Stack Gems
Menu
WorkbenchSkillsLogAbout

290 tools

ToolCatch
CCClaude CodeTerminal-first coding agent with deep repository context
The $200/month Max plan is what serious users need—the cheaper tiers hit limits fast on large codebases. Token consumption on big repositories gets expensive. There is no autocomplete; this is for delegating tasks, not for inline suggestions while you type.
CUCursorThe AI-first code editor that understands your codebase
You are switching editors—VS Code extensions mostly work, but not all. Cursor closes, your background agents stop. The context can drift on very large refactors; you will need to guide it back.
DEDevinAutonomous AI engineer for defined engineering tasks
Loud Catch: Devin is paid. The $500/month price prices out small teams. Success rates drop sharply on vague tickets; this is not a free coding agent.
STStagehandAI-native browser automation that mixes code and natural language
AI calls add latency and cost. The natural-language parts are only as reliable as the underlying model. Debugging AI-driven steps is harder than debugging selectors.
BUBrowser UseOpen-source framework for LLM-driven browser agents
You need browser infrastructure—Browser Use is a framework, not a managed service. Token consumption scales with page complexity. Anti-bot measures will block you without stealth tooling.
BRBrowserbaseManaged browser infrastructure for AI agents at scale
Another service to pay for and depend on. Complex pricing at scale—budget carefully for high-volume workloads. You are outsourcing control over the browser layer.
PMPlaywright MCPOfficial Microsoft MCP server for Playwright browser automation
It is a control interface, not a complete solution. You still need browser infrastructure (local Chromium or Browserbase). No built-in session management, authentication, or scaling.
MEMem0Memory infrastructure for AI agents that actually persists
External dependency for a core capability. Async processing adds latency. Platform optimizations are not in the open-source SDK. You are trusting Mem0 with potentially sensitive user data.
BRBraintrustEval-first LLM platform that blocks bad prompts in CI
Eval-first means observability is secondary—if your primary loop is debugging traces, look elsewhere. Learning curve to build eval datasets that actually represent production.
LALangfuseOpen-source LLM observability you can self-host
Self-hosting means self-operating—you are running Postgres, ClickHouse, Redis, and the app. Observability-first means evals are layered on, not central.
AIAiderAI pair programming in your terminal with any model
You are paying per-token at API rates—can exceed subscription costs on heavy use. No managed infrastructure; you are the ops team. Less polished than commercial alternatives.
CLClineVS Code extension for human-in-the-loop AI coding
Human-in-the-loop means constant interruptions. Large tasks require many approvals. The pace is slower than autonomous alternatives.
LELettaEpisodic memory for agents that think across sessions
More complex to reason about than simple vector retrieval. The paging mechanism adds latency and orchestration overhead. Documentation assumes understanding of the original MemGPT paper.
VAVercel AI SDKUnified TypeScript SDK for building AI applications
Vercel-optimized, which is great on Vercel and requires more work elsewhere. Abstraction means some provider-specific features are harder to access.
LALangChainThe OG LLM orchestration framework
Abstraction layers add complexity. Simple use cases feel over-engineered, and the learning curve is steeper than rolling your own for basic RAG.
LALangGraphStateful multi-actor agent workflows
The abstraction overhead is real. Debugging graph execution requires understanding the underlying state management, and simple agents become verbose.
CRCrewAIRole-playing agents that actually ship
The simplicity cuts both ways. Complex inter-agent communication patterns require workarounds, and you are locked into CrewAI execution model.
HAHaystackProduction NLP pipelines from deepset
Haystack strength is also its constraint. The framework assumes pipeline-based architectures; more exotic agent patterns require workarounds.
LLLlamaIndexData framework for LLM applications
The abstraction layers can be confusing. Index, query engine, retriever, synthesizer—the terminology requires investment to master.
VEVercelThe platform that made Next.js deployment trivial
Vendor lock-in is real, and costs scale with success. Bandwidth and serverless function invocations add up quickly for high-traffic apps.
PRPrismaType-safe database access with killer DX
Abstraction costs. Complex queries sometimes require raw SQL, and the generated client adds bundle size. Performance-sensitive applications need careful query optimization.
DODrizzle ORMTypeScript ORM that feels like SQL
Less magic means more typing. Relation handling requires more manual work than Prisma. The ecosystem is smaller.
TRtRPCEnd-to-end typesafe APIs without codegen
TypeScript only—this is not for mixed-language teams. The tight coupling means you lose the API as a standalone artifact.
CLClerkAuth that actually ships with your UI
Loud Catch: Clerk is a paid auth product with a free tier that evaporates as MAUs grow. You are outsourcing login UI and session logic; customization is the Clerk way or a fight. This is not the OSS auth library.
AJAuth.jsAuthentication for the web, framework-agnostic
You are building the UI, handling edge cases, and managing the infrastructure. Provider quirks require debugging.
UPUploadThingFile uploads that do not make you cry
You are depending on a third-party service for a core feature. Storage costs scale with usage, and egress gets expensive.
REResendEmail API designed for developers
Newer service means less track record. Deliverability depends on your domain reputation as much as theirs. Feature set is smaller than established players.
NENeonServerless Postgres that branches
Cold starts affect latency for scale-to-zero databases. The branching model has a learning curve. Regional availability is limited.
PLPlanetScaleServerless MySQL with Vitess DNA
No foreign key constraints enforced by the database—application-level enforcement required. The Vitess heritage means some MySQL features work differently.
INInngestBackground jobs and workflows with zero infrastructure
Another service dependency. Debugging distributed workflows requires understanding the execution model. Costs scale with function runs.
TDTrigger.devOpen-source background jobs for Next.js
v3 was a significant breaking change. The managed platform costs scale with compute. Self-hosting requires maintaining infrastructure.
FAFastAPIModern Python APIs at startup speed
The ecosystem assumes you will integrate pieces yourself—no batteries-included ORM or auth. Async programming has its own learning curve.
PYPydanticData validation using Python type hints
The v1 to v2 migration was painful—significant API changes broke existing code. Some advanced validation patterns require understanding the internals.
UVuvPython packaging at Rust speed
Relatively new, so edge cases exist. Some older packages with unusual build systems may have issues.
RURuffPython linter faster than your test suite
Not every rule from every tool is implemented. Some teams have strong opinions about specific linter behaviors.
POPolarsDataFrames that respect your CPU
Different API than pandas—existing codebases need rewriting. The ecosystem is smaller; some pandas integrations do not exist.
TYTyperCLI apps with type hints and zero effort
Complex CLI patterns sometimes fight the abstraction. Very dynamic interfaces may need lower-level Click access.
RIRichBeautiful terminal output without the pain
Terminal compatibility varies—some environments render poorly. The feature set is large; learning the full API takes time.
HTHTTPXAsync HTTP client for modern Python
Another dependency when requests works for simple cases. Some requests plugins do not have HTTPX equivalents.
SQSQLModelSQL + Pydantic in one elegant package
Relatively young library, so edge cases exist. Complex SQLAlchemy patterns may need direct SQLAlchemy access.
LILitestarThe FastAPI alternative with batteries
Smaller community means fewer tutorials and Stack Overflow answers. Some FastAPI extensions need equivalents.
TETextualBuild TUIs like web apps
Terminal constraints limit what is possible. Learning curve for the reactive model. Not every terminal renders correctly.
HYHydrogenShopify React framework for headless commerce
You are locked into Shopify architectural choices. Customization beyond their patterns requires deeper knowledge. Oxygen hosting limits deployment options.
RERemixFull stack React that Shopify acquired
The mental model shift from SPA patterns takes adjustment. Some React patterns do not translate directly. The ecosystem is smaller than Next.js.
SASanityHeadless CMS that developers actually like
Another service to manage and pay for. The schema learning curve is real. Heavy customization requires understanding Sanity Studio internals.
SCShopify CLIThe development tool every Shopify dev needs
Occasional bugs with authentication flows. Resource usage can be heavy. Some advanced workflows still require manual setup.
POPolarisShopify design system for embedded apps
Looks out of place outside Shopify admin. Breaking changes between major versions require updates.
CUCheckout UI ExtensionsCustomize Shopify checkout safely
The sandboxed environment limits what is possible. Some desired customizations are not supported by extension points.
GCGraphQL Code GeneratorType-safe Shopify API without manual typing
Configuration complexity for advanced setups. Build step adds friction to the workflow. Large schemas generate large type files.
SAShopify App JSOfficial Node.js library for Shopify apps
Node.js only. Some edge cases require diving into implementation details. Version updates can break existing apps.
SUSupabaseOpen-source Firebase alternative built on Postgres
The all-in-one convenience creates dependency. Complex queries hit performance limits. Self-hosting requires significant operational knowledge.
TUTursoSQLite at the edge with libSQL
SQLite limitations still apply—no concurrent writes from different regions. The embedded replica model has a learning curve. Less battle-tested than Postgres.
