写博客的意义在减弱。 blog.xiebiao.com/

My daughter gave me this and told me to implement it following this game design spec. But I have no idea about game development. Hi @X help me.

我女儿给我布置好了假期作业， 按设计稿开发游戏， 可是毫无游戏开发经验， 只能硬着头皮让Codex顶上了

你们都在用AI搞UI，我在人肉给AI产生的UI做减法， 优化了一波： pushbeat.app

A security finding without a kill test is just a rumor. cloudflare/security-audit-skill: recon ledger, isolated hunters, then a fresh verifier whose job is to disprove every candidate. findings.json is schema-checked. Confirmed needs a source trace. ~15k stars this week. MIT.

General agents skim half a PR and invent line numbers. alibaba/open-code-review (`ocr`) — deterministic file pick + bundle sub-agents, then LLM only for judgment. Line-accurate comments. NPE / XSS / SQLi rules in-box. npm i -g @alibaba-group/open-code-review ~1/9 the tokens vs a general agent review. ~9.8k★ this week.

I kept rebuilding Claude Code agents from Discord screenshots. davila7/claude-code-templates — one CLI: agents, slash commands, hooks, MCPs, settings. npx claude-code-templates@latest --agent … --mcp … --yes Same binary runs --analytics and --health-check. ~389★ today.

Banking work has a shape. This repo named it. anthropics/financial-services — Pitch Agent (comps→LBO→deck), GL Reconciler, /dcf /earnings as installable skills. ~664★ today. Still stages every output for human sign-off. Correct.

My agent kept inventing the same Tailwind card stack. Switched on pbakaus/impeccable: open design language for AI harnesses. One skill, 24 commands, 61 detectors for spacing/type/color tells, plus a live browser loop. npx impeccable install → /impeccable init. Fewer purple gradients. More mine.

My positions stay on my disk. TNT-Likely/PanWatch — self-hosted A/HK/US desk. Docker in ~5 min. Alerts to Telegram/WeChat/DingTalk. One tap: 9-agent research chain (debate → risk → PM brief) in 3–5 min, ~$0.05 on deepseek. No SaaS reading your book. MIT.

I don't need a PyTorch zoo. I need video → splat → mesh. harry7557558/spirula-studio is buzzing — cross-vendor 3D Gaussian Splatting trainer. One binary: photo/video in, textured mesh out. Vulkan or CUDA. No Python, no COLMAP install. Up to 10M Gaussians in 8GB VRAM. NeRF clouds sell the cluster. They sold the binary.

412,000 tokens to walk a repo. 3,400 with a graph query. DeusData/codebase-memory-mcp is buzzing — pure-C local MCP. Indexes an average repo in milliseconds; Linux kernel (~28M LOC) in ~3 min. 162 languages. No API key. Agent stacks sell another loop. They sold the index.

744B MoE. ~10 GB resident. On a laptop. JustVugg/colibri is buzzing — pure C, zero deps. Streams MoE experts from disk across VRAM/RAM/NVMe. Frontier models (744B–2.8T) on hardware you already own. Hyperscalers sell the rack. They sold the paging strategy.

I don't need a Bloomberg seat. I need a chart that boots on my VPS. Open-Dev-Society/OpenStock is buzzing — open-source market tracker. Real-time prices, alerts, company insights. AGPL. Forever free. Paid terminals sell the wall. They sold the fork.

I don't need another $20/seat. I need a board that boots on my VPS. makeplane/plane is buzzing — open-source Jira/Linear alternative. Issues, cycles, docs, triage. Self-host, AGPL. They didn't just clone the roadmap UI. They cloned the part you can actually own.

I don't need another timeline. I need final.mp4. browser-use/video-use is buzzing — open-source video editing for coding agents. Drop raw takes in a folder. It cuts umms, color grades, burns captions, checks every cut before you see it. Premiere sells the timeline. They sold the export.

"Clean phone" is not a status. It's a claim. mvt-project/mvt is buzzing — Amnesty's Mobile Verification Toolkit. CLI forensics for Android/iOS: scan backups against public spyware IOCs. Just merged v3. Output contracts broke. Security theater sells vibes. This one sells traces.

China Haul 火了。 外国游客空箱入境，满箱离境。 以前是出境爆买。 现在是入境爆买。 行李箱：终于轮到我超重了。

Semrush is $139/mo. My agent needs one backlink check. treg is buzzing — OpenRouter, but for tools. One token → 3,000+ endpoints across 60+ providers. Per-call pricing. Keys stay on the registry. I used to buy the whole subscription for one CLI run. They sold the call.

今天秋分，昼夜平分。 太阳：一人一半。 睡眠：表示没签收。