GitHub Trending: Today — SimpleX Chat, free-for-dev, Ventoy, fzf, Electron

Today's GitHub Trending reads like a list from 2018: no AI agents, no LLM wrappers, no week-old repo with 9,000 stars. Just five tools that have been load-bearing for years.

Nothing on the list was born this year

The five repos average well over a decade of age, and the youngest, Ventoy, shipped its first release back in 2020. Daily gains run from 21 to 432 stars, so none of this is a viral burst. What stands out is the absence: a Trending page that is usually an AI showcase has, today, no model, no agent framework, no RAG toolkit. free-for-dev, a 123k-star directory of services with free tiers, is the purest expression of the mood, a plain reference list with no novelty that keeps climbing anyway. Underneath the rest runs a harder question: can you trust software that holds deep access to your machine?

simplex-chat/simplex-chat — a messenger that registers no one

+432 stars today · 12.7k total · Haskell

For the privacy maximalist who treats a phone number as a tracking beacon, SimpleX drops the thing every other messenger is built around: the account. There is no username, no phone number, no internal user ID. You connect by exchanging a one-time invite link, and relay servers shuttle messages between unidirectional queues without ever holding an identifier that ties two people together. The code is Haskell, the end-to-end encryption uses the double ratchet, and the entire pitch rests on the cryptography being legible.

"Also no phone number required. Thank goodness. Also no 'fancy' home-rolled crypto." — a developer who read SimpleX's cryptographic-algorithms spec

The 432 stars make it the day's biggest gainer, yet the open issues show where an identifier-free design bites. Push notifications without Google's services are the single most-requested feature: the UnifiedPush request has run three years and 74 comments. Multi-device sync is another long-running thread, because with no central account, "the same chat on phone and laptop" becomes a genuine engineering problem rather than a setting.

ventoy/Ventoy — beloved, and quietly distrusted

+49 stars today · 77k total · C

Ventoy is for people who install operating systems constantly: sysadmins, distro-hoppers, repair techs. You run its installer onto a USB stick once, then copy ISO, WIM, IMG or VHD files straight onto the drive and pick one from a boot menu, with many images coexisting on the same stick. Hacker News is full of converts.

"I dropped a 2TB NVMe drive into a USB-C enclosure and put it on there, along with all the OS installers, distros, and test utilities I commonly use." — a user who has booted from it a few dozen times

The same deep-access power that makes it useful is why a trust fight has shadowed the project for over a year. The source tree ships a large number of precompiled binary blobs of origin that users can't easily verify, and the issue "About the BLOBs in Ventoy", opened in the wake of the XZ-Utils backdoor, argues you cannot audit a boot tool you can't rebuild from source. The maintainer's May 2025 reply added a manifest listing the blobs with build steps; critics on Privacy Guides found those steps hard to reproduce, and some users dropped the tool entirely. The original request to remove the blobs is still open.

electron/electron — accused of freezing an entire OS

+28 stars today · 122k total · C++

Electron is the runtime that lets web developers ship desktop apps: bundle Chromium and Node, write the UI in HTML and JS, and Slack, VSCode and Discord all run on the same machinery. It trended this period for the least flattering reason. A widely-read report, Electron-based apps cause a huge system-wide lag on macOS 26, described how merely having an Electron window open made dragging and scrolling stutter across the whole desktop, even with CPU and GPU near idle.

Hacker News met it with a familiar shrug:

"Don't Electron-based apps cause lag on basically any system?" — one commenter

The real cause was narrower and stranger. Electron was overriding a private AppKit method (_cornerMask) to draw custom window-corner masks, which broke an internal memoization macOS uses to cache window shadows and forced WindowServer to repaint them over and over. Electron shipped a fix in v38.2.0 and its siblings, and Apple closed the hole system-wide in a macOS 26.2 beta. The shrug was wrong about the mechanism but right about the lesson: a runtime that reaches into undocumented OS internals sits one update away from breaking everything built on it.

junegunn/fzf — twelve years old and suddenly faster

+21 stars today · 81k total · Go

fzf is the tool terminal users pipe everything through, from command history and file lists to git branches and process IDs, to filter a long list down to one match interactively. It lives deep in the muscle memory of vim and shell users, and the companion fzf.vim plugin is a daily driver for a whole generation of editors. The reason a 12-year-old utility is back on Trending is its 0.71.0 release, which replaced fzf's static thread partitioning with a shared work queue so search now scales with available CPU cores. The notes clock a 1.84x speedup on an 8-thread benchmark, and the release also adds Zellij popup support.

"I use fzf.vim every single day and I cannot imagine life without it." — Julia Evans

After XZ, a star count proves nothing

Put Ventoy and SimpleX side by side and the day's real subtext appears. One carries 77,000 stars and still can't tell you what sits inside the blobs it boots from; the other treats publishing its full protocol spec as a headline feature. Popularity and auditability have come apart: the XZ-Utils backdoor taught the ecosystem that a beloved, decade-old dependency can be exactly where trust goes to hide. For tools that touch your boot sector, your messages, or your window server, the forward question is no longer how many people starred it. It is whether you, or anyone, can actually read what it runs.