RERedisThe in-memory data store everyone uses
Memory-bound storage is expensive at scale. Persistence options have tradeoffs. The licensing changes caused uncertainty. Clustering adds complexity.
UPUpstashServerless Redis and Kafka
HTTP adds latency compared to native Redis protocol. High-throughput workloads get expensive. Some Redis features are not available.
PIPineconeVector database for AI applications
Vendor lock-in for a core AI capability. Costs scale with vector count and queries. Self-hosting is not an option.
QDQdrantOpen-source vector database with filtering
Operational burden of self-hosting. Smaller ecosystem than Pinecone. Some advanced features require understanding internals.
CLClickHouseColumn-oriented database for analytics
Not a general-purpose database—updates and deletes are expensive. Operational complexity for self-hosting. The learning curve for optimal schema design is steep.
TITimescaleTime-series superpowers for Postgres
Adds complexity to Postgres operations. Some hypertable features have limitations. The learning curve for optimal performance is real.
DUDuckDBIn-process OLAP database
Not for OLTP workloads—it is analytics-focused. Single-node limits apply. Less ecosystem than traditional databases.
SQSQLiteThe most deployed database in the world
Single writer at a time limits write concurrency. Not designed for network access. Feature set is smaller than Postgres.
GAGitHub ActionsCI/CD that lives where your code does
YAML syntax has a learning curve. Debugging failed workflows is frustrating. Costs scale with build minutes. Complex workflows become hard to maintain.
DODockerContainer runtime that changed deployment
Resource overhead compared to native. Security requires attention. Desktop licensing changes affected teams. Image size management is ongoing work.
KUKubernetesContainer orchestration at scale
Complexity is legendary. Small teams often do not need it. Operational burden is significant. The YAML can become unmanageable.
TETerraformInfrastructure as code that actually works
State management requires care. The licensing change to BSL concerned some users. HCL has quirks. Complex modules become hard to debug.
PUPulumiInfrastructure as code in real languages
Smaller ecosystem than Terraform. Learning curve for infrastructure patterns. The state service is a dependency unless self-hosted.
FIFly.ioDeploy apps to VMs close to your users
More operational than PaaS alternatives. Pricing requires understanding. Some features are less polished. The free tier has limitations.
RARailwayDeploy from GitHub with zero configuration
Less control than VMs or containers. Pricing scales with usage. Customization options are limited. Some workloads do not fit the model.
COCoolifySelf-hosted Heroku alternative
Self-hosting means self-operating. Some features are less polished than commercial alternatives. Single-server focus limits scale.
CACapRoverFree PaaS you can run anywhere
Documentation assumes Docker knowledge. Some advanced features require manual configuration. Less active development than alternatives.
TCTailwind CSSUtility-first CSS that developers love
HTML becomes verbose. The utility-first paradigm requires adjustment. Complex components need extraction. Some designers find it limiting.
SUshadcn/uiCopy-paste components built on Radix
You own the code, including the maintenance. Updates require manual copying. The paradigm differs from traditional component libraries.
RURadix UIUnstyled, accessible React components
Styling from scratch takes time. Learning the API requires investment. Some components have quirks.
FMFramer MotionProduction-ready React animations
Bundle size is not negligible. Complex animations require understanding the system. Performance needs attention on mobile.
FIFigmaCollaborative design tool in the browser
Subscription costs add up. Adobe acquisition raised concerns. Offline access is limited. Large files can lag.
STStorybookUI component workshop
Configuration complexity grows. Build times can be slow. Keeping stories updated requires discipline.
LULucideBeautiful open-source icons
Style might not fit every project. Some niches have gaps. Customization requires understanding SVG.
PCPanda CSSCSS-in-JS with build-time extraction
Different mental model from both Tailwind and traditional CSS-in-JS. Ecosystem is younger. Migration from other solutions takes work.
SESentryError tracking that actually helps
Event volume drives cost. Self-hosting is complex. Some features are enterprise-gated. Alert noise requires tuning.
GRGrafanaDashboards for everything observable
Dashboard sprawl becomes a maintenance burden. Learning PromQL or LogQL takes time. Self-hosting requires infrastructure.
PRPrometheusTime-series metrics for cloud-native
Single-node storage limits scale. PromQL has a learning curve. High cardinality labels cause problems.
OPOpenTelemetryVendor-neutral observability framework
The specification is complex. Implementation maturity varies by language. Configuration requires understanding the model.
DADatadogUnified observability platform
Expensive at scale—costs surprise teams. Vendor lock-in is significant. Feature creep makes the platform complex.
AXAxiomLog management without limits
Younger platform than alternatives. Some enterprise features are missing. The ecosystem is smaller.
BSBetter StackUptime monitoring and incident management
Multiple products mean multiple things to learn. Pricing across products adds up. Some features overlap with other tools.
HIHighlight.ioOpen-source session replay and monitoring
Newer than established players. Self-hosting requires significant infrastructure. Some features are less mature.
RURustSystems programming without the footguns
The learning curve is steep. Compile times are slow. Fighting the borrow checker is frustrating at first.
TOTokioAsync runtime for Rust
Async Rust has a learning curve. Stack traces are confusing. Some patterns from other languages do not translate.
AXAxumWeb framework from the Tokio team
Less batteries-included than frameworks like Actix. Error messages can be cryptic. Some patterns require boilerplate.
AWActix WebFast Rust web framework
Macro-heavy API differs from idiomatic Rust. The actor foundation is not always needed. Some community history caused concern.
SESerdeSerialization framework for Rust
Compile times increase with heavy use. Error messages can be confusing. Some edge cases require manual implementation.
SQSQLxCompile-time checked SQL for Rust
Compile-time checking requires database connection. Migration story is simpler than some alternatives. Complex queries need understanding.
TATauriBuild desktop apps with web tech and Rust
Webview inconsistencies across platforms. Rust learning curve for backend code. Younger ecosystem than Electron.
LELeptosFull-stack Rust web framework
WASM ecosystem is still maturing. Debugging can be challenging. Smaller community than JavaScript frameworks.
CLclapCommand line argument parser for Rust
Compile times increase with complex CLIs. Some advanced patterns require builder API. Error messages could be clearer.
OCOpenAI Codex CLITerminal coding agent from OpenAI
The CLI is open-source, but the frontier models powering it sit behind ChatGPT Plus, Pro, or Enterprise subscriptions. You are paying OpenAI either way. Feature parity with Claude Code is still catching up.
GOGooseLocal-first Rust agent with MCP at its core
General-purpose agent means you configure it for your use case. You bring the model—Goose is the runtime, not the intelligence. Documentation is still maturing.
OPOpenHandsSelf-hostable autonomous software engineer
Heavier than lighter agents like Goose. Self-hosting autonomous agents requires infrastructure and monitoring. The autonomy that makes it powerful also makes debugging failures harder.
O2OpenClaw 2.0Coding and personal agent across 29 messaging channels
Huge security surface. Every connected channel is a potential attack vector. You are trusting OpenClaw with access to your messaging platforms and the code it writes. Evaluate carefully for sensitive work.
N2Needle 214MB on-device tool-calling model
Not a chat LLM. Needle does one thing: parse user intent into tool calls. You still need the tools and the orchestration around it. Do not expect conversation or reasoning.
MAMastraTypeScript agent runtime with typed agents and workflows
Framework, not a coding CLI. Mastra helps you build agents; it is not an agent itself. Learning curve for the runtime concepts. You are committing to their abstractions.
E2E2BFirecracker sandboxes for untrusted agent code
Hosted by default. You are sending code to E2B infrastructure. Self-hosting is possible but requires more work. Another external dependency in your agent stack.
COConvexReactive TypeScript backend with real-time sync
Not Postgres. Convex has its own data model and query language. Migration from existing databases requires rethinking your data layer. Chef (their AI feature) was deprecated. Vendor dependency is real.
GCGemini CLIGoogle open-source terminal agent powered by Gemini
Gemini-bound lock-in—not model-agnostic like Goose or Crush. Consumer cutoff 2026-06-18: free/Pro/Ultra access dies; enterprise and API keys stay. Do not bet a workflow on the old Google-login quota path. The OSS CLI remains. Antigravity CLI is the successor, not a 1:1 swap. Preview/nightly channels move fast; pin stable for production workflows. Enterprise path pushes you toward Vertex AI and Google Cloud project setup.
CDChrome DevTools MCPOfficial Chrome DevTools as an MCP server for coding agents
chrome-devtools-mcp@1.8.0 engines: "^20.19.0 || ^22.12.0 || >=23". 20.16 and 20.17 fail; 20.19 LTS is in engines. “Node ≥ 22.12” and “Node 20 fails” are both too blunt — README “LTS” is marketing; engines is the catch. A CLI is provided for use without MCP; official CLI docs call it experimental. Complementary to Playwright MCP already on the catalog—DevTools-grade traces, Lighthouse, heap snapshots, and --autoConnect, not a generic scraper or a Playwright replacement. Officially supports Google Chrome and Chrome for Testing only. Exposes browser content to the MCP client—do not point it at sensitive sessions. Usage statistics on by default (opt out with --no-usage-statistics). Needs a current Chrome.
