Best Self-Hosted Apps

dashy

lissy93/dashy · ★ 27k ▲63/7d · Vue

Dashy is a self-hosted home page for organizing apps and services, checking whether they respond, and showing data through widgets. It suits a homelab that has outgrown a page of bookmarks, with YAML and a visual editor controlling layouts, pages, themes, search, and access.

Verdict Our run installed Dashy in 24 seconds and passed all 526 tests in 9 seconds, so the cost of trying it is low even though the installed dependencies occupied 356 MB. Use it when your homelab homepage needs status checks, widgets, multiple pages, and deep visual control.

siyuan

siyuan-note/siyuan · ★ 47k ▲78/7d · TypeScript

SiYuan is a local-first notes and knowledge workspace built around block references, backlinks, databases, and a Markdown-style editor. It runs as desktop and mobile apps or as a browser-accessed server, giving people a private place for connected notes without making a hosted service the default.

Verdict Our SiYuan run installed 575 packages, built in 34 seconds, and passed all 955 tests, evidence that the large codebase is maintained as working software. Choose it if block-based notes, local ownership, and a deep editor outweigh AGPL obligations and the browser server's missing native-client and document-conversion features.

AdGuardHome

AdguardTeam/AdGuardHome · ★ 38k ▲278/7d · TypeScript

AdGuard Home is a DNS server you run on your own network to block requests to advertising, tracking, malware, and adult-content domains. It gives phones, televisions, consoles, and other devices one filtering policy without requiring an app on each device, with query logs and per-client controls in a web interface.

Verdict Our sandbox installed 250 packages in 101 seconds, built AdGuard Home in 76 seconds, and passed all 31 Go tests, making it a credible first choice for a technical household that wants one DNS policy across many devices. Use it if you can own port 53, router configuration, upgrades, and a fallback resolver.

glance

glanceapp/glance · ★ 38k ▲203/7d · Go

Glance is a self-hosted start page that collects RSS, videos, weather, market prices, server status, bookmarks, and other feeds into a YAML-defined dashboard. It replaces a row of separate tabs with one fast page that works well on phones and desktops.

Verdict Our Glance build took 41 seconds and its single discovered Go test passed in 11 seconds, while the checkout stayed at 17.9 MB. It is an excellent fit for a read-mostly personal dashboard whose owner is happy editing YAML and refreshing the page for current feeds.

k3s

k3s-io/k3s · ★ 34k ▲35/7d · Go

K3s is a Kubernetes distribution packaged to run with fewer moving parts on Linux servers, edge machines, ARM devices, and developer systems. It combines the control plane, container runtime, networking, DNS, ingress, storage helper, and other cluster pieces behind one launcher while remaining Kubernetes conformant.

Verdict K3s is an excellent default for Linux edge clusters and small self-hosted installations that genuinely need Kubernetes compatibility. Its one-command start removes packaging work, but it does not remove cluster administration, security, or recovery planning.

homepage

gethomepage/homepage · ★ 33k ▲103/7d · JavaScript

Homepage is a self-hosted start page that puts service links, container status, search, weather, and live data from more than 100 integrations in one browser view. It solves tab sprawl for home-lab operators while proxying widget requests so service API keys do not reach the browser.

Verdict Our Homepage run installed 742 packages and used 831 MB, while its 110-second build and 222-second test step both passed, so the source tree is heavy but dependable enough for operators who prefer configuration files. Homepage is our pick for a home server dashboard when service-specific widgets and Docker labels matter.

calibre

kovidgoyal/calibre · ★ 26k ▲42/7d · Python

calibre is a desktop e-book library manager, reader, editor, converter, device sync tool, and optional web server. It solves the messy parts of owning books from different stores and formats by keeping files, covers, metadata, and device copies under one local library.

Verdict Our source check installed in 19 seconds and built in 9 seconds, but it had no generic test target, so developers should rely on calibre's platform workflow rather than this lab result alone. For a DRM-free personal library, calibre remains the default recommendation because it combines cataloging, conversion, editing, device transfer, and browser access in one maintained application.

dozzle

amir20/dozzle · ★ 15k ▲35/7d · Go

Dozzle is a self-hosted web viewer for watching Docker container logs as they arrive. It gives operators a friendly alternative to keeping terminal windows open, with search, split views, live resource stats, authentication, and support for multiple hosts.

Verdict Our run passed 281 of 281 tests, and the build completed in 19 seconds. Dozzle is an unusually easy recommendation for live container troubleshooting when you accept its deliberately narrow scope.

mealie

mealie-recipes/mealie · ★ 14k ▲58/7d · Python

Mealie is a self-hosted recipe library, meal planner, and shopping-list app for households. It imports recipes from web pages or accepts manual entries, then keeps recipes, plans, ingredients, and shared household data in one place.

Verdict Our Mealie checkout installed 35 packages and built in 81 seconds combined, but its test command stopped before collection because `fastapi` was missing. Use the published container if you want a capable household recipe system and already know how to protect, update, and back up a web service.

awesome-selfhosted

awesome-selfhosted/awesome-selfhosted · ★ 332k ▲1.7k/7d

Awesome Selfhosted is an English-language catalog of free software that can run on your own servers. It helps people discover possible replacements for hosted services, then points them to each project's site, source, license, and platform information.

Verdict We did not run Awesome Selfhosted at commit f90c301 because it is a catalog with no supported ecosystem or Dockerfile. Use its 1,250 records to make a shortlist, especially when license and platform filters matter, then evaluate the finalists from their own documentation and issue trackers.

frp

fatedier/frp · ★ 110k ▲218/7d · Go

frp is a reverse proxy that exposes services behind NAT or a firewall through a server with a public address. It supports TCP, UDP, HTTP, HTTPS, private visitor modes, and peer-to-peer connections, so it can publish anything from SSH to an internal web app.

Verdict Our frp run installed 142 packages in 37 seconds and built in 6 seconds, but 6 of 39 tested packages failed, so verify the exact tunnel modes you plan to expose. frp is an excellent fit for self-hosters who want more protocol and routing control than a single-port tunnel and can secure a public relay.

localsend

localsend/localsend · ★ 97k ▲1.1k/7d · Dart

LocalSend is a free app for sending files and text directly between nearby devices on the same network. It removes cloud uploads, accounts, cables, and operating-system lock-in by giving Windows, macOS, Linux, Android, iOS, and Fire OS users the same transfer tool.

Verdict LocalSend is our default recommendation for occasional file transfer across a mixed-device household or office. It is simple, keeps ordinary transfers on the LAN, and produced a clean 144-test Rust run in our sandbox.

core

home-assistant/core · ★ 92k ▲125/7d · Python

Home Assistant Core is the Python application behind Home Assistant, a home automation system built around local control and privacy. It joins devices and services in one place so automations can react to sensors, schedules, and household events without making a cloud account the center of the home.

Verdict Our Home Assistant Core checkout installed 141 packages and built successfully, but its tests stopped on a missing `freezegun` import and pip-audit found 3 known vulnerabilities, so contributors should use the documented development environment instead of treating a fresh clone as ready. For a household, Home Assistant remains the first self-hosted platform to try when local device control and broad integration coverage matter.

searxng

searxng/searxng · ★ 39k ▲191/7d · Python

SearXNG is a self-hosted metasearch engine that sends a query to several search services and combines their results. It gives users one search page without profiling them, while the operator controls which engines, interface options, and privacy settings are available.

Verdict Our SearXNG checkout installed 0 npm packages in 10 seconds, but it exposed no npm build or test target, so that clean result does not prove the Python service works. Use SearXNG when controlling the search front end and query routing is worth operating a public-facing service.

chatwoot

chatwoot/chatwoot · ★ 39k ▲361/7d · Ruby

Chatwoot is a customer-support inbox that brings website chat, email, social networks, messaging services, and help-center content into one agent workspace. It is the self-hosted option for teams that want an Intercom or Zendesk-style product while keeping control of customer conversation data.

Verdict Our Chatwoot run installed 1,058 packages in 46 seconds and passed its test command in 226 seconds, giving the measured JavaScript side a credible clean baseline. Choose it when several customer channels truly need one inbox and your team can operate the Rails, worker, database, cache, storage, and email stack.

Trilium

TriliumNext/Trilium · ★ 39k ▲66/7d · TypeScript

Trilium is a desktop and self-hosted notes application for people whose knowledge does not fit neatly into folders. It combines a deep note tree with cloning, attributes, search, scripting, maps, sharing, and synchronization, so one note can belong in several contexts without being copied.

Verdict Our Trilium install finished in 60 seconds but occupied 1,783 MB and offered no root build or test target, so end users should choose a release while contributors should expect a large workspace. Use it when a deep, scriptable knowledge base and self-hosted sync matter more than native mobile polish.

keycloak

keycloak/keycloak · ★ 38k ▲106/7d · Java

Keycloak is a self-hosted identity server that handles sign-in, user accounts, identity federation, and authorization for applications and services. It lets a team centralize authentication instead of teaching every application to store passwords and implement login flows.

Verdict Our Keycloak JavaScript workspace installed 904 packages in 77 seconds and built in 48 seconds, but that clean result covers only `js/`, not a production identity cluster. Use Keycloak when several applications justify a dedicated identity platform and an experienced team can own its database, proxy, upgrades, and security patches.

hosts

StevenBlack/hosts · ★ 31k ▲35/7d · Python

StevenBlack/hosts combines maintained domain lists into a hosts file that blocks adware and malware at the operating-system level. You can download the finished file, choose category variants, or run the Python generator with your own sources and exceptions.

Verdict Our StevenBlack/hosts run installed 150 npm packages in 14 seconds, then its Python test failed in 1 second because `requests` was missing. Download the generated file if you want simple device-level blocking; it is the shortest and best-documented path.

Mindustry

Anuken/Mindustry · ★ 30k ▲75/7d · Java

Mindustry is an open-source Java game that combines factory automation with real-time strategy and tower defense. It solves a rarer problem than most strategy games: production lines and defensive decisions live in the same playable system, with desktop, mobile, and dedicated-server builds.

Verdict Our Mindustry run installed in 56 seconds, built in 106 seconds, and passed its tests in 51 seconds, making it an unusually low-risk source build for a 185,014-line game. Play it if factory automation mixed with live defense sounds appealing, or host it if a server JAR fits your operations.

loki

grafana/loki · ★ 29k ▲40/7d · Go

Grafana Loki is a self-hosted log aggregation system that stores compressed log data and indexes labels instead of every word in each message. It gives teams a Prometheus-like way to collect, search, and view logs, especially when they already use Kubernetes and Grafana.

Verdict Our Loki build passed in 280 seconds, but its test command hit the 900-second cap with 75 packages passing and 1 failing, which makes source work a serious engineering task. Use Loki when your team already thinks in Prometheus labels, runs Grafana, and can design log streams carefully.

beszel

henrygd/beszel · ★ 27k ▲187/7d · Go

Beszel is a self-hosted server monitor with a central web dashboard and a small agent on each machine. It keeps historical host and container metrics, sends threshold alerts, and covers common hardware data without asking you to assemble a full metrics database and dashboard stack.

Verdict Our Beszel build completed in 11 seconds, but 3 of 12 tested Go packages failed in the full run. It is still a good first choice for a homelab or small fleet that wants host and container history without operating Prometheus and Grafana.

skywalking

apache/skywalking · ★ 25k ▲9/7d · Java

Apache SkyWalking is a self-hosted application performance monitoring system for services spread across containers, clusters, and several programming languages. It collects traces, metrics, and logs, then connects them to service maps, queries, dashboards, and alerts so operators can find where distributed requests went wrong.

Verdict Our SkyWalking run passed all 44 Surefire tests after a 93-second install and a 446-second build, which supports a serious trial rather than a quick local experiment. Use it when a platform team needs self-hosted tracing, metrics, logs, topology, and profiling across many services and can operate the storage and security boundary.

navidrome

navidrome/navidrome · ★ 24k ▲92/7d · Go

Navidrome is a self-hosted music server that turns your own audio files into a browser and mobile streaming library. It scans tags, keeps per-user favorites and playlists, transcodes when needed, and works with many Subsonic-compatible clients.

Verdict Our Navidrome build finished in 93 seconds, but 11 of 77 Go test packages failed, so commit fc9d93d is not a clean contributor baseline in our sandbox. For streaming a well-tagged personal music library, the release build remains the focused choice: lighter in scope than Jellyfin and far friendlier to mobile apps than a browser-only server.

jaeger

jaegertracing/jaeger · ★ 23k ▲20/7d · Go

Jaeger is a self-hosted distributed tracing system for following requests as they cross services. It collects OpenTelemetry traces, stores them, and gives operators a UI for finding slow paths and failures that ordinary logs can hide.

