#今天又看了啥 #GitHub #tools
excalidraw-animate
This is an external tool to convert an Excalidraw drawing into animation.
将 Excalidraw 绘画按照绘制顺序转化为动画的工具

https://dai-shi.github.io/excalidraw-animate/
https://github.com/dai-shi/excalidraw-animate

#今天又看了啥 #GitHub #tools
ourboard
An online whiteboard
一个类似的开源白板

GitHub: https://github.com/raimohanska/ourboard
Demo: https://www.ourboard.io/

#今天又看了啥 #GitHub #paper #academic #cartoon
ToonCrafter: Generative Cartoon Interpolation

🤗 ToonCrafter can interpolate two cartoon images by leveraging the pre-trained image-to-video diffusion priors. Please check our project page and paper for more information.

Code: https://github.com/ToonCrafter/ToonCrafter
Paper: https://arxiv.org/abs/2405.17933
Demo: https://doubiiu.github.io/projects/ToonCrafter/

#火星 #GitHub
原来 gh 有 Temporary interaction limits 这种功能了
可以临时限制哪些用户可以在仓库中交互（发表评论、打开问题 / issue 或创建拉取请求 / PR）

#今天又看了啥 #GitHub #生草
Open and Shut
Type in Morse code by repeatedly slamming your laptop shut

Features:
- Use a battle-tested encoding trusted by pilots, submariners, and amateur radio nerds
- Type at 100+ words per minute hour
- Innovative SIGTERM-based concurrency control. Semaphores who??
- Closing your laptop now types the letter E instead of locking

通过反复关闭笔记本电脑来输入莫尔斯电码，奇妙

https://github.com/veggiedefender/open-and-shut

#今天又看了啥 #security #GitHub
Anyone can Access Deleted and Private Repository Data on GitHub

You can access data from deleted forks, deleted repositories and even private repositories on GitHub. And it is available forever. This is known by GitHub, and intentionally designed that way.

https://trufflesecurity.com/blog/anyone-can-access-deleted-and-private-repo-data-github

这个标题有点大，TL;DR，在 gh 的 fork network 中的上下游仓库的 commit 都可以通过任意该 fork network 中的 repo 利用类似于 https://github.com/<user/org>/<repo>/commit/<commit_hash> 这样形式的请求获取到
对于已经删除的分支/仓库，或者下游访问上游仓库，甚至 fork 链上的私有库（文中情形看起来是私有库 A 然后 fork 到 B 后 B 改为公开库，然后能在 B 访问到 A 的 commit），如果已知 commit hash 均可读取相应的内容
对于不知道 hash 的情况，可以爆破猜测前几个字符，最小仅需要尝试4字符即 65,536 (16^4) 次即可实现

GitHub 仓库设计上就是这样的，是合理的
还记得 2020 年用户将 youtube-dl 源码树放在 github/dmca 上 那件事吗
以及 GitHub 黄条显示 “该条 commit 不属于该库的任何分支”

#今天又看了啥 #GitHub #tools
📚 Look Scanned
PDF 做旧神器！

一个能够让 PDF 看起来就像是扫描件一样的纯前端网站。你再也不需要麻烦地打印之后扫描了，你所需要的就是鼠标点几下。

Features:
- Everything is processed in your browser. No privacy risk.
- Works without network connection using PWA.
- See scanned PDF side-by-side in real time.
- Works on all modern browsers and devices.
- All files are static. No backend servers needed.
- Tweak the settings to make your PDF look better.

Demo: https://zh.lookscanned.io/scan
Repo: https://github.com/rwv/lookscanned.io

#今天又看了啥 #GitHub #docker #proxy #tools
CF-Workers-docker.io：Docker仓库镜像代理工具

一个基于 Cloudflare Workers 的 Docker 镜像代理工具。它能够中转对 Docker 官方镜像仓库的请求，解决一些访问限制和加速访问的问题。

https://github.com/cmliu/CF-Workers-docker.io

#今天又看了啥 #GitHub #tools #web
Piping Server
Infinitely transfer between every device over HTTP/HTTPS
一个简单且功能强大的管道传输工具，支持通过 HTTP/HTTPS 协议在不同设备之间进行无限量的数据传输
https://github.com/nwtgck/piping-server

Usage:
Piping Server transfers data to POST /hello or PUT /hello into GET /hello. The path /hello can be anything such as /mypath or /mypath/123/. A sender and receivers who specify the same path can transfer. Both the sender and the recipient can start the transfer first. The first one waits for the other.

