Forkcast Hacker News #3: tiny-vllm, ktx, aislop, skills-for-humanity, komi-learn, VTCode, promptloop

Episode Summary#

This episode covers 35 open-source projects trending on Hacker News, spanning AI development tools, consumer apps, and DevOps infrastructure. Highlights include a high-performance LLM inference engine built from scratch in C++ and CUDA, a context layer that gives data agents reusable metric definitions instead of raw SQL access, and a terminal coding agent in Rust with layered security against prompt injection. The episode also features a pure CSS 3D engine, a self-healing microkernel in Zig, and a portable eBPF-based USB traffic analyzer.

Repositories Covered#

tiny-vllm#

A high-performance LLM inference engine built from scratch in C++ and CUDA. Implements the full stack — KV cache, PagedAttention, FlashAttention-like fused ops, RMSNorm, SiLU, and Rotary Position Embeddings — targeting an RTX 5090 with CUDA Toolkit 13.1.

ktx#

An open-source executable context layer that gives data agents reusable metric definitions instead of letting them invent SQL from scratch. Connects to Postgres, Snowflake, BigQuery, ClickHouse, MySQL, SQL Server, and SQLite through read-only connections and integrates with dbt, MetricFlow, LookML, and Metabase.

aislop#

A deterministic quality gate that catches AI-generated code smells without using an LLM at runtime. Runs 50+ rules across 7 languages through 6 parallel engines covering formatting, linting, code quality, AI slop detection, security, and architecture — sub-second, as a CLI, MCP server, or GitHub Action.

skills-for-humanity#

Packages 171 structured reasoning methodologies as executable Claude Code commands. Features 100+ command paths across 6 groups with 33 thinkers cited, each with worked examples for applying frameworks like Socratic dialectic or first principles thinking directly to your codebase.

komi-learn#

Gives AI coding agents persistent memory that automatically learns from past sessions. Uses BLAKE3 hashing for content fingerprints and Ed25519 signing for integrity, with zero required dependencies beyond the standard library. Works with Claude Code and Codex out of the box.

VTCode#

An open-source terminal coding agent in Rust with layered security against prompt injection and workspace escape. Enforces allowlists, validates every argument, checks for symlink traversal, and sandboxes execution. Supports 12+ model providers and extends through SKILL.md, MCP, and lifecycle hooks.

promptloop#

Turns prompt evaluation into a repeatable terminal loop. Register prompts, run structured evals against defined metrics (latency, JSON schema conformance, fuzzy matching, LLM judging), and get diffs showing exactly which cases regressed — all persisted in SQLite.

ego-lite#

A single browser where a human and any AI agent share parallel isolated spaces simultaneously. Uses kernel-level page snapshots for deeply nested iframes, achieves up to 2.5x faster execution than CLI-based approaches, and exposes JavaScript tools for snapshot, click, fill, wait, and navigation.

lite-harness#

Unifies Claude Code, Codex, OpenCode, and GitHub Copilot behind a single OpenCode-compatible API. Docker on port 4096 with E2B and Daytona sandbox isolation, cron-scheduled tasks with human-in-the-loop approvals, and persisted sessions that survive restarts.

openrouter-toolkit#

Validates OpenRouter model IDs and their required capabilities at compile time using a model_supports macro. Checks IDs against a vendored OpenRouter index covering parameters, input modalities, and output modalities — catching misconfigurations before a single API call is made.

breathe-cli#

Brings paced resonance breathing to the macOS terminal in a single Python file with zero external dependencies. Uses ANSI escape codes for a clean visual guide, plays audio cues, logs every session to CSV, and ships 4 presets with 25 manual acceptance tests.

openbrief#

A local-first desktop app (Tauri + React) that turns any video or audio file into a structured, listenable briefing. Uses Whisper, Parakeet, or Qwen3 ASR for transcription, then passes text through OpenAI, Anthropic, Gemini, or DeepSeek for summarization with built-in TTS narration.

polycss#

A pure CSS 3D engine that renders polygon meshes using matrix3d transforms on real DOM elements — no WebGL, no Canvas, no GPU requirement. Loads OBJ, GLB, and VOX files, renders primitives from boxes to toruses, and supports first-person camera controls.

fungible#

A keyboard-driven terminal UI for personal finance that syncs with Plaid, imports CSVs, and includes a built-in AI assistant. Features a FIRE and Coast FIRE calculator, a delta mode heat map for spotting spending changes, and an MCP server with 20+ tools.

nmlinux#

Brings 23 network administration modules into a single Qt GUI for Linux. The IP scanner runs 50 threads, the port scanner pushes 200 threads, and the SSH client holds a 2,000-line scrollback with 256-color support — the Windows NETworkManager equivalent, finally on Linux.

gsd-meta-manager#

A Rust TUI that reads all your GSD (get stuff done) planning state from disk and presents a unified command center. Powered by ratatui and crossterm with live filesystem watching via notify, tokio async throughout, and vim-style navigation with j, k, and slash search.

filemat#

A web-based file manager built with Spring Boot and SvelteKit that gives you granular permissions and password-protected public links without enterprise bloat. Features role-based access control, a built-in text editor, and video streaming — all from a single JAR with SQLite.

