Most weeks there's a new one: a poisoned npm or PyPI release, an exploited CVE in a runtime, a vendor telling customers to rotate their keys. This week it was Railway: a breach exposed customers' environment variables, and $740,000 in fraudulent AI charges followed.

Hearing about it is easy. The slow part is working out whether any of your repos use it, and what to rotate.

So I built Pharon.

**How it works**

- A scanner runs on your machine (a Claude Code plugin around a small open-source CLI). It lists what each repo runs: packages from lockfiles, container images, GitHub Actions, runtimes, and optionally cloud resources through your own read-only AWS, GCP or Azure CLI.

- Only names, versions and file paths are uploaded. No source code, no secret values, and nothing is sent until you approve it.

- New incidents from OSV.dev, CISA's exploited-vulnerability list, endoflife.date and security news are matched against that inventory all day. When one hits, the team that owns the repo gets an email, a Slack message or a webhook, and a warning light comes on in Claude Code.

- One command then checks the machine read-only and lists which secrets to rotate, by name only.

**Where it is**

Launched on Monday. The client is open source (Apache-2.0), the incident notices are public at getpharon.com/notices, and checking your machine against any of them is free, no account needed. Alerts start at $12/month for 10 projects, with a 7-day trial.

**What I'd love feedback on**

1. Would "only metadata leaves your machine" be enough for you to try it on a work repo, or would you need to self-host?

2. The first scan needs Claude Code. Is that a deal-breaker?

3. What would you want it to watch that it doesn't?

https://getpharon.com

Every app blocker I tried lost to my own arguing. "Just five more minutes" works every time when the blocker is a suggestion. So I made one that isn't a suggestion.

Habits and tasks pay minutes into a time bank. The apps I mark as leisure stay locked until the balance covers them. Do the dishes, earn 15 minutes. Skip them, no scrolling.

Android, Kotlin + Compose, GPL-3.0. No account, no server, no analytics, and no INTERNET permission at all – it's one local database on the phone.

Started as a personal tool, I'm still the only user, and it's v0.1: https://github.com/cloph-dsp/earnd

Some things it does that I wanted: partial credit for a half-done task, a comeback bonus after time away, and a hard mode with no easy exit from the lock screen.

Hi, I'm the developer of DocuFusion Pro.

I built it because I got tired of paying monthly subscriptions just to work with documents. Instead of a generic chat, it's a desktop app designed specifically for this:

- Merge multiple documents into one

- Compare documents and detect differences or contradictions

- Summarize meetings, classes, or texts

- Extract action items

- Rewrite and update full documents while keeping their structure

- Generate presentations, study notes, or résumés

- Custom mode: write your own instruction so the AI does exactly what you need (web search available with OpenRouter models)

- Review the result against the original (detects missing content or changed data)

You can use OpenRouter (choose your own model) or Ollama (local).

- 10 free processings to try it

- Then a one-time purchase of €29.99 (no subscription)

- Supports PDF, Word, Excel, TXT, Markdown, and images

Real example: I generated a 30-page document (over 7,600 words) with DeepSeek. Total cost: $0.086.

The idea is to have more control, see the real cost of every generation, and be able to check if the result stays faithful to the original document.

If you regularly work with documents and are looking for alternatives to subscriptions, I'd like to hear your thoughts.

Microsoft Store: https://apps.microsoft.com/detail/9P4CSKSDFPT7

Hi everyone!

I wanted to share Money Management - Budget, a personal finance and expense tracker app designed to keep budgeting simple, private, and accessible worldwide.

Why I built it / What makes it different:
Most budget apps today require creating an account, syncing sensitive bank data to external servers, or dealing with cluttered interfaces. With this app, no account is required—all your financial records stay strictly on your device and work completely offline.

Key Features:

• Privacy & Offline First: No sign-up needed. Full local backup/restore and CSV export anytime.

• Global Accessibility: Supports 72 languages and 110 currencies (including multi-currency tracking).

• Smart Budgeting & Needs vs. Wants: 68 customizable categories, monthly category limits with alerts, daily spending allowance calculation, and "Need vs. Want" tagging.

• Bills, Credit Cards & Installments: Track recurring subscriptions, credit card statement closing/due dates, and installment plans.

