Projects

Community Package Analysis Client — a package trust layer for Arch-based Linux distributions. Analyzes packages from official repos and the AUR, providing detailed trust scores before you install anything. CPAC is an advisor, not a package manager replacement.

Community-maintained trust database for CPAC. Stores sanitized/anonymized PKGBUILD hashes and snapshots with advisories. Allows CPAC clients to verify packages against real community data instead of relying solely on public repo metadata.

Self-hosted Git repository hosting server — a lean, transparent Git server built in Python. Delegates all protocol handling to Git's own tooling while providing auth, repo management, and an admin CLI on top.

Local-first, open-format password manager. Stores credentials in a single encrypted .emberkeys file you control. No cloud, no subscription, no vendor lock-in. AES-256-GCM encryption with Argon2id key derivation.

Content blocking engine for Ember Browser — forked from uBlock Origin. Blocks ads, trackers, coin miners, popups, annoyances, and malware sites. Ships as a first-class component of Ember, not a separate extension.

An Arch-based developer-focused distribution. CinderOS will ship CPAC by default, providing a secure-by-default package verification experience for developers.