# GitHub Trending — Tuesday 27 October 2026

*A daily reading of GitHub’s trending page — a supplement to The AI Gazette*

- Digest: 2026-10-27
- Issued: 27 Oct 2026, 08:03 CET (Paris)
- Source: [GitHub Trending, daily](<https://github.com/trending?since=daily>), checked 27 Oct 2026, 08:00 CET; 14 repositories listed; 5 picked.

GitHub listed fourteen projects this Tuesday morning. Eight had been featured before, seven of them within the past week, and none showed a change big enough to bring it back, so today's edition has five first-time picks. NVIDIA's SkillSpector leads because it answers a timely question: **is this agent skill safe to install?** Postiz is a self-hostable social media scheduler that has just shipped urgent security fixes, OpenBot is a desktop workspace for several AI agents at once, Agent Reach lets an agent read platforms that ordinary web search misses, and Huashu Design turns a one-line request into a prototype, deck or animation. Curation order reflects practical interest, not GitHub rank. Trending is not a release date or an endorsement.

> Picks are listed in curation order, not GitHub’s rank; each card shows the rank GitHub displayed when the page was checked. Stars measure attention, not security, quality or fitness for use, and no project here was installed or run. “Stars today” is GitHub’s own displayed figure for its daily window, not an audited rolling 24-hour count.

## Picks

### 1. [NVIDIA/SkillSpector](<https://github.com/NVIDIA/SkillSpector>)

*Security / AI agents · GitHub rank #7 of 14 · Python · License: Apache-2.0*

**What it does:** A **security scanner for AI agent skills** (Claude Code, Codex, MCP and similar). It scans a folder, single SKILL.md, Git repository, URL or zip file against 71 patterns in 17 categories, including prompt injection, data exfiltration, privilege escalation, supply-chain and memory-poisoning risks, with an optional LLM second pass, and reports a 0-100 risk score as terminal, JSON, Markdown or SARIF output.

**Why it is interesting (editorial):** *First time on our list. Agent skills run with broad trust and little vetting, and this gives a **repeatable pre-install check** you can wire into CI via SARIF, with a baseline file so re-scans show only new findings. It is part of NVIDIA's own pipeline for signing skills in its catalog. The v2.13.0 release on 16 October disabled the Codex CLI analysis provider because its sandbox could read host secrets, and v2.13.1 followed on 23 October with false-positive fixes.*

**Caveat:** A scanner lowers risk but **cannot prove a skill is safe**: static patterns miss novel tricks and flag harmless text, and the README's figure that 26.1% of 31,132 analysed skills had vulnerabilities is the project's own research. The optional LLM pass sends skill content to the provider you configure and uses your API credits. Requires Python 3.12+ or Docker, and installs further third-party packages. We did not install or test it.

**Attention, not endorsement:** GitHub showed “214 stars today” as displayed for GitHub's daily window (not an audited rolling 24-hour count). Total stars: 22,463 at the metadata check.

**Primary evidence:**

1. <https://github.com/NVIDIA/SkillSpector>
2. <https://api.github.com/repos/NVIDIA/SkillSpector>
3. <https://github.com/NVIDIA/SkillSpector/releases/tag/v2.13.1>
4. <https://github.com/NVIDIA/SkillSpector/releases/tag/v2.13.0>
5. <https://github.com/NVIDIA/SkillSpector/blob/main/LICENSE>

*Metadata checked 27 Oct 2026, 08:01 CET. README read from <https://api.github.com/repos/NVIDIA/SkillSpector/readme>, checked 27 Oct 2026, 08:01 CET.*

### 2. [gitroomhq/postiz-app](<https://github.com/gitroomhq/postiz-app>)

*Productivity / social media · GitHub rank #12 of 14 · TypeScript · License: AGPL-3.0*

**What it does:** An **open-source social media scheduler** with a calendar, cross-posting, team collaboration, analytics, RSS auto-posting, AI writing and image tools, a public API and webhooks, plus MCP and CLI access so AI agents can draft and schedule posts. It runs as Postiz Cloud or self-hosted with Docker on your own Postgres and Redis.