CRCrushCharm-grade TUI coding agent with LSP and mid-session model switch
Licensed FSL-1.1-MIT (competing-use restriction; source-available; MIT after two years—not OSI open-source). Pre-1.0 energy—config is migrating from JSON to crushrc Bash. Not a fully autonomous SWE agent like OpenHands; you stay in the loop. Hyper is Charm own model path if you want a subscription. Metrics on by default (DO_NOT_TRACK / CRUSH_DISABLE_METRICS to opt out).
PAPydantic AITyped Python agent loop with a snap-on Coder harness
ACP (Agent Client Protocol, for editors like Zed) is experimental: it lives under pydantic_ai_harness.experimental.acp, may change or be removed in any release without a deprecation period, and importing it emits HarnessExperimentalWarning. Coder is a capability you assemble, not a turnkey SWE agent like OpenHands. Logfire is the convenient observability path; OpenTelemetry works with any backend. Do not confuse this gem with Pydantic validation.
WOWorktrunkGit worktrees that spawn an agent in one switch
On Windows, `wt` is Windows Terminal's command. The installer ships `git-wt` to avoid the collision (`winget install max-sixty.worktrunk` then `git-wt config shell install`); you can also disable the Terminal app-execution alias. Project hooks require first-run approval. This is worktree plumbing, not a coding agent.
ABagent-browserVercel Labs Rust CLI with compact a11y refs for agents
Default idle timeout is about one hour: the headless daemon shuts down and discards transient tabs/state unless you passed `--restore` (or another restore key). Headed, Safari/iOS WebDriver, and user-attached browsers are exempt; cloud-provider browsers are not. Tune with `--idle-timeout` or `AGENT_BROWSER_IDLE_TIMEOUT_MS`; `0` disables. This is CDP Chrome, not stealth—anti-bot pages will still block you.
POPostHogProduct analytics, flags, replay, and errors in one MIT-core stack
ee/ is a separate proprietary license. posthog-foss strips it if you need a clean MIT tree. Self-hosting is a Postgres + ClickHouse ops job. Cloud is usage-metered after the free allowances; replay is usually the line that bites first.
BABetter AuthTypeScript auth that lives in your app, not a rented IdP
The library is free; dashboards, audit, and SSO add-ons are the paid wedge. Starter audit retention is 1 day. This is not a hosted IdP — you still own the database and the incident.
HOHonoTiny TypeScript web framework that runs on every runtime
Not Next.js. No filesystem router, no RSC, no batteries. You bring auth, ORM, and deploy. The Cloudflare-first energy is real — Node works, but the happy path is an edge runtime.
SCStripe CLIOfficial Stripe terminal for webhooks, events, and API objects
The CLI is free; card charges are not. See stripe.com/pricing for processing rates. Live mode needs a real secret. Dispute fees are on Stripe, not on this binary.
NTntfyHTTP pub-sub notifications you can curl from cron
Anonymous topics are passwords — guessable names leak other people's alerts. Public ntfy.sh rate-limits; reserved topics need Pro. Dual license means you pick Apache-2.0 or GPLv2, not Apache-only.
PHPhaserMIT HTML5 2D game framework with scenes, physics, and tilemaps
Phaser 4 replaced the v3 renderer/FX/mask stack — v3 games need the migration guide. Phaser Editor is a separate commercial desktop product, not the OSS engine. The homepage can Cloudflare-gate a raw fetch; docs and GitHub are the source of truth.
POPolarApache-2.0 merchant-of-record billing for indie and AI products
No first-party CLI in the docs index — SDKs, MCP, and API only. Starter take-rate sits on top of card-brand costs. Polar is MoR, so you do not keep the Stripe account relationship. International cards add extra. Payouts have their own cut.
POPocketBaseSQLite backend, auth, and admin UI in one Go binary
SQLite is the database. Concurrent writes and multi-region are not the product. There is no official hosted PocketBase Cloud. You run the binary, you own backups, you own the disk filling up.
BIBiomeRust formatter and linter that replaces Prettier plus ESLint
Not a 1:1 ESLint plugin ecosystem. Some rules and framework plugins do not exist yet. Dual-license is MIT OR Apache-2.0 at your option — there is no single LICENSE file at the repo root.
KAKamalDeploy Docker containers to your own VMs with one CLI
You still run Docker hosts. This is not a PaaS. Networking, disks, and what-if-the-VM-dies remain your problem. Kamal 2 changed proxy defaults — read the current docs, not a 2024 blog post.
N8n8nFair-code workflow automation you can self-host
Sustainable Use License is not OSI. Use and modification: internal / non-commercial / personal. Distribution only free of charge for non-commercial purposes. Files with .ee. in the name need a separate Enterprise License. Do not call it open source.
HYHyperswitchApache-2.0 payment orchestrator you can self-host
Community Edition means you run PCI scope. Cloud and Self-Host Enterprise are Contact Us. The 500+ global enterprises line is Juspay production experience, not a Hyperswitch-customer logo wall.
LOLogtoMPL-2.0 identity platform with a 50k-MAU free Cloud
Cloud Free is for starting out. Passkeys, hiding branding, orgs, MFA, and enterprise SSO live as Pro add-ons. MPL-2.0 is file-level copyleft, not MIT.
SUSuperTokensApache-2.0 session auth you can self-host with no MAU cap
Three processes, not a single library. ee/ is not Apache. Cloud is MAU-metered; MFA and account-linking have 100 USD/month minima on Cloud. Read the carve-out before you assume the whole repo is Apache-2.0.
NONovuMIT notification workflows with a real 0 USD Cloud
The default GitHub branch is next, and GET /LICENSE there 404s. Open-core: enterprise/, apps/web/src/ee, and apps/dashboard/src/ee are commercial. Self-hosted deployment on the pricing page sits under Enterprise. Free Cloud caps 10K runs, 20 workflows, 24h retention.
LILiveKitApache-2.0 realtime rooms, SFU, and agents
Self-hosting an SFU is ops-heavy. Cloud pricing was unverified, so no Cloud Build $0 claim and no monthly allowance numbers. Do not assume Cloud is free.
CHChatwootMIT-core support inbox you can self-host for $0/agent
SSO, roles, Captain AI, and voice live in paid/enterprise directories — MIT does not cover enterprise/. Cloud paid plans also lead with a 15-day trial. Hacker is live-chat-only.
SISocket.IOMIT realtime library with fallbacks, not a hosted product
You bring the host. Horizontal scale needs Redis (or equivalent) adapter. This is not LiveKit and not a managed pub-sub. CORS, sticky sessions, and polling surprises remain your bugs.
LIListmonkAGPL-3.0 self-hosted newsletters and transactional mail
AGPL-3.0 is copyleft — network use means you share modifications. You operate Postgres, SMTP, and bounces. There is no official hosted Listmonk Cloud.
PIPixiJSMIT 2D WebGPU/WebGL renderer, not a game engine
A renderer, not a game engine. Bring physics, audio, scenes, netcode. If you wanted Phaser, this is the wrong layer.
BJBabylon.jsApache-2.0 3D engine for the web, now on v9
Heavier than a 2D starter. docs.babylonjs.com (with an s) has returned 500; working docs host is doc.babylonjs.com. Editor pricing was not verified here, so it is omitted.
PLPlayCanvasMIT WebGL2/WebGPU engine plus an optional hosted Editor
Do not conflate the MIT engine with the hosted Editor. Private cloud projects are the paid line (Personal 15 USD/month; Organization 50 USD per seat/month). Cancel and private projects lock until you resubscribe or make them public.
COColyseusMIT Node multiplayer rooms with state sync
A server framework, not a renderer. Colyseus Cloud has no free tier — it starts at 15 USD/mo. Capacity depends on your code, not a marketed CCU cap.
KAKAPLAYMIT successor to Kaboom for playground-first 2D games
Two lines: stable v3001 vs v4000 still alpha. Official host is kaplayjs.com, not kaboomjs.com. Named homepage titles are testimonials, not a studio showcase.
ORoRPCMIT end-to-end typed TypeScript RPC
TypeScript-first. Not a drop-in for every tRPC plugin. You still choose the HTTP server (Hono, Next, etc.). Do not confuse it with a backend-as-a-service.
SSSSTMIT infrastructure-as-code for AWS, with live Lambda dev
AWS-shaped. Other clouds are not the happy path. You still pay AWS. The Ion/v3 cut left a trail of outdated v2 tutorials — read current sst.dev docs.
