Show HN: Going from 1+1=2 to Quantum Mechanics https://bit.ly/3RUCdVN

Show HN: Going from 1+1=2 to Quantum Mechanics https://bit.ly/4u5B4In June 1, 2026 at 11:27PM

Show HN: NoSleepAgent – keep your MacBook awake until your agents finish https://bit.ly/437Tiy8

Show HN: NoSleepAgent – keep your MacBook awake until your agents finish https://bit.ly/43t0rt3 June 2, 2026 at 12:23AM

Show HN: DepsGuard – one command to harden NPM/pnpm/yarn/bun/uv configs https://bit.ly/3POC85x

Show HN: DepsGuard – one command to harden NPM/pnpm/yarn/bun/uv configs I kept seeing every npm/pnpm/yarn/bun/uv supply chain post end with the same advice (set a minimum release age, turn off install scripts), and while I know cooldowns are "controversial", they do work. But even if you convince people that they should set cooldowns, it seems many don't end up following through, not sure why, maybe because it means hand-editing five config files in five formats with five different time units, or perhaps the "it won't happen to me" syndrome (or "I'll do it later, it seems complicated" where it's actually very simple). So I created a tool that checks what you have set and fixes it for you. I looked for an existing one first and couldn't find it. It started as a small weekend project and turned into a small research project on the nuances of cooldowns across package managers. Not a proof of P vs NP, but a small convenience that can save you and your loved ones from the next supply chain attack. I've raised this in a couple of HN threads since ( https://bit.ly/4wXqIgl and https://bit.ly/4udvqUG ) but never actually did a Show HN for the tool itself. If you know how to edit your ~/.npmrc, which settings apply to npm vs pnpm, and which one wants minutes vs days vs seconds, you probably don't need this. But if you vibe code and just want a one click fix (or you have a PhD in CS from Stanford, ex-FAANG, started 3 YC companies, now work at Anthropic, and still just want a one click fix), read on. DepsGuard is a single Rust binary, no runtime deps, MIT. Run depsguard and it scans your user-level and repo-level configs, shows a table of what is and isn't set, you pick what to change, hit d for the diff, and apply. It writes a timestamped backup first and depsguard restore rolls it back. depsguard scan is read-only if you just want the report. The settings are the simple ones that work: min-release-age / minimumReleaseAge (npm, pnpm, yarn, bun, and uv all name it differently and use days vs minutes vs seconds, which is half of why doing this by hand is annoying), ignore-scripts, and on newer pnpm block-exotic-subdeps, trust-policy: no-downgrade, and strict-dep-builds. It also handles Renovate and Dependabot cooldowns. The whole thing is a bet on timing. The malicious @bitwarden/cli 2026.4.0 was up ~19 hours and got 334 installs. axios was pulled in ~3h, ua-parser-js in hours, node-ipc in days. A 7-day gate means your installer never resolves any of those, they're gone before the window even opens. It does nothing for the slow ones (event-stream sat 2+ months), and it's not SCA, it won't scan your existing lockfile for known CVEs, that's a different layer. Disclosure: I'm a co-founder and CTO at Arnica (a commercial appsec startup) and built this because putting the same recommendations on each blog post felt like yelling at the clouds. It's free and MIT, no account, no telemetry. I'm also not the only one who had the idea (didn't know at the time), cooldowns.dev does the cooldown part across more ecosystems with a shell helper and is worth a look. DepsGuard covers fewer ecosystems but adds the other settings and the diff/backup/restore flow. If you want to try it: cargo install depsguard, or brew/apt/winget/scoop, all in the README. https://bit.ly/4udvrrI (full settings table and FAQ at depsguard.com) Is this an overkill that could have been a shell script? Probably yes (but I wanted windows support, why not). Did it save someone from a supply chain attack? Also probably yes. Do I know personally someone that without it wouldn't have bothered changing their settings after repeatedly asking, but eventually did it when I gave them depsguard? Absolutely yes. https://bit.ly/4udvrrI June 1, 2026 at 05:58PM

Show HN: Postbase – 100% open source Alternative to Firebase and Supabase [video] https://bit.ly/4u9NNKh

Show HN: Postbase – 100% open source Alternative to Firebase and Supabase [video] Postbase – 100% Opensource Alternative to Firebase and Supabase https://www.youtube.com/watch?v=St_kJZXZ_nE June 1, 2026 at 11:17AM

Show HN: Having fun making mini static site apps https://bit.ly/3PWB7It

Show HN: Having fun making mini static site apps I've been having a blast making multiple mini apps that run in the browser. I've been trying to see how far I can go without having a backend and relying on other services. I wrote these for fun and wanted to know what folks think. https://bit.ly/49w2u2K June 1, 2026 at 06:02AM

Show HN: Zaxy v1.0 https://bit.ly/4u2lOfn

Show HN: Zaxy v1.0 https://bit.ly/4nVg2uw May 31, 2026 at 10:19PM

Show HN: OWASP Agent Memory Guard – Stop AI Agent Memory Poisoning https://bit.ly/3PKB0Ql

Show HN: OWASP Agent Memory Guard – Stop AI Agent Memory Poisoning https://bit.ly/3RHraiG May 31, 2026 at 04:17AM

Show HN: I made a Gemma 4 Mac app that names screenshots with local AI https://bit.ly/4nYv5DT

Show HN: I made a Gemma 4 Mac app that names screenshots with local AI I made my first macOS utility app that ships with a bundled Gemma 4 model, specifically the Gemma E4B one. It made my app DMG have 5.3 GB in size, but I think it is a small size for the power that this free local model can provide. It runs fine on CPU, but can also run on Apple Silicon GPU, although I did not notice any performance improvements with GPU (tested on a M5 chip). I think these local lightweight and multimodal models will open multiple possibilities for new software tools where privacy is essential. https://bit.ly/3Qch88P May 31, 2026 at 02:40AM

Show HN: Lite-Harness – Self-Hosted Cursor Agents (Use Claude Code/OpenCode) https://bit.ly/4ed3R98

Show HN: Lite-Harness – Self-Hosted Cursor Agents (Use Claude Code/OpenCode) We built this Dockerfile because we wanted a simple harness server to run our agents and get memory, durable sessions, cron scheduling, and a vault, out of the box. https://bit.ly/4uN6Zia May 31, 2026 at 12:51AM

Show HN: Kanji Pairs Explorer https://bit.ly/4