Open-source projects gaining stars on GitHub: what they are, what problem they solve and who they're for.
In today’s GitHub Trending: Immich manages self-hosted photos and video; Qlib supports quantitative ML research; Trivy scans containers, repositories, and cloud configurations.
Immich supplied the clear spike with 636 stars. The pattern is not a single new category; it is developers choosing more inspectable control points around data, compute, and operational risk.
In last week's GitHub Trending: System Design Primer (architecture study guide), Awesome Mac (curated macOS software), Authentik (identity platform), Planka (self-hosted Kanban), and OctoBot (automated trading bot).
The unexpected common thread is not a new framework but accumulated trust: old repositories still solve recurring work, even when their current community chatter is sparse.
In today's GitHub Trending: Spotube (open-source music streaming), ReVanced Manager (Android patch management), GOWA (multi-account WhatsApp REST API), and lm-evaluation-harness (language-model testing).
The mix is a reminder that developer attention can cluster around tools that make closed platforms more usable, even when the community signal is thinner than the star count.
In today's GitHub Trending: Electerm (a cross-platform terminal and remote-access client), Hagezi DNS Blocklists (curated DNS filtering), and Novu (notification infrastructure for products and agents).
The shared theme is operational control. Each tool replaces a hosted or fragmented layer with a configurable one, while its open issues show that configuration and reliability remain the actual work.
In today’s GitHub Trending: lazygit makes Git actions navigable in a terminal, distroless trims container images, Upscayl enlarges images locally, ServerBox monitors servers, and Bun combines a runtime with build tools.
The interesting split is between tools that remove layers from infrastructure and tools that bring powerful tasks back to a developer’s own machine.
In today's GitHub Trending: Awesome Mac catalogues macOS software, Coolify deploys apps and databases on your own servers, NATS runs cloud-and-edge messaging, Transformers supplies model definitions, and TruffleHog verifies leaked credentials.
The striking part is the lack of a single novelty wave. Mature infrastructure and curation projects are getting attention because teams still need control over the tools around AI.
In today’s GitHub Trending: free-for-dev (a catalog of developer free tiers), OpenBB (an open data platform for analysis), awesome-go (a curated Go ecosystem), Playwright (cross-browser testing), and Web Dev for Beginners (a 24-lesson curriculum).
The unifying signal is reuse: each project shortens the path to a capability that would otherwise require searching, building infrastructure, or assembling a learning plan from scratch.
In today’s GitHub Trending: Authentik (self-hosted identity), HRMS (HR and payroll), Plane (project management), changedetection.io (website-change alerts), and Khoj (an AI assistant over your own data).
The common thread is operational ownership. Each project replaces a SaaS surface, but the active issue queues show that self-hosting exchanges subscription simplicity for work that must be maintained.
In today’s GitHub Trending: Tokio (Rust async runtime for networked applications), Blackbird (username and email OSINT), PhoneInfoga (phone-number investigation), HAMi (Kubernetes GPU sharing), and Pigsty (self-hosted PostgreSQL platform).
The contrast is unusually direct: two tools help identify people from public traces, while three make shared compute or databases easier to run. Community evidence is uneven; practical maintenance questions, not a single hype wave, connect the list.
In today's GitHub Trending: Svelte, a compiler-led web framework; Nuclei, a template-driven vulnerability scanner; Awesome, a directory of curated lists; System Design Primer, interview study material; and Summer2027-Internships, a daily-updated opportunities board.
The list favors tools that organize a developer's existing work—learning, finding opportunities, checking exposure and choosing components—over a single shiny new platform.
System Design Primer packages interview and architecture study material; nixpkgs is NixOS’s package collection; PostHog combines product analytics with developer tooling; NautilusTrader is an event-driven trading engine; CCXT unifies exchange APIs.
The unexpected pattern is age. Each project has an established user base, and the list reads as a demand for dependable infrastructure rather than another disposable wrapper.
In GitHub Trending this week: Seerr manages media requests, GitHub CLI brings GitHub to the terminal, awesome-systematic-trading maps quant resources, Vue powers web interfaces, and KernelSU provides kernel-based Android root. The common thread is control over tools people already run.