ZEZedGPL-3.0 GPU-accelerated editor with first-party agents
GPL-3.0 is copyleft, not MIT. Hosted agent features that talk to Zed's models are a product on top of the editor — this review does not invent a Cloud free tier. Web is not shipped.
MIMiseMIT polyglot runtime manager, the asdf successor that is fast
Not a container runtime and not direnv-only. Some asdf plugins still assume bash. Team-wide adoption means every laptop runs mise, or CI drifts.
DADaggerApache-2.0 CI as containers, programmable in your language
You need Docker or a compatible engine. Rewriting mature CI YAML is a project, not an afternoon. Dagger Cloud is a separate product — this review does not invent its free tier.
EXExcalidrawMIT virtual whiteboard with the hand-drawn look
plus.excalidraw.com is a separate commercial product for teams. This review does not treat Plus as OSS. The OSS app is a drawing surface, not a full design system.
TITigerBeetleApache-2.0 financial-transactions database, not general OLTP
Not a Postgres replacement. No ad-hoc SQL, no JSON documents. Clustered replicas. If you needed a general database, this is the wrong gem.
BEBentoMIT slide decks as a single HTML file
Reveal.js-based. This is slides-for-agents, not an office suite. Not BentoML and not bentonow.com.
KBKill BillApache-2.0 in-house subscriptions and payments, no % take-rate
JVM and ops-heavy. Aviate is the proprietary accelerator — not the Apache tree. Self-Hosted OSS Free; AWS Marketplace is ~$40/mo plus the AWS bill. No revenue tiles here because there is no % of revenue to quote.
LALagoAGPLv3 usage and entitlements metering you self-host
Loud: Premium is Contact us. There is no $0 Lago Cloud. Self-host is the free path; Cloud and Premium are quotes. AGPLv3 is network copyleft.
PLPlunkAGPL-3.0 transactional email, workflows, and broadcasts
AGPL-3.0 is copyleft. Hosted Free keeps Plunk branding. This is not Resend at volume — 1k/mo is the free wall, then $0.001/email. Self-host means you bring SES or equivalent.
CECentrifugoApache-2.0 Go realtime server binary, not in-process Socket.IO
You run it. This is not Socket.IO in-process. Cloud/PRO SKUs were unverified here — no invented Cloud prices. Ops, clustering, and Redis when you scale stay yours.
APAppriseBSD-2-Clause CLI that talks to a hundred notifiers
Not a hosted inbox. There is no pricing page — that is the path. You bring every backend (SMTP, Slack tokens, Twilio). This is a notifier, not ntfy and not Novu.
AUauthentikMIT-core self-hosted IdP; enterprise/ is not MIT
enterprise/ is not MIT — EE license, paid seats. No hosted hatch: goauthentik.io/pricing says they do not currently provide a hosted version. You run Postgres and the stack.
HAHankoAGPLv3 passkeys-first auth with a 10k-MAU free Cloud
Split licenses: backend AGPLv3, Elements and frontend SDKs MIT. Cloud Starter Free 10k MAU is the wall — after that you pay. Cloud Console is closed source. AGPL on the API is network copyleft.
HJhowler.jsMIT audio sprites for the browser, tagged 2.2.4 in 2023
Quiet since September 2023. Stale LICENSE copyright year -- live MIT line, not a ghost. No Used-By names.
ZIZITADELAGPLv3 identity Cloud at US$0/Month — 100 DAU, not Logto 50k MAU
Loud: the wall is 100 DAU, not Logto 50k MAU. AGPLv3 is network copyleft — Cloud or self-host, the license is loud. Pro is US$100/Month for 25k DAU. Distinct from Hanko passkeys-first Cloud and authentik no-hosted-hatch.
KIKindeHosted auth plus billing, $0 forever, 10,500 MAU, no OSS
Not self-host. Kinde branding stays on Free. SMS is 10 included. Pro is $25/mo to uncap MAU and drop branding. Distinct from Polar (Apache MoR, not an IdP) and Clerk (auth UI, no 0.7% billing take-rate on Free).
AUAutheliaApache-2.0 reverse-proxy SSO, not a full IdP like authentik
You run it behind Traefik/Caddy/nginx. Thin proxy SSO, not a full IdP like authentik (flows, LDAP/RADIUS/SAML, enterprise/). No hosted Authelia Cloud. Ops, the user store, and the proxy stay yours.
LILiveblocksHosted collab rooms; Free $0 pauses at the cap
Free pauses at the cap until the next cycle — not PAYG. Pro is $30/mo (credits + drop branding). Self-host is an Enterprise add-on, not the OSS path. Distinct from Socket.IO (you run the server) and Centrifugo (Go binary you operate).
YJYjsMIT CRDT library, not a hosted collab product
Not a product. No hosted SKU, no pricing page, no support SLA. You bring the network layer (Liveblocks, y-websocket, your own). Distinct from Socket.IO: CRDT merge, not event fan-out.
GOGotifyMIT self-host push server; Android-first, no ntfy.sh twin
No public hosted twin like ntfy.sh. Android-first client, not a public pub-sub host. Distinct from ntfy (public ntfy.sh + dual license) and Apprise (CLI fan-out, no inbox).
MJMatter.jsMIT 2D rigid-body physics, not a Phaser replacement
Loud: Phaser already ships Matter physics. If you are on Phaser, you already have this. This gem is for Pixi/KAPLAY/canvas, not a second physics stack inside Phaser. Distinct from Phaser (full engine) and howler.js (audio sprites).
BSBTCPay ServerMIT self-hosted Bitcoin/LN, 0% fees to your wallet
Bitcoin and Lightning to your wallet — not card rails, not a PSP. Distinct from Polar (MoR cards) and Hyperswitch (card orchestration). You operate a node. Network miner fees still exist.
MEMedusaMIT commerce OS you self-host; Cloud from $29/mo
Commerce OS, not invoices and not card rails. Cloud From $29/mo is not a $0 hobby hatch — self-host is the free path. Distinct from Polar/Hyperswitch (payments) and from Lago (metering).
PRpretixAGPL-3.0-with-additional-terms event tickets and POS
Loud additional terms: SaaS restrict (do not offer pretix as a service to third parties), footer attribution must stay, modified versions must not look official. Event tickets+POS, not subscriptions. Distinct from Polar (SaaS billing) and Lago (usage metering).
OPOpenMeterApache-2.0 usage-event metering; Cloud is Kong Konnect now
Cloud is now Kong Konnect Metering — do not reprint Kong tiles. Distinct from Lago: usage-event metering first, not AGPL usage-billing with no hobby cloud. Compose is a local evaluation stack (Kafka/ClickHouse), not production topology.
KEKeycloakApache-2.0 CNCF-incubation Java IAM: OIDC, OAuth, SAML, LDAP
CNCF Java IAM, OIDC+OAuth+SAML+LDAP. Distinct from authentik (MIT-core Python, no hosted hatch, enterprise/ carve-out). You run a JVM and a database. There is no $0 Keycloak Cloud on the project site.
DEDexApache-2.0 federated OIDC IdP that owns no user state
Protocol adapter, not a user directory and not a proxy gate. Distinct from Authelia (reverse-proxy SSO) and from authentik/ZITADEL/Keycloak (they store users). Dex owns no user state. You still need an upstream IdP.
SOSoketiAGPL-3.0 Pusher Protocol v7 server you run yourself
Drop-in Pusher-protocol server, not Socket.IO in-process and not Centrifugo language-agnostic PUB/SUB. AGPLv3 is network copyleft. Hosted plans were not verified here — none invented.
MEMercureAGPL-3.0 SSE hub; homepage still says MIT
Homepage still says the Hub is MIT-licensed. The LICENSE file is AGPL-3.0 — print the file. SSE, not WebSockets, not Pusher protocol. Distinct from Socket.IO and Soketi. Cloud/Enterprise exist; do not invent prices. OSS self-host is the free path.
SCSpree CommerceBSD-3-Clause Ruby commerce OS; Free Sandbox, no platform fees
Ruby commerce + REST/OpenAPI + Next.js storefront — not Medusa MIT Node OS. Solidus (BSD sibling) omitted: same Spree-fork slot. Distinct from Medusa.
SYSyliusMIT Symfony commerce; Plus is the commercial add-on
Symfony + API Platform PHP headless — not Medusa MIT Node OS and not JS. Distinct from Medusa and Spree. Plus is commercial; do not invent rates.
KAKanidmMPL-2.0 Rust IdP aiming to replace needing Keycloak
Rust IdP aiming to replace needing Keycloak — not the Java CNCF suite. Distinct from Keycloak (Apache-2.0 JVM IAM). You still operate the box.
NANATSApache-2.0 subject-based messaging and streaming fabric
Subject-based messaging/streaming fabric — not an in-process WS lib and not a Go realtime binary alone. Distinct from Socket.IO and Centrifugo.
