The Pull: Week 24, 2026
This week in open source: App stores, Apple-native containers, and leaner vector search for a more secure, sensible developer stack
1) SkillSpector: The App Store Needs Security
github.com/NVIDIA/SkillSpector | License: Apache-2.0
Featured in The Push: June 11th, 2026
SkillSpector scans AI agent skills for hidden security risks across prompts, code, dependencies, and declared permissions. The clever bit is the layered architecture, static checks for hard signals, semantic analysis for intent and mismatch. Teams building agent marketplaces, internal skill catalogs, or AI governance workflows should look closely.
888 stars/day | 4.3 watchers/day
2) Container: Docker, but Apple Actually Cares
github.com/apple/container | License: Apache-2.0
Featured in The Push: June 11th, 2026
Container turns Linux containers on a Mac into a first-party Apple systems feature, using lightweight VMs and OCI compatibility instead of pretending macOS can natively do Linux container tricks. The clever part is the architecture: explicit virtualization, tightly integrated. Mac-heavy dev teams, devtool founders, and platform engineers should look closely.
1710 stars/day | 5.0 watchers/day
3) Turbovec: Vector Search Needed Cost Discipline
github.com/RyanCodrai/turbovec | License: MIT
Featured in The Push: June 8th, 2026
Turbovec turns vector search into a smaller, faster, more local building block. The clever bit is compression without a separate training phase, plus filtering directly in the search kernel. Teams building private RAG, multi-tenant AI apps, or edge retrieval should pay attention.
502 stars/day | 1.2 watchers/day
4) PM Skills: Product Management Gets Compiled
github.com/phuryn/pm-skills | License: MIT
Featured in The Push: June 10th, 2026
PM Skills turns product management frameworks into portable AI skills, chained workflows, and installable plugins. The smart part is the architecture: reusable reasoning blocks that work across assistants instead of living inside one giant prompt. PMs, founders, and AI tool builders should look closely.
861 stars/day | 4.2 watchers/day
5) Chatwoot: Support Software Should Be Owned
github.com/chatwoot/chatwoot | License: Other
Featured in The Push: June 13th, 2026
Chatwoot turns customer support into owned infrastructure instead of rented SaaS sprawl. The clever bit is its conversation-centric architecture, which lets channels, automation, AI, and internal tools work off the same thread. Founders, support leaders, and ops-heavy teams should look closely.
427 stars/day | 2.0 watchers/day
6) Agentsview: AI Coding Finally Gets Analytics
github.com/kenn-io/agentsview | License: MIT
Featured in The Push: June 13th, 2026
Agentsview turns scattered AI coding sessions into a local analytics layer for cost, search, and behavior tracking across many agents. The clever bit is the indexed archive design, which makes observability fast instead of forensic. Teams testing multiple coding assistants, or anyone watching AI spend closely, should look.
335 stars/day | 0.0 watchers/day
7) Master Dns VPN: DNS as Escape Infrastructure
github.com/masterking32/MasterDnsVPN | License: MIT
Featured in The Push: June 10th, 2026
Master Dns VPN turns DNS into a usable fallback tunnel for networks that block standard VPN traffic. The clever part is the transport layer on top, with QUIC-like reliability, resolver balancing, and encoding choices tuned for hostile conditions. Anyone dealing with censorship, brittle Wi-Fi, or cross-border operations should pay attention.
291 stars/day | 2.0 watchers/day
8) Career Ops: Job Search Finally Gets Instrumented
github.com/santifer/career-ops | License: MIT
Featured in The Push: June 8th, 2026
Career Ops turns AI coding tools into a full job-search operating system. The smart part is the architecture: editable skill modes, a persistent tracker, and batch evaluation that helps candidates choose where to spend effort. Best for ambitious job seekers, operators in transition, and anyone tired of treating search like chaos.
570 stars/day | 0.2 watchers/day
9) OpenAI Plugins: AI Apps Need Extension Logic
github.com/openai/plugins
Featured in The Push: June 8th, 2026
OpenAI Plugins turns AI integrations into portable capability bundles, not just tool hookups. The smart idea is packaging workflows, instructions, and interfaces together so assistants carry domain judgment, not only API access. Product teams, enterprise AI buyers, and founders building agent experiences should look closely.
127 stars/day | 0.3 watchers/day
10) OpenMed: HIPAA Without the Cloud Tax
github.com/maziyarpanahi/openmed | License: Apache-2.0
Featured in The Push: June 10th, 2026
OpenMed turns clinical text into structured, de-identified output without sending records to a cloud vendor. The clever part is the unified runtime, same workflow across Python back ends, REST services, and native Apple apps, with privacy baked into the architecture. Health tech founders, provider IT teams, and anyone selling into regulated environments should look.
314 stars/day | -0.2 watchers/day
11) Aisuite: Model Choice Should Be a Setting
github.com/andrewyng/aisuite | License: MIT
Featured in The Push: June 13th, 2026
Aisuite turns multi-model AI from a custom integration problem into a cleaner control layer for chat, tools, and agents. The smart part is the architecture above simple API unification, especially policies, persistence, and MCP-based extensibility. Worth a look for teams building AI products that want pricing flexibility, local options, or less vendor lock-in.
328 stars/day | 0.0 watchers/day
12) Restic: Backups That Respect Reality
github.com/restic/restic | License: BSD-2-Clause
Featured in The Push: June 11th, 2026
Restic turns backups into encrypted, deduplicated snapshots that can live on almost any storage backend without trusting that backend. The smart part is the repository architecture, which keeps repeated backups small and restores practical. Worth a look for founders, operators, and anyone tired of paying a lock-in tax for basic resilience.
99 stars/day | 0.3 watchers/day