Verdict Our build completed in 226 seconds, and all 273 measured tests passed, a concrete sign that Jaeger v2.20.0 is in good engineering shape. Use it when distributed tracing is operationally important and your team is prepared to own storage and upgrades.

matomo

matomo-org/matomo · ★ 22k ▲7/7d · PHP

Choose Matomo if you want analytics data in your own database and can operate its web server and database. Matomo is a PHP and MySQL web analytics application. Its documented reports include campaigns, goals, e-commerce and custom segments. Our stored sandbox run checked Node tooling, not a deployed analytics server.

Verdict Matomo suits teams that need its reporting features and can maintain the PHP application and database. The October 15, 2026, run at commit 6a14282 provides limited evidence about Node tooling: the test command returned zero, but Vitest logged an unhandled error.

containerd

containerd/containerd · ★ 21k ▲5/7d · Go

containerd is the daemon that pulls images, stores them, starts containers, and supervises their processes on Linux and Windows. It is infrastructure for platforms such as Kubernetes, designed to sit inside a larger system rather than act as a friendly container tool for individual developers.

Verdict Our containerd build passed in 76 seconds, but its test command ended with 101 packages passing and 2 failing out of 103, so adopters should reproduce the suite on their target kernel and runtime setup. Use containerd when a platform needs a proven OCI and CRI foundation and your team understands the surrounding host components.

server

bitwarden/server · ★ 21k ▲48/7d · C#

Bitwarden Server is the backend used by Bitwarden password-manager clients, including the APIs, identity service, database work, notifications, and administration. It lets an individual or organization keep that backend on infrastructure they operate instead of using Bitwarden's hosted service.

Verdict Bitwarden Admin installed 168 npm packages in 16 seconds and built in 17 seconds with 0 audit findings in our sandbox, but that result covers only `src/Admin` and there was no test target. Bitwarden Server is the safest choice for an organization that wants official clients, official deployment paths, and staff assigned to operate them.

gvisor

google/gvisor · ★ 20k ▲58/7d · Go

Consider gVisor for untrusted containers when your team can validate each workload under its runtime; our run does not establish deployment readiness. gVisor is a userspace application kernel with an OCI runtime called runsc that integrates with Docker and Kubernetes. Our run on August 28, 2026, at commit 4a7fcd5 recorded a successful install step, a zero-exit build step with a vet error in its log, and a failed test command. We did not test a running sandboxed application, workload compatibility, runtime performance, or isolation effectiveness.

Verdict Evaluate gVisor for untrusted containers if you can validate the exact images and required Linux features under runsc. Our run on August 28, 2026, at commit 4a7fcd5 recorded a 43-second install step, a 19-second zero-exit build step whose log contains a vet error, and a 4-second failed test command.

coredns

coredns/coredns · ★ 14k ▲6/7d · Go

CoreDNS is a Go DNS server and forwarder that assembles DNS behavior from plugins. It can serve zones, forward queries, expose service records from Kubernetes, and handle encrypted DNS transports through one Corefile.

Verdict Our CoreDNS build took 175 seconds and 93 of 94 test packages passed, but `TestAutoAXFR` returned 0 records where it expected 5. CoreDNS is still the sensible choice for Kubernetes DNS or a plugin-shaped forwarder when your team can test the exact Corefile and binary it deploys.

rabbitmq-server

rabbitmq/rabbitmq-server · ★ 14k ▲12/7d · JavaScript

RabbitMQ is a self-hosted message and streaming broker that lets applications exchange work without requiring both sides to be online at the same moment. It supports queue-based messaging, replicated streams, routing, acknowledgements, and several wire protocols from one server.

Verdict Our RabbitMQ checkout installed 240 Selenium packages in 43 seconds, but that subproject's tests failed after 7 seconds and never reached a summary, so this run does not prove the broker itself healthy. RabbitMQ remains the best default here for teams that need mature work queues, flexible routing, and several messaging protocols under one operational model.

gotenberg

gotenberg/gotenberg · ★ 13k ▲44/7d · Go

Gotenberg is a self-hosted HTTP service that converts web pages, HTML, Markdown, and office documents into PDFs. Its container bundles Chromium, LibreOffice, and PDF tools so an application can upload files or a URL and receive a finished document without managing those engines itself.

Verdict Our Gotenberg checkout added 11 npm packages in 12 seconds with 0 known audit findings, but it exposed no npm build or test target and therefore did not exercise the document server. Judge Gotenberg through its pinned container: it is a strong choice when one internal API must handle both browser and office conversion, provided exact source fidelity is tested.

seerr

seerr-team/seerr · ★ 13k ▲36/7d · TypeScript

Seerr is a self-hosted request desk for people who share a Jellyfin, Plex, or Emby media server. Users can discover movies and shows, request them, and let an administrator approve and send those requests to Sonarr or Radarr without handing everyone access to the download stack.

Verdict Seerr is the best default request manager for a mixed Jellyfin, Plex, or Emby household already using Sonarr and Radarr. The container path is manageable and the project is very active, but the application sits in the middle of several services, so bad networking or credentials will stop the workflow.

alertmanager

prometheus/alertmanager · ★ 8.7k ▲4/7d · Go

Alertmanager receives alerts from Prometheus and other clients, groups duplicates, applies silences and inhibition rules, then sends notifications to the right service or team. It solves the noisy middle of alerting after another system has decided that something is wrong.

Verdict Our Alertmanager run built in 2 seconds, but 9 of 77 tests failed in acceptance areas that include silences, webhooks, cold starts, and reloads. It remains the natural notification router for a Prometheus stack, provided you treat its YAML and templates like deployed code and test the exact release.

Bubble-Card

Clooos/Bubble-Card · ★ 4.7k ▲13/7d · JavaScript

Bubble Card is a set of Home Assistant dashboard cards for lights, climate controls, media players, calendars, covers, pop-ups, and navigation. It gives people a consistent mobile-friendly interface without forcing them to assemble every control from unrelated custom cards.

Verdict Our Bubble Card run installed 354 packages in 6 seconds and passed all 1,482 Jest tests in 10 seconds, making it an easy recommendation for Home Assistant users who will test their actual dashboard devices. Start with the built-in cards and HACS installation, then add modules only after reading their code.

radar

skyhook-io/radar · ★ 4.0k ▲83/7d · Go

Radar is a local or self-hosted Kubernetes interface that combines resource browsing, topology, events, Helm, GitOps, traffic, audits, and upgrade checks. It also gives MCP-compatible coding agents a filtered view of a cluster, so they can investigate problems without chewing through raw Kubernetes YAML.

Verdict Our Radar run installed 443 npm packages in 14 seconds and occupied 455 MB, but it exposed no npm build or test target, so source evaluation must use the documented Make workflow. Use the released binary if you want a private Kubernetes workbench with unusually broad diagnosis and a built-in MCP server.

kubernetes

kubernetes/kubernetes · ★ 129k · Go

Kubernetes manages containerized applications across multiple machines, deciding where workloads run and keeping deployments close to the state you declare. It solves the coordination problem that appears when one server and a few scripts stop being enough, but it asks you to operate a distributed control system in return.

Verdict Our Kubernetes run built successfully in 584 seconds, but the test command was still running at 900 seconds after reporting 438 passes and 0 failures. Use it when a platform team can turn its API into shared infrastructure for many workloads and can own the upgrade cycle.

immich

immich-app/immich · ★ 118k ▲514/7d · TypeScript

Immich is a self-hosted photo and video library with phone backup, a web gallery, sharing, maps, search, and face grouping. It solves the awkward choice between leaving a family archive with a cloud provider and settling for a folder browser that nobody enjoys using.

Verdict Our Immich checkout installed 2,460 packages and used 1,412 MB, but it exposed no root build or test target, so our run verified dependency setup rather than a working photo server. Immich is still the self-hosted photo system we would try first for a family willing to maintain Linux, Docker, storage, and recovery.

Stirling-PDF

Stirling-Tools/Stirling-PDF · ★ 95k ▲426/7d · Java

Stirling PDF is a self-hosted PDF workbench for editing, merging, splitting, signing, redacting, converting, OCR, compression, and repeatable document workflows. It gives people a browser interface, a desktop client, and an API so sensitive files can stay on equipment they control.

Verdict Our 23-second install covered only Stirling PDF's 122-package developer-tool folder, so it proves the repo tooling is tidy but says nothing about server readiness. Use Stirling PDF when several people need a private browser toolbox and someone can own the container, storage, updates, and exposure of document-processing endpoints.

code-server

coder/code-server · ★ 80k ▲30/7d · TypeScript

code-server runs the open-source core of VS Code on a remote machine and delivers the editor through a web browser. It gives you one persistent development machine that can be reached from a laptop, tablet, or other browser without moving the toolchain onto every device.

Verdict Our code-server source install ran for 447 seconds and failed in native-keymap's node-gyp step, so most users should install a release artifact rather than build this 253.5 MB checkout. It is the browser IDE to try first for one developer who knows VS Code and can secure a Linux host.

strapi

strapi/strapi · ★ 73k ▲32/7d · TypeScript

Strapi is a headless content-management system that gives editors a web dashboard and developers generated REST and GraphQL APIs. It replaces the custom admin panel and content backend that teams otherwise build for each website, app, or device, and it can run on your infrastructure or Strapi Cloud.

Verdict Our Strapi monorepo installed 3,991 packages in 199 seconds, then the build timed out at 900 seconds while Node spawn calls returned EAGAIN. Strapi still belongs on the shortlist when editors need a visual CMS and developers need a customizable content API.

coolify

coollabsio/coolify · ★ 65k ▲958/7d · PHP

Coolify is a self-hosted control panel for deploying applications, databases, and packaged services to Linux servers you control. It gives small teams a Heroku-like workflow while leaving the containers and configuration on their own machines.

Verdict Our Coolify checkout installed 55 packages in 76 seconds and built in 8 seconds, but its available package targets gave us no test suite to run. Use it when your team wants a friendly deployment panel and accepts responsibility for root access, Docker networking, backups, and upgrades.

memos

usememos/memos · ★ 64k ▲121/7d · Go

Memos is a self-hosted, Markdown-based notes app built around fast capture in a chronological feed. It gives individuals and small groups a private place for short notes, links, attachments, and shared memos without handing the data to a hosted notes vendor.

Verdict Our Memos build passed in 170 seconds, but the 420-second test run ended with 11 packages passing and 1 failing, so source builders should budget time to inspect the suite. Use it if short, chronological notes fit your habits and you want a clean self-hosted web app with several database choices.

plane

makeplane/plane · ★ 62k ▲318/7d · TypeScript

Plane is a project-management system for work items, sprint-like cycles, product modules, notes, and team reporting. It gives teams a self-hostable alternative to products such as Jira and Linear while keeping a managed cloud option for anyone who does not want to run the stack.

Verdict Plane is one of the more credible self-hosted choices for teams that have outgrown a board but resent Jira's weight. The product scope, active releases, deployment choices, and documentation justify a serious pilot.

appwrite

appwrite/appwrite · ★ 58k ▲44/7d · TypeScript

Appwrite is a backend platform for web, mobile, and AI applications, available as a managed service or a self-hosted Docker deployment. It combines authentication, databases, file storage, functions, messaging, realtime APIs, and web hosting so a product team does not have to assemble each backend service separately.

Verdict Our Appwrite root npm check installed 1 package in 5 seconds but found no build or test target, so it says nothing about whether the 382,524-line platform is ready to run. Choose Appwrite when its integrated auth, data, storage, functions, messaging, and hosting can replace several services and your team can operate the Docker stack, or use its managed cloud.

go-ethereum

ethereum/go-ethereum · ★ 51k ▲28/7d · Go

Go Ethereum, usually called Geth, is an execution client for running an Ethereum node and accessing the network through JSON-RPC, WebSocket, or IPC. It also ships developer utilities for contract bindings, EVM debugging, peer networking, and RLP data.

Verdict Geth is a sensible default execution client when you want broad Ethereum compatibility, current protocol work, and mature operator documentation. It is not a small self-hosted API, and our measured test command did not finish cleanly at the reviewed commit.

discourse

discourse/discourse · ★ 48k ▲28/7d · Ruby

Discourse is an open-source platform for running a public forum, private community, or support site under your own control. It combines threaded topics with chat, themes, and plugins, so a team does not have to assemble those pieces from separate products.