ANAnyCableMIT realtime for Action Cable with delivery guarantees
Delivery guarantees + presence + Action Cable / multi-backend — not a Pusher-protocol server. Distinct from Socket.IO and Centrifugo. Pro and Managed exist; prices not reprinted here.
MEmediasoupISC embeddable SFU as a Node module or Rust crate
Embeddable media router as Node module/Rust crate — not LiveKit rooms/agents product. Distinct from LiveKit.
MEmelonJSMIT 2D engine: WebGPU to WebGL2 to Canvas AUTO, zero deps
WebGPU to WebGL2 to Canvas AUTO and Canvas2D-shaped API — not Phaser scene/plugin ecosystem. W4 cut re-opened. Distinct from Phaser, KAPLAY, and PixiJS.
TJTone.jsMIT Web Audio: synths, Transport, effects, sample-accurate
Synths/Transport/effects/sample-accurate scheduling — not audio-sprite playback. W4 cut re-opened. Distinct from howler.js.
INInvoiceShelfAGPL-3.0 self-host invoices, estimates, expenses, client portal
SMB invoices/estimates/expenses/portal + Stripe on your server — not Kill Bill/Lago subscription orchestration or usage metering. Crater cut re-opened as InvoiceShelf. Distinct from Kill Bill and Lago.
BABagistoMIT Laravel/Vue commerce with marketplace and B2B
Laravel/Vue commerce + marketplace/B2B — PHP twin to Medusa, not Medusa MIT Node OS. Sylius and Spree already cover Symfony/Ruby in Wave 5. Distinct from Medusa.
PRPrestaShopOSL-3.0 classic PHP cart; pitch the core, not the module store
Loud: installer may bundle optional SA commercial modules — pitch core only. Classic PHP cart, not headless Node (Medusa) and not Magento (HOLD). Distinct from Medusa, Bagisto, Sylius, Spree.
CECerbosApache-2.0 authZ PDP: YAML policies, run anywhere
authZ YAML PDP — not authentik/Keycloak/Better Auth authN/IdP. Do not reprint Hub prices; self-host PDP is the free path. Distinct from authentik, Keycloak, and Better Auth.
OPOpenFGAApache-2.0 Zanzibar-style ReBAC with a Check API
Zanzibar-style ReBAC + Check API — not Cerbos YAML ABAC. Vs SpiceDB: CNCF/Okta OpenFGA modeling + Check API lane; SpiceDB is AuthZed production Zanzibar + ZedTokens/Cloud. Distinct from Cerbos.
PEPeerJSMIT browser P2P WebRTC with free cloud or self-host signaling
Browser P2P WebRTC + optional free signaling — not LiveKit/mediasoup media-server rooms. Larger groups need a media server (SFU-class), not PeerJS alone. Distinct from LiveKit and mediasoup.
RARapierApache-2.0 Rust/WASM physics: 2D+3D, joints, SIMD
Rust/WASM 2D+3D with joints/SIMD/optional determinism — Matter.js is MIT 2D only. Planck HOLD (same 2D JS slot as Matter). Distinct from Matter.js.
MAMauticGPL-3.0 self-host marketing automation; hosted trial is not free
Marketing automation — not Listmonk newsletter/tx alone. Hosted 14-day trial is NOT the free path; self-host is. Distinct from Listmonk.
TOTopazApache-2.0 authZ: OPA Rego + embedded Zanzibar in one container
One container = OPA Rego + embedded Zanzibar directory (ABAC+ReBAC) — not Cerbos YAML-only PDP and not OpenFGA ReBAC-only Check API. Distinct from Cerbos and OpenFGA.
PWPion WebRTCMIT embeddable Go WebRTC library — not a rooms product
Embeddable Go library — not LiveKit rooms product, not mediasoup C++/Node media server, not PeerJS browser-only P2P helper. You assemble signaling and any SFU-class topology yourself. Distinct from LiveKit, mediasoup, and PeerJS.
JGJanus GatewayGPL-3.0 plugin-core WebRTC gateway (SIP, VideoRoom, streaming)
Plugin-core C gateway — not LiveKit/mediasoup opinionated rooms products. You pick plugins and ops the gateway. Distinct from LiveKit, mediasoup, PeerJS, and Pion.
SOSocketClusterMIT Node pub/sub+RPC+JWT with SCC scale-out
Node pub/sub+RPC+JWT+SCC scale-out — not Socket.IO library-only, not Soketi Pusher-protocol, not Centrifugo Go hub, not NATS messaging, not AnyCable Rails WS. Distinct from Socket.IO, Soketi, Centrifugo, NATS, and AnyCable.
INInkvoiceMIT freelancer invoicing; self-host primary, tiny Cloud Free
Freelancer invoicing — not InvoiceShelf SMB suite, not Kill Bill subscription OS, not Lago usage metering. Distinct from InvoiceShelf, Kill Bill, and Lago.
EDEdgepushAGPL server + MIT SDK: BYO APNs/FCM on Cloudflare Workers
BYO APNs+FCM on Cloudflare Workers — not ntfy/Gotify self-host pub/sub, not Novu workflow orchestration. Server is AGPL; pitch self-host or Hosted Free caps. Distinct from ntfy, Gotify, and Novu.
DEDefoldSource-available Lua game engine; forever free, not OSI Open Source
LOUD: source-available NOT OSI Open Source — §4a may not commercialize as a Game Engine Product. Forever free for making games; license is not MIT/Apache. Vs Phaser/melonJS/KAPLAY JS engines. Distinct from Phaser, melonJS, and KAPLAY.
SHShoveMIT end-to-end Go device-push relay
Edgepush server is AGPL; Shove is MIT end-to-end Go. Device-push relay — not ntfy/Gotify general pub/sub, not Novu multi-channel workflows. Distinct from Edgepush, ntfy, Gotify, and Novu.
POPostalMIT self-hosted mail delivery: SMTP + HTTP API
Self-hosted mail delivery SMTP+HTTP API — not Resend hosted tx email, not Plunk Node email, not Listmonk newsletter app. You own deliverability and IP reputation. Distinct from Resend, Plunk, and Listmonk.
HRHyvor RelayAGPL-3.0 email relay; Self-Hosted Free Forever unlimited
Do NOT claim Cloud free. Self-host unlimited is the pitch. Vs Postal full mail server and Plunk Node email. Distinct from Postal and Plunk.
CFCute Frameworkzlib/Unlicense C/C++ native-first framework + Emscripten
C/C++ native-first + Emscripten — not Phaser/KAPLAY JS engines. Full framework — not Pixi/Babylon/PlayCanvas renderer-or-editor slots alone. Distinct from Phaser, KAPLAY, Pixi, Babylon, and PlayCanvas.
GOGodotMIT engine with HTML5/Wasm+WebGL2; Compatibility mode for embeds
Loud: Compatibility/WebGL2 only for web; threaded export needs COOP/COEP — single-thread default since 4.3 for embeds. Not Phaser JS canvas. Distinct from Phaser.
UNUnleashAGPLv3 feature flags; OSS caps 1 project / 2 environments
Loud: OSS caps Projects 1 / Environments 2. Cloud = Enterprise trial FAIL — pitch self-host only. Vs PostHog dedicated-flags-inside-analytics. Distinct from PostHog.
FLFlagsmithBSD-3-Clause flags; Cloud Free 50k req/mo, self-host uncapped
Cloud Free is capped (50k/1 seat/1 project); self-host uncapped. Vs PostHog analytics-native flags and Unleash AGPL OSS caps. Distinct from PostHog and Unleash.
GRGrowthBookMIT-core flags+experiments; Cloud Starter Free, self-host unlimited users
Warehouse-native experimentation competitor to PostHog — different pitch (flags+experiments first). Cloud Starter Free has user/project caps; self-host OSS uncapped users. Distinct from PostHog.
WOWorkOSProprietary AuthKit: first 1M MAUs Free — LOUD not OSS
LOUD: proprietary — not OSS. Vs Clerk/Logto/Kinde/Hanko/Better Auth. Free MAU band is the pitch; paid enterprise features exist — do not invent numbers. Distinct from Clerk, Logto, Kinde, Hanko, and Better Auth.
DEDescopeProprietary auth: Free Forever 7500 MAUs / 10 tenants / 3 SSO
LOUD: proprietary — not OSS. Free Forever caps are real; above them is paid. Vs Clerk/Logto/Kinde/WorkOS/Hanko/Better Auth. Distinct from Clerk, Logto, Kinde, WorkOS, Hanko, and Better Auth.
CACasdoorApache-2.0 UI-first IdP; Hosted Free 25k MAU, self-host primary
UI-first IdP — vs Keycloak/authentik/Kanidm/Logto/Hanko/Zitadel. Hosted Free 25k MAU; self-host uncapped. Distinct from Keycloak, authentik, Kanidm, Logto, Hanko, and Zitadel.
