📦 Open Source Packages

Lightweight utilities and production-ready tools:

🔵 Go

• cfzt (zt) — Zero Trust tunnel manager. Automatically exposes local services through Cloudflare Zero Trust, manages system daemons, configures access policies, and auto-heals UDP/QUIC fallbacks.
  

⚪ C

• khm — Known Hosts Manager. A zero-dependency CLI tool to audit, diff, and scan SSH known_hosts using raw BSD sockets and a partial SSH handshake.
  

🦀 Rust

• ios-config — Parser and high-level wrapper for Cisco IOS configurations.
  

• ios-config-core — Intermediate representation (IR) types for parsed Cisco IOS configurations.
  

• gai-inspector (gai) — getaddrinfo inspector: explains how a name turns into an IP (nsswitch, resolv.conf, systemd-resolved, mDNS) and cross-checks it against a direct DNS query, no LD_PRELOAD/eBPF/ptrace.
  

• gai-core — Pure parsing + simulation of Linux name-resolution config (nsswitch.conf, resolv.conf, gai.conf, hosts) behind gai-inspector — no I/O, fixture-tested.
  

• gai-probe — Real I/O backing gai-core's simulation: DNS queries, /etc/hosts, systemd-resolved D-Bus, one-shot mDNS probing.
  

• sidecheck — CLI that audits your own HTTP endpoints for remote timing side-channels, using proper statistics (bootstrap confidence intervals, robust jitter estimation) instead of a stopwatch.
  

• sidecheck-core — Statistical core and HTTP sampler behind sidecheck: Crosby-Wallach box-test timing analysis as a standalone library.
  

• pcap-frame-parser — A small, dependency-light Rust parser for network capture files and the frames inside them - no libpcap/npcap linkage, no unsafe.
  

• Network Forensic Series — A growing collection of browser-based postmortem PCAP analysis tools.

🟢 Node.js

• @lighthouse-explorer/light-parser — Parses IALA maritime light characteristic strings into structured ASTs with computed phase sequences.
  

• burnafter — CLI tool and Fullstack application to share secrets that safely burn after being read.