**Why it is interesting (editorial):** *First time on our list. A mature project (created 2023) and a credible alternative to paid schedulers, with **no feature gating in the self-hosted edition**: unlimited channels, posts and team members, as its README compares. It also connects to automation tools such as n8n, Make and Zapier. Its two latest releases, v2.25.2 and v2.25.3 on 23-24 October, are security releases.*

**Caveat:** Both releases flag security advisories and ask **all users to upgrade immediately**; the commits name a JWT bypass and local-file access fix, so self-hosters must keep up with patches. Self-hosting also means creating your own developer apps on each social network, and Meta, YouTube or TikTok approval can take weeks. AI features need your own provider keys. AGPL-3.0 applies if you modify and serve it. We did not install or test it.

**Attention, not endorsement:** GitHub showed “188 stars today” as displayed for GitHub's daily window (not an audited rolling 24-hour count). Total stars: 38,679 at the metadata check.

**Primary evidence:**

1. <https://github.com/gitroomhq/postiz-app>
2. <https://api.github.com/repos/gitroomhq/postiz-app>
3. <https://github.com/gitroomhq/postiz-app/releases/tag/v2.25.3>
4. <https://github.com/gitroomhq/postiz-app/releases/tag/v2.25.2>
5. <https://github.com/gitroomhq/postiz-app/blob/main/LICENSE>

*Metadata checked 27 Oct 2026, 08:01 CET. README read from <https://api.github.com/repos/gitroomhq/postiz-app/readme>, checked 27 Oct 2026, 08:01 CET.*

### 3. [nightly-labs/openbot](<https://github.com/nightly-labs/openbot>)

*AI agents / desktop · GitHub rank #9 of 14 · TypeScript · License: PolyForm Noncommercial 1.0.0*

**What it does:** A **desktop workspace for persistent AI teammates**: each agent, backed by Codex, Claude Code, Grok, OpenCode, Gemini, Cursor or Cline, gets its own workspace and conversation, with message queues, file transfers, agent-to-agent messaging, shared channel chats, an embedded browser agents can control, and optional computer use. Builds exist for macOS, Windows and Linux.

**Why it is interesting (editorial):** *First time on our list. Instead of juggling several agent CLIs in terminals, it runs them side by side as named teammates that can hand tasks to each other, with one task owner per shared chat and Stop, Resume and Reassign controls. It detects local model servers such as Ollama and LM Studio. Development is fast: v0.49 to v0.51.1 shipped between 24 and 26 October.*

**Caveat:** A development preview: agents run with **full access and no per-action approval** after first-launch consent, so they can change files, run commands and use the network unattended. It is source-available under PolyForm Noncommercial 1.0.0, **not an open-source license**: commercial use needs a paid license. Optional accounts use the maker's cloud service, and model costs are your providers'. We did not install or test it.

**Attention, not endorsement:** GitHub showed “176 stars today” as displayed for GitHub's daily window (not an audited rolling 24-hour count). Total stars: 1,697 at the metadata check.

**Primary evidence:**

1. <https://github.com/nightly-labs/openbot>
2. <https://api.github.com/repos/nightly-labs/openbot>
3. <https://github.com/nightly-labs/openbot/releases/tag/v0.51.1>
4. <https://github.com/nightly-labs/openbot/blob/main/LICENSE>

*Metadata checked 27 Oct 2026, 08:01 CET. README read from <https://api.github.com/repos/nightly-labs/openbot/readme>, checked 27 Oct 2026, 08:01 CET.*

### 4. [Panniantong/Agent-Reach](<https://github.com/Panniantong/Agent-Reach>)

*AI agents / research tools · GitHub rank #10 of 14 · Python · License: MIT*

**What it does:** A command-line layer that **lets AI agents read platforms ordinary web search misses**: GitHub, YouTube subtitles and transcripts, Reddit, LinkedIn jobs, X, Bilibili, Xiaohongshu, V2EX, Xueqiu and podcasts, through one agent-reach command that picks a working tool for each site and falls back to another when one breaks.

**Why it is interesting (editorial):** *First time on our list. It packages a messy job, keeping scrapers for many sites working, behind one stable command any agent can call, and is strong on Chinese platforms that general search covers poorly. The v1.6.0 rebuild on 23 October keeps everything under one folder, uses its own background browser for login sites, and the README states it is read-only: it never posts, comments or sends messages.*

**Caveat:** Login channels **copy a site's login from your Chrome**, and platforms may restrict accounts used for automation; the README itself advises a secondary account. Some channels are labelled experimental and the 1.6.0 release shipped with several untested on the release machine (Reddit, Instagram, LinkedIn among them). Scraping may conflict with a site's terms. The PyPI package of the same name is not this project. We did not install or test it.