Verdict Our Discourse install stopped after 68 seconds on an exact Node engine mismatch, so self-hosters should treat version pinning and operations as part of the product choice. Use Discourse when a community needs durable topics, chat, plugins, and control of its data, and when someone can own the Rails, PostgreSQL, Redis, email, backup, and upgrade work.

reactive-resume

amruthpillai/reactive-resume · ★ 45k ▲252/7d · TypeScript

Reactive Resume is a browser-based resume builder for writing, styling, sharing, and exporting resumes without handing the document to a closed service. You can use the hosted editor without an account or run the full application yourself when you want control over accounts, files, and application data.

Verdict Our Reactive Resume run installed 1,259 packages in 63 seconds, then passed its 36-second build and 136-second test run, so the code is healthy enough to trial but costly to modify casually. Use the hosted editor if you mainly need a resume today.

puter

HeyPuter/puter · ★ 44k ▲151/7d · TypeScript

Puter is an open-source, self-hostable desktop that runs in a web browser, bringing files, apps, games, and everyday utilities into one interface. It also gives developers hosted building blocks such as AI access, object storage, a key-value database, and serverless workers, plus an app store for publishing their work.

Verdict Puter is unusually ambitious and, based on our clean install and build, much more tangible than its grand internet-computer label might suggest. Use the hosted demo first, then self-host it if the integrated desktop and developer platform are genuinely useful to you.

mattermost

mattermost/mattermost · ★ 39k ▲49/7d · TypeScript

Mattermost is an open-core, self-hosted workplace chat platform with calls, screen sharing, workflow automation, and AI integrations. It is aimed at organizations that want Slack-like collaboration on infrastructure they operate, with web, desktop, and mobile clients.

Verdict Our Mattermost server build completed in 137 seconds, but 79 of 94 test package results failed or did not build, so the codebase is buildable while a bare container is not a faithful full test environment. Mattermost is a credible choice when data location and operational control justify owning a large collaboration service.

sing-box

SagerNet/sing-box · ★ 39k ▲211/7d · Go

sing-box is a configurable network proxy engine for routing traffic through direct connections, tunnels, and many proxy protocols. It combines client and server roles, DNS policy, TUN-based device routing, rule sets, and endpoint support in one Go program, solving the mess of operating several protocol-specific tools.

Verdict Our sing-box build succeeded in 107 seconds, but 3 of 18 test groups failed, so experienced network operators should treat a source build as something to verify rather than install blindly. The project is a strong choice when one core must own proxy protocols, DNS rules, and TUN routing across several platforms.

portainer

portainer/portainer · ★ 39k ▲38/7d · TypeScript

Portainer Community Edition is a web interface and API for operating Docker, Swarm, Kubernetes, and Azure Container Instances from one place. It gives people who do not want to live in a terminal a practical way to inspect containers, deploy stacks, manage images and volumes, and control several environments.

Verdict Our Portainer build took 90 seconds after installing 1,704 packages, and its tests completed successfully in 230 seconds, so the codebase is workable but far from tiny. Use Community Edition when a shared Docker or mixed-orchestrator console will genuinely reduce command-line mistakes.

istio

istio/istio · ★ 38k ▲4/7d · Go

Istio is a service mesh for controlling how services talk inside and around a Kubernetes cluster. It can apply traffic rules, service identity, encryption, policy, and telemetry without putting that logic into every application.

Verdict Our Istio run installed 597 packages and built successfully, but 8 of 151 tested packages failed after a 467-second test step, so source adopters need an environment-aware validation plan. Choose Istio when service identity, policy, and traffic control are shared platform requirements across enough workloads to justify a dedicated mesh team.

firecracker

firecracker-microvm/firecracker · ★ 38k ▲120/7d · Rust

Firecracker is a virtual machine monitor for running Linux workloads inside small, hardware-isolated microVMs. It solves one specific infrastructure problem: giving serverless functions, containers, and untrusted jobs a VM boundary without carrying the broad device model of a general-purpose hypervisor.

Verdict Our Firecracker source build installed 118 packages in 38 seconds, then failed because the linker could not find `-lseccomp`, so a source checkout needs more host preparation than the successful install step suggests. Firecracker is a strong foundation for an experienced platform team that specifically needs dense, KVM-isolated Linux workloads.

server

nextcloud/server · ★ 37k ▲65/7d · PHP

Nextcloud Server is the core of a self-hosted workspace for files, calendars, contacts, sharing, and collaboration. It gives households and organizations control over where that data lives, with extra functions supplied through a large app catalog.

Verdict Our Nextcloud checkout installed 2,227 packages, occupied 1,184 MB, built in 105 seconds, and passed its test command, so the codebase cleared a clean sandbox run despite its size. Use Nextcloud when owning a broad collaboration service is worth the operational work.

vault

hashicorp/vault · ★ 36k ▲19/7d · Go

Vault is a central service for storing secrets, issuing short-lived credentials, encrypting application data, and recording access. Applications authenticate to Vault instead of carrying permanent database passwords or cloud keys, while operators define policies, leases, revocation, storage, and audit destinations.

Verdict Our Vault build succeeded after 550 seconds, but the test command reached 900 seconds with 15 failures, including database tests that could not reach Docker. Use Vault when dynamic credentials, revocation, audit, and centralized policy justify operating a security-critical cluster.

seaweedfs

seaweedfs/seaweedfs · ★ 36k ▲106/7d · Go

SeaweedFS is a distributed storage system that serves S3 objects, ordinary files, and Iceberg or Lance tables from the same data. It is built for operators who have too many small files for a conventional directory tree and want to add capacity by starting more volume servers.

Verdict Our run of SeaweedFS installed 1,160 packages and built successfully, but only 14 of 31 test results passed before the 900-second cap, so it belongs with operators who can reproduce its full integration environment. Use it when small-file storage must serve several protocols and you are ready to own balancing and recovery.

ntfy

binwiederhier/ntfy · ★ 35k ▲125/7d · Go

ntfy is an open-source notification service that lets scripts and applications send push alerts to phones and desktops through simple HTTP requests. It solves the awkward last mile between an automated event and a human seeing it, either through the hosted ntfy.sh service or an instance you operate yourself.

Verdict Our sandbox build finished in 2 seconds, but pytest discovered 0 tests and exited 5. ntfy is still an unusually approachable choice for turning HTTP requests into human-visible alerts, especially if you value open source and self-hosting.

v2ray-core

v2fly/v2ray-core · ★ 35k ▲27/7d · Go

V2Ray Core is a command-line proxy engine for building encrypted client and server routes across restrictive or complicated networks. It accepts traffic through configured inbound protocols, sends it through selected outbound connections, and can make those choices with DNS, domain, IP, port, user, or protocol rules.

Verdict Our V2Ray Core run passed all 167 tests after a 54-second install and 75-second build, which makes the source tree a credible base for an engineer who needs programmable proxy routing. Use it when protocol choice and selective routing justify owning paired JSON files, a remote server, DNS behavior, and transport matching.

nginx-proxy-manager

NginxProxyManager/nginx-proxy-manager · ★ 35k ▲57/7d · TypeScript

Nginx Proxy Manager puts a web interface in front of Nginx so you can route domains to services without hand-writing every configuration file. It handles proxy hosts, redirects, TCP or UDP streams, certificates, access lists, users, and an audit log, which makes it a practical front door for a home lab or small self-hosted estate.

Verdict Our install completed in 28 seconds with 373 packages, but this checkout gave us no build or test target to run. Nginx Proxy Manager is still an easy recommendation for a home lab or modest Docker host when a visual interface matters more than configuration as code.

netbird

netbirdio/netbird · ★ 30k ▲162/7d · Go

NetBird creates a private WireGuard-based network between devices and puts identity, access rules, routes, DNS, and an admin interface around it. It can be used as a hosted service or self-hosted when an organization wants remote access without exposing every internal service to the public internet.

Verdict Our NetBird build passed in 8 seconds, but the Go test command timed out at 900 seconds after recording 104 passing and 11 failing package results. NetBird is a strong candidate for teams that need identity-aware access and can operate it like network infrastructure, not a casual web app.

keepassxc

keepassxreboot/keepassxc · ★ 30k ▲142/7d · C++

KeePassXC is a desktop password manager that keeps passwords, passkeys, one-time codes, notes, and attachments in an encrypted file you control. It solves the problem of managing sensitive credentials across Windows, macOS, and Linux without requiring the vendor to host your vault.

Verdict Our measured build succeeded in 24 seconds. KeePassXC is an excellent choice when you want a mature desktop vault, an open KDBX file, and control over where that file lives.

authelia

authelia/authelia · ★ 29k ▲50/7d · Go

Authelia is a self-hosted authentication and authorization server that adds sign-in, access rules, and multi-factor authentication to web applications. It can work with a reverse proxy for forwarded authentication or act as an OpenID Connect provider, giving several internal services one login policy.

Verdict Our Authelia build completed in 229 seconds, but 4 of 25 test groups failed after a 510-second run, so adopters should reproduce the suite on their deployment platform before trusting an upgrade. It remains a strong choice for self-hosters who already understand reverse proxies and want one policy layer across several apps.

envoy

envoyproxy/envoy · ★ 29k ▲22/7d · C++

Envoy is an open-source network proxy that sits at the edge of a system or between services. It handles traffic routing, load balancing, encryption, policy, and observability so application teams do not have to implement those concerns in every service.

Verdict Our Envoy run installed 49 Go packages and built the detected target, but all 3 attempted tests failed, so adopters should validate the exact proxy and extensions they will ship. Envoy is a strong fit when a platform team needs programmable traffic policy across many services and can operate configuration as carefully as application code.

setup-ipsec-vpn

hwdsl2/setup-ipsec-vpn · ★ 29k ▲60/7d · Shell

Setup IPsec VPN is a set of shell scripts that turns a fresh Linux server into a VPN endpoint. It configures IPsec/L2TP, IPsec/XAuth, and IKEv2, then supplies client profiles and scripts for managing users and certificates.

Verdict The installer needs root access and reachable UDP ports 500 and 4500, so it belongs on a dedicated server you can rebuild. Use it when built-in IPsec clients and guided IKEv2 profiles matter, after reviewing the exact scripts fetched from `master`.

wg-easy

wg-easy/wg-easy · ★ 27k ▲84/7d · TypeScript

wg-easy packages a WireGuard server and a browser-based admin panel into one self-hosted container. It gives you a simpler way to create peers, show QR codes, download client configurations, inspect connection traffic, set expirations, and manage access without editing WireGuard files by hand.

Verdict Our wg-easy install took 11 seconds and used 10 MB, but its build stopped in 3 seconds because Docker was unavailable, so trial it on a Linux host where you can grant network capabilities. It is a good fit for a small WireGuard deployment whose main pain is creating and handing out peer configurations.

rancher

rancher/rancher · ★ 26k ▲18/7d · Go

Rancher is a central management system for creating, importing, securing, upgrading, and observing Kubernetes clusters across data centers and cloud providers. It gives platform teams one interface for cluster access, policies, applications, and continuous delivery instead of operating every cluster as an isolated system.

Verdict Our Rancher build took 544 seconds, and its tests reached our 900-second cap with 184 passes and 19 localhost-dependent failures. Use Rancher when a real cluster fleet can repay the cost of a dedicated management plane and your team will rehearse upgrades and restores.

firefly-iii

firefly-iii/firefly-iii · ★ 25k ▲52/7d · PHP

Firefly III is a self-hosted personal-finance manager for recording income, spending, budgets, recurring transactions, and savings goals. It keeps financial records on infrastructure you control and adds rules, reports, tags, multiple currencies, and a REST API for people who have outgrown a spreadsheet.

Verdict Our Firefly III checkout installed 781 npm packages in 29 seconds, but it exposed no npm build or test target, so that clean result does not prove the PHP application is ready to hold your financial history. Use Firefly III when you want detailed, private bookkeeping and accept database, backup, importer, and upgrade work.

listmonk

knadh/listmonk · ★ 24k ▲111/7d · Go

listmonk is a self-hosted newsletter, mailing-list, and transactional messaging application backed by PostgreSQL. It gives operators subscriber lists, segmentation, templates, campaigns, analytics, and multiple delivery channels in one Go service.

Verdict Our listmonk build finished in 73 seconds after installing 85 packages, but `go test` found 0 tests, so the clean compile is stronger evidence than the test count. Use listmonk when subscriber ownership, a compact deployment, and API access outweigh the work of operating mail infrastructure.

hysteria

HyNetworks/hysteria · ★ 23k ▲75/7d · Go

Hysteria 2 is a self-hosted proxy that carries traffic through a customized QUIC protocol over UDP. It pairs a server with clients that can expose SOCKS5, HTTP proxy, forwarding, TUN, and Linux transparent-proxy modes for networks where ordinary connections are unreliable or filtered.