# Send
echo 'hello, world' | curl -T - https://ppng.io/hello

# Get
curl https://ppng.io/hello > hello.txt

Web UI: https://ppng.io
Modern UI: https://piping-ui.org (support E2E encryption)

得益于管道的特性，可用于传输文件流、实时通信等场景，支持实时设备间的通信
应用生态包括 文字流聊天、屏幕共享、实时绘图分享、加密文件传输、SSH/VNC on Web 等等
此外还可以通过加入查询参数 ?n=3 以同时允许3个接收者

可以使用公共服务器，也可以基于 docker / binary / serverless 服务商自建

更多介绍：https://dev.to/nwtgck/the-power-of-pure-http-screen-share-real-time-messaging-ssh-and-vnc-5ghc

#今天又看了啥 #security #GitHub #CVE
CVE-2024-42471
@actions/artifact has an Arbitrary File Write via artifact extraction

Versions of actions/artifact before 2.1.7 are vulnerable to arbitrary file write when using downloadArtifactInternal, downloadArtifactPublic, or streamExtractExternal for extracting a specifically crafted artifact that contains path traversal filenames.

哈哈，这里也有精心构造文件名导致的 zip 解压目录穿越，从而任意文件写入

https://github.com/advisories/GHSA-6q32-hq47-5qq3

#今天又看了啥 #LLM #GitHub
17岁高中生写了个神级Prompt，直接把Claude强化成了满血o1

https://mp.weixin.qq.com/s/IAKD0FfcYehs5FsDkLbTJQ

TL;DR
Thinking Claude
prompt engineering 造了个思维链

https://github.com/richards199999/Thinking-Claude/

#今天又看了啥 #GitHub #tools #frontend #design
AppIcon Forge

An intuitive app icon generator that lets you customize colors, borders, gradient, shadows, text, local images and more to create unique app icons effortlessly.
一个直观的应用程序图标生成器，可自定义颜色、边框、阴影等，轻松创建独特的应用程序图标

GitHub Repo: https://github.com/zhangyu1818/appicon-forge
Online Demo: https://zhangyu1818.github.io/appicon-forge/

#LLM #GitHub
上面这个 Manus 营销噱头太大了，有人不满意了：

首个Manus开源复现OpenManus，MetaGPT出品
https://mp.weixin.qq.com/s/AnJ5BUMYgw3MyH5x0rPvBg

https://github.com/mannaandpoem/OpenManus

#GitHub
怎么 gh 自行关闭来自中国 IP 未登录用户的访问了，会返回403
群友能否复现
这下真自主可控了？

#GitHub
[Retroactive] Access from China temporarily blocked for users that were not logged in

Resolved
Due to a configuration change with unintended impact, users that were not logged in who tried to visit GitHub.com from China were temporarily unable to access the site. For users already logged in, they could continue to access the site successfully. Impact started 2025/04/12 at 20:01 UTC. Impact was mitigated 2025/04/13 at 14:55 UTC.
The configuration changes that caused this impact have been reversed and users should no longer see problems when trying to access GitHub.com.

原来是配置烂了（

https://www.githubstatus.com/incidents/jfvgcls9swln

#今天又看了啥 #GitHub #tools
https://github.com/yeongpin/cursor-free-vip

听说上了 gh 榜一（

#今天又看了啥 #tools #GitHub #VMware
VMware Index
This project indexes VMware (now Broadcom) product download information. It fetches and parses XML metadata files to provide direct download URLs.
https://github.com/moonheart/vmware-index

博通之前说个人免费使用 VMware，但是入口遮遮掩掩的，这个工具获取并解析 XML 元数据文件，以提供直接下载 URL

VMware Product Download Link Generator
Select a product and version to get the official download link.
https://vmware-index.vercel.app/
直接选择产品及版本，就能拿到官方下载链接