elemental#

Brings declarative, reactive DOM construction to vanilla JavaScript through CSS selector-based element creation. Built on Reactor.js, exports 11 functions (el, ob, attr, on, bind), deduplicates updates with batch processing, and requires zero special syntax or bundler configuration.

qastor#

A desktop app for manual QA testing that captures screenshots, debug logs, and evidence URLs in one hotkey press. Built with Tauri 2 and React 18, validates evidence with JSON Schema via ajv and serde_json, and advances to the next test case automatically on capture.

streambed#

A real-time CDC pipeline from Postgres to Apache Iceberg on S3 with a Postgres wire-compatible query server. Captures the WAL, converts to Parquet, lands on S3 as Iceberg tables, and exposes a DuckDB-backed server — query your data lake with psql, no Spark required.

posthorn#

A self-hosted email gateway that bridges any app to any transactional mail provider through a single service. Supports HTTP form post, REST API, and raw SMTP ingestion, with Postmark, Resend, Mailgun, AWS SES, and plain SMTP backends — one Docker container, one TOML config.

depsguard#

Hardens your package manager configs with one command. A single static Rust binary scans and fixes npm, pnpm, yarn, bun, uv, Renovate, and Dependabot configs with an interactive TUI featuring scan, fix, diff preview, and automatic backup.

volt#

Runs frontend tooling natively inside the Elixir VM using Rust NIFs, removing Node from the equation entirely. Tailwind rebuilds in ~40ms, production builds finish under 100ms, and it compiles Vue SFCs, React JSX, Svelte 5, and Solid JSX with 650+ oxlint rules built in.

rapel#

Brings chunked resumable downloads to the terminal with safe Ctrl-C resume and at-least-once post-processing hooks. Supports up to 4 concurrent jobs, SOCKS5H proxy, and runs cross-platform on Linux, macOS, Windows, FreeBSD, and Raspberry Pi.

teleport-env#

Achieves sub-500ms full state recovery for AI agent environments using OverlayFS and CRIU entirely in userspace. Uses a cold layer switch technique — live tests show 466ms recovery with Qwen 2.5 Coder 32B, roughly 10x faster than waiting for Docker to restart.

beacon#

An open-source agent that provides secure remote access, health monitoring, and automated deploys across self-hosted machines. Uses Argon2id + HMAC-SHA256 passphrase gating, provides WireGuard VPN exit nodes, and includes a browser-based remote terminal with AES-256-GCM encryption.

core#

An open-source private home security camera system with end-to-end encryption running on a Raspberry Pi Zero 2 W. Features a Rust backend, Svelte frontend, native iOS and Android apps, and an untrusted relay model where encryption keys never leave your device.

usbsnoop#

Uses a single eBPF program to hook two universal kernel URB chokepoints and capture every USB transfer system-wide. Replaces a bench full of hardware sniffers — decodes control setup packets, SCSI block commands, and HID reports inline, with color-coded hex or JSON output.

liteparse#

A Rust-based document parser from the LlamaIndex team that extracts text with bounding boxes entirely on your machine. Handles PDFs, DOCX, XLSX, PPTX, and images with spatial layout preservation using PDFium and bundled Tesseract OCR, with bindings for Rust, Node, Python, and WASM.

xxUTF#

An allocation-free, fail-proof Unicode normalization library in C accelerated with SIMD. Ships as a single header amalgamation, never allocates, has zero libc dependency, and by design cannot fail. Supports NFD, NFC, NFKD, NFKC normalization plus case folding for UTF-8 and UTF-16.

py-sql-cleaner#

Finds, formats, and safely extracts embedded SQL from Python source files using SQLGlot. Supports MySQL, Postgres, and Redshift dialects, offers a dry run mode, skips dynamic f-string patterns, and integrates into CI pipelines with a check mode.

mqtt_broker_esp#

Runs a full MQTT 3.1.1 broker on a $10 ESP32-S3 microcontroller. Handles 100 client connections and 2,048 subscriptions with QoS 1 message delivery in 8MB PSRAM — dual-core 240MHz FreeRTOS, 16MB flash with dual OTA partitions, and a built-in Berry scripting VM.

sas-sample-generator#

Uses Stable Audio 3 to batch generate and quality-filter audio samples from text prompts. Produced a 1.4GB drum pack of 10,000+ one-shots and a 26GB instrument pack with 5,000+ multi-zone instruments, all LUFS normalized and pitch corrected — running on an RTX A6000 at $0.49/hr.

textsnap#

Extracts text from any image, screenshot, or webpage on CPU only, completely offline after first run. Uses PaddleOCR VL 1.5 quantized to q4 ONNX (~890MB on disk), supports clipboard-to-clipboard round trips, portable USB stick mode, and markdown output.

aion#

A self-healing microkernel written in ~6,500 lines of Zig that detects failures and hot-swaps modules at runtime without rebooting. Features 4 recovery actions, virtual memory, FAT32, TCP over e1000, TLS 1.2, and a framebuffer GUI — boots on real hardware.

Watch#

• Video: https://www.youtube.com/watch?v=J8bvoQT1Bvc
• Cover: https://i.ytimg.com/vi/J8bvoQT1Bvc/hqdefault.jpg

Notes#

Transcript and notes will be added from Forkcast output artifacts.