**Attention, not endorsement:** GitHub showed “746 stars today” as displayed for GitHub's daily window (not an audited rolling 24-hour count). Total stars: 104,122 at the metadata check.

**Primary evidence:**

1. <https://github.com/Panniantong/Agent-Reach>
2. <https://api.github.com/repos/Panniantong/Agent-Reach>
3. <https://github.com/Panniantong/Agent-Reach/blob/main/docs/README_en.md>
4. <https://github.com/Panniantong/Agent-Reach/releases/tag/v1.6.0>
5. <https://github.com/Panniantong/Agent-Reach/blob/main/LICENSE>

*Metadata checked 27 Oct 2026, 08:01 CET. README read from <https://api.github.com/repos/Panniantong/Agent-Reach/readme>, checked 27 Oct 2026, 08:01 CET.*

### 5. [alchaincyf/huashu-design](<https://github.com/alchaincyf/huashu-design>)

*AI agents / design · GitHub rank #13 of 14 · HTML · License: MIT*

**What it does:** An **HTML-native design skill** for Claude Code, Codex, Cursor and other agents: from one sentence it produces clickable app or web prototypes, HTML slide decks with editable PPTX export, timeline animations as MP4 or GIF, infographics and a five-point design review. Version 3.0 proposes six directions to pick three from and ships a library of 84 styles with samples.

**Why it is interesting (editorial):** *First time on our list. Unlike the design-taste skills we covered on 25 October, it **delivers finished files** (prototype, deck, video) rather than only rules, and it keeps a local record of the styles you choose so later results follow your taste. The README says the core render and export pipeline runs locally with no network or keys; cloud voice-over and review scripts are optional. It moved to the MIT license in May.*

**Caveat:** The main README and examples are in Chinese (an English README exists). The author calls it an 80-point skill: no layer-editable Figma output, no 3D or physics animation, and weaker results for a brand designed from scratch. The timings in its table are the author's claims. Older skills CLI versions install only SKILL.md and miss the scripts it needs. We did not install or test it.

**Attention, not endorsement:** GitHub showed “251 stars today” as displayed for GitHub's daily window (not an audited rolling 24-hour count). Total stars: 27,286 at the metadata check.

**Primary evidence:**

1. <https://github.com/alchaincyf/huashu-design>
2. <https://api.github.com/repos/alchaincyf/huashu-design>
3. <https://github.com/alchaincyf/huashu-design/releases/tag/v3.0.0>
4. <https://github.com/alchaincyf/huashu-design/blob/master/LICENSE>

*Metadata checked 27 Oct 2026, 08:01 CET. README read from <https://api.github.com/repos/alchaincyf/huashu-design/readme>, checked 27 Oct 2026, 08:01 CET.*

## The full list

Every repository GitHub listed, in GitHub's order, as displayed at 27 Oct 2026, 08:00 CET.

