Before you rent the GPUs, check the map: hardware inventory, memory math, and dated engine-support matrix to pick the right LLM serving engine.
Free · Open source · On GitHub
Open-source dev tools
Small, inspectable tools you can run yourself — free on GitHub, with human deployment help when you need it.
- FREE
- OPEN-SOURCE
- INSPECTABLE CODE
- HUMAN HELP AVAILABLE
Featured tools
21 tools · all free · all on GitHub
The 2-second pre-merge gate for AI-assisted diffs: complexity, duplication and growth checks on changed code only. No model, no account, no network.
sessguard: local, read-only, zero-network CLI that inventories AI-assistant session and credential material on your machine and gives you a per-app revocation checklist. Never prints token values.
Measure your app across installed JS runtimes and get an upgrade verdict with reasons.
A local, deterministic, read-only behavioral detector for the Gheist planted-workflow attack shape: one command, one verdict per repository, one rotate checklist. No model, no account, no secret values ever printed.
A local, deterministic pre-execution gate for software an agent is about to install.
A deterministic diet for agent context: shrink logs, outputs, and repeated turns with an exact manifest. No model, no network, nothing invented.
Find the first real error in a failed CI log, tell flaky tests apart from real breakage, and cluster repeat failures. Zero dependencies.
Vendor-neutral policy, evidence and credential layer for AI agents: deterministic policy decisions outside the model process, a tamper-evident action ledger, and coverage accounting that fails loudly when an action leaves no record.
Open vendor-neutral DevSecOps operating layer: reference architecture, policy-as-code packs, CI security gates and audit-evidence automation for regulated organisations.
Audit .env files: drift vs .env.example, placeholders, risky secrets, unused vars. Zero dependencies.
Audit Agent Skills packs: duplicates, overlapping triggers, missing metadata. Zero dependencies.
Trim verbose logs and tool output to a token budget — keep the errors, drop the noise. Zero dependencies.
Catch tests that lie: fake passes, retry loops, swallowed assertions, deleted tests — Python + JS/TS, zero dependencies.
Scan a project for things that will break or leak: deprecated deps, EOL runtimes, unpinned CI actions, over-broad permissions, unpinned Docker bases, removed APIs. Zero dependencies.
Map where your API keys actually live — local, read-only auditor for agent-tool configs. Never prints key material, never sends anything anywhere.
Decision memory with provenance: record decisions, facts and constraints as a graph, trace why anything was decided, and catch contradictions and stale dependencies.
Will this GGUF model actually fit your GPU? Offline, zero-dependency VRAM check — weights + KV cache vs your card, in one command.
Approval leases for agent-run commands — approvals that expire by construction.
Check the numbers in AI-generated prose against their cited sources — zero-dependency Python CLI.
Shrink JSON for LLM prompts by folding long keys into short aliases — lossless, reversible, with a receipt.
Why these tools
Inspect everything
Every tool's code is on GitHub under MIT. Read it before you run it — no black boxes.
Run it yourself
Clone, run, done. Docs show the real commands and expected output — no accounts, no paywalls.
No lock-in
Tools run on your machine, and help deploys to your infrastructure and your accounts. You stay in control.
Human help when stuck
If you would rather not deploy it yourself, paid human deployment help is available — scoped plan and fixed quote in writing first.