LRLaravel ReverbMIT first-party Laravel WebSocket server
First-party Laravel WS — not Soketi Pusher-protocol, not Centrifugo Go hub, not AnyCable Rails, not Socket.IO library, not Mercure SSE. Distinct from Soketi, Centrifugo, AnyCable, Socket.IO, and Mercure.
TUTuwunelApache-2.0 Matrix homeserver; official conduwuit successor
Official conduwuit successor — Conduit is still beta; do not dual-KEEP Conduit. Matrix homeserver slot, not a generic WS product. Distinct from LiveKit/Soketi-style realtime.
BEBevyMIT/Apache Rust ECS engine with first-party Web
Rust ECS + first-party Web — not Phaser/Pixi/Babylon/PlayCanvas JS engines. Steeper Rust learning curve. Distinct from Phaser, Pixi, Babylon, and PlayCanvas.
TETextbeeMIT Android SMS gateway; Hosted Free 1 device/50 msgs/day
Android phone must stay online; not iOS. SMS hole vs Twilio trials — you own the handset and carrier, not a cloud number product. Distinct from Twilio-class CPaaS.
HEHeapsMIT Haxe+HashLink engine; HTML5/WebGL; Dead Cells stack
Haxe+HashLink HTML5/WebGL — not Phaser/Godot/Defold/Cute Framework/melonJS/Bevy. Different language/runtime bet. Distinct from Phaser, Godot, Defold, Cute Framework, melonJS, and Bevy.
SISimpleWebAuthnMIT passkeys ceremony library — not an IdP
Passkeys ceremony lib — not Hanko/Better Auth/Auth.js IdP or auth framework. You still store credentials and issue sessions. Distinct from Hanko, Better Auth, and Auth.js.
RAraylibzlib/libpng C game library + Emscripten web
C+Emscripten web — not Phaser/Pixi/KAPLAY/melonJS JS engines. Lower-level than Godot/Defold/Bevy full engines. Distinct from JS canvas engines.
MAMailuMIT full mailbox stack: SMTP/IMAP/webmail — not tx API
Full mailbox SMTP/IMAP/webmail — not Resend/Plunk/Postal transactional-or-relay API. Ops-heavy: DNS, TLS, spam, storage. Distinct from Postal, Plunk, and Resend.
GDGDevelopMIT event/no-code engine + HTML5; Pro required above $50k revenue
Loud: companies >$50k revenue must use Pro if using a GDevelop account. Event/no-code+HTML5 — not Phaser code-first or Godot editor. Distinct from Phaser and Godot.
MJmatrix-js-sdkApache-2.0 Matrix client library — needs a homeserver
Client lib only — you need a homeserver (Tuwunel etc.). Not a homeserver and not a generic WS product. Distinct from Tuwunel.
PAParadeDBAGPL-3.0 Postgres search + analytics; Community free forever
Search + analytics inside Postgres (pg_search) — not a separate search server. Distinct from Typesense/Meilisearch (cut: no free forever Cloud). Loud: Cloud is waitlist/beta — NOT a free hosted tier. Enterprise HA is sales; do not reprint Enterprise.
EMEclipse MosquittoEPL-2.0 / BSD-3 MQTT broker; OSS self-host forever free
MQTT broker, not a NATS messaging fabric. Distinct from Soketi/Laravel Reverb/Centrifugo (WebSocket/Pusher paths). Not a messaging-bus twin of NATS. Cedalo Pro exists; do not invent rates.
RJRPG-JSMIT browser RPG/MMORPG TypeScript framework; Free Engine $0
Browser RPG/MMORPG TypeScript framework (same code solo + networked) — not Phaser scenes, not Colyseus rooms alone, not GDevelop no-code, not Godot/Heaps. Do not sell Studio as the free path.
GAGarageAGPL-3.0 S3-compatible store for small geo-distributed hosts
AGPL. S3-compatible for small/geo-distributed self-host — not SeaweedFS/Ceph/MinIO-scale. SeaweedFS omitted once this publishes. Stretch: object store outside core remit, kept for the free forever self-host bar.
INInfisicalMIT secrets; Cloud Free forever 5 identities; ee/ needs LICENSE_KEY
ee/ needs LICENSE_KEY even self-hosted (SSO+, versioning, rotation, dynamic secrets) — authentik enterprise pattern. Stretch: secrets remit. Distinct from authentik (IdP) and from Vault-scale ops.
VAValkeyBSD-3-Clause forever-OSS Redis-protocol KV after the license fork
Forever-OSS Redis-protocol fork lane, not Redis but faster. Redis gem is already live — this is the license/governance fork, not a performance twin. Do not invent managed free tiers.
LILitestreamApache-2.0 SQLite WAL replication to S3 or local disk
Ops/replication beside SQLite/Turso/PocketBase — not a new database. You still pick the SQLite host. Distinct from Turso (libSQL edge) and PocketBase (BaaS binary).
OPOpenBaoMPL-2.0 Vault-compatible secrets engine after the Vault fork
Vault-engine / IdP-secrets lane, not Infisical app-secrets DX. Infisical already shipped — this is the engine/compat fork, not the developer-secrets UI. Do not invent Cloud free tiers.
TETemporalMIT self-host workflow engine; Cloud is credits then paid
Not Inngest/Trigger.dev — different durable-execution shape. Cloud is credits-then-paid ($1k/90d style credits, then paid) — never free forever. Local temporal server start-dev is not production. OSS self-host is the $0 hatch.
CACaddyApache-2.0 reverse proxy with automatic HTTPS by default
Encyclopedia-adjacent but was absent while Coolify/CapRover assume a proxy. Caddy is the proxy, not the PaaS. Not nginx with a friendlier name — ACME-first defaults are the product.
OXOxcMIT Rust JS/TS toolchain: parser, linter, and friends
Biome is live — Oxc is the lower-level toolchain / oxlint lane, not a Biome killer. Do not sell it as drop Prettier+ESLint tomorrow the way Biome markets format+lint as one product.
DEDenoMIT TypeScript runtime forever; Deploy free tier is real but separate
Deploy is not the runtime. The MIT runtime is free forever; Deno Deploy is a separate hosted product with a free tier — do not conflate them. Distinct from Node and Bun as runtimes.
TYtyMIT Astral Python type checker (beta) in Rust
Beta/maturing vs mypy/pyright — say so. Do not invent pass rates or claim it already replaces either tool on every codebase. Distinct from Ruff (lint/format) even though same vendor.
OOOry Open SourceApache-2.0 modular Go IAM: Kratos, Hydra, Keto, Oathkeeper
Vs Keycloak: modular Go you compose, not one Java IAM. LOUD: Ory own compare table still labels Ory Open Source Evaluation and prototyping; FAQ steers prototypes to OSS and scale to OEL/Network — print that. Ory Cloud/Network CUT as the free path. Not a Dex/Keycloak/Casdoor twin if the Catch stays modular-compose.
GEGalacean EngineMIT Ant Group TypeScript WebGL engine + browser Editor
Vs Babylon/PlayCanvas: Ant Group TS WebGL + browser Editor + WeChat minigame lane — not Microsoft Babylon docs gravity, not PlayCanvas hosted-Editor freemium. Do not invent Editor cloud prices here.
SOSockudoMIT Rust Pusher V1 edge + Protocol V2 recovery/history/push
Vs Soketi: Rust Pusher V1 edge + Protocol V2 recovery/history/mutable/push — not AGPL v7-only. Distinct from Soketi AGPL Protocol v7 drop-in. Self-host is the free path; do not invent Cloud SKUs.
PAPaymenterMIT hosting billing; self-host free, cloud PaaS $5/mo paid
Vs Kill Bill/Lago/Polar: hosting webshop + provisioning (Pterodactyl/cPanel, WHMCS importer) — not generic subscription metering or Polar MoR. Cloud is $5/mo paid. Self-host is the $0 path.
PIPocket IDBSD-2-Clause passkey-only OIDC IdP; self-host only
Vs Hanko/Authelia/Keycloak/Ory: passkey-ONLY OIDC IdP (no passwords). Homelab/MCP-scoped, not enterprise IAM. Free path is self-host only.
TITinyauthAGPL-3.0 one-binary proxy auth + Certified OIDC
Vs Authelia/Pocket ID: tiny proxy-fronted auth + Certified OIDC in one binary — not Authelia reverse-proxy SSO alone, not passkeys-only Pocket ID. Free path is self-host.
SOSolidInvoiceMIT Symfony invoicing; self-host free, Cloud trial paid
Vs InvoiceShelf/Inkvoice: Symfony/PHP freelancer+SMB invoicing (quotes→invoices, payments, API/MCP). LOUD: solidinvoice.co leads with 14-day Cloud trial / from $9/mo — free path is self-host ONLY.