Verdict Our Hysteria run installed 35 Python helper packages in 7 seconds, but it ran no proxy traffic or test suite, so the lab result confirms a tidy helper environment rather than the speed claim that defines the project. Use Hysteria 2 when poor network paths are the problem and you can test UDP, MTU, roaming, and failure recovery yourself.

docmost

docmost/docmost · ★ 22k ▲74/7d · TypeScript

Docmost is a self-hosted team wiki for writing, organizing, and discussing internal documentation. It combines real-time editing, spaces, permissions, comments, page history, search, attachments, diagrams, and translated interfaces in a browser application.

Verdict Our Docmost run installed 1,942 packages, occupied 1,306 MB, and built in 42 seconds, but the checkout offered no test target. It is a credible open-edition choice for a team that wants real-time wiki editing and can operate PostgreSQL, Redis, storage, and backups.

Mobile-Security-Framework-MobSF

MobSF/Mobile-Security-Framework-MobSF · ★ 22k ▲49/7d · JavaScript

MobSF is a self-hosted mobile application security scanner for Android, iOS, and Windows packages and source code. It combines static inspection with an instrumented dynamic lab, then exposes the results through a web interface and REST APIs.

Verdict Our MobSF run installed 129 packages in 35 seconds and built in 1 second, but pytest found 0 tests and exited 5 while pip-audit reported 51 known vulnerabilities. Use MobSF for a shared static-analysis service or when your security team already owns a rooted device lab with network isolation.

livekit

livekit/livekit · ★ 22k ▲128/7d · Go

Choose LiveKit server when you need programmable audio, video, and data rooms inside your own application and can evaluate the deployment yourself. LiveKit server is a distributed WebRTC SFU written in Go. In our run on October 15, 2026, at commit 3d45aa2, installation and build succeeded, but the test command failed. That result supports further evaluation, not a claim that we verified working calls or production readiness.

Verdict LiveKit deserves an evaluation when you need programmable media rooms and its SDK coverage fits your clients. Our October 15, 2026 run at 3d45aa2 installed and built successfully, but testing failed and no deployed call was verified.

netbox

netbox-community/netbox · ★ 22k ▲45/7d · Python

NetBox is a web application for recording the intended state of networks: sites, racks, devices, cables, addresses, circuits, power, and virtual infrastructure. Automation and monitoring systems read that shared model through APIs; NetBox does not log into switches or push configuration by itself.

Verdict Our NetBox install added 126 packages and 371 MB, built in 10 seconds, and reported 8 known vulnerabilities, so adoption needs dependency review as well as network modeling work. Use it when a shared, API-readable record of intended network state will replace scattered spreadsheets and scripts.

WordPress

WordPress/WordPress · ★ 22k ▲17/7d · PHP

WordPress is a self-hosted publishing system for websites whose editors need pages, posts, media, themes, users, and an administrative interface. This GitHub repository is the runnable distribution mirrored from WordPress's Subversion repository, not the main place where core development is reviewed.

Verdict Our 8-second build covered only the bundled Twenty Nineteen theme, so it gives no evidence that WordPress core or its database installer works in the measured container. Use WordPress 7.1 when editors need its established publishing workflow and the operator can own PHP, database, plugin, theme, backup, and update duties.

mediamtx

bluenviron/mediamtx · ★ 21k ▲46/7d · Go

MediaMTX is a self-hosted live media server that accepts video or audio streams, routes them across several protocols, records them, and serves them to viewers. It replaces separate RTSP, RTMP, HLS, WebRTC, SRT, RTP, MPEG-TS, and Media-over-QUIC gateways with one configurable process.

Verdict Our MediaMTX build took 4 seconds, but only 122 of 127 tests passed, so v1.21.0 is easy to compile and still needs a reproduced green suite before a source-based production rollout. Use it when one operator-owned service should bridge camera and broadcast protocols without transcoding.

DocsGPT

arc53/DocsGPT · ★ 18k ▲16/7d · Python

DocsGPT is a self-hosted system for turning documents, websites, and connected business apps into searchable AI agents. It combines ingestion, cited answers, visual workflows, tools, access controls, a web app, widgets, an OpenAI-compatible API, and an MCP server in one project.

Verdict Our DocsGPT run installed 279 packages and built in 12 seconds, but tests stopped during collection and pip-audit found 3 known vulnerabilities, so production adoption needs a dependency and test review first. The product is a strong fit when one self-hosted system must serve documents through agents, widgets, APIs, and MCP.

Sonarr

Sonarr/Sonarr · ★ 17k ▲67/7d · C#

Sonarr is a self-hosted TV library manager for people who use Usenet or BitTorrent. It watches for episodes, sends chosen releases to a separate download client, then imports, renames, and upgrades the resulting files according to rules you set.

Verdict Our Sonarr checkout installed 908 Yarn packages and built its web UI in 50 seconds, but it exposed no test target for our sandbox to run. Use Sonarr if you want precise, mostly hands-off TV acquisition and already understand indexers, download clients, and shared storage.

coder

coder/coder · ★ 17k ▲57/7d · Go

Coder is a self-hosted control plane for creating remote development workspaces from Terraform templates. It gives developers browser or IDE access to environments on your Docker, Kubernetes, or cloud infrastructure, and it can run coding agents such as Claude Code and Codex inside those workspaces while centralizing model credentials and policy.

Verdict Our Coder checkout installed 189 pnpm packages in 16 seconds, but it exposed no build or test target to the harness, so we did not verify the 1.47-million-line platform. Coder is a strong fit for a platform team that already owns Terraform and infrastructure and wants governed workspaces for developers and agents.

nomad

hashicorp/nomad · ★ 17k ▲26/7d · Go

Nomad is a workload scheduler for containers, ordinary executables, Java applications, batch jobs, and virtual machines across fleets of servers. It handles placement, rescheduling, health, resources, and multi-region coordination for teams that want an orchestrator with fewer core components than Kubernetes.

Verdict Our Nomad checkout installed 1,517 pnpm packages in 47 seconds, but it exposed no build or test target, so our run did not validate the scheduler binary. Nomad remains a strong fit for mixed workloads and teams that find Kubernetes larger than their problem.

bentopdf

alam00000/bentopdf · ★ 16k ▲65/7d · JavaScript

BentoPDF is a self-hostable collection of PDF tools that processes files inside the user's browser. It covers routine page work, editing, conversion, OCR, signatures, redaction, and visual workflows without sending documents to an application server.

Verdict BentoPDF is an excellent first choice for an internal PDF portal because the useful work happens in the browser and the self-hosted image does not remove PDF features. The source build is large, and advanced WASM features bring browser, header, and offline-asset complications that the one-line container command can hide.

audiobookshelf

advplyr/audiobookshelf · ★ 15k ▲77/7d · JavaScript

Audiobookshelf is a server you run yourself for organizing, streaming, and sharing audiobooks and podcasts. It remembers each listener's position, downloads podcast episodes, edits book metadata, and gives the household web and mobile clients without handing the library to a commercial platform.

Verdict Our Audiobookshelf run installed 429 packages in 9 seconds and passed all 354 tests, but npm audit still found 54 known vulnerabilities, including 3 critical. It is the best fit here for a technically comfortable household that wants audiobook progress, podcast downloads, and user permissions under its own control.

romm

rommapp/romm · ★ 14k ▲121/7d · Python

RomM is a self-hosted web library for scanning, organizing, enriching, sharing, downloading, and sometimes playing a collection of game ROMs. It adds metadata and artwork from outside providers, supports hundreds of platforms, and can play compatible systems in the browser through EmulatorJS, RuffleRS, or js-dos.

Verdict Our RomM build succeeded in 5 seconds after a 44-second, 34-package install, but the lab found no test target to run. It is the strongest fit here for a serious home collection that needs metadata, accounts, browser play, and companion apps, provided the operator already runs Docker storage and databases well.

node_exporter

prometheus/node_exporter · ★ 14k ▲8/7d · Go

Node Exporter exposes a machine's operating-system and hardware measurements so Prometheus can collect them. It supplies counters such as CPU activity and disk space, while your monitoring stack handles storage, dashboards, and alerts.

Verdict Our Node Exporter build succeeded in 41 seconds after a 21-second install, but its test step failed after 8 seconds with named collector failures. It remains a sensible choice for an existing Prometheus stack when you can configure and verify host access.

mailcow-dockerized

mailcow/mailcow-dockerized · ★ 14k ▲25/7d · JavaScript

Mailcow is a self-hosted email and groupware stack delivered through Docker Compose. It combines mail transfer, IMAP and POP access, spam filtering, antivirus, webmail, calendars, contacts, certificates, and an admin interface so you do not have to assemble those services yourself.

Verdict Mailcow needs at least 6 GiB RAM plus 1 GiB swap and control of 10 inbound ports, so it belongs on a dedicated mail host with a named operator. Use it when you want a mature, integrated mail and groupware appliance and are willing to own DNS, reputation, backups, and updates.

distribution

distribution/distribution · ★ 11k ▲3/7d · Go

Distribution is the open-source registry server that stores and serves container images and other OCI content. It gives teams the storage layer behind a private registry, without adding a full management console, vulnerability scanner, or policy suite.

Verdict Our Distribution build passed in 86 seconds, but 3 of 77 test packages failed after a 419-second run, so adopt it as infrastructure you will test and operate, not as a finished appliance. It is a good fit when you want a plain OCI registry core, can use the supported image, and already own authentication, TLS, monitoring, backups, and storage validation.

v2

miniflux/v2 · ★ 9.9k ▲23/7d · Go

Miniflux is a self-hosted feed reader that collects updates from websites into one clean reading queue. It solves the problem of following many sites without surrendering your reading habits to an ad-funded platform.

Verdict Our build succeeded in 39 seconds, and all 96 tests passed. Miniflux is an unusually coherent choice for readers who want a quiet, privacy-aware feed inbox and are comfortable owning a PostgreSQL service.

pocket-id

pocket-id/pocket-id · ★ 9.8k ▲107/7d · Go

Pocket ID is a self-hosted OpenID Connect and OAuth 2.0 provider that signs users into applications with passkeys. It replaces separate passwords for home-lab and small-team services with one identity service, and it deliberately does not offer password authentication.

Verdict Our Pocket ID build passed in 38 seconds, but its Playwright run stopped with 2 failures and left 182 tests unrun, so test the complete sign-in path before moving real accounts. It is a good choice for a home lab or small team that has already decided on passkeys and wants less identity machinery than Keycloak.

cap

tiagozip/cap · ★ 8.2k ▲47/7d · JavaScript

Cap is a self-hosted CAPTCHA alternative that asks a visitor's device to do proof-of-work and can run browser instrumentation checks in the background. It replaces picture-selection puzzles and third-party tracking with a widget, your own verification service, and a token your application checks server-side.

Verdict Our Cap core run installed 143 packages in 35 seconds and passed all 144 tests, giving the embeddable path a clean starting point. Cap is a credible choice when privacy, self-hosting, and invisible proof-of-work matter more than avoiding infrastructure.

luci

openwrt/luci · ★ 7.9k ▲9/7d · JavaScript

LuCI is the browser-based configuration interface shipped with OpenWrt. It turns router settings and add-on services into web pages, so administrators can manage networks, firewalls, packages, status, and supported applications without doing every task through SSH and UCI commands.

Verdict Use LuCI when the device already runs OpenWrt and humans need to administer it. It is the standard interface, has a large package catalog, and follows active OpenWrt branches, but extension development requires the OpenWrt stack rather than ordinary Node habits.

incus

lxc/incus · ★ 6.5k ▲51/7d · Go

Incus manages full Linux system containers and virtual machines through one daemon, command-line client, and REST API. It can run on one host or form a cluster, giving infrastructure teams a small private-cloud layer without adopting a public cloud control plane.

Verdict Our Incus run installed 337 packages and built in 109 seconds, but 77 of 140 test packages failed in the unprivileged sandbox. Use Incus when you want one Linux control plane for system containers and VMs and have administrators who understand root-equivalent access, storage, and networking.

hister

asciimoo/hister · ★ 6.2k ▲44/7d · Go

Hister is a private search engine for the web pages you visit and the local files you keep. It stores their searchable contents, then lets you find them through a web interface, terminal client, or an AI assistant connected over MCP.

Verdict Hister is one of the more useful self-hosted answers to the question, 'Where did I read that?' Its binary setup, full-text capture, query language, terminal UI, and cautious MCP output make it worth trying on a private machine. Run it only after deciding what must never be indexed and how long stored copies should live, because retention and complete erasure remain the operator's responsibility..