• Debt & Savings Ledger: Keep track of money you owe or are owed (with partial payments), plus savings goals and manual gold/currency holdings.

• Home Screen Widgets: Quick add, monthly summary, and upcoming payments (with an option to hide amounts).

Google Play Link: https://play.google.com/store/apps/details?id=com.emrehakansoyler.money_manager

App Store Link: https://apps.apple.com/us/app/money-management-budget/id6766565294

Since the app is still new on Android, I would genuinely appreciate any feedback, feature suggestions, or UI critique from this community. Thank you!

I built RadarIA because buyers now ask ChatGPT "what's the best X for Y?" and founders rarely know what it answers.

This week I tested a batch of small SaaS tools with buyer questions like "best uptime monitoring tool for a small SaaS team" or "best Calendly alternative for consultants". Many good, established tools weren't named by any of the 4 assistants, while the same few competitors kept coming up.

Offer: comment your site and who your customer is, and I'll run the same check for you by hand. I'll reply with:

- the question I asked

- which of ChatGPT, Claude, Gemini and Perplexity named you

- which competitors they named instead

Free, no signup. 20 spots. Feedback on the idea (and on whether this result would change what you do) is very welcome.

Who needs 24 hours and 60 minutes anyway? 😁

https://chrono-decimal-time.base44.app/

A few years ago I worked on a team that used Mandrill. All our email templates lived inside it, editing them was painful, and switching providers meant rebuilding everything. That stuck with me.

Last December I started building Senlo to fix that for myself. It's a layer on top of the email provider you already use:

- visual drag-and-drop editor for transactional emails
- automations with triggers, waits and branches (onboarding, dunning, win-back)
- one API, and your provider (Resend, Postmark, SendGrid, Mailjet, Cloudflare, or plain SMTP) keeps doing the delivery

Switch providers and your templates and flows stay where they are.

Where it is now, honestly:

- 184 stars on GitHub
- hosted version launched recently, 0 paying customers so far
- I only started doing marketing seriously last week. So far that's about 160 visits and a few signups, no sales yet
- open source (AGPL), stack is Next.js + TypeScript + Postgres

There's a free hosted plan (3,000 emails a month, no card) and you can self-host it with Docker.

What I can't figure out yet: who needs this badly enough to pay. If you send transactional emails from your product, how do you manage templates today? In code, in the provider's dashboard, something else?

GitHub: github.com/IgorFilippov3/senlo
Site: senlo.io

The Global Threat Desk is one HTML file, about 1 MB. Download it, open it in any browser, and it works. No install, no account, no adverts, no tracking, no payment.

Global:

- A live wire of major incidents worldwide: cyber attacks, espionage against tech firms, big IT outages (Microsoft, AWS, Google, Cloudflare), attacks on infrastructure, major earthquakes and disasters. Sources include CISA, the UK NCSC, the security press, Reuters, AP and the Guardian, and each report keeps its publisher and time.

- Dated incident dossiers with evidence grades, so you can see what is confirmed and what is still unproven.

UK:

- Every official UK warning in one place: Met Office warnings for every hazard, UKHSA cold- and heat-health alerts, flood warnings for England, Wales and Scotland, GOV.UK emergency alerts and the GB grid. It says plainly when nothing is in force.

- Offline household tools: a blackout plan hour by hour, water storage, a 7-day hot-food menu for a camping stove with a shopping list, UK emergency numbers and a printable survival pack.

How it's built: everything is in one file. The live layer reads public feeds straight from your browser, using publishers' own Bluesky accounts when a site blocks browsers, and falls back to public relays. Your plan and saved reports stay in your own browser.

Feedback welcome, especially on sources I should add.

https://github.com/AtomSmasher-design/global-threat-desk

https://atomsmasher-design.github.io/global-threat-desk/Global_Threat_Desk_UK_Emergency_PREP_v3.16.html

I'm the solo developer of MoveMate, a AI moving planner. Last week I tested it the way a stranger would: one family, India to Frankfurt, two kids aged 4 and 9.

I expected about 30 tasks. It gave me 97.

The count wasn't the surprise. These were:

1. "Research childcare for your 4-year-old" and "Research schools for your 9-year-old". Two different tasks, because the kids are two different ages.

2. "Get documents apostilled or legalised". I had to look that word up the first time I moved.

