None of the lists indicated here are exhaustive.
Personal projects
- Fast Git libary for Go
- Git library for Hare
- Declarative dns-persist-01 ACME client
- Opinionated Git-based server/client suite for Internet Mail
- TLS SNI dispatcher based on SCM_RIGHTS
- Ogg Opus Internet radio stream
- seccomp_unotify-based SOCKS5 proxifier for Linux
- University SSO VPN helper
- HMAC-based OpenID Connect linked Discord verification bot
- Triple Mojang/CertFP/SPKI-based Minecraft authentication proxy
- Manifest V3 browser extension to disable the page visibility API
- Software development forge
- Small utilities library for Go
- Stricter fork of go-scfg
- Generic-ish data structures for Hare
- LMDB FFI bindings for Hare
- libpq FFI bindings for Hare
- Dump incoming mail to a directory
- Init system and service manager for Linux
- Proof-of-work anti-scraper proxy (archived)
- SSH-issued access-token anti-scraper reverse proxy
- Loose collection of JavaScript and CSS utilities
Contributions to FOSS projects
- Memory leak fixes, documentation updates, features, library patches, etc. for the Hare programming language
- Vulnerability report and coordinated disclosure (CVE-2026-43923)
- ML-KEM-768 implementation
- WIP ppc64le support in the standard library
- ppc64le support for the compiler
- Various memory leaks
- New helper functions for byte operations
- Documentation colors fix
- Memory leak
- Reviewer for
crypto::(pinned to commit ID since line numbers could shift; search latest) - Finding and writing regression tests for several DoS and auth confusion issues in
crypto::x509:: - Fix
rt::startup code on FreeBSD AArch64 for harec and for stdlib - A few more things.
- Contributions to FreeBSD
- net80211: don’t do_ht in sta_recv_mgmt without htcap/htinfo to prevent a remote kernel panic
- Touching up, adding tests, simplifying, and fixing vulnerabilities in a stale patch by another contributor, resulting in jail: Add Capsicum rights for jail descriptor operations
- Performance bug report and analysis to go-git, another Git library in pure Go
- Vulnerability report to the Zig programming language
- Bug reports and fixes for SourceHut
- Bug reports and fixes for the aerc email client
- Bug report on incorrect error code emission to the OpenSMTPD mail server
- Path traversal vulnerability report to the Legit web frontend for Git
- Bug report on segmentation fault to Linux Pluggable Authentication Modules
- Various user interface bug reports to WeeChat
- API surface bug report to identity, a Python auth library suitable for users of the Microsoft identity platform
- Bug report on missing channel name validation on S2S links to InspIRCd, an Internet Relay Chat daemon
- Send SASL cancel to services on client disconnect on InspIRCd
- Bug report and pull request to emailwiz
- Maintainer of several Alpine Linux packages
- Patches and bug reports to the Go programming language
- Vulnerability report to OpenBSD’s Game of Trees version control system (patches: 1, 2, 3)
- Bug report on worktree updateInstead HEAD check with reproduction recipe for Git
- Patch to fix stack overflow on kioworker/file
- Pull request to Waybar to ignore name/pixmap updates for custom icons in the system tray