1. [Nutlope/hallmark](<https://github.com/Nutlope/hallmark>) · CSS · 2,244 stars today · 37,157 stars in total
   *Anti-AI-slop design skill for Claude Code, Cursor, and Codex.*
   **Covered before:** first picked 25 Oct 2026 at 32,498 stars; now 37,157: +4,659 stars (+14.3%) in 2 days, about 2,330 a day.
2. [TauricResearch/TradingAgents](<https://github.com/TauricResearch/TradingAgents>) · Python · 1,395 stars today · 116,579 stars in total
   *TradingAgents: Multi-Agents LLM Financial Trading Framework*
   **Covered before:** first picked 26 Oct 2026 at 114,951 stars; now 116,579: +1,628 stars (+1.4%) in 1 day.
3. [JetBrains/thinkrail](<https://github.com/JetBrains/thinkrail>) · TypeScript · 1,173 stars today · 3,242 stars in total
   *Vibe code with pi in a lightweight, real IDE that customises itself around the way you work — The Vibe You Need*
   **Covered before:** first picked 26 Oct 2026 at 2,081 stars; now 3,242: +1,161 stars (+55.8%) in 1 day.
4. [makecindy/cindy](<https://github.com/makecindy/cindy>) · TypeScript · 1,296 stars today · 6,878 stars in total
   *Consider it done. The open-source AI agent that works out of the box · 想到，就能做到。开源、开箱即用的 AI Agent。*
   **Covered before:** first picked 25 Oct 2026 at 4,269 stars; now 6,878: +2,609 stars (+61.1%) in 2 days, about 1,304 a day.
5. [affaan-m/ECC](<https://github.com/affaan-m/ECC>) · JavaScript · 896 stars today · 290,094 stars in total
   *The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.*
   **Covered before:** first picked 16 Oct 2026 at 280,607 stars; now 290,094: +9,487 stars (+3.4%) in 11 days, about 862 a day.
6. [pbakaus/impeccable](<https://github.com/pbakaus/impeccable>) · Rust · 1,506 stars today · 89,543 stars in total
   *The design language that makes your AI harness better at design.*
   **Covered before:** first picked 25 Oct 2026 at 86,664 stars; now 89,543: +2,879 stars (+3.3%) in 2 days, about 1,440 a day.
7. [NVIDIA/SkillSpector](<https://github.com/NVIDIA/SkillSpector>) · Python · 214 stars today · 22,461 stars in total
   *Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.*
   **Picked today** (pick 1).
8. [pollen-robotics/microduck](<https://github.com/pollen-robotics/microduck>) · Rust · 843 stars today · 12,567 stars in total
   *A Tiny biped duck robot*
   **Covered before:** first picked 25 Oct 2026 at 11,154 stars; now 12,567: +1,413 stars (+12.7%) in 2 days, about 706 a day.
9. [nightly-labs/openbot](<https://github.com/nightly-labs/openbot>) · TypeScript · 176 stars today · 1,696 stars in total
   *A local-first desktop workspace for persistent AI teammates. Run Codex, Claude, and Grok with dedicated workspaces, task queues, file sharing, browser control, and agent-to-agent collaboration.*
   **Picked today** (pick 3).
10. [Panniantong/Agent-Reach](<https://github.com/Panniantong/Agent-Reach>) · Python · 746 stars today · 104,121 stars in total
   *Give your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees.*
   **Picked today** (pick 4).
11. [debpalash/VoiceStudio](<https://github.com/debpalash/VoiceStudio>) · Python · 2,297 stars today · 89,915 stars in total
   *VoiceStudio is the open-source, fully-local ElevenLabs alternative — voice cloning, voice design, video dubbing, dictation, transcription & audiobook creation in 646 languages.*
   **Covered before:** first picked 15 Oct 2026 at 67,106 stars; now 89,915: +22,809 stars (+34.0%) in 12 days, about 1,901 a day. Also picked 19 Oct 2026, 26 Oct 2026.
12. [gitroomhq/postiz-app](<https://github.com/gitroomhq/postiz-app>) · TypeScript · 188 stars today · 38,679 stars in total
   *The ultimate agentic social media scheduling tool*
   **Picked today** (pick 2).
13. [alchaincyf/huashu-design](<https://github.com/alchaincyf/huashu-design>) · HTML · 251 stars today · 27,285 stars in total
   *Huashu Design 3.0 · 在 agent 里打一句话，拿回能交付的设计：网页 / App 原型 / 可编辑 PPTX / 动画 / 信息图 · 六个候选挑三个方向 · 84 种带样张的风格库 · 越用越懂你的外观账本与设计体检 · HTML-native design skill for Claude Code, Codex, Cursor & any agent*
   **Picked today** (pick 5).
14. [multica-ai/andrej-karpathy-skills](<https://github.com/multica-ai/andrej-karpathy-skills>) · language not shown · 638 stars today · 224,925 stars in total
   *A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls.*
   Not covered yet.

## Following our picks

Then: total stars at our first pick. Now: GitHub API star count at the check time.