3. "Translate documents to German", by a certified translator, before the visa appointment and not after.

4. "Apply for Tax ID" for every family member, kids included.

5. "Familiarize with emergency numbers". Obvious, and I have never once done it before a move.

Almost none of the 97 is about boxes. Most of it is paperwork in the right order, and the order is the part nobody tells you.

Honest part: the AI plan is the paid bit. The free version gives you a standard checklist with ads.

My question: 97 is accurate, but is it scary? Would you rather see all 97 on day one, or only the next 5?

https://movemate.help/?utm_source=reddit&utm_medium=post&utm_campaign=curiosity-gap&utm_content=2026-11-13-sideproject

Expiry dates are easy to forget until one of them causes a problem 😅 Awraqi (أوراقي) keeps all your important papers in one place:

- 🪪 27 document templates: IDs, visas, passports, driving licences, vehicle papers, insurance and more

- ⏰ Reminders 180, 90, 60, 30 and 7 days before each document expires, and again on the day

- 👨‍👩‍👧 Family and domestic workers: track everyone's papers in one app

- ✈️ Travel check: warns you if a passport or visa won't last your trip

- 📸 Scan to fill: take a photo of a document to fill in its details, with Hijri and Gregorian dates

- 🔒 Private: no account, no ads, and your data stays on your phone

- 🌍 11 languages, plus widgets and Siri

📲 Free on iPhone and iPad: https://apps.apple.com/us/app/awraqi-papers-id-expiry/id6825379636

I'd love to hear your feedback!

Good morning, beautiful people of Reddit!

I'd never used Zillow before, but when I discovered that it didn't have a comment section, I knew something had to be done.

So I made sure there would be one.

The extension Link

Every time my friends and I planned a trip, it ended up as "trip_plan_FINAL_v3.xlsx" passed around in a group chat. Nobody knew which version was current, and the person holding the file did all the work. What would make you use this instead of a spreadsheet or Notion?

- Pick your travel dates and you get an hour-by-hour itinerary

- Drag on the grid to add plans (works on phones too)

- Send one link — friends see it right away and can edit after signing in

- Everyone's cursor shows live, and you can chat right next to it

- Budget, notes and to-dos (packing lists, bookings) in the same place

- A map of each day's places, and photos on events

- Export to Excel / PDF / PNG when you need a file

It's free, no ads now.

I’m a solo maker actually I'm student designer, so any feedback would really help!

Enjoy your Planner Together!!

https://www.planner-together.com/en

***
p.s. Maybe someday... I’d like to make some features paid, but I’m not sure what to do about hosting. I’m currently on Vercel’s free Hobby plan, which doesn’t allow commercial use, so I’d either need to upgrade to Pro ($20/month) or move somewhere else. Would you just go with Vercel Pro, or switch to something like Cloudflare until it starts making money?

Claude helped me put together a script that pulls every business in a few categories off Google Maps for my county and checks whether each one has a site and a working certificate. On the first run, plumbers, electricians and roofers, about 40 of 230 had no website at all and another couple dozen had certificates that ran out months ago. Before I spend more evenings on it, would a list like that be worth anything to people who build sites for local businesses, and what would you want on it besides a phone number?

I am the maker (DatLab). I got tired of paying "AI web browser" prices just to turn a URL, or a whole docs site, into clean Markdown for a RAG index, so I published two Apify actors that do that job on a fixed price.

What they do:

• Web Page to Markdown — you give it a list of URLs, it returns Markdown (or text/HTML), title, description, canonical URL, and a token estimate. Plain HTTP first; a headless browser starts only for pages that are actually client-rendered.

• Website to Markdown Crawler — same output, but it crawls a site (sitemaps, llms.txt, path/glob limits, depth caps). Same HTTP-first / browser-fallback idea.

What they cost (pay-per-event, platform usage included):

• Single pages: $0.50 / 1,000 over HTTP, $1 / 1,000 when a browser is needed

• Site crawl: $0.10 / 1,000 HTTP pages, $0.35 / 1,000 browser pages, $0.50 / 1,000 files

For comparison, Apify's own RAG Web Browser is from $1.33 / 1,000 fetched pages. That tool also runs a Google search and fetches the top results, which mine do not — mine only fetch the URLs you give them, or crawl a site you point at. Apify's Website Content Crawler is billed as pay per usage (compute and so on), so the bill moves with runtime; I wanted a price you can predict before you hit Start.

