GitHub Trending: Last week — iroh, Plane, Presidio, Meshery, freeCodeCamp

Five repos climbed GitHub's weekly board, and four of them answer the same question: where does your data actually live? Here is the full list before the analysis.

This week the board picked a side: your servers, not theirs

Strip out the evergreen (freeCodeCamp, which reappears on this list roughly forever), and the remaining four share a thesis. iroh removes the cloud relay from device-to-device connections. Plane removes Atlassian from project tracking. Presidio strips identifying data before it ever reaches a model you don't run. Meshery manages infrastructure you host yourself. The timing is the point: as inference centralizes into a handful of clouds, the tools developers reach for are the ones that keep the data plane under their own roof.

n0-computer/iroh — dial devices by key, not IP

+1712 stars this week · 10k total · Rust

This is for developers building sync, multiplayer, or real-time apps who don't want to operate a fleet of STUN/TURN relays or hand connectivity to a SaaS. iroh's primitive is the cryptographic key: you dial a device by its public key, and the address it happens to have right now stops mattering. The library tries a direct UDP hole-punch first and succeeds roughly nine times in ten; when both peers are firewalled, a stateless relay brokers the connection without holding session state.

The spike has a date on it. iroh hit 1.0 on June 15, freezing the wire protocol and shipping official Python, Node.js, Swift, and Kotlin bindings. It got there by replacing its QUIC engine: instead of leaning on quinn, iroh now runs on noq, a pure-Rust QUIC implementation the team forked and made its own so that the relay path and the direct UDP path become first-class QUIC multipath paths the transport can reason about. Two demos do the explaining for it: dumbpipe, which opens a raw encrypted pipe between two machines from one command, and sendme, a key-addressed file transfer.

The community signal is unusually direct: a maintainer fielded questions in the HN thread, and the praise centered on the demos rather than the marketing.

"Dumbpipe is magical, and its implementation is easy to understand. I use dumbpipe daily to expose stores I run on different servers to my local laptop." — a developer who pipes data between his own boxes with it

makeplane/plane — the Jira alternative you can air-gap

+1514 stars this week · 52k total · TypeScript

Plane targets engineering teams, nonprofits, and regulated shops that can't or won't put their roadmap in a vendor's cloud. It covers issues, cycles, docs, and dashboards on a Django and Postgres backend with a React front end, and the differentiator is deployment: Docker or Kubernetes, an admin panel for SSO, SAML, and LDAP, and explicit support for air-gapped installs, rare among modern PM tools. The project reached the top of GitHub's project-management category in under a year.

The HN reception, across a 600-plus-point thread, splits between "Jira needs to die" enthusiasm and the recurring tax of running it yourself.

"Please build a startup on this. I don't want to run a Jira alternative myself. I'll pay you to do it for me." — a commenter who'd rather rent the hosted version than self-host

That tension, own your data versus own your weekends, is exactly why Plane ships both a self-host path and a paid cloud.

microsoft/presidio — the PII gate in front of your LLM

+787 stars this week · 9.4k total · Python

Presidio is a 2018 Microsoft project, and its second wind is an AI story. It pairs an analyzer and an anonymizer: the analyzer locates PII (names, cards, SSNs, locations) using NLP plus pattern matching and context, and the anonymizer replaces, masks, or hashes it. The 2026 use case is the one teams keep wiring up: a privacy gate that swaps personal data for placeholder tokens before a prompt leaves the building. Microsoft now ships PII Shield, a proxy that sits in front of every LLM call, and there's a drop-in LiteLLM integration for the same job.

Practitioners report running it in production for years. The standing critique is about trust in the detection itself, and Presidio's own demo once made the case for the skeptics.

"'Simply follow the instructions' became 'Simply follow the '. Some overly eager regex is to blame, which doesn't make you super confident." — a user who caught the demo redacting the wrong words

The lesson isn't that Presidio is unreliable; it's that a PII filter is only as good as its rules, and "good enough to stand between users and a model" is a high bar.

Also climbing: Meshery, and the eternal return of freeCodeCamp

Meshery is a CNCF project for managing cloud-native and service-mesh infrastructure, and its 1,500-plus open issues mark it as a genuinely busy contributor community rather than a star magnet; its momentum this week shows up in pull requests and new contributors, not HN threads, of which there are almost none. freeCodeCamp sits at 450k stars and climbs the weekly board again with no news attached: it's less a trending repo than a fixture, the open-source curriculum a fresh wave of learners stars every week.

Keep the model someone else's, keep the data yours

The unifying bet across iroh, Plane, and Presidio is that inference is consolidating into a few providers, so the layer developers can still own is the data plane: where the bytes live and which third parties they touch. iroh keeps connections off the relay cloud. Plane keeps the roadmap inside your network. Presidio strips identity before it crosses into a model you don't control. None of these are AI products. All three are reactions to one.