| Project | First picked | Stars then | Stars now | Change | Per day | Since last check |
| --- | --- | ---: | ---: | ---: | ---: | --- |
| [morluto/rea](<https://github.com/morluto/rea>) | 15 Oct 2026 | 250,334 | 393,311 | +142,977 (+57.1%) | 11,915 | +6,101 since 26 Oct 2026 |
| [debpalash/VoiceStudio](<https://github.com/debpalash/VoiceStudio>) (on today's list, #11) | 15 Oct 2026 | 67,106 | 89,924 | +22,818 (+34.0%) | 1,902 | +2,276 since 26 Oct 2026 |
| [MadsLorentzen/ai-job-search](<https://github.com/MadsLorentzen/ai-job-search>) | 17 Oct 2026 | 48,789 | 66,452 | +17,663 (+36.2%) | 1,766 | +523 since 26 Oct 2026 |
| [cloudflare/security-audit-skill](<https://github.com/cloudflare/security-audit-skill>) | 21 Oct 2026 | 34,638 | 48,907 | +14,269 (+41.2%) | 2,378 | +1,316 since 26 Oct 2026 |
| [xerj-org/xerj](<https://github.com/xerj-org/xerj>) | 16 Oct 2026 | 5,936 | 16,924 | +10,988 (+185.1%) | 999 | +1,241 since 26 Oct 2026 |
| [stablyai/orca](<https://github.com/stablyai/orca>) | 18 Oct 2026 | 96,443 | 107,357 | +10,914 (+11.3%) | 1,213 | +1,023 since 26 Oct 2026 |
| [affaan-m/ECC](<https://github.com/affaan-m/ECC>) (on today's list, #5) | 16 Oct 2026 | 280,607 | 290,094 | +9,487 (+3.4%) | 862 | +971 since 26 Oct 2026 |
| [hmjz100/LinkSwift](<https://github.com/hmjz100/LinkSwift>) | 17 Oct 2026 | 23,961 | 31,467 | +7,506 (+31.3%) | 751 | +3,373 since 26 Oct 2026 |
| [DietrichGebert/ponytail](<https://github.com/DietrichGebert/ponytail>) | 21 Oct 2026 | 170,170 | 177,433 | +7,263 (+4.3%) | 1,210 | +953 since 26 Oct 2026 |
| [NationalSecurityAgency/ghidra](<https://github.com/NationalSecurityAgency/ghidra>) | 15 Oct 2026 | 87,837 | 94,820 | +6,983 (+7.9%) | 582 | +380 since 26 Oct 2026 |
| [Graphify-Labs/graphify](<https://github.com/Graphify-Labs/graphify>) | 21 Oct 2026 | 130,551 | 136,380 | +5,829 (+4.5%) | 972 | +794 since 26 Oct 2026 |
| [anomalyco/opencode](<https://github.com/anomalyco/opencode>) | 18 Oct 2026 | 216,421 | 222,085 | +5,664 (+2.6%) | 629 | +393 since 26 Oct 2026 |
| [anthropics/claude-plugins-official](<https://github.com/anthropics/claude-plugins-official>) | 16 Oct 2026 | 39,407 | 44,803 | +5,396 (+13.7%) | 491 | +163 since 26 Oct 2026 |
| [obra/superpowers](<https://github.com/obra/superpowers>) | 17 Oct 2026 | 300,784 | 305,753 | +4,969 (+1.7%) | 497 | +492 since 26 Oct 2026 |
| [Comfy-Org/ComfyUI](<https://github.com/Comfy-Org/ComfyUI>) | 18 Oct 2026 | 138,516 | 143,379 | +4,863 (+3.5%) | 540 | +298 since 26 Oct 2026 |
| [Nutlope/hallmark](<https://github.com/Nutlope/hallmark>) (on today's list, #1) | 25 Oct 2026 | 32,498 | 37,169 | +4,671 (+14.4%) | 2,336 | +2,395 since 26 Oct 2026 |
| [HKUDS/CLI-Anything](<https://github.com/HKUDS/CLI-Anything>) | 15 Oct 2026 | 52,714 | 57,289 | +4,575 (+8.7%) | 381 | +96 since 26 Oct 2026 |
| [K-Dense-AI/scientific-agent-skills](<https://github.com/K-Dense-AI/scientific-agent-skills>) | 16 Oct 2026 | 50,751 | 54,828 | +4,077 (+8.0%) | 371 | +161 since 26 Oct 2026 |
| [LibreSpark/LibreTV](<https://github.com/LibreSpark/LibreTV>) | 16 Oct 2026 | 18,264 | 22,221 | +3,957 (+21.7%) | 360 | +222 since 26 Oct 2026 |
| [ruvnet/ruflo](<https://github.com/ruvnet/ruflo>) | 17 Oct 2026 | 75,720 | 79,616 | +3,896 (+5.1%) | 390 | +254 since 26 Oct 2026 |
| [akitaonrails/ai-memory](<https://github.com/akitaonrails/ai-memory>) | 18 Oct 2026 | 10,395 | 13,881 | +3,486 (+33.5%) | 387 | +261 since 26 Oct 2026 |
| [mksglu/context-mode](<https://github.com/mksglu/context-mode>) | 15 Oct 2026 | 29,346 | 32,468 | +3,122 (+10.6%) | 260 | +136 since 26 Oct 2026 |
| [pbakaus/impeccable](<https://github.com/pbakaus/impeccable>) (on today's list, #6) | 25 Oct 2026 | 86,664 | 89,545 | +2,881 (+3.3%) | 1,440 | +1,274 since 26 Oct 2026 |
| [xtool-org/xtool](<https://github.com/xtool-org/xtool>) | 15 Oct 2026 | 11,141 | 13,842 | +2,701 (+24.2%) | 225 | +83 since 26 Oct 2026 |
| [vxcontrol/pentagi](<https://github.com/vxcontrol/pentagi>) | 15 Oct 2026 | 29,886 | 32,539 | +2,653 (+8.9%) | 221 | +82 since 26 Oct 2026 |