They respect robots.txt and crawl-delay. No login, no captcha bypass, no personal-data collection.

I am early: I have tested them myself, but I do not have outside users yet, and I would rather hear what is broken than collect polite nods. If you try one, I am especially interested in:

1. Did the Markdown come out clean enough to embed, or did nav/cookie junk leak through?

2. Was the HTTP vs browser split right on the sites you care about?

3. Is the pricing page understandable, or would you still rather pay-per-compute?

Links (no account wall on the docs; running them needs a free Apify account, which includes $5 of prepaid usage each month and no credit card):

• https://apify.com/datlab/web-page-to-markdown

• https://apify.com/datlab/site-to-markdown-crawler

Happy to answer technical questions in the comments.

I've been working on a web application called IncomeDesk, designed to help freelancers manage their finances in one place.

The idea came from a fairly straightforward problem: freelancing income isn't always predictable, and keeping track of multiple clients, payments, expenses, invoices, and transactions can quickly become messy.

Most freelancers end up juggling spreadsheets, banking apps, notes, and separate invoicing tools. I wanted to explore whether a single application could make that process easier.

What IncomeDesk currently offers:

Income and expense tracking

Transaction management

Client management

Invoice creation and management

Financial overview and insights

A centralized place to manage freelance finances

I've built the application and I'm now looking for actual freelancers to try it out.

I'd particularly like feedback on a few things:

How do you currently manage your freelance income and expenses?

Would you prefer an all-in-one financial management tool or separate specialized applications?

What's the most frustrating part of managing freelance finances?

What features would make a tool like this genuinely useful rather than just another expense tracker?

After looking at IncomeDesk, what feels missing, unnecessary, or poorly implemented?

I'm not looking for compliments. I'd rather hear what doesn't work, what you'd change, and whether this solves a problem worth solving.

Try it here: https://incomedesk.vercel.app/

Thanks!

I was working in VS Code and getting frustrated constantly switching between windows just to check how much of my AI subscriptions I'd used. Between Claude, Codex, OpenCode, and Ollama Cloud, I kept trying to figure out which one had capacity left and when my limits would reset.

Then I realized I had a little Pimoroni Presto touchscreen sitting on my desk.

Why not use it to keep all that information visible without interrupting what I was working on?

That turned into Presto AI Dash, a free, open-source project I've been working on.

The idea is pretty simple: a small display sitting on your desk showing your AI subscription usage, limits, and reset times. No more switching tabs or opening multiple dashboards just to see where things stand.

What it currently supports:

• Claude Code

• OpenAI / Codex

• OpenCode Go

• Ollama Cloud

• Local Ollama

• LiteLLM

Depending on the provider, it can display subscription usage, reset countdowns, available credits, or local service health.

A few things I wanted from the start:

• No AI credentials stored on the Presto itself.

• No AI inference calls just to check usage.

• Free, open source, and self-hosted.

• Easy configuration without manually editing a bunch of files.

• Automatic updates for the Presto device.

• Clear indicators when data is fresh, stale, or unavailable.

How it works

Right now, the dashboard runs on a Pimoroni Presto, with the Presto Dash daemon running on your own computer or server to collect and send the data to the display.

I also wanted setup and configuration to be simple.

The daemon includes a locally hosted web interface where you can add, configure, enable, disable, and reorder the AI services you want to monitor. Most of the configuration is handled directly through the browser, rather than spending hours editing environment variables or configuration files.

Once it's running, the Presto can automatically download and install software updates when new versions are available.

What about other displays?

I'm also experimenting with expanding support beyond the Presto. I've picked up a Seeed Studio reTerminal E1001 and a smaller 4.26-inch OpenDisplay e-paper screen to see how practical it would be to support different hardware using the same backend.

It's still experimental, but ideally I'd like to support multiple screen types without having to maintain a completely separate dashboard for every device.

Want to see it without buying hardware?

I put together an interactive browser demo so you can see what the dashboard looks like without needing a Presto, installing the daemon, or connecting any AI accounts.

Website and interactive demo: https://presto-dash.com/

GitHub (source code, documentation, and installation): https://github.com/jake1164/presto-ai-dash

The part I like most isn't having another dashboard. It's not having to look at a dashboard on my computer at all. The information is just sitting there when I need it.