In today’s GitHub Trending: build-your-own-x collects hands-on systems tutorials; yt-dlp downloads audio and video; hackingtool bundles security utilities; whisper.cpp runs Whisper in C/C++; daisyUI supplies Tailwind components. The striking signal is not a new framework but five long-lived tools with concrete jobs.
In today’s GitHub Trending: Summer2027-Internships tracks internship postings, fzf makes terminal lists searchable, gh exposes GitHub from the command line, ntfy sends simple push notifications, and UniGetUI fronts multiple Windows package managers.
The surprising part is the mix of mature tools and a constantly updated community ledger: usefulness here comes from fitting into existing work, not from a new platform.
In August’s GitHub Trending: Tailscale connects private networks, Immich manages self-hosted photos, whisper.cpp runs speech recognition locally, Coolify deploys apps on your servers, and PostHog bundles product analytics and observability.
The shared appeal is an operational bargain: replace a collection of managed services with software you can inspect and adapt—then accept the maintenance, migration, and support work that comes with it.
In today’s GitHub Trending: LibreTranslate, a self-hosted offline-capable translation API; Apache Superset, a data exploration platform; Directus, a database-to-API and CMS layer; Activepieces, an automation system with agents and MCP servers.
The outlier is an OSINT directory, but it reinforces the same practical mood: packaged capability is attractive when teams want a usable control surface instead of a cloud-only black box.
[directus/directus](https://github.com/directus/directus) offers instant APIs, authentication and an admin layer over an existing database. [jrouwe/JoltPhysics](https://github.com/jrouwe/JoltPhysics) is a multithreaded rigid-body and collision library used by shipped games.
The day also includes [apache/superset](https://github.com/apache/superset), a data-exploration platform, and [electron/electron](https://github.com/electron/electron), the JavaScript desktop runtime. These are tools teams adopt for years, not experiments to sample once.
In today's GitHub Trending: Snipe-IT manages IT assets and licences; Java Design Patterns turns common patterns into runnable examples; LangChain supplies agent-building components; Ghidra is a reverse-engineering framework; MONAI is a healthcare-imaging toolkit.
The common thread is durable infrastructure with a specific audience. Four of the five projects are long-lived repositories; the useful signal is not a new category, but developers returning to tools that make complicated work legible and repeatable.
In today’s GitHub Trending: RustDesk (self-hosted remote desktop), PowerShell (cross-platform shell), Whisper (speech recognition), Cal.diy (scheduling infrastructure), and PowerToys (Windows utilities).
The common thread is operational control: remote access, local transcription, scheduling, automation, and desktop customization all move a task closer to the person running it.
In today’s GitHub Trending: Immich (self-hosted photo and video management), Tailscale (WireGuard networking), microservices-demo (a Kubernetes and Istio sample), awesome-systematic-trading (quant-trading resources), and Awesome Lists (SOC/CERT references).
The surprise is that the most useful entries are not competing products. They are working systems and maps of accumulated practice, where adoption depends on clarity, maintenance, and the limits the community has already found.
In last week’s GitHub Trending: Croc (secure computer-to-computer file transfer), Paperless-ngx (self-hosted document archive), build-your-own-x (programming-by-recreation guides), Dioxus (Rust apps across platforms), and Hyprland (Wayland tiling compositor).
Their shared appeal is legibility. Each exposes a layer that users often delegate—files, paperwork, learning, UI, or the desktop—and gives it a durable local shape.
In today’s GitHub Trending: SimpleX (identifier-free messaging), Supabase (Postgres development platform), Sn1per (attack-surface management), Nuclei (template-driven vulnerability scanning), and Nest (TypeScript server framework).
The list’s practical theme is operational control: messaging identity, database and auth, security visibility, and application structure all become systems a team must run deliberately.
In today’s GitHub Trending: [Jellyfin](https://github.com/jellyfin/jellyfin) (self-hosted media server), [n8n](https://github.com/n8n-io/n8n) (workflow automation), [awesome-remote-job](https://github.com/lukasz-madon/awesome-remote-job) and [awesome](https://github.com/sindresorhus/awesome) (curated directories), and [Buzz](https://github.com/chidiwilliams/buzz) (offline transcription).