| [makecindy/cindy](<https://github.com/makecindy/cindy>) (on today's list, #4) | 25 Oct 2026 | 4,269 | 6,881 | +2,612 (+61.2%) | 1,306 | +1,388 since 26 Oct 2026 |
| [anthropics/knowledge-work-plugins](<https://github.com/anthropics/knowledge-work-plugins>) | 21 Oct 2026 | 30,889 | 33,290 | +2,401 (+7.8%) | 400 | +214 since 26 Oct 2026 |
| [shiyu-coder/Kronos](<https://github.com/shiyu-coder/Kronos>) | 20 Oct 2026 | 41,840 | 43,889 | +2,049 (+4.9%) | 293 | +88 since 26 Oct 2026 |
| [luongnv89/claude-howto](<https://github.com/luongnv89/claude-howto>) | 23 Oct 2026 | 43,466 | 45,411 | +1,945 (+4.5%) | 486 | +253 since 26 Oct 2026 |
| [android/skills](<https://github.com/android/skills>) | 17 Oct 2026 | 8,149 | 9,858 | +1,709 (+21.0%) | 171 | +91 since 26 Oct 2026 |
| [TauricResearch/TradingAgents](<https://github.com/TauricResearch/TradingAgents>) (on today's list, #2) | 26 Oct 2026 | 114,951 | 116,583 | +1,632 (+1.4%) | 1,632 | - |
| [headroomlabs-ai/headroom](<https://github.com/headroomlabs-ai/headroom>) | 20 Oct 2026 | 76,370 | 77,962 | +1,592 (+2.1%) | 227 | +109 since 26 Oct 2026 |
| [pollen-robotics/microduck](<https://github.com/pollen-robotics/microduck>) (on today's list, #8) | 25 Oct 2026 | 11,154 | 12,567 | +1,413 (+12.7%) | 706 | +549 since 26 Oct 2026 |
| [Renhuai123/ziwei-doushu](<https://github.com/Renhuai123/ziwei-doushu>) | 24 Oct 2026 | 7,018 | 8,308 | +1,290 (+18.4%) | 430 | +217 since 26 Oct 2026 |
| [NVIDIA/OpenShell](<https://github.com/NVIDIA/OpenShell>) | 24 Oct 2026 | 18,934 | 20,137 | +1,203 (+6.4%) | 401 | +178 since 26 Oct 2026 |
| [JetBrains/thinkrail](<https://github.com/JetBrains/thinkrail>) (on today's list, #3) | 26 Oct 2026 | 2,081 | 3,247 | +1,166 (+56.0%) | 1,166 | - |
| [vllm-project/vllm](<https://github.com/vllm-project/vllm>) | 21 Oct 2026 | 94,532 | 95,657 | +1,125 (+1.2%) | 188 | +95 since 26 Oct 2026 |
| [withmarbleapp/os-taxonomy](<https://github.com/withmarbleapp/os-taxonomy>) | 20 Oct 2026 | 6,282 | 7,392 | +1,110 (+17.7%) | 159 | +22 since 26 Oct 2026 |
| [AgriciDaniel/claude-seo](<https://github.com/AgriciDaniel/claude-seo>) | 26 Oct 2026 | 21,327 | 22,322 | +995 (+4.7%) | 995 | - |
| [supabase/supabase](<https://github.com/supabase/supabase>) | 22 Oct 2026 | 113,145 | 114,078 | +933 (+0.8%) | 187 | +126 since 26 Oct 2026 |
| [SnailSploit/Claude-Red](<https://github.com/SnailSploit/Claude-Red>) | 24 Oct 2026 | 8,623 | 9,484 | +861 (+10.0%) | 287 | +243 since 26 Oct 2026 |
| [mlabonne/llm-course](<https://github.com/mlabonne/llm-course>) | 18 Oct 2026 | 83,959 | 84,728 | +769 (+0.9%) | 85 | +19 since 26 Oct 2026 |
| [anthropics/claude-code](<https://github.com/anthropics/claude-code>) | 20 Oct 2026 | 152,763 | 153,504 | +741 (+0.5%) | 106 | +90 since 26 Oct 2026 |
| [Meloong-Git/PCL](<https://github.com/Meloong-Git/PCL>) | 23 Oct 2026 | 8,777 | 9,351 | +574 (+6.5%) | 144 | +38 since 26 Oct 2026 |
| [twentyhq/twenty](<https://github.com/twentyhq/twenty>) | 22 Oct 2026 | 59,348 | 59,848 | +500 (+0.8%) | 100 | +86 since 26 Oct 2026 |
| [php/php-src](<https://github.com/php/php-src>) | 23 Oct 2026 | 41,292 | 41,686 | +394 (+1.0%) | 98 | +14 since 26 Oct 2026 |
| [fastapi/fastapi](<https://github.com/fastapi/fastapi>) | 23 Oct 2026 | 103,901 | 104,250 | +349 (+0.3%) | 87 | +52 since 26 Oct 2026 |
| [OpenBMB/VoxCPM](<https://github.com/OpenBMB/VoxCPM>) | 24 Oct 2026 | 40,362 | 40,706 | +344 (+0.9%) | 115 | +77 since 26 Oct 2026 |
| [google-gemini/gemini-cli](<https://github.com/google-gemini/gemini-cli>) | 25 Oct 2026 | 108,241 | 108,562 | +321 (+0.3%) | 160 | +166 since 26 Oct 2026 |
| [coollabsio/coolify](<https://github.com/coollabsio/coolify>) | 26 Oct 2026 | 64,675 | 64,985 | +310 (+0.5%) | 310 | - |
| [lightseekorg/tokenspeed](<https://github.com/lightseekorg/tokenspeed>) | 16 Oct 2026 | 2,560 | 2,808 | +248 (+9.7%) | 23 | +15 since 26 Oct 2026 |
| [nodejs/node](<https://github.com/nodejs/node>) | 24 Oct 2026 | 122,952 | 123,129 | +177 (+0.1%) | 59 | +27 since 26 Oct 2026 |
| [aws/agent-toolkit-for-aws](<https://github.com/aws/agent-toolkit-for-aws>) | 25 Oct 2026 | 3,209 | 3,300 | +91 (+2.8%) | 46 | +17 since 26 Oct 2026 |