CPA-Manager-Plus

seakee/CPA-Manager-Plus · ★ 4.0k ▲34/7d · Go

CPA Manager Plus is a self-hosted control panel and observability service for CPA, also called CLIProxyAPI. It manages providers and credentials while storing request history, cost estimates, quota state, failures, and account health locally. It does not proxy model traffic by itself.

Verdict Our CPA Manager Plus run passed a 36-second build and a 51-second test step, but npm audit still found 13 vulnerabilities, including 10 high-severity advisories. Existing CLIProxyAPI operators gain unusually specific request, quota, cost, and credential views from one local service.

yuvomi

ulsklyc/yuvomi · ★ 2.2k ▲148/7d · JavaScript

Yuvomi is a self-hosted household organizer that puts tasks, calendars, shopping, meals, budgets, documents, health records, and reminders in one web app. It replaces several family subscriptions with one server and one SQLite database that you control.

Verdict Our Yuvomi test run reported 12 passes and 0 failures, then hit the 900-second cap, so its full test command is not a quick confidence check on a clean box. The shipped container and unusually explicit deployment docs make it a good choice for a household that already maintains a server and wants one private system for many routines.

awesome-cloudflare-selfhosted

theoephraim/awesome-cloudflare-selfhosted · ★ 1.2k ▲11/7d · JavaScript

Awesome Cloudflare Self-Hosted is a curated list of complete applications that replace paid SaaS products while running inside your own Cloudflare account. Its tooling reads license files and deployment configuration from each repository, then records the Cloudflare services an app actually declares.

Verdict Our run added 0 packages, built the generated list in 5 seconds, and passed all 61 parser tests in another 5 seconds, so the curation machinery is unusually easy to verify. Use this list when your deployment decision is already Cloudflare-first and you want a checked inventory of SaaS replacements.

go2tv

alexballas/go2tv · ★ 1.1k ▲2/7d · Go

Go2TV sends local video, audio, images, and live streams from a computer or Android phone to Chromecast and DLNA/UPnP receivers. It is a direct casting tool with a desktop app, command line, and optional browser control, so you do not have to maintain a full media library server.

Verdict Our Go2TV run installed 51 packages in 9 seconds and passed all 32 tests, making it an unusually low-friction trial for direct home-network casting. Use it when you want to choose a file, choose one receiver, and play without administering a media catalog.

bindery

vavallee/bindery · ★ 545 ▲12/7d · Go

Bindery is a self-hosted manager for ebook and audiobook acquisition, built as a replacement for Readarr. It monitors authors, searches Usenet and torrent indexers, sends releases to download clients, imports the finished files, and keeps metadata from several providers instead of depending on one backend.

Verdict Our Bindery run passed all 124 tests in 264 seconds after a 74-second build, which is strong evidence for the codebase at commit 87ebea6. Use it if you are replacing Readarr and already understand indexers, download clients, mounts, and ownership.

bitcoin

bitcoin/bitcoin · ★ 91k ▲70/7d · C++

Bitcoin Core connects directly to the Bitcoin network, downloads blocks and transactions, and checks them against Bitcoin's rules. You can run the node without building its optional wallet or graphical interface. Its RPC interface lets other software query and control a node you operate.

Verdict Our Bitcoin Core run installed 43 Python lint dependencies in 11 seconds and built that helper in 1 second, then pytest collected no tests, leaving the node untested. Choose Bitcoin Core when running your own validating node is the requirement and you can protect its RPC access.

vaultwarden

dani-garcia/vaultwarden · ★ 70k ▲290/7d · Rust

Vaultwarden is an unofficial Rust server that works with the official Bitwarden password-manager clients. It gives individuals, families, and small organizations a lighter self-hosted backend for vaults, sharing, attachments, two-factor authentication, and emergency access.

Verdict Our Vaultwarden install took 52 seconds, but its plain build and test commands both stopped because no database backend was enabled. It is a good choice for a technically capable household or small team that wants official Bitwarden clients with a server they control.

twenty

twentyhq/twenty · ★ 60k ▲436/7d · TypeScript

Twenty is a customer relationship manager that teams can run themselves or buy as a hosted service. It stores people, companies, deals, activities, and workflows, while giving developers code-defined objects, views, and app extensions for business-specific processes.

Verdict Our Twenty install took 445 seconds, pulled 5,270 packages, and used 4,822 MB, while the repository exposed no build or test target to our harness. Use it when a programmable CRM can replace several awkward internal tools and your team already operates databases, workers, backups, and HTTPS.

jellyfin

jellyfin/jellyfin · ★ 59k ▲241/7d · C#

Jellyfin is a free, open-source media server that lets you organize your personal collection of movies, TV shows, and music on your own computer. It solves the problem of accessing your media library from anywhere by streaming it to your various devices, much like a personal Netflix.

Verdict Jellyfin is the definitive choice for building a personal media server if you believe in the principles of free and open-source software. It puts you in complete control, free from subscriptions and corporate agendas.

odoo

odoo/odoo · ★ 55k ▲117/7d · Python

Odoo is an open-source suite of web apps for running a business, including CRM, accounting, inventory, ecommerce, projects, and manufacturing. It solves the integration problem by letting those apps share one system instead of making a company join several separate products.

Verdict Our Odoo install took 196 seconds, pulled 95 packages, and produced a successful build, but the 1,103.7 MB checkout makes clear that this is a business platform, not a lightweight app. Use Community Edition when replacing several connected systems justifies dedicated PostgreSQL, deployment, security, and upgrade ownership.

mastodon

mastodon/mastodon · ★ 50k ▲14/7d · Ruby

Mastodon is a social network server that lets your community exchange posts with people on other servers using ActivityPub. It supplies accounts, a web interface, chronological timelines, and moderation tools so an organization can host its own part of that network.

Verdict Our Mastodon run passed all 4,061 Vitest tests in 162 seconds, but the skipped build leaves full server setup unverified. Choose it for an ActivityPub community when you can operate its service stack and staff moderation.

alist

AlistGo/alist · ★ 50k ▲22/7d · Go

AList puts local folders and many cloud storage accounts behind one web file browser, with previews, sharing, uploads, downloads, and WebDAV access. It usually connects to a provider through that service's own interface and redirects or forwards file traffic, so you can browse scattered storage without first copying everything into a new system.

Verdict Our AList build succeeded after installing 644 packages, but only 58 of 89 test results passed and `server/s3` ended in a build failure. Use it when one web and WebDAV gateway across many providers saves more work than watching each driver for upstream changes.

RSSHub

DIYgod/RSSHub · ★ 47k ▲77/7d · TypeScript

RSSHub turns websites and services into RSS feeds, especially when they do not publish useful feeds themselves. It gives readers, teams, and automation systems one feed-shaped way to follow many different sources.

Verdict Our install and build both succeeded, but the test command exited 1 after 181 seconds. RSSHub is an unusually capable choice when the missing piece is feed creation, not feed reading, and its same-day push is a strong sign of active maintenance.

Sunshine

LizardByte/Sunshine · ★ 43k ▲189/7d · C++

Sunshine turns a Windows, Linux, macOS, or FreeBSD computer into a game-streaming host for Moonlight clients. It captures the host display, encodes video with supported GPU hardware or software, forwards input, and provides a browser interface for configuration and pairing.

Verdict Our Sunshine build completed in 10 seconds and npm audit found 0 known vulnerabilities, while the current release spans 4 host operating systems and several hardware encoders. It is the practical first host to try if you already want Moonlight and can test the exact GPU, display server, and client combination before relying on it.

project-nomad

Crosstalk-Solutions/project-nomad · ★ 41k ▲458/7d · TypeScript

Project NOMAD is an offline knowledge and education server that puts reference archives, courses, maps, and optional AI behind a browser-based command center. It manages separate Docker services so owners can prepare a shared library before losing internet access.

Verdict Our repository-root npm install step finished in 3 seconds, but the npm test command failed because it printed "Error: no test specified" and exited with code 1. Consider Project NOMAD for a dedicated offline server on supported hardware, with network access controlled by its owner.

outline

outline/outline · ★ 41k ▲61/7d · TypeScript

Outline is a collaborative knowledge base for teams, built around documents, collections, search, Markdown compatibility, and real-time editing. It gives a company an organized internal wiki without forcing people to edit files or learn a developer-oriented documentation system.

Verdict Our Outline build finished in 38 seconds, but 2,287 of 4,925 tests failed in the same fresh container, so source contributors should reproduce the project's full test environment before trusting a local green build. Outline is an excellent fit for teams that want a polished internal wiki and can accept BSL 1.1 or use the hosted service.

erpnext

frappe/erpnext · ★ 41k ▲191/7d · Python

ERPNext is a self-hosted business system for accounting, inventory, sales, purchasing, manufacturing, assets, projects, and staff records. It replaces several disconnected back-office tools with one database and workflow layer built on the Frappe Framework.

Verdict Our ERPNext checkout installed 470 packages in 103 seconds, then its build failed in 5 seconds because `/sites/common_site_config.json` was missing. Use ERPNext when its business modules fit and you can treat Frappe operations and implementation work as part of the purchase.

photoprism

photoprism/photoprism · ★ 40k ▲18/7d · Go

PhotoPrism is a self-hosted web application for searching, organizing, browsing, and sharing photo and video libraries. It reads common media and metadata formats, builds a searchable index, groups faces, assigns labels, maps locations, and keeps the original files under the operator's control.

Verdict Our frontend install pulled 1,070 packages and used 660 MB, while npm audit found 1 high-severity advisory and the workspace exposed no build or test target. PhotoPrism is a strong fit for a Docker-capable self-hoster who values file ownership, metadata, RAW support, and search more than turnkey phone backup.

NewPipe

TeamNewPipe/NewPipe · ★ 40k ▲76/7d · Java

NewPipe is an Android app for watching and downloading media from YouTube, PeerTube, Bandcamp, SoundCloud, and media.ccc.de without a service account or Google Play Services. It keeps subscriptions, playlists, and history on the device, which suits people who want a local alternative to the official clients.

Verdict Our NewPipe install finished in 23 seconds, but its build and test commands both failed after 11 seconds when the Gradle 9.7.1 download timed out. That result points to a source setup dependency, not a proven code failure, and the published app remains a sensible choice for Android users who want local subscriptions and background playback without a Google account.

novu

novuhq/novu · ★ 40k ▲31/7d · TypeScript

Novu is an open-core notification and conversation platform for products and software agents. It puts in-app inboxes, email, SMS, push, and chat behind shared workflows so a team does not have to rebuild preferences, digests, and provider routing in each application.

Verdict Our run of Novu pulled 5,473 packages, occupied 4,007 MB, and finished a successful build in 357 seconds, so it suits teams ready to own notification infrastructure rather than add a small library. Choose it when inboxes, preferences, workflow logic, agent conversations, and several providers need one home.

bitchat

permissionlesstech/bitchat · ★ 37k ▲182/7d · Swift

bitchat is a messaging app that sends nearby conversations over Bluetooth and uses Nostr relays for internet communication. It lets people chat without registering an account or supplying a phone number, but nearby radio observers can still identify and track participating devices according to its whitepaper.

Verdict Our bitchat run built the embedded Rust package in 117 seconds, then Cargo found 0 tests, leaving the Swift messenger unverified. Consider the official app for nearby communication only after checking delivery on the devices your group will use.

WeKnora

Tencent/WeKnora · ★ 36k ▲670/7d · Go

WeKnora is a self-hosted knowledge platform for searching documents, answering questions with citations, running retrieval-aware agents, and generating editable wikis. Its main README is in English, with maintained Simplified Chinese, Japanese, and Korean versions also available.

Verdict Our WeKnora build passed after 252 seconds, but the test run ended with 4 failures out of 77, so v0.7.2 needs an environment-specific acceptance run before production. It is a strong candidate for a private knowledge platform when wiki generation, document controls, chat channels, and workspace governance belong in one system.

glances

nicolargo/glances · ★ 34k ▲28/7d · Python

Glances is a cross-platform system monitor that shows CPU, memory, disks, networks, processes, containers, and sensors in a terminal or browser. It can also serve those readings through REST, XML-RPC, Python, and MCP interfaces, then export them to monitoring databases and message brokers.

Verdict Our Glances run installed 215 packages and used 927 MB, then the suite stopped before collection because UID 1000 had no passwd entry. Use Glances when one tool must cover terminal checks, a Web dashboard, exports, and API access across several operating systems.

onyx

onyx-dot-app/onyx · ★ 33k ▲126/7d · Python

Onyx is a self-hosted AI workspace that connects chat and agents to company documents, web search, code execution, and outside tools. It solves the messy application layer around language models: indexing sources, retrieving relevant material, sharing agents, and giving users one interface across model providers.