The common thread is not novelty. It is keeping a useful surface curated, local, and available even when the surrounding web gets noisier.
In today’s GitHub Trending: paperless-ngx — self-hosted document OCR and archiving; SkyPilot — a layer for running AI jobs across cloud compute; Hyprland — a configurable Wayland tiling compositor; croc — encrypted file transfer between computers.
The outlier is an internship postings repository, updated through issues alongside code projects. Together, the list makes GitHub look less like a showcase for frameworks and more like a public workbench for managing everyday digital logistics.
Today's GitHub Trending front page is a do-it-yourself kit: blackbird finds a stranger's accounts across the web from a username, hackingtool launches a pile of pentest utilities from one menu, Microsoft's qlib runs AI over quant-trading research, ntfy pushes phone notifications straight from your scripts, and Awesome-CV builds a résumé in LaTeX.
The two security tools are climbing fastest, and neither has a single Hacker News thread behind it. They spread as social link-drops, and hackingtool hasn't shipped a commit since July 2024.
In today's GitHub Trending: Immich, the self-hosted photo library now at 3.0; two builds of OpenAI's Whisper for transcription on your own machine; Helix, a Rust terminal editor with a language server built in; and NautilusTrader, a Rust trading engine you run yourself.
Four of the five swap a cloud service for something you host. The loudest thread isn't praise but a bug: Whisper hallucinating a stranger's name into perfectly silent audio.
In today's GitHub Trending: sindresorhus/awesome, the curated index that spawned a thousand "awesome-*" lists; psf/black, the zero-config Python formatter; AUTOMATIC1111's Stable Diffusion web UI; and NVIDIA's Megatron-LM training library.
The page reads like a museum, not a newsstand. Two of its residents are trending as their own users drift to successors: Ruff is quietly replacing Black, and Forge and ComfyUI carry the image work AUTOMATIC1111 stopped shipping four months ago.
In today's GitHub Trending: yt-dlp (the command-line YouTube/video downloader), Supabase (open-source Firebase on Postgres), Fastify (Node's low-overhead web framework), and Qbot (a fully-local AI quant-trading bot from China).
The headline isn't a launch, it's a concession. To keep pulling top YouTube formats, yt-dlp now demands an external JavaScript engine like Deno, because Google's anti-bot challenges outgrew its Python solver. Two threads of 1,200+ points each argue whether that's smart or the beginning of the end.
In last week's GitHub Trending: SimpleX (a messenger that assigns no user identifiers at all, for the privacy-maximalist crowd), CasaOS (a home-server OS that turns a spare box into a personal cloud), Plane (a self-hosted Jira and Linear alternative), and free-for-dev (a directory of free SaaS tiers).
The list sells digital independence. But its second-biggest gainer, CasaOS, hasn't merged a commit in nearly a year, and its own issue tracker is openly asking whether the project is dead.
In today's GitHub Trending: VeraCrypt (full-disk encryption, the TrueCrypt successor), RustDesk (self-hosted remote desktop, a TeamViewer alternative in Rust), Mullvad (client for the no-logs VPN), and SiYuan (a self-hosted Notion you actually own).
Four of the five are tools you run when you stop trusting someone else's cloud. The catch: each carries a trust dispute the community keeps poking. A signing lockout with a revocation deadline this week, a test root certificate filed as a CVE, an AI agent creeping into a privacy-first notebook.
In today's GitHub Trending: Plane (a self-hosted Jira and Linear alternative for teams allergic to per-seat pricing), Directus (turns any SQL database into an instant REST and GraphQL API), Svelte (the compiler-first web framework), and MONAI (a PyTorch toolkit for medical imaging).
The loudest entry isn't code: SimplifyJobs' internship board, a job listing that lives entirely inside a Git repo and gets edited by opening an issue. And two near-identical "replace your SaaS" tools draw opposite verdicts from the people who run them.