SPSpiceDBApache-2.0 Google Zanzibar permissions DB; AuthZed Cloud optional
Vs OpenFGA/Cerbos/Topaz: AuthZed production Zanzibar + ZedTokens/Cloud — not OpenFGA CNCF Check API twin, not Cerbos YAML PDP, not Topaz Rego+ReBAC bundle. Free path is self-host; Cloud is paid usage.
ATAtlasApache-2.0 schema-as-code CLI; Cloud CI/governance is paid
Vs Flyway/Liquibase/Prisma migrate: schema-as-code + auto-planned diffs, not only ordered SQL scripts. LOUD: Atlas Cloud (CI automation, drift, governance) is a separate paid product — Starter free-limited, Pro adds per-dev/project fees. Free path is the OSS CLI.
HAHatchetMIT durable tasks/agents on Postgres; Cloud free tier real
Vs Temporal/Inngest/Trigger.dev: Postgres-backed durable tasks + agent runs — not Temporal’s own cluster story, not Inngest/Trigger event-function DX alone. Cloud paid past free run allotment. Self-host is $0 software.
LILiteLLMMIT OpenAI-compatible gateway to 100+ LLMs; Enterprise SSO paid
Vs OpenRouter/provider SDKs: self-host gateway you operate — not a hosted model marketplace. LOUD: enterprise/ tree and SSO/audit/RBAC are commercial; core proxy stays MIT. You still pay model providers.
ELElectricApache-2.0 Postgres read-path sync; Cloud PAYG under $5 waived
Read-path sync — not a full offline-write CRDT stack or a replacement for your mutation API. Vs PowerSync/Replicache: Postgres-native shapes + free reads on Cloud, not mobile SQLite product packaging. Pro Cloud starts $249/mo.
AUAutumnApache-2.0 Stripe billing layer; Free to 8K billing volume
Vs Polar/Lago/OpenMeter: Stripe abstraction + entitlements — not Polar MoR, not Lago/OpenMeter metering-first. Stripe fees still apply. Pro Cloud from $375/mo. Free path is Free tier or self-host.
OPOpenTofuMPL-2.0 Linux Foundation Terraform fork; truly OSS IaC
Vs Terraform/Pulumi: license-first fork of Terraform 1.5-era lineage — not Pulumi programming-language IaC. Not HashiCorp Cloud/Enterprise features. Provider edge cases exist; verify before big migrations.
SISigNozMIT-core OTel APM (logs/metrics/traces); Cloud from $49/mo
Open-core: ee/ enterprise bits (advanced authz/audit-class) are not MIT. Self-host means you operate ClickHouse. Vs Grafana stack/Datadog: all-in-one OTel product, not a la carte LGTM or Datadog SaaS. Cloud is paid after trial.
MEMeilisearchMIT typo-tolerant search engine; Cloud managed, EE sharding paid
Vs Typesense/ParadeDB: dedicated search engine UX, not Postgres extension search. LOUD: Enterprise Edition sharding/advanced ops is BUSL — commercial license for prod EE. Cloud is managed paid. CE is the free production path.
PAPayloadMIT Next.js-native headless CMS; Cloud new deploys paused
LOUD: Payload Cloud new project deploys are paused after Figma — existing Cloud keeps running; new teams should self-host (Vercel/Cloudflare templates). Not Sanity Content Lake SaaS. Enterprise features/support are commercial conversations.
HEHeadscaleBSD-3 self-hosted Tailscale control server
Control server only — not a userspace WireGuard client replacement. Not associated with Tailscale Inc as a product. You operate DERP/coordination yourself; MagicDNS/feature parity lags Tailscale SaaS at the edges.
WCWoodpecker CIApache-2.0 container-native CI; self-host forever, no paid tier
Self-host only — not GitHub Actions managed UX. Smaller plugin ecosystem than Actions/Drone-era commercial. You own runners, secrets, and forge OAuth. Distinct from GitHub Actions and Buildkite hosted.
BYBytebaseMIT-core DB change governance; Community free to 20 users/10 instances
Vs Atlas/Liquibase: governance UI + access/review workflow, not only schema-as-code CLI. LOUD: enterprise/ paths are commercial; SSO beyond Google/GitHub, unlimited audit, JIT access, dynamic masking, custom approvals are Pro/Enterprise. Pro $20/user/mo; Community caps users/instances.
KNKnockHosted notification workflows; Developer free to 10k messages/mo
Closed-source SaaS — not Novu MIT self-host. LOUD: Starter jumps to $250/mo (50k messages). Downstream SendGrid/Twilio/etc still bill you. HIPAA/SAML/SCIM are Enterprise. Free path is Developer tier only.
WIWindmillAGPLv3 scripts→workflows/UIs/agents; CE free self-host unlimited runs
Vs Temporal/Hatchet/n8n: script+UI internal platform, not Temporal durable SDK alone or n8n canvas. LOUD: CE caps (4 groups, 10 SSO users, no durable audit logs, limited Git sync); Enterprise from ~$120/mo + seats/compute. Binary CE includes proprietary bits; from-source without enterprise flag is AGPL.
TRTrivyApache-2.0 all-in-one vuln/IaC/secret/SBOM scanner; no paid tier
CLI/CI scanner — not Aqua Platform management UI/RBAC/policy SaaS. Vs Grype/Snyk: Aqua OSS default with broad target surface; Aqua Inc monetizes a separate commercial platform. You still triage and patch.
DBdbmateMIT framework-agnostic SQL migration CLI; single Go binary
Vs Atlas/Flyway/Bytebase: ordered SQL files only — no declarative planner, no review UI. You own ordering and rollbacks. Distinct from goose-style twins by DX focus plus dump.
NENetBirdWireGuard mesh ZTNA; Cloud free 5 users/100 machines, self-host AGPL plane
Vs Headscale/Tailscale: own clients+plane. LOUD: Cloud Team from about 6 EUR/user; self-host HA/SCIM/device-approval need Commercial Starter or Enterprise. Dual license on control plane.
EJExcalibur.jsBSD-2 TypeScript 2D HTML5 game engine; free forever
Still pre-1.0 API caution. Vs Phaser/melonJS/KAPLAY: smaller plugin marketplace than Phaser; not a 3D/WebGPU-first engine. You bring art pipeline and multiplayer.
PAPartyKitMIT realtime rooms on Cloudflare Durable Objects; pay CF Workers only
Vs Liveblocks/Yjs+Hocuspocus: room primitive on CF, not prebuilt comments/inbox SaaS. You pay Cloudflare Workers/DO usage at scale. Auth, persistence, and CRDT choice are yours. Post-acquisition roadmap rides CF.
COCosignApache-2.0 Sigstore keyless container/artifact signing CLI
Signing CLI + public-good Sigstore infra — not a full policy admission controller (pair with Kyverno/OPA). Offline/air-gap needs different PKI. Registry must support referrers/OCI artifacts cleanly.
FUFusionAuthSource-available CIAM; Community self-host free unlimited users
LOUD: NOT open source — source-available proprietary CE. Vs Keycloak/ZITADEL/Ory: easier admin UX + flat pricing, but you cannot fork freely like Apache/AGPL IdPs. Premium features and FusionAuth Cloud are paid. Ops burden is yours on CE.
ONOneSignalMulti-channel messaging SaaS; Free now capped at 1k mobile MAU
Closed SaaS. LOUD (2026): Free mobile push/in-app limited to 1,000 MAU (new orgs Sep 1, existing Oct 1) — overage pauses mobile until Growth (from about $19/mo + per-MAU). Not Novu/Knock twins. SMS/RCS extra.
PCPaddle CLIMIT community CLI for full Paddle Billing API; agent-native
Community CLI — not an official Paddle Inc product; API drift risk. Still need a Paddle merchant account (MoR fees apply). Vs Stripe CLI: Paddle-only. Thin MCP forks exist; this is the general CLI.
PRPromptfooMIT LLM evals & red-teaming CLI; Community free, 10k probes/mo
Vs DeepEval/Braintrust: YAML/CLI-first, not pytest-native Python or Braintrust SaaS. LOUD: Community caps red-team probes (~10k/mo); Enterprise/On-Prem are contact-sales (SSO, dashboards, dedicated runner). LLM API costs are yours. Acquisition governance is a multi-year bet.
DEDeepEvalApache-2.0 pytest-style LLM/agent evals; Confident AI is the paid cloud
OSS is the runner — collaboration/dashboards/monitoring are Confident AI (Free: 2 seats/1 project/5 runs/wk; Starter $200/mo; Team $2k/mo). LLM-as-judge burns provider tokens. Vs Ragas: broader agent/chat coverage, not RAG-only.
GRGraphitiApache-2.0 temporal knowledge graphs for agent memory; Zep's OSS engine
Framework only — you run a graph DB + ops. Zep Community Edition deprecated; full Zep SaaS is separate (Free credits then Flex ~$104/mo billed annually). Not a drop-in chat history store. Schema/ops cost vs Mem0 Docker.