Verdict Our Onyx workspace install pulled 451 packages and occupied 688 MB before any database, index, model, or connector was running, so Standard Onyx is an infrastructure commitment. It is a strong choice for teams that already need shared RAG, agents, and many knowledge connectors in one product.

dokku

dokku/dokku · ★ 32k ▲14/7d · Go

Dokku is a Docker-based hosting platform that lets you deploy applications to your own server through Git. It gives developers a repeatable deployment workflow while leaving the server and application services under their control.

Verdict Our Dokku source-check install failed after 162 seconds on unknown Kubernetes module revisions, leaving the supported server-installation route unassessed. Dokku is worth a separate VM trial if you want Git deployment and can own the host and backing services.

jumpserver

jumpserver/jumpserver · ★ 32k ▲30/7d · Python

JumpServer is a self-hosted privileged access management system for controlling and recording access to servers, databases, Kubernetes clusters, and remote desktops. It gives administrators one browser-based gate for SSH, RDP, database, and RemoteApp sessions instead of distributing direct credentials.

Verdict Our JumpServer run installed 34 packages in 55 seconds and built in 10 seconds, but the repository offered no test target, so the clean build is weaker evidence than a passing suite. Use it when browser access, session auditing, and policy around several privileged protocols justify a dedicated 4-core, 8 GB host and ongoing security operations.

koreader

koreader/koreader · ★ 31k ▲151/7d · Lua

KOReader is a document reader built mainly for e-ink devices, with support for ebooks, PDFs, comics, and scanned documents. It replaces limited factory reading software with finer control over typography, page layout, dictionaries, catalogs, and reading services. It also runs on Android and Linux, although its strongest case is breathing new life into dedicated readers.

Verdict At commit 2e28a3c, our 3-CPU, 8-GB sandbox produced no install, build, or test result because it lacked a supported Lua ecosystem and the repo had no Dockerfile. Even without a lab result, the documented format range and e-ink-specific controls make KOReader an unusually capable choice for readers willing to tinker.

jitsi-meet

jitsi/jitsi-meet · ★ 30k ▲28/7d · TypeScript

Jitsi Meet is an open-source video meeting client for browsers and mobile apps, with SDKs for putting calls inside another product. Self-hosting it gives you control over the meeting service, but the working system extends well beyond this TypeScript repository.

Verdict Our Jitsi Meet run installed 1,706 packages and consumed 1,256 MB, yet the checkout offered no standard build or test target and npm audit found 58 known vulnerabilities. Use it when you need a mature meeting product and have an operator who can own the wider Jitsi stack.

bagisto

bagisto/bagisto · ★ 28k ▲31/7d · PHP

Bagisto is an MIT-licensed online-store application built with Laravel, Vue, and Blade. It gives PHP teams a storefront, admin system, catalog, checkout, orders, promotions, and extension points without assembling each commerce workflow themselves.

Verdict Our Bagisto checkout installed 51 npm packages in 26 seconds and built in 4 seconds, but it exposed no npm test target, so the asset pipeline is easy to try and incomplete as a confidence check. Choose Bagisto when your team already knows Laravel and wants an editable, self-hosted store with a serious admin surface.

authentik

goauthentik/authentik · ★ 26k ▲84/7d · Python

authentik is a self-hosted identity provider for single sign-on, user flows, and access control. It can speak SAML, OAuth2, OpenID Connect, LDAP, RADIUS, and proxy protocols so one login system can sit in front of modern apps and older infrastructure.

Verdict Our authentik workspace install pulled 1,602 packages and used 528 MB, while the root exposed no build or test target for the harness, so this is an infrastructure product rather than a casual source install. It is a strong self-hosted IdP choice for teams that need several protocols and can rehearse backups, upgrades, and account recovery.

dapr

dapr/dapr · ★ 26k ▲19/7d · Go

Dapr is a sidecar runtime that gives applications common distributed-system capabilities through HTTP and gRPC APIs. It handles service calls, state, messaging, workflows, actors, secrets, scheduled jobs, and LLM access so application code does not have to bind directly to every backing service.

Verdict Our Dapr run built successfully, but 21 of 239 test targets failed, so adoption should begin with a production-shaped proof rather than faith in the local build. Dapr makes sense for a platform team standardizing several distributed capabilities across languages, especially when sidecars are already an acceptable cost.

Tasmota

arendst/Tasmota · ★ 25k ▲30/7d · C

Tasmota is replacement firmware for smart devices built on ESP8266, ESP8285, and ESP32-family chips. It moves control to a local web interface, rules, timers, MQTT, HTTP, serial, or KNX, with over-the-air updates after the initial flash. Most users install a supplied binary, while developers can make a smaller or specialized PlatformIO build.

Verdict Our Tasmota source setup failed after 10 seconds because CMake could not find `/tools/cmake/project.cmake`, so developers should follow the documented PlatformIO path while ordinary users choose a released binary. Tasmota remains an excellent fit for a confirmed ESP device when local control, MQTT, and a mature recovery path matter.

gitlabhq

gitlabhq/gitlabhq · ★ 25k ▲7/7d · Ruby

GitLab is a self-hosted platform for storing Git repositories and running the collaboration work around them. It combines access controls, merge requests, CI/CD pipelines, issue tracking, boards, and wikis so an organization can manage software delivery in one system.

Verdict Our 285-second build ended with webpack exhausting V8 memory in an 8 GB container. GitLab remains a strong choice when one platform genuinely needs to cover repositories, reviews, CI/CD, issues, boards, and wikis, but it asks for serious operational commitment.

hysteria

apernet/hysteria · ★ 23k ▲75/7d · Go

Hysteria 2 is a cross-platform proxy that carries TCP and UDP traffic over a customized QUIC connection. It is meant for unreliable, lossy, or censored networks, with client modes for SOCKS5, HTTP proxying, forwarding, TUN, and Linux transparent proxying. The main README is English, and official Chinese, Russian, and Persian documentation is also available.

Verdict Our Hysteria checkout installed 33 packages in 15 seconds and built in 7 seconds, but the harness found no test target, so the clean build is the only code-level check we completed. Use Hysteria 2 when ordinary proxy traffic struggles on a lossy UDP path and you can operate TLS, authentication, and network diagnostics yourself.

macos

dockur/macos · ★ 22k ▲18/7d · Shell

dockur/macos packages a macOS virtual machine behind a Docker or Podman container, with a browser viewer and automatic recovery-image download. It is for people who want a repeatable macOS guest on a compatible host without assembling QEMU and OpenCore by hand.

Verdict Our sandbox did not run dockur/macos because its Shell-based Docker workflow falls outside our supported harness, so there is no install or test result to lean on. Use it when you own compatible Apple hardware and want a well-documented container wrapper around a persistent macOS VM.

xbmc

xbmc/xbmc · ★ 21k ▲18/7d · C++

Kodi is a free, open-source media player and entertainment hub that turns a computer, television device, or home-theater PC into a couch-friendly library for local and network media. It organizes movies, music, artwork, playlists, and other content behind a remote-friendly interface, with add-ons and skins for people who want more control than a typical streaming app provides.

Verdict Our install attempt failed after 16 seconds because CMake could not find Python. Kodi is still an unusually mature choice for a dedicated, couch-controlled media center, especially when you install an official package instead of compiling it.

parse-server

parse-community/parse-server · ★ 21k · JavaScript

Parse Server is an open-source backend you can run on infrastructure that supports Node.js. It supplies common application services, including data storage, authentication-related controls, files, live queries, Cloud Code, and GraphQL, so teams do not have to build every backend primitive themselves.

Verdict Our build completed in 7 seconds, but the full test command exceeded the 900-second cap. Parse Server is a credible choice for teams that value Parse SDK compatibility, self-hosting, and a mature set of backend features, provided they can own the database and security work.

Douyin_TikTok_Download_API

Evil0ctal/Douyin_TikTok_Download_API · ★ 21k ▲108/7d · Python

Douyin_TikTok_Download_API is a self-hosted service that turns Douyin and TikTok links into structured data, downloads, scheduled collections, and an archive exposed through REST, MCP, a CLI, and a web console. Its default documentation is English, and the project also maintains a full Chinese edition. It solves a bigger job than saving one clip: keeping identities healthy and making repeated collection observable.

Verdict Our run installed 98 packages and built in 9 seconds, but pytest still ended with 7 failures and 19 errors because the required 32-character secret was missing. Douyin_TikTok_Download_API is worth deploying when REST, MCP, access control, archives, and identity health justify a real database stack and ongoing platform maintenance.

openGym

DuarteSantos8/openGym · ★ 18k ▲1.9k/7d · JavaScript

openGym is a self-hosted workout and body-weight tracker for planning routines, logging sessions, and reviewing progress across devices. It runs as a phone-friendly web app with passkey login, or as a standalone Android app, and keeps server data in files you control. Optional AI coaching and an MCP server are separate, opt-in additions.

Verdict Our root-level openGym install took 3 seconds and audited clean, but the repository supplied neither a build nor test target there, so that result does not prove the Docker application works. Use openGym if you want a polished lifting tracker on your own server and will configure HTTPS, backups, and passkeys carefully.

cloudflared

cloudflare/cloudflared · ★ 16k ▲112/7d · Go

Cloudflared is the client that connects a private service to Cloudflare Tunnel through an outbound connection, so the service does not need a public inbound port. It can publish web origins through Cloudflare or help users reach protected SSH, RDP, and other Layer 4 services.

Verdict Our cloudflared build took 91 seconds and 94 of 97 tests passed, so it is a practical fit for Cloudflare customers who can investigate three unresolved test failures. Use it when Cloudflare already owns the edge and removing inbound firewall exposure is worth the provider dependency.

stalwart

stalwartlabs/stalwart · ★ 16k ▲252/7d · Rust

Stalwart is a self-hosted mail and collaboration server that puts email, calendars, contacts, and file access in one Rust service. It replaces a stack of separate SMTP, IMAP, DAV, spam-filtering, and administration components, while leaving the operator responsible for domain reputation and reliable delivery.

Verdict Our Stalwart build and test commands each hit the 900-second cap while still compiling, so source contributors need a serious Rust cache and more than 3 CPUs. The released binary or pinned Docker image is a strong candidate for operators who want mail and DAV protocols in one service and can own deliverability.

zitadel

zitadel/zitadel · ★ 15k ▲48/7d · Go

ZITADEL is an identity and access management platform for applications that need login, SSO, MFA, passkeys, service accounts, organization-level tenancy, and audit history. You can buy its cloud service or run the same code with PostgreSQL, but operating identity infrastructure is a much larger commitment than adding a login library.

Verdict Our ZITADEL checkout installed 2,123 pnpm packages and consumed 1,873 MB, but it exposed no root build or test target, so our run cannot certify the Go server. Shortlist it for serious B2B identity work where organizations, APIs, audit events, and self-hosting belong in one system.

logto

logto-io/logto · ★ 15k ▲39/7d · TypeScript

Logto is an identity service that gives applications sign-in screens, account management, and permissions based on roles and organizations. It supports standard login protocols so a SaaS team can connect applications and enterprise identity providers without writing its own identity server.

Verdict Our Logto source installation failed after 61 seconds because pnpm blocked dependency build scripts, leaving build and test outcomes unverified. Trial it when SaaS organizations and enterprise sign-in match your application, using the hosting route you actually intend to operate.

go2rtc

AlexxIT/go2rtc · ★ 15k ▲56/7d · Go

go2rtc is a small camera streaming gateway that accepts feeds from cameras and services, then makes them available through RTSP, WebRTC, HLS, MP4, and other outputs. It solves the compatibility problem between camera-specific protocols, browser codecs, Home Assistant, and NVR software.

Verdict Our go2rtc checkout installed 220 npm packages in 44 seconds and npm audit found 0 known vulnerabilities, but no npm build or test target existed, so our run never verified the Go server. Use go2rtc when a compact protocol bridge can remove camera and browser incompatibilities from a Home Assistant or Frigate setup.

kopia

kopia/kopia · ★ 15k ▲97/7d · Go

Consider Kopia if you want encrypted file backups with a choice of command-line or graphical interfaces and can maintain your own storage and recovery process. Kopia backs up files and directories, not whole-machine images. Our run on October 16, 2026, at commit 76e4e8e recorded a successful build step and a failed test command; it does not establish that a deployed backup and restore workflow works.

Verdict Evaluate Kopia for encrypted file snapshots if you can manage storage, password custody, and restore rehearsals. Our run on October 16, 2026, at commit 76e4e8e recorded a successful build step and a failed test command.

nango

NangoHQ/nango · ★ 13k ▲63/7d · TypeScript

Nango is a platform for adding external API integrations to a product or AI agent. It manages user authorization, stores and refreshes credentials, proxies authenticated requests, and runs TypeScript functions for syncs, actions, webhooks, triggers, and MCP tools.