In today's GitHub Trending: SimpleX Chat — a messenger with no user IDs of any kind; Ventoy — drop any ISO onto a USB stick and boot it, no reflashing; fzf — the fuzzy finder half your shell shortcuts depend on; and Electron, the runtime behind Slack, VSCode and Discord.
Not one AI repo made the cut, and the newest project here is six years old. Two are trending beside live trust fights: Ventoy over the unauditable binary blobs in its source tree, Electron over an update that froze all of macOS Tahoe.
In today's GitHub Trending: PowerToys, Microsoft's Windows power-user toolkit; LangChain and LlamaIndex, the two frameworks that defined the RAG era; Astro, the framework for content-heavy sites; and Mautic, open-source marketing automation that just turned twelve.
Not one is new — the youngest is three and a half years old. What changed is the labeling: LangChain's repo now calls itself "the agent engineering platform," LlamaIndex "document agent and OCR platform." The frameworks are quietly becoming platforms, and Hacker News isn't sold.
Today's GitHub Trending skips the usual new-AI-launch churn for software you run on your own hardware: n8n (self-hosted workflow automation), NocoDB (an Airtable you host over your own database), and CasaOS (a one-click home-cloud dashboard), all deployed by the same Docker Compose file.
The catch the threads keep naming: two of them quietly swapped real open-source licenses for "fair-code", and n8n is mid-patch on a 10.0-severity bug that let anyone take over a self-hosted box.
In today's GitHub Trending: Trivy (Go scanner that flags CVEs, secrets and misconfigs across containers and clouds), Paperless-ngx (self-hosted OCR archive for scanned paper), prompts.chat (a 164k-star, self-hostable prompt library), and Apache Kafka.
The twist: the one with a live story is Trivy — the vulnerability scanner whose own supply chain was hijacked twice this year, seeding a self-spreading npm worm.
Last week's climbers: iroh, a Rust stack that dials devices by cryptographic key instead of IP address (and just shipped 1.0); Plane, a self-hostable, air-gap-capable alternative to Jira and Linear; Presidio, Microsoft's PII scrubber that teams now wire in front of every LLM call; Meshery, a manager for your own cloud-native infrastructure.
The odd one out is freeCodeCamp, at 450k stars and trending yet again with nothing new to say. iroh reached 1.0 the hard way: it tore out its QUIC engine and shipped one it wrote itself.
In today's GitHub Trending: activepieces, the open-source Zapier alternative that now exposes your automations to Claude and Cursor as MCP tools; TinaCMS, a Git-backed CMS you edit visually on the page; System Informer, a Windows process monitor; and Media Downloader, one GUI over yt-dlp and a dozen CLIs.
The odd one out is international_results, a CSV of every international football match since 1872, with zero Hacker News or Bluesky discussion. It's trending because the 2026 World Cup is in its group stage, not because anyone recommended it.
Today's trending list is a catalogue of escape routes from SaaS bills: n8n (visual workflow automation against Zapier), Plane (project tracking against Jira), Apache Superset (BI dashboards against Tableau), and TinaCMS (Git-backed visual CMS).
But "open source" is doing uneven work here. n8n runs on a fair-code license the OSI won't recognize, Plane gates SSO behind a paid contract, and the one genuinely community-run tool, yt-dlp, just told users they must install a separate JavaScript runtime to keep downloading from YouTube.
Today's GitHub Trending: iroh, a Rust networking stack that dials a peer's key instead of an IP address; Plane, a self-hosted Jira alternative; LibreTranslate, a translation API you run offline; Unciv, an open-source Civ V remake.
Four of the five exist to delete a dependency: a relay server, a Jira license, the Google Translate API, an ad-funded app store. Their threads praise not features but the missing middleman — “I use dumbpipe daily”, “they don't call home”. The fifth, Microsoft's qlib, reached 44k stars with an empty comment section.
Today's GitHub Trending: iroh, a Rust stack that connects devices by cryptographic key instead of IP (it hit 1.0 this week); Plane, a self-hosted Jira and Linear alternative; LibreTranslate, a translation API that never touches Google; Unciv, an ad-free remake of Civ V.
