tierlist.tech
中EN

W43 This Week's Picks

2329 new projects found this period, 10 made the list.

Window 2026-10-19 – 2026-10-25Rated 1190

S · Look today

S

0c-ime

0c-biggoGo

A no-selection Zhuyin input method that uses an on-device Transformer to decide characters from context, supporting Fcitx5, IBus, macOS, and Windows. It addresses a real pain point for traditional Chinese typists, with 110 stars in a day and a clear approach; the risk is that model size and per-platform install experience are unverified, and it can be compared against rime-based solutions.

A Zhuyin input method with no manual character selection: uses a local Transformer to pick characters from context. Supports Linux (Fcitx5/IBus), macOS and Windows.

#Linux#macOS#Windows#AI

★110

S

reylo

colinhacksRust

Imports .sql directly into TypeScript with full type inference and zero codegen, closing the type gap between ORMs and hand-written SQL. The author is the creator of Zod with built-in distribution, evidenced by 656 stars in two days. It could become the standard dependency for SQL type checking; the risk is that Kysely and pgtyped already hold the niche.

Import .sql files into TypeScript with full type inference and zero codegen.

#Databases#Code Quality#APIs

★656

S

php_uploadprogress_guard

HOSTED-POWERC

A small PHP extension that mirrors official fixes component by component across 5.6–8.5, steps aside once the engine ships its own patch, and lists deployment paths for Sury, cPanel, DirectAdmin and Docker — exactly what shared-hosting operators need this week. The cost is carrying an unofficial patch in production.

Protects an unpatched PHP against php2shell (CVE-2026-109618 / CVE-2026-109619): a small extension that mirrors the official fix component by component and steps aside once the engine carries it. PHP …

#App Security#Exploits#DevOps#Self-Hosted

★56

S

stalemap

UmairTypeScript

Fills coding agents in on dependency changes after their training cutoff by comparing type definitions and changelogs and writing them into AGENTS.md or CLAUDE.md. It targets the real pain of agents writing outdated APIs with a small, specific approach; effectiveness depends on how parseable each ecosystem's changelog is.

Tell your coding agent which dependencies changed after its training cutoff. Diffs types and changelogs, writes a short block into AGENTS.md / CLAUDE.md.

#AI Agents#LLMs#Code Quality

★53

A · Worth watching

A

huashu-motion

alchaincyfJavaScript

Turns a coding agent into a commercial-grade product promo video generator, with composing and pointing-at-frame shot edits, folding video production into agent workflows. 281 stars in half a day shows one-sentence video output spreads fast. Monetization: templates plus render cloud subscription. Risk: native video models like Sora and Kling moving downmarket, and unstable output quality.

Let your agent produce commercial-grade product launch films in one shot: it composes music and can change things by pointing at the frame. Commercial-grade launch films by your coding agent — point a…

#AI Agents#Video#Marketing#Content Writing#Agent Skills

★281

A

EAGLE-4

eagle-hqPython

The official inference code for the EAGLE family of speculative decoding, directly determining LLM inference throughput and a key component likely to be integrated into inference frameworks. Its 554 stars and fast growth show inference acceleration is the hardest need. The path is becoming the default draft model for vLLM and SGLang; risks are reproduction quality and competition from Medusa and others.

Official Inference Code of EAGLE-4

#LLMs#ML Research#Performance#GPU

★554

A

php2shell-scanner

assetnotePython

A high-fidelity scanner for the two php2shell CVEs from the Assetnote team, whose detection logic is more credible than the flood of bandwagon PoCs. CVE hype plus vendor backing brought 287 stars in two days; it can drop straight into ASM or vuln-scanning product lines, making it the most commercializable, though demand will decay fast once official patches ship.

High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)

#App Security#Exploits#Network Security#CLI

★287

A

fx0

vercel-labsTypeScript

A lightweight design agent that produces a single HTML page from one description, essentially a minimal v0. Its 337 stars come half from vercel-labs backing and half from single-file delivery; it could fold into the Vercel ecosystem for traffic and paid credits, but the risk is head-on competition with mature products like v0 and Lovable.

A lightweight design agent built with libfx. Describe a page and an agent writes it as one HTML file.

#AI Agents#Web Frontend#UI Design

★337

A

tv-vibehack

Gathin23Java

Solves Android TV boot ads and bloated systems slowing the experience, using one-click ADB ad removal and a tvOS-style desktop. Nearly two thousand stars in a day spread via Claude Code buzz and the hard need to remove TV ads. Monetization could be a launcher subscription or preinstalled device deals; risks are Google tightening ADB permissions and launchers like Projectivy already occupying the space.

Your TV, minus the ads. Debloat any Android TV over ADB and give it a clean, tvOS-inspired launcher. Built in an afternoon with Claude Code.

#Android#CLI#Streaming#Productivity

★1919

A

aerial-tv

pengchujinKotlin

Tackles boot ads and bloated launchers on Chinese smart TVs by taking over the boot process with one click, and it genuinely works. 1,619 stars in a day show how many users are tormented by TV ads; the path is preinstallation with ROM vendors or box makers and paid custom versions, while the risk is vendor blocking and fragmented adaptation across ROM differences.

A clean launcher for China-market TVs: an open-source Android TV launcher designed after tvOS, no ads, auto-takes over on boot. A tvOS-style launcher for Xiaomi, TCL and other China-market TVs.

#Android#Open-Source Alternatives#UI Design#tvos

★1619

That's today. The other tiers and the boards follow.