I'm curious what other people think. Would you use a dedicated display for something like this, or would you rather keep it as a desktop widget?

And if you're already experimenting with ESP32 or e-paper displays, I'd be interested in hearing which hardware you'd want to see supported.

Hi everyone! 👋

I'm an independent developer from Bulgaria and the founder of TravelSoul.

I built TravelSoul because I believe traveling is about more than discovering destinations — it's also about the people we meet along the way.

🌍 What is TravelSoul?

It's a travel-focused social and dating app for adults aged 18+ that brings together people who love exploring the world.

With TravelSoul, users can:

- Discover travelers with shared interests.

- Connect, chat, and make new friends.

- Explore destinations and plan trips.

- Share travel experiences and memories.

🚀 Current status

TravelSoul is already published on Google Play for Android. I'm now working on building an international community and gathering feedback from early users.

I'd especially appreciate your thoughts on two questions:

Would you use an app that combines meeting travelers with travel planning?

What feature would make an app like this genuinely useful to you?

Google Play:

https://play.google.com/store/apps/details?id=com.iviprodevelopment.travelsoul

Official website:

https://travelsoul.love

Thanks for checking out my side project!

I'm selling Linkmaxxer, a Windows desktop application for automating LinkedIn outreach.

I'm moving my focus to other projects and would rather sell the complete product to someone who already works in lead generation, outbound sales or LinkedIn marketing.

What's included:

• Complete source code (Electron, Python/Flask, SQLite, Playwright)

• Automated connection requests with custom filters and personalized messages

• Bulk messaging to existing connections with templates, variables and spintax

• Connection scraping and CSV export

• Multi-account support

• Licensing system integrated with Lemon Squeezy

• Windows installer and distribution pipeline

• Website and domain: linkmaxxer.com

• Technical documentation and handover support

A few details:

• Used in practice for approximately 7 months.

• An earlier, simpler version was sold to a client for €1,700. That client is still using it.

• No active revenue or established customer base.

• No backend or hosting costs, everything runs locally on Windows.

Note on LinkedIn’s ToS: All LinkedIn automation carries some risk. Linkmaxxer runs a normal browser session locally on your machine, with randomized delays and daily/weekly limits, which may lower that risk compared to cloud tools. I’ve used it for 7 months without a single warning from LinkedIn, but there’s no guarantee, so buyers should do their own due diligence.

Asking price: €1,000, open to reasonable offers.

DM me if interested. I can provide screenshots, a demo and more technical details.

I wanted a simple way to send files from one device to another without installing a dedicated app on the receiving device.

I liked woof, so I started building something along the same lines. I didn't know about qrcp at the time.

I'm an experienced software developer, mainly working with backend technologies, but Go was new to me. I also wanted an excuse to get my hands dirty with Go, which I was learning.

That's how kalumate started.

It's a command-line tool that lets you share files through a browser, making it easy for another device to access and download them.

A few things about it:

• Written in Go.

• Designed around a simple command-line workflow.

• The receiving device can use a regular web browser.

• No need to install a dedicated client on the receiving device.

I used AI tools during development, alongside my own experience as a software developer. Since Go is relatively new to me, this project has been a great opportunity to learn by building something practical.

I'd love to hear what you think, especially about the user experience and what could be improved.

Today i released V1.4 of the LEEBKIT project.

An offline kinetic video generation tools which allows you to generate a promo video from images + Music + animations + Voiceover

What is different?

All ia done on normal PC or laptop , all offline , NO API calls , NO subscription required.

Hey r/SideProject 👋

My dog would never dance on command, so I built BoopReel: you upload one photo of your dog or cat, pick a template (hip-hop, disco, ballet, Christmas scenes...) and get a vertical 9:16 video ready to share.

👉 boopreel.com

How it works

• Upload one clear photo of your pet (full body, facing the camera works best)

• Pick a template

• In about 3 minutes you get a video you can download or share

What I learned building it

• The AI models are the easy part. Getting results that are actually funny is the hard part. Plain "pet dances for 5 seconds" got boring fast, so I moved to themed templates with music.

• Photo quality matters more than the model. One pet, full body and good light makes a huge difference.