Not one AI model among them. What unites the list is subtraction: each repo removes a vendor from the picture, and the loudest praise, aimed at Unciv, is simply that it doesn't call home, push ads, or spy on you.
Today's GitHub Trending: iroh (Rust peer-to-peer networking that dials public keys, not IP addresses), Meshery (one control plane for Kubernetes and ten service meshes), NautilusTrader (a self-hosted trading engine — Rust core, Python cockpit), and Unciv (an ad-free open-source remake of Civ V).
The catalyst is at the top: iroh shipped its first stable 1.0 on June 15, after four years and 65 pre-releases, and a maintainer dropped into the Hacker News thread to field questions. Two of the five are Rust — and not one AI agent framework in sight.
In today's GitHub Trending: iroh (a Rust library that dials devices by public key, not IP), Meshery (a Kubernetes-stack manager), and three reference repos — freeCodeCamp's curriculum, build-your-own-x, and a self-hosting guide.
The lists pull the stars; the threads pull the doubt. The top Hacker News comment on the Self-Hosting-Guide calls it «a giant list of tools», not the how-to its title promises, and it hasn't been updated in a year. iroh is the outlier: a maintainer ran an open AMA the day it hit the front page.
In today's GitHub Trending: OpenBB, a self-hosted research terminal aimed at the $2,000-a-month Bloomberg seat; mikeroyal/Self-Hosting-Guide, an index of run-it-yourself software; Meshery, a manager for the Kubernetes you already operate; and freeCodeCamp's 448k-star learn-to-code curriculum.
The pitch is self-reliance. The replies read as an audit: a Tell HN thread documents OpenBB emailing people it scraped from its own stargazers, and the loudest voices under the self-hosting guide call it a list of tools, not the howto it promises.
Last week's board: PowerToys, Microsoft's Windows utility belt; FunASR, an Alibaba speech-recognition toolkit pitched as a Whisper replacement; Trivy, a container vulnerability scanner; and two web frameworks, Astro and Fastify.
Not one new viral repo among them. Every project is years old and carries between 17k and 135k stars. The outlier is Trivy, climbing again only weeks after attackers hijacked its release pipeline and turned the scanner itself into a credential stealer running inside thousands of CI jobs.
In today's GitHub Trending: PowerToys (Windows power-user utilities), freeCodeCamp (the 447k-star learn-to-code curriculum), Stable Diffusion WebUI (the original image-gen UI), plus HackTricks (a pentester's knowledge base) and Meshery (a Kubernetes manager).
What's notable is the absence: no new AI agent framework, no overnight viral repo. The youngest project here launched in 2022 and hasn't shipped a commit since March. Today's board is a roll call of incumbents, not a discovery feed.
This month: build-your-own-x (514k-star programming curriculum), yt-dlp (video downloader forced to add a Deno dependency), bitwarden/server and bitwarden/clients (password manager appearing twice after a licensing scare), and NangoHQ/nango (AI integration platform from YC W23).
The list's throughline isn't AI hype — it's platform anxiety. YouTube tightened its defenses, Bitwarden briefly went proprietary (then reversed), and a Chinese lab shipped a Whisper alternative that claims 170x realtime speed. Developers starred the escape hatches.
This week: Sniffnet — cross-platform network monitor with per-app visibility; Trivy — vulnerability scanner (recently supply-chain attacked); FunASR — Alibaba speech recognition at 170x realtime; PowerToys — Windows utilities; Astro — content web framework.
The sharpest detail: Trivy's March 2026 compromise — attackers force-pushed malicious commits to its GitHub Action tags and spread a worm to 47 npm packages — appears to have boosted, not buried, its star count. Security incidents are now marketing.
Today on GitHub Trending: PowerToys (v0.100, new Command Palette Extension Gallery), Astro (the content-site framework on a slow burn to 60k stars), Coder (remote dev environments now pitching AI agent workspaces), Homebrew (just ended --no-quarantine support), and Ghostfolio (self-hosted wealth tracker).
Not one of the five is a GPT wrapper, a prompt collection, or a two-week-old repo with suspicious stars. On a platform overrun by AI side projects, that absence tells its own story.