Show HN 10

S

Turns the agent main loop into a durable harness of a Postgres event log plus stateless workers, solving real pains of losing state on restart, no multi-machine takeover, and idle cost burn. Its 2969 stars and founder's long post show a real user base; open-source core plus hosted version is the classic enterprise-standard play, directly replacing Claude Managed Agents; the biggest risk is Anthropic/OpenAI official hosted services crushing it.

Hey all, Kartik from Omnara ( https://omnara.com) here. We're building an open-source API for running durable agents. You create an agent with an API call, and Omnara runs the agent loop, gives the ag…

#AI Agents#LLMs#Self-Hosted#Open-Source Alternatives#claude

▲16

A

Addresses Redis memory bloat after snapshots, OOM and weak multithreaded throughput with a Rust and io_uring compatible replacement that includes vector search. 258 stars, 62 points and benchmarks against Dragonfly give it momentum; a hosted cloud service could charge, but the AGPL core faces Redis, Valkey and Dragonfly, and the last 1% of command compatibility is the deadliest gap.

Hi all, So I have been working on this project KiviDB from February 2026. It started as a project for me to understand rust, having a product with no GC pauses, memory blow up after snapshots and gett…

#Databases#Performance#Open-Source Alternatives#Self-Hosted#redis

▲62

A

Pops up a questionnaire before pushing to production to verify you truly understand AI-generated code, targeting the comprehension debt of vibe coding. Its 238 points reflect widespread team anxiety about AI code quality; it could become a CI or PR gate sold per seat, but risks being dismissed as process noise and being built into platforms like Copilot.

FOSS, Basically it plugs into your existing coding agent workflow and every time you push to prod it'll throw up a questionnaire that checks if you understand how the code you're pushing works.

#Code Quality#Testing#CI#AI Agents

▲238

A

Automates the whole pipeline from dark web collection and denoising to NSFW filtering and relationship graphs, solving analysts' extremely inefficient manual dark web browsing. Its high 127 points reflect real security-team demand, and it could target Maltego and Recorded Future as an open-source intelligence platform with subscriptions; the biggest risks are compliance of dark web scraping, data quality, and upstream site blocking.

Hi HN! Im Katriel, and im a Security Researcher/Enthusiast and in the wave of AI, i wanted to build that next gen of security tooling that surpasses the current tools, and even the paid industries wit…

#Network Security#Privacy#Automation#Data Analysis

▲127

A

Runs a 2B small model on-device to drive Android app operations, solving GUI agents' latency, privacy, and API costs from cloud LLMs. Its 12 points are low but on-device computer-use is a real gap and easy to spread; paths are OEM preinstallation, accessibility automation, or mobile automation testing SDK licensing; the biggest risk is Google's own on-device agent and system permission lockdowns.

#AI Agents#Android#LLMs#Multimodal

▲12

B

Uses policy routing to turn multi-machine IPsec networking into a mesh SD-WAN, giving home and small-team devices stable public v4/v6. The author validated it on all his own devices, and its 24 points come from homelab networking pain; it could become an enterprise remote-access subscription, but Tailscale and NetBird are already scaled and IPsec operations remain hard.

btw this is already running on all my machines (including a macbook), and i've configured all of them to have routable public ip addresses ;) especially for the mac, my ISP is SFR (over coaxial connec…

#Networking#Network Security#Self-Hosted#DevOps

▲24

B

It decodes BRAW/R3D/ProRes and transcodes directly in the browser, turning a step that required desktop software into a link, a real need for film crews and footage review. Kino itself is a browser editing and MAM vendor, with transcoding as a customer-acquisition entry, so the commercial path is clear. Risks are codec licensing, 8K performance, and competitors like Frame.io.

I'm Luke from Kino. We make a video editor + MAM in the browser. Transcode opens Blackmagic RAW, RED R3D, ProRes, DNxHR, and MXF files in the browser (including the famously tricky OP-Atom). You can s…

#Video#WebAssembly#Web Frontend#ffmpeg

▲8

B

Addresses model output full of em dashes and parallel clauses, the AI tone that hurts finished drafts, using fine-tuning to bring style back to human. 145 points show it's a common pain; could sell an inference API or data service to writing teams, but fine-tuning recipes are easily copied, and competitors are style prompts and official de-slop post-training.

#LLMs#Content Writing#ML Research

▲145

B

Turns UI micro-interactions into a prompt library that can be fed directly to AI, solving the frontend motion problem of knowing what you want but not how to write it. Its 68 points show designers and frontend devs genuinely feel this pain, and paid prompt packs plus small-team subscriptions are ready monetization paths. Risks are that prompt assets are easily copied and lose their premium once built into tools like Cursor.

#Prompting#UI Design#Web Frontend#AI

▲68

B

Uses AI to generate a wiki from 45,000 Enron emails with a citation for every fact, validating traceable generation. Its 55 points show trustworthy citations are a real need, and it could become a citation engine and audit layer for enterprise knowledge bases, but the risks are hallucination and retrieval quality, with RAG platforms and NotebookLM-style tools as competitors.

#LLMs#RAG#Knowledge Base#Documents

▲55

Star gain 7d

  1. morluto/rea+71207★378698
  2. Ebony-Vinyl/dsh-our-free-model+19457★41244
  3. zouyuxuan122/dsh-our-free-model+19453★41243
  4. google-research/harness2+17759★19110
  5. MadsLorentzen/ai-job-search+14476★64834
  6. cloudflare/security-audit-skill+13810★44518
  7. debpalash/VoiceStudio+11651★84963
  8. peach-mitao/peach+10752★10919
  9. stablyai/orca+9559★104947
  10. KnifeLemon/Filee+9500★11642