conprof provides continuous profiling for Go programs, integrating with Prometheus to collect pprof-compatible profiles for identifying performance bottlenecks over time. I find it valuable for persistent performance monitoring of Go services.
Visit github.com →
Find and fix vulnerable dependencies with govulncheck
Automatically run govulncheck in github actions
This is a robust Golang tool to convert HTML, even entire websites, into clean Markdown. I find it particularly neat for LLM website use cases where structured content is critical.
I use `golang.org/x/vuln` for `govulncheck`, Go's official vulnerability scanner. It effectively checks dependencies for known CVEs, critically reducing noise by only reporting issues in called functions.
Capslock is a capability analysis CLI for Go packages, identifying privileged operations a package can access by tracing transitive calls to standard library functions. This helps enforce the Principle of Least Privilege in software development.
This project, `seek-tune`, implements Shazam's song recognition algorithm. It leverages audio fingerprinting to match songs, integrating with Spotify and YouTube for downloading and managing a music library. It's a solid technical dive into the algorithm.