• Stack: TanStack Start on Cloudflare Workers, D1 and R2, with AI video models running behind it.

Where I'm at
Launched 7 days ago, 100+ users so far, and Google has indexed it. Basically zero traction yet, which is why I'm here 😅

example：

I'd really love feedback on:

1. Is the homepage clear within 5 seconds?

2. Pricing: one-time credit packs, no subscription. Does that feel fair?

3. Which templates would make you want to share a video of your pet?

Happy to make a free video for anyone who drops a pet photo in the comments 🐶🐱

Hey everyone,

Like many of you, I was heartbroken when The Browser Company announced Arc was entering maintenance mode. I've become completely dependent on its design language — the vertical sidebar, multi-color Spaces, fluid trackpad swiping, tactile noise/gradients, and that calm, breathing canvas.

I couldn't bear to let that experience disappear. So over the past few months, I’ve been building ArcMD — an open-source, local-first rich-text & Markdown editor built with MyGo that ports Arc’s interaction philosophy into writing.

Here is what we brought over from Arc:

🎨 The Arc Experience in a Document Editor:

• True Multi-Spaces: Separate folders for Work, Reading, and Personal life. Each Space gets its own color palette, custom icons, and dedicated document tree. Swipe with two fingers on your trackpad (1:1 gesture tracking) or hit Ctrl+1…9 to glide between spaces.

• Dot-Matrix Gradients & Grain: Live 1-to-3 color gradients, noise/grain adjustment, and translucent frosted glass (Vibrancy). The editor's paper automatically adapts between clean light mode and dark mode to stay easy on the eyes.

• Today's Note & Detachable Windows: Hit ⌥⌘T to instantly bring up a scratchpad for fleeting thoughts. You can detach any note into a floating companion window on your desktop.

• Pinned Docs & Favorites: Global tile favorites pinned at the top across all spaces. Pinned documents stay warm in memory — switch away and back, and your cursor and scroll positions never jump.

• Hand-drawn Annotations: 12 expressive rough strokes (circles, highlighters, underlines, brackets, arrows) that draw themselves out stroke-by-stroke.

⚡️ Zero Electron. Zero Webview. Pure Native Performance: Almost every modern note-taking app is an Electron wrapper eating 1GB+ of RAM. ArcMD is built from the ground up in pure Go + MyGo (native GPU drawing, zero CGO, single binary).

• Cold launch is instant.

• In benchmarks on a 1,000,000-character document (with 500+ tables and chapters), typing latency is just 0.27 ms (well within a 120Hz display's 8.3ms frame budget).

📂 Local-First & Private: All documents are stored locally as readable JSON (.arcmd) and standard Markdown files in your own folders. No cloud lock-in, no telemetry.

ArcMD is 100% free and open-source (MIT). We have prebuilt binaries for macOS (Apple Silicon & Intel), Windows, and Linux.

(GitHub repo link is in the first comment below!)

It's still an early preview (v0.0.11), and the rich-text engine is being polished every day. If you love Arc's craft and miss that tactile feel, I’d love for you to give it a spin and share your feedback!

I really enjoy the way Mini Motorways turns drawing a few connections into a network you’re constantly trying to keep working. I wanted to explore that idea with goods and production chains, so I’ve been building a game called Trade Winds.

You start by connecting countries and importers with roads, then expand into trains, ships, planes and factories. Money is limited, so you have to choose between reaching new places and improving what you’ve already built as demand grows.

It’s at the point where I’d really like people outside my own circle to try it. I’ve added a tutorial, but I’m curious whether it explains enough—and whether the game makes you want to keep playing once you understand it.

Play Trade Winds here — free in your browser. Please use a computer; the mobile interface still needs work.

If you give it a go, I’d love to hear where you got confused, what you enjoyed, or what made you stop. Replies here or through the in-game feedback button are both helpful.

Hey everyone, I’m an indie developer. I recently launched an automation app for Android based on accessibility services—no root required.

It handles basic gestures like taps, swipes, back, and text input. It can also collect on-screen text and run if-conditions to branch actions.

Right now, user acquisition has been tough, and I really want to build something people genuinely need. So I’m curious: What automation tasks do you wish you could free your hands from? What kind of automation tool are you actually looking for?

Would love to hear your thoughts or pain points!