## Coverage notes

- All 14 listing entries were inspected. Exact primary public GitHub repository metadata, README, recent releases and recent commits were checked for all 14 at about 07:01 UTC; all were active and unarchived. Thirteen had an API-detected license; nightly-labs/openbot showed NOASSERTION, and its LICENSE file was read directly (PolyForm Noncommercial 1.0.0).
- Seven entries had been featured in the previous seven days and were left out without a material change: JetBrains/thinkrail, TauricResearch/TradingAgents and debpalash/VoiceStudio (26 October; VoiceStudio's stable v0.5.7 of 26 October rolls in the phone apps we described yesterday, still labelled preview), Nutlope/hallmark, makecindy/cindy, pbakaus/impeccable and pollen-robotics/microduck (25 October). Since those cards they show incremental releases, beta builds, small fixes or no commits.
- affaan-m/ECC (featured 16 October) was not repeated: its latest release, v2.2.3 of 1 October, predates that card. multica-ai/andrej-karpathy-skills, a single CLAUDE.md guideline file, was not picked: GitHub detects no license and it has had no commits since 20 April.
- The preceding seven calendar dates, 20-26 October, were checked for local history; all seven editions exist.
- The official listing was captured at 08:00:35 Europe/Paris. Literal stars-today labels are GitHub's displayed period figures; API total stars and README evidence were checked separately at the times shown per card. They are not an independently audited rolling 24-hour growth measurement.
- Feature, performance and security claims are the maintainers' own, including SkillSpector's research figures. No candidate code, installer, skill, plugin, hook or model was installed, downloaded or run, and none of this is a security audit or endorsement.