Packages

Cloud-agnostic framework for running LLM workloads, AI training, and batch jobs across any cloud (AWS, GCP, Azure, Lambda Labs, RunPod, and more) with automatic spot instance provisioning, failover, and cost optimization. SkyPilot abstracts cloud-specific APIs behind a simple YAML task definition and CLI — launch GPU jobs on the cheapest available cloud, automatically retry on preemption, and mount storage from any cloud. Developed at UC Berkeley SKY Computing Lab.

Node.js library for parsing form data and file uploads. Handles multipart/form-data and application/x-www-form-urlencoded request bodies, writing uploaded files to disk or keeping in memory. Supports progress events, file size limits, file type validation, and streaming. The standard solution for file upload handling in Express.js applications alongside multer.

CTF exploitation framework and binary interaction library for Python — provides tools for writing exploits, interacting with processes/sockets, and binary analysis. pwntools features: process()/remote() for process/socket interaction, tubes with send()/recv()/recvuntil()/sendlineafter(), ELF() for binary analysis (symbols, got, plt, bss), ROP() for return-oriented programming chain building, shellcraft for shellcode generation (shellcraft.sh()), asm()/disasm() for assembly, cyclic() for de Bruijn pattern generation, p32()/p64()/u32()/u64() for packing, context for architecture setting, and logging. Standard tool for CTF competitions and authorized penetration testing binary exploitation.

Python dependency vulnerability scanner — checks installed packages against a database of known CVEs and security advisories. safety features: safety check for scanning requirements.txt or installed packages, safety scan for project-level scanning, JSON/text output formats, --continue-on-error for CI pipelines, --ignore for known safe CVEs, PyPI Safety DB (free) and Safety DB Pro (authenticated), integration with pip-audit and CI systems, CVSS scores, fix recommendations, and GitHub Actions support. Identifies packages with known security vulnerabilities before deployment.

Serverless interactive SQL query service that executes queries directly against data in S3 using Presto/Trino, charging per TB of data scanned.

AWS Step Functions REST API — serverless workflow orchestration service enabling agents to define, execute, and monitor state machines that coordinate AWS services (Lambda, ECS, DynamoDB, SQS, etc.) with built-in error handling, retries, and parallel execution.

Collect, store, query, and alarm on metrics and logs from AWS services and custom applications, providing unified observability across the AWS environment.

Azure's unified communications PaaS that gives AI agents programmatic access to SMS, transactional email, voice/video calling, push notifications, and chat via REST API and multi-language SDKs.

Ruby-DSL configuration management tool that uses cookbooks and recipes to define desired system state, with a chef-client agent converging nodes against a Chef Server or in local mode.

MCP server that bridges AI assistants (Cursor, Claude Desktop) with DaVinci Resolve's scripting API. Enables natural language control of Resolve for project management, timeline operations, media pool management, marker placement, and page/workspace navigation.

Open-source data platform wrapping any SQL database (Postgres, MySQL, SQLite) with an instant REST/GraphQL API, admin UI, file management, auth, and role-based access control.

Ghost Content API and Admin API — headless CMS REST APIs for creating, managing, and publishing blog posts, newsletters, and membership content, with support for members, subscriptions, and email newsletters.

Kit (formerly ConvertKit) — creator-focused email marketing platform with a REST API for managing subscribers, tags, sequences, and broadcasts for independent creators and online businesses.

Email testing and production delivery API that provides a safe sandbox environment for testing email workflows and a production SMTP/API path for transactional sending.

Open-source platform for building native product integrations with 250+ pre-built API connectors. Nango handles OAuth flows, token refresh, credential storage, and provides a unified interface to call any connected API. Designed for SaaS products that need to integrate with user-authorized third-party APIs (Salesforce, HubSpot, Slack, GitHub, etc.) without managing OAuth complexity per provider. Unlike Fivetran/Airbyte (ETL focus), Nango enables real-time API interactions on behalf of users.

Open-source notification infrastructure API that orchestrates multi-channel notifications (email, SMS, push, in-app, chat) through a single unified API with workflow templates.

OpenFGA is an open-source fine-grained authorization engine (Google Zanzibar-inspired, by Okta) that evaluates relationship-based access control (ReBAC) via a tuple model — agents write (user, relation, object) tuples and call the Check API to determine if a user has a specific permission on a specific resource.

A Java thread dump and heap analysis tool that runs as a GUI application, VisualVM plugin, or headless MCP server, enabling AI agents to parse thread dumps, detect deadlocks, identify long-running threads, and analyze virtual thread pinning.

Tianshu is an enterprise AI data preprocessing platform that converts unstructured documents (PDF, Word, Excel, PPT), images, audio, and video into AI-ready Markdown/JSON formats using MinerU and PaddleOCR-VL engines. It exposes document parsing capabilities via an MCP server for integration with AI assistants.

An MCP server that connects AI assistants to TradingView market data, enabling real-time screening for top gainers/losers, technical indicator analysis (RSI, MACD, Bollinger Bands), and pattern recognition across crypto and stock exchanges.