lookups Process inspection and system maintenance utilities Built With Soterios is built with Electron and Node.js using a modular architecture designed to make future expansion straightforward. Why I'm Sharing It I'd rather build in the open than in isolation. Feedback, ideas, bug reports, and contributions are always welcome. GitHub Repository https://github.com/chrisriv10/Soterios

I have a simple rule when I work with a team: if a vulnerability makes it into main, the process...

We just open-sourced Synapse , a governed control plane for software composition analysis, recon, evidence, and reporting. It is built for people who have to scan a dependency tree, prove what they found, and hand over a report that holds up. Site: https://synapse.kkloudtarus.net/ Code: https://github.com/KKloudTarus/synapse-ce (Apache-2.0) Why we built it The usual workflow is fragmented. One tool for the SBOM, another for vulnerabilities, a spreadsheet for licenses, a folder of screenshots for evidence, and a report you assemble by hand. Nothing is reproducible, and when a client asks "how do you know this is real," the answer lives in someone's memory. Adding an LLM that writes your findings only makes that worse. We wanted the opposite: fast, but provable. What it is Synapse runs the assessment lifecycle behind one control plane, in Go, clean architecture. A few ideas hold it together: Deterministic-first. Scanning, matching, license classification, and reporting are pure, reproducible Go. There is no model in the report path. Scope-gated execution. Every engagement carries a scope and an authorization window, enforced server-side before any tool runs. Tools run via argument arrays, never a shell string. Tamper-evident evidence. Every artifact is hash-chained and append-only. A broken chain blocks the report. Bounded automation. The optional AI layer only ever proposes. A distinct verifier or a human confirms. The agent can never confirm its own claim. What it does today: SBOM across 15+ ecosystems, multi-source vulnerability detection with risk-based prioritization (KEV, then EPSS, then CVSS), license compliance, reachability, and deterministic reports in CycloneDX, SPDX, SARIF, and OpenVEX. Try it git clone https://github.com/KKloudTarus/synapse-ce.git cd synapse-ce docker compose -f deploy/docker-compose.full.yml up --build # open http://localhost:5173 Or gate CI on real risk: ./bin/synapse-cli scan . --fail-on high . We are looking for contributors Synapse i

🚀 Join the Omnia Community — Contributors Wanted Hello everyone, I'm building Omnia , an open-source, privacy-first productivity workspace designed to combine notes, tasks, calendars, habits, goals, reminders, and AI assistance into a single desktop application. The vision is simple: Create the productivity app we all wish existed — fast, beautiful, extensible, local-first, and truly owned by its users. Current Stack React 19 TypeScript Tauri v2 SQLite Zustand Tailwind CSS v4 Tiptap Editor OpenRouter / OpenAI / Ollama What We're Building Omnia aims to become a serious alternative to tools like Notion, Obsidian, and other productivity platforms while remaining: Free and open source Privacy-focused Local-first Highly customizable Community-driven Looking For Contributors Everyone is welcome, regardless of experience level. Frontend Developers Help improve: UI/UX Editor experience Dashboard widgets Accessibility Responsive layouts Rust Developers Help with: Tauri backend Native integrations Performance optimization Security improvements Designers Help create: Themes Icons Illustrations User experience improvements Documentation Writers Help build: Wiki pages Tutorials Guides Developer documentation Open Source Enthusiasts Help by: Testing releases Reporting bugs Suggesting features Participating in discussions Current Priorities Stabilizing the first release Performance improvements Windows support Linux support Plugin architecture Theme ecosystem Export & backup tools Why Contribute? Because this is an opportunity to help shape an ambitious open-source project from the very beginning. Every contribution matters, whether it's a bug report, documentation improvement, design suggestion, or a major feature implementation. If you're interested in building the future of personal productivity software with us, we'd love to have you on board. Let's build something amazing together. 🚀 See you in the repository!

𝗚𝗶𝘁𝗛𝘂𝗯 𝗦𝘂𝘀𝗽𝗲𝗻𝗱𝗲𝗱 𝗠𝘆 𝟮‑𝗬𝗲𝗮𝗿 𝗗𝗲𝘃𝗲𝗹𝗼𝗽𝗲𝗿 𝗔𝗰𝗰𝗼𝘂𝗻𝘁 — 𝗛𝗲𝗿𝗲’𝘀 𝗪𝗵𝗮𝘁 𝗜 𝗟𝗲𝗮𝗿𝗻𝗲𝗱 A few days ago, something happened that genuinely shook me as a developer. My GitHub account, KelvCodes, which I had used and built on for over 2 years, got restricted unexpectedly. At first, I thought it was a mistake that would be resolved quickly. I had experienced a temporary restriction before that was lifted within a short time, so I assumed this would be similar. But this time was different. Suddenly, I lost access to years of work and history tied to my developer identity: · 60+ projects · 110+ stars · 50+ followers · client work · collaborations · repositories connected to applications and opportunities For context, GitHub was not just a coding platform for me. It had become part of my professional identity as a software engineer. My resume linked to it. Applications linked to it. Opportunities came through it. In fact, some people literally looked at my GitHub profile before deciding to work with me. That's what made this experience difficult. The Emotional Side Nobody Talks About When developers lose access to an account, people often think: "Just create another account." But when you've spent years building a reputation, consistency, commit history, projects, and credibility under one identity, it doesn't feel that simple. It feels like losing a digital portfolio you carefully built over time. And honestly, for a moment, I felt stuck. Do I wait endlessly for support? Do I pause my work? Do I rebuild everything from scratch? What I Decided After thinking about it deeply, I realized something important: I cannot pause my growth waiting for a platform decision. So I made the decision to continue building. I created a new GitHub account: 👉 https://github.com/kelvinagyareyeboah And while I still hope my old account may eventually be restored, I'm no longer allowing the situation to stop my momentum. Lessons I Learned From This Your skills matter more than one platform Platforms are important