Verdict Our Nango checkout pulled 2,187 packages and 1,848 MB, then its root tests failed in 8 seconds, so adopting the full source tree means accepting a large platform and investigating the test environment before changing it. Nango is a sensible shortlist choice for a product team that needs customer OAuth, proxy calls, syncs, actions, and MCP behind one control plane.

talos

siderolabs/talos · ★ 11k ▲29/7d · Go

Talos Linux is a minimal, immutable operating system built only to run Kubernetes nodes. Administrators configure and troubleshoot it through a declarative gRPC API and `talosctl`; there is no SSH service, package manager, or normal interactive shell on the host.

Verdict Our Talos checkout built in 255 seconds after a 673-second, 1,610-package dependency step, but 3 of 173 test-package results failed. Talos is a strong choice for teams that want Kubernetes nodes treated as replaceable API-managed appliances and are ready to abandon SSH-era habits.

tg-ws-proxy

Flowseal/tg-ws-proxy · ★ 11k ▲109/7d · Python

The project is primarily documented in Russian, and a complete English README plus platform guides are available under `docs/EN/`. TG WS Proxy runs a local MTProto proxy for Telegram Desktop and carries eligible Telegram traffic over TLS WebSocket connections, with direct TCP or optional Cloudflare routes as fallbacks.

Verdict Our TG WS Proxy run installed in 29 seconds and passed its build and tests, but pip-audit found 34 known vulnerabilities. It is worth trying for Telegram Desktop traffic on supported data centers, especially when a local loopback proxy is enough.

lago

getlago/lago · ★ 11k ▲18/7d · Go

Lago is an open-source system for recording product usage, applying pricing rules, managing credits and subscriptions, generating invoices, and coordinating payments. It solves the gap between raw events such as tokens or API calls and the financial records a customer and finance team need.

Verdict Our Lago events-processor build passed in 74 seconds, but 2 of 6 test packages failed because the linker could not find `expression_go`. Lago is a serious candidate for products whose pricing outgrew a payment provider, provided a platform team can own the service graph and validate every billing edge case.

velero

velero-io/velero · ★ 10k ▲7/7d · Go

Velero backs up Kubernetes resources and persistent-volume data, then restores them to the same cluster or another one. It combines an in-cluster server with a local CLI and storage-provider plugins, giving platform teams one control plane for disaster recovery and migration.

Verdict Our Velero build took 233 seconds and its test run ended with 59 of 65 passing, so adoption should begin with a restore drill rather than a successful install. Use it when Kubernetes resource recovery, volume backup, and cross-cluster migration belong under one established project.

spotifast

crmne/fastpotify · ★ 9.4k ▲228/7d · Rust

Fastpotify is now called Spotifast, a native Rust Spotify desktop client for Linux, macOS, and Windows that does not use a browser engine. It plays locally through librespot, controls Spotify Connect devices, and covers the library, search, playlists, podcasts, lyrics, and a queue.

Verdict Our Fastpotify run installed 579 packages in 31 seconds, built in 756 seconds, and passed all 296 tests in 47 seconds. Spotifast is a credible package-first choice for a Spotify Premium subscriber who wants a native desktop client with real library and Connect controls.

filebrowser

gtsteffaniak/filebrowser · ★ 9.0k ▲61/7d · Go

FileBrowser Quantum is a self-hosted web interface for browsing, editing, and sharing files in directories you control. It adds multiple storage locations and user access rules, so you can give people browser access without giving everyone the same view of the filesystem.

Verdict Our FileBrowser Quantum build succeeded in 107 seconds, but its test summary reported 60 passed and 3 failed out of 63. It deserves a trial for browser access to several filesystem locations, with deliberate source grants and account-level checks before sharing real folders.

niubigeo

Albert-Weasker/niubigeo · ★ 8.9k ▲232/7d · TypeScript

NiubiGEO is a self-hosted workbench for checking how model APIs describe a product, which competitors they mention, and which sources appear in their answers. It stores the original responses and test conditions so a marketing or product team can inspect the evidence behind each visibility result instead of trusting one blended score.

Verdict Our NiubiGEO run installed 58 packages in 10 seconds and built in 11 seconds, but 1 of 256 tests failed. It is a credible self-hosted choice for inspecting model-API answers when your team values raw evidence and can secure the service.

warpgate

warp-tech/warpgate · ★ 8.2k ▲33/7d · Rust

Warpgate is a self-hosted access proxy for SSH, HTTPS, Kubernetes, MySQL, PostgreSQL, RDP, and VNC. Users connect with ordinary clients or a browser, while administrators assign specific targets, require TOTP or OpenID Connect, and record sessions from one control point.

Verdict Our Warpgate checkout installed 27 frontend packages with 0 npm advisories, but it exposed no npm build or test target and our run never compiled the Rust service. Shortlist it when direct-client access, target-level permissions, and session recording fit a modest self-hosted deployment.

arcane

getarcaneapp/arcane · ★ 8.1k ▲46/7d · Go

Arcane is a self-hosted web interface for managing Docker containers, images, networks, volumes, Compose projects, and Swarm workloads. It gives operators one place for updates, image scans, remote hosts, access controls, and routine maintenance that would otherwise happen through Docker commands and separate scripts.

Verdict Our Arcane install pulled 480 packages and occupied 1,352 MB, but the root workspace offered no build or test target for us to verify. The product deserves a trial for a Docker-first fleet that wants Compose files, remote agents, Swarm tools, and scoped access in one interface.

evcc

evcc-io/evcc · ★ 7.5k ▲47/7d · Go

evcc is a local electric-vehicle charge controller and home energy manager that coordinates chargers, cars, meters, solar inverters, batteries, and electricity prices. It decides when and how hard to charge so a household can favor solar production, lower-cost grid periods, or a requested departure target.

Verdict Our evcc Node setup installed 682 packages and used 469 MB, but no build or test target ran and npm audit found 2 high plus 2 moderate vulnerabilities. Choose evcc when your exact charger, meter, and vehicle combination is documented and solar-aware charging is worth operating a dedicated controller.

fleet

fleetdm/fleet · ★ 7.1k ▲38/7d · Go

Fleet is a self-hosted device-management and security platform built around osquery and native MDM channels. It gives IT teams one server, web interface, API, CLI, and GitOps path for inventory, policies, software, patches, scripts, and device enrollment across major operating systems.

Verdict Our Fleet run installed 1,493 packages and used 893 MB, then passed the available tests in 209 seconds without exposing a root build target. Fleet is worth the operational cost when MDM, software delivery, osquery data, and GitOps genuinely belong in one system.

opencost

opencost/opencost · ★ 6.8k ▲7/7d · Go

OpenCost is a self-hosted cost monitor for Kubernetes workloads and cloud services. It attributes spending to clusters, namespaces, controllers, services, and pods so platform teams can see which workloads consume money and capacity.

Verdict Our OpenCost run installed 458 packages, built successfully in 207 seconds, and passed all 54 measured Go tests, which makes the source a credible base for a Kubernetes cost service. Use it when your cluster already has Prometheus and the team will reconcile its allocation data against provider bills before chargeback.

optimism

ethereum-optimism/optimism · ★ 6.5k ▲1/7d · Go

This monorepo contains core parts of the OP Stack, the software used to build Ethereum layer 2 rollup chains such as OP Mainnet and Base. It includes node, batching, proposing, fault-proof, deployment, contract, monitoring, and testing components rather than one application binary.

Verdict Our Optimism checkout installed 464 Go packages and built in 9 seconds, but 3 of 146 Go test packages failed, so source users should validate the exact released components they plan to run. The OP Stack is a credible base for organizations that want an Ethereum rollup and can staff chain operations as an ongoing security function.

UpSnap

seriousm4x/UpSnap · ★ 6.4k ▲15/7d · Go

UpSnap is a self-hosted control panel for waking computers and other devices over a local network. It turns Wake-on-LAN packets, status checks, scheduled starts, and optional shutdown commands into a friendly multi-user web dashboard.

Verdict Our UpSnap run installed 85 packages, built in 49 seconds, and passed its single discovered test, making it an easy trial for a trusted LAN. Use it when Wake-on-LAN needs shared permissions, schedules, and status checks rather than another shell script.

macro

macro-inc/macro · ★ 5.9k ▲948/7d · Rust

Macro is an open-source team workspace that connects email, chat, documents, tasks and CRM records. Links between those records help colleagues and agents retrieve the conversation behind a piece of work.

Verdict Our Macro run installed 1,848 dependencies and used 1,975 MB, while build and tests were skipped because the runner found no targets. Pilot it when linked email, tasks and customer records solve a daily coordination problem.

reth

paradigmxyz/reth · ★ 5.8k ▲4/7d · Rust

Reth is a Rust implementation of Ethereum's execution layer, the node component that processes transactions, maintains chain state, and exposes execution APIs. You can run it as an Ethereum or EVM-chain client, or import its crates to build custom nodes and execution extensions.

Verdict Our Reth source run resolved 1,159 packages, hit the 900-second build cap, and then failed its test compilation after 587 seconds because `llvm-sys` could not find a suitable LLVM. Operators should start with the published v2.6.0 binary or container and reserve source builds for teams that need Reth's Rust crates or custom node behavior.

homarr

homarr-labs/homarr · ★ 5.2k ▲41/7d · TypeScript

Homarr is a self-hosted home page for organizing services, bookmarks, status data, calendars, downloads, media, and system information in one drag-and-drop dashboard. It adds accounts, groups, permissions, single sign-on, search, and dozens of service integrations, so it can act as the front door to a home server rather than a page of links.

Verdict Our Homarr build passed in 238 seconds, but the 1,837-test run finished with 13 failures, so the current source tree deserves staging before it becomes your home-lab front door. Use the Docker image when you want accounts, drag-and-drop boards, and many live integrations in one place.

mesh-llm

Mesh-LLM/mesh-llm · ★ 3.7k ▲134/7d · Rust

Mesh LLM combines GPU capacity and memory across computers behind an OpenAI-compatible API. It can serve a model locally, route requests to another machine, or split model layers when one machine cannot hold the whole model.

Verdict Our Mesh LLM installation failed after 12 seconds before the logged Rust compiler command could execute, leaving inference and clustering unverified. Consider it when peer routing or layer splitting addresses a specific capacity problem and you can reproduce setup on your intended machines.

server

music-assistant/server · ★ 3.3k ▲28/7d · Python

Music Assistant Server is a self-hosted music library and playback hub that connects streaming accounts, local media, and networked speakers. It can run beside Home Assistant for automations or as a standalone Docker service on an always-on machine.

Verdict Our Music Assistant install pulled 147 packages and 1,460 MB, then its tests stopped in 6 seconds on a missing `hass_client` import, so source deployment deserves more caution than the appliance-style install. Use the Home Assistant app or official container if you want one controller for mixed music services and speakers.

TorrServer

YouROK/TorrServer · ★ 3.2k ▲18/7d · Go

TorrServer fetches and caches torrent data, then serves it over HTTP so a media player can start before the whole file downloads. Its main README is in English, while some community discussion is in Russian. It includes a web interface and an MCP endpoint for managing a shared streaming server.

Verdict Our TorrServer run built in 55 seconds and passed all 34 reported Go tests in 31 seconds, making it worth a trial as an HTTP bridge to an existing media player. Use it when you can configure access and verify seeking on your actual devices.

gateway

envoyproxy/gateway · ★ 3.1k ▲13/7d · Go

Envoy Gateway is a control plane that turns Kubernetes Gateway API resources into managed Envoy Proxy deployments and configuration. It gives platform teams a Kubernetes-native way to run application gateways without writing Envoy xDS configuration by hand.

Verdict Our Envoy Gateway run built in 215 seconds, but 5 of 58 Go test results failed, so commit d32f282 did not clear a fresh-container contributor check. It remains a serious choice for Kubernetes teams already committed to Gateway API and Envoy, especially when policy and controller ownership are worth the extra layer.

versitygw

versity/versitygw · ★ 3.1k ▲16/7d · Go

VersityGW puts an S3-compatible API in front of a local POSIX filesystem, ScoutFS, Azure Blob Storage, or another S3 service. It is for teams that have storage already and need software written for S3 to talk to it without replacing the backend.

Verdict Our run of VersityGW installed 174 packages and passed all 60 tests, so the checked-out gateway earned a production trial in front of existing storage. Use it when preserving that backend is the point, then test every client and IAM path you plan to expose.

signal-cli-rest-api

bbernhard/signal-cli-rest-api · ★ 2.9k ▲6/7d · Go

signal-cli-rest-api puts an HTTP API around signal-cli so software can register or link a Signal account, send and receive messages, manage groups, and handle attachments. It solves the awkward job of connecting ordinary web services and automation to Signal through a containerized service.