GIGitleaksMIT secret scanner for git/dirs/stdin; CLI free, org Action needs free key
LOUD: maintainer marks feature-complete (security patches; focus shifting to Betterleaks). Official Action for GitHub org repos needs a free license key from gitleaks.io — personal accounts exempt. Not a full ASVS/SAST suite. False positives need allowlists.
GRGrypeApache-2.0 SBOM-first vulnerability scanner from Anchore; free CLI
Vuln scanner — not Trivy's IaC/secrets swiss-army, not Cosign signing, not Anchore Enterprise governance UI. You still triage CVEs. Anchore monetizes Enterprise separately.
SASaleorBSD-3 GraphQL headless commerce; self-host free, Cloud from $1599/mo
Vs Shopify/Hydrogen: you own ops or pay Cloud. LOUD: production Cloud Select from about $1599/mo (to ~$200k GMV) / Volume ~$3999/mo — sandboxes are not for live selling. GraphQL-only + Django stack is a team bet. Not a Shopify App Store ecosystem.
INInstructorMIT Pydantic structured outputs for any LLM; free library
Library not an agent framework (pair with your orchestrator). Provider token costs remain. Vs native structured-output APIs: Instructor shines on validation/retry DX across providers, not on replacing tool-calling agents.
SMsmolagentsApache-2.0 minimal code-agent framework from Hugging Face
Minimalist — not Temporal durable workflows or production multi-tenant agent platform. Code execution needs sandbox discipline. Vs CrewAI/PydanticAI: HF Hub gravity, less enterprise packaging. You own evals, memory, and deploy.
MAMagicBellMultichannel notification API + inbox; Builder free to 1k deliveries/mo
Closed SaaS — not Novu self-host. LOUD: Startup jumps to $249/mo (50k deliveries; $0.0025 overage). Multi-channel = multi-delivery counts. You still pay SendGrid/Twilio/FCM underneath. Not Knock twin for complex workflow DAGs.
STStytchAuth SaaS with no feature gates; free to 10k MAU + 5 SSO/SCIM
Closed SaaS — not Better Auth/Ory self-host. LOUD: SSO/SCIM beyond 5 is $125/connection/mo; brand removal $99/mo; fingerprints $0.005 after 10k. MAU overage metered (no hard cliff). HIPAA/SLA need Enterprise.
INInvoice NinjaELv2 source-available invoicing; self-host free, hosted Free 5 clients
LOUD: NOT OSI open source — ELv2 forbids offering it as competing hosted SaaS. Hosted Pro from ~$14/mo (2026 pricing). Vs Lago/Autumn: client invoicing, not usage metering/MoR. Attribution stays unless white-label.
TRTraefikMIT dynamic reverse proxy for Docker/K8s ingress
Vs Caddy: dynamic Docker/K8s LB/Ingress lane, not auto-HTTPS-for-one-binary. Steeper label/static-vs-dynamic model. Not a PaaS. Hub/API-management SKUs are separate paid products you do not need for reverse-proxy duty.
PEPenpotMPL-2.0 Figma-class design; self-host forever + Cloud Professional $0
Only serious OSS Figma-class design; not Excalidraw whiteboards. LOUD: Cloud Unlimited from ~$7/editor (capped ~$175/mo). Self-host means you own Docker/backups/upgrades. Ecosystem/plugins thinner than Figma marketplace.
VIViteMIT next-gen frontend tooling — dev server + build
Bundler/dev-server — not an app framework (routing, SSR, data are yours or a meta-framework). Not Biome/Oxc (lint/format/parser). SSR frameworks built on Vite are separate products.
ZOZodMIT TypeScript-first schema validation with static type inference
TS schema plus static inference; library not SaaS. Bundle size matters at the edge. Not a form UI or API gateway.
LELefthookMIT Go manager for polyglot repo git-hooks
Vs Husky: polyglot hooks; not a CI product. Local only. Teams still need a shared install path.
JUjustCC0-1.0 command runner — modern Makefile replacement
Modern Makefile replacement; not Taskfile this wave. No implicit build DAG like Make. You still pick how CI invokes recipes. Distinct from package.json scripts if the repo is polyglot.
ZEZellijMIT Rust terminal workspace with layouts and plugins
Rust terminal workspace/layouts/plugins — agent terminal lane; not tmux-clone marketing. Plugin ecosystem younger than tmux. Some SSH/remote habits still assume tmux/screen.
FLFluxApache-2.0 CNCF GitOps Toolkit for Kubernetes
K8s-only GitOps Toolkit; not Kamal/Coolify VM PaaS. You need a working cluster plus RBAC plus secrets story. Prefer current Flux Operator docs over legacy bootstrap blogs.
OLOllamaMIT local model runner — free forever; Pro cloud $20/mo
Model runner, not a coding agent. Distinct from vLLM (server serving) and LM Studio (GUI desktop app). You still pick models, prompts, and the agent layer on top.
COContinueApache-2.0 open-source coding assistant — GitHub is source of truth
Cursor acquired Continue; product site is memorial, GitHub is source of truth; OSS remains. Not Cursor-the-editor. Expect docs/site lag vs the repo.
LAlazygitMIT Go terminal UI for git
Go git TUI — not a GitHub app, not magit (Emacs), not CI. You still need git installed and a terminal habit.
STStarshipISC cross-shell prompt — needs a Nerd Font
Prompt only — not a shell, not Zellij. Needs a Nerd Font for the glyph set. Config is yours to keep sane.
UKUptime KumaMIT self-host uptime monitoring and status pages
Self-host uptime + status pages — not Datadog/APM. You run the container, backups, and alerting path. HTTP/TCP checks are the lane, not full distributed tracing.
BUBunMIT JS runtime + install + test + bundle (JSC linked)
Node-compat is not 100%. Joined Anthropic — watch ecosystem/governance noise, but license remains MIT. Not Deno. Some packages still assume Node quirks.
HEHelixMPL-2.0 modal terminal editor — tree-sitter + LSP
Vs Zed: terminal modal + tree-sitter/LSP; not a GPU IDE. No Electron GUI, weaker AI-IDE surface than Cursor/Zed. Plugin story is thinner than Neovim.
TQTanStack QueryMIT server-state cache for async data (React Query lineage)
Server-state cache library; not SaaS. Not a global client store (that is Zustand/Redux). Not tRPC itself — pairs with it. You still own the API and auth.
ACArgo CDApache-2.0 CNCF declarative GitOps CD for Kubernetes
Vs Flux: UI/app-centric GitOps CD lane, not Flux Toolkit. Still K8s-only. You run the control plane, secrets, and promotion story. Not Kamal/Coolify for VMs.
PNpnpmMIT content-addressable Node pkg manager
Vs Bun: Node pkg manager lane (content-addressable/monorepo); not install+runtime. Not a JS runtime or test runner.
VIVitestMIT Vite-native unit/integration test runner
Vs Vite: Vite-native test runner; not the bundler. Not full E2E browser suites. Closest when Vite is already the toolchain.
ASAstroMIT content-first web framework with islands
Content-first islands; not Next/RSC. App-router SaaS dashboards often stay on Next. Server islands and adapters vary by host. Not a commerce-only stack.
PLPlaywrightApache-2.0 cross-browser library and CLI
Vs Playwright MCP gem: library/CLI lane; not the MCP wrapper. Heavier than unit tests. Browser downloads and CI images are real ops. Not Stagehand/Browserbase.
SVSvelteKitMIT full-stack Svelte framework
Vs Remix/Hydrogen: full-stack Svelte lane. Ecosystem and hiring pool smaller than React/Next. Not Shopify Hydrogen commerce defaults. You still pick auth/data.
HEHelmApache-2.0 Kubernetes package manager
K8s package manager - not Argo CD/Flux GitOps sync, not a cluster itself. Templating can become spaghetti; you still own values, secrets, and upgrade discipline. Not Kamal/Coolify for VMs.
K9k9sApache-2.0 terminal UI for Kubernetes
K8s cluster TUI - not Helm packaging, not a dashboard SaaS. Needs a working kubeconfig and cluster access. Not Lens Electron GUI.
FZfzfMIT command-line fuzzy finder
Fuzzy finder only - not a file manager, not ripgrep itself (pairs with it), not a shell. You wire the pipes. Not Atuin shell history sync.
SQsqlcMIT type-safe code gen from SQL
Codegen from SQL - not Prisma/Drizzle ORM, not a database. Schema migrations are still yours (golang-migrate, Atlas, etc.). Language support depth varies.
ELElysiaMIT ergonomic Bun-first web framework
Vs Hono: Bun-first ergonomic lane; Hono is multi-runtime edge-first. Ecosystem and hiring still Bun-skewed. Not Nest/Fastify full Node default.
TUTurborepoMIT Rust monorepo build system (JS/TS)
Task runner only. Not a bundler. Not Nx. Not Bazel.