Verdict Use signal-cli-rest-api when you specifically need a self-hosted HTTP boundary around Signal and accept responsibility for the account, keys, receiving loop, and network security. The API breadth, clear execution modes, recent repository activity, and successful build make it a credible starting point.

Mindwtr

dongdongbh/Mindwtr · ★ 2.4k ▲26/7d · TypeScript

Mindwtr is a free task app that guides people through the Getting Things Done method on desktop, mobile, and the web. It keeps data on the device by default, needs no account for basic use, and adds optional sync, automation, and AI connections when you choose them.

Verdict Our Mindwtr install took 76 seconds and 3,287 of 3,324 tests passed, but 31 timed out, so the packaged app is easier to recommend than its source tree is to modify. Try it if you already want GTD, local ownership, and a choice of sync targets.

itsaplan

croffasia/itsaplan · ★ 2.1k ▲145/7d · TypeScript

It's a Plan, also called Itsaplan, is a self-hosted issue tracker where people and AI agents can receive work on the same project board. It keeps tasks and supporting documents together, with a REST API and an MCP server for outside tools.

Verdict Pilot Itsaplan if assigning issues to agents would solve an existing workflow problem and someone can operate its supporting services. The measured source build succeeded, but the database test task failed without an explained cause.

honk

daeuniverse/honk · ★ 981 · Rust

Honk is an experimental transparent-proxy engine for Linux, written in Rust. Its README documents TCP and UDP capture for LAN-forwarded and host-originated traffic and explicitly warns against production use.

Verdict The recorded honk build at cdc3017 succeeded in 313 seconds, but tests failed with 4 failures out of the reported 2,086, and packet interception remains unverified. Upstream's explicit alpha warning supports evaluation on a recoverable Linux test host.

clash-verge-rev

clash-verge-rev/clash-verge-rev · ★ 155k ▲1.4k/7d · TypeScript

The primary documentation for Clash Verge Rev is written in Simplified Chinese, and a separate English README exists. It is a desktop interface for the Mihomo proxy core, giving Windows, macOS, and Linux users visual control over subscriptions, routing rules, system proxy settings, and TUN mode.

Verdict Our Clash Verge Rev install added 710 packages, but the build failed after 95 seconds because the Linux image lacked gdk-3.0; all 15 tests passed. Download the stable package if you already use Mihomo and want visual profile editing across desktop systems.

v2rayN

2dust/v2rayN · ★ 120k ▲479/7d · C#

v2rayN is a C# desktop client that gives Windows, Linux, and macOS users one interface for proxy engines such as Xray, sing-box, and mihomo. The project's detailed documentation is primarily Chinese; the README includes English alongside Chinese, while the linked wiki pages we read are mostly Chinese. It imports proxy profiles and subscriptions, changes system proxy settings, and applies routing rules so users do not have to configure each engine by hand.

Verdict Our sandbox produced no install, build, or test result for commit 3d50d9f because its C# desktop code had no supported harness or Dockerfile. v2rayN is still a sensible pick for technical desktop users who already own the connection details and value switching among several proxy cores.

Motrix

agalwood/Motrix · ★ 58k ▲196/7d · TypeScript

Motrix is a desktop and self-hosted download manager for HTTP, FTP, BitTorrent, magnet links, and other transfers. Its v2 beta separates the download core from the Electron interface, so the same engine can power a desktop app, a browser handoff, a command-line client, or a NAS web interface.

Verdict Motrix v2 is appealing if you want the same download core on a desktop and a NAS, especially with CLI pairing and plugin isolation. The current beta deserves a separate test environment: its own notes warn about migration, our build found a missing Rust target, and three tests failed.

joplin

laurent22/joplin · ★ 57k ▲73/7d · TypeScript

Joplin is an offline-first notes and to-do app for Windows, macOS, Linux, Android, iOS, and the terminal. It stores notes in Markdown, keeps a local copy on each device, and can sync through Joplin Cloud, Joplin Server, or several third-party storage services.

Verdict Our Joplin source install reached Yarn's link step but did not finish within 900 seconds, so users should favor the packaged apps and contributors should budget for a demanding monorepo setup. Joplin is a strong choice for offline Markdown notes across several platforms, especially when you want to choose the sync target.

lx-music-desktop

lyswhut/lx-music-desktop · ★ 55k ▲153/7d · TypeScript

LX Music Desktop is a Chinese-first desktop music player, and the supplied materials do not show English documentation. Built with Electron 30+ and Vue 3, it gives Linux, macOS, and Windows users one interface for playlists and music sources, while supporting optional private synchronization and local automation.

Verdict Our build completed in 152 seconds after a successful 32-second install. LX Music is a capable choice for technically confident Chinese-reading users who understand custom-source reliability and copyright constraints.

3x-ui

MHSanaei/3x-ui · ★ 49k ▲381/7d · Go

3X-UI is an English-documented, multilingual web panel for configuring and monitoring Xray-core proxy servers. It puts client accounts, traffic limits, subscriptions, routes, and multi-node administration in one browser interface, so a self-hoster does not need to edit every Xray setting by hand.

Verdict Our 3X-UI run installed 250 packages in 33 seconds and built in 7, but 5 of 38 test results failed after 839 seconds. Use it for a personal Xray server only if you already understand the Linux and network work behind the panel and can restore it from backup.

LibreChat

LibreChat-AI/LibreChat · ★ 47k ▲196/7d · TypeScript

LibreChat is a self-hosted web app that puts hosted and local AI models behind one shared chat interface. It adds user accounts, agents, file chat, search, MCP tools, code execution, and admin controls for people who want to run their own alternative to a hosted AI chat product.

Verdict Our LibreChat run installed 2,741 packages and used 2,491 MB, then the `@librechat/api` build failed after 48 seconds, so source deployment needs more investigation than the polished feature list suggests. Use it when several users, model providers, and agent tools justify a six-service chat platform.

hyperswitch

juspay/hyperswitch · ★ 46k ▲177/7d · Rust

Hyperswitch is a self-hosted payment switch that connects a merchant to many processors through one backend. It adds routing, retries, payment-method vaulting, reconciliation, and operational dashboards for companies that have outgrown a single payment provider.

Verdict Our run installed 138 npm packages in 22 seconds with 0 audit findings, but the repository exposed no npm build or test target, so we did not verify the 1.3-million-line Rust payment server. Hyperswitch is worth a serious pilot for a staffed payment team that needs multi-processor routing or direct acquirer control.

logseq

logseq/logseq · ★ 45k ▲57/7d · Clojure

Logseq is a local-first outliner for notes, tasks, linked references, PDF annotations, and personal knowledge bases. It keeps the familiar file-based edition while its newer database edition changes the data model and adds typed properties, collaboration, and an MCP server.

Verdict Our Logseq install pulled 1,151 packages and occupied 834 MB, while its tests stopped after 12 seconds because `clojure` was missing, so contributors should expect a polyglot toolchain rather than a routine Node project. For daily-note users, the stable desktop app remains a capable, private workspace with unusually flexible linking and queries.

headscale

juanfont/headscale · ★ 45k ▲183/7d · Go

Headscale is a self-hosted coordination server for creating one private network with Tailscale clients. It handles the exchange of device keys, assigns network addresses, and tells connected machines which routes and peers are available. The point is to keep that control service under your own administration for a personal lab or small organization.

Verdict Our build succeeded in 130 seconds, but the test step ended with only 9 of 13 packages passing. Headscale is the clearest choice for a technically capable self-hoster who specifically wants Tailscale clients, one tailnet, and control of the coordination server.

Xray-core

XTLS/Xray-core · ★ 42k ▲171/7d · Go

Xray-core is a Go network proxy engine that accepts traffic, applies DNS and routing rules, then sends it through configurable protocols and transports. It solves the packet-handling part of private proxy services and censorship-resistant connections, while leaving the friendly app or control panel to other projects. Its README and official configuration guide are available in English, though much of the latest release commentary and issue discussion is in Chinese.

Verdict Our Xray-core build finished in 76 seconds, but 3 of 80 tested packages failed, so adopting it means owning a real verification job. Use it when an experienced network operator needs its exact mix of VLESS, REALITY, XHTTP, routing, and downstream clients.

ToolJet

ToolJet/ToolJet · ★ 41k ▲25/7d · JavaScript

ToolJet Community Edition is a visual builder for internal applications that connect to databases, APIs, SaaS products, and object storage. Teams assemble interfaces from components, run JavaScript or Python, collaborate on edits, and can host the result on their own infrastructure.

Verdict Our ToolJet checkout was 1,711.1 MB, and its root build failed after 146 seconds without a clear exception in the log tail, while no test target was available. Trial the published container or cloud service if Community Edition's 60-plus components and 80-plus data sources match a real internal app.

open-notebook

lfnovo/open-notebook · ★ 41k ▲428/7d · TypeScript

Open Notebook is a self-hosted research workspace for collecting sources, searching them, chatting with citations, writing notes, and generating multi-speaker podcasts. Its English README links several translations, and it can use hosted providers or local models through Ollama and LM Studio.

Verdict Our Open Notebook run built in 8 seconds and passed 374 tests, but 200 async tests failed before the suite stopped, so the current source path needs repair before production approval. It remains a compelling private NotebookLM alternative for people who value provider choice, podcasts, REST, and MCP access.

posthog

PostHog/posthog · ★ 41k ▲88/7d · Python

PostHog combines product analytics, web analytics, session replay, feature flags, experiments, error tracking, surveys, data pipelines, and AI observability in one platform. It solves the integration problem of sending product data through several separate tools, though the open-source self-hosted edition is explicitly positioned as a hobby deployment.

Verdict Our PostHog install pulled 3,638 packages and occupied 3,679 MB, while the repository exposed no root build or test target, so this is a platform to adopt deliberately rather than a package to try casually. PostHog is a strong fit when analytics, replay, feature delivery, and diagnostics would otherwise become separate contracts and data silos.

postiz-app

gitroomhq/postiz-app · ★ 40k ▲2.4k/7d · TypeScript

Postiz is a self-hosted social media scheduler for drafting, approving, and publishing posts across many networks from one calendar. It gives teams an open-source alternative to hosted tools such as Buffer, with automation through an API, integrations, and MCP.

Verdict Postiz is a credible choice for an agency or technical marketing team that wants a shared scheduler without handing the whole workflow to a SaaS vendor. Its product scope is stronger than its source-checkout test experience: our build passed, while the root Jest command failed before running tests.

infisical

Infisical/infisical · ★ 30k ▲186/7d · TypeScript

Infisical is an open-source security platform for storing, distributing, rotating, and monitoring secrets, certificates, cryptographic keys, and privileged access. It gives engineering and security teams one control plane for sensitive credentials that would otherwise be scattered across deployment platforms, configuration files, and infrastructure tools.

Verdict Our sandbox install succeeded in 10 seconds with 0 known npm vulnerabilities, but it found no root build or test target. Infisical is a serious candidate for teams that want secrets, PKI, KMS, and privileged access under one roof, especially when developer experience matters.

karakeep

karakeep-app/karakeep · ★ 30k ▲188/7d · TypeScript

Karakeep is a self-hosted place to save links, notes, images, and PDFs before they disappear into browser tabs or scattered apps. It fetches useful page details, archives content, makes saved material searchable, and can organize it with automatic tags and summaries.

Verdict Our build succeeded in 117 seconds, but the test command failed after 9 seconds. Karakeep is one of the more convincing self-hosted choices for people whose bookmark collection includes files, highlights, feeds, and automation, not just URLs.

ente

ente/ente · ★ 30k ▲185/7d · Dart

Ente is an open-source, end-to-end encrypted home for photos, two-factor authentication codes, and sensitive documents, with hosted apps and a server you can operate yourself. It solves the privacy problem of storing personal data in the cloud while keeping decryption under the user's control.

Verdict Our run of Ente installed 1,114 Rust packages in 48 seconds, but neither the build nor the test command completed successfully, so source contributors should budget for toolchain repair before productive work. End users get a serious encrypted alternative to mainstream photo storage, plus Auth and Locker, from one active codebase.

srs

ossrs/srs · ★ 29k ▲33/7d · C++

SRS is a self-hosted real-time media server for publishing and playing live video through RTMP, WebRTC, HLS, HTTP-FLV, SRT, MPEG-DASH, and GB28181. It lets one server accept a stream from tools such as FFmpeg or OBS and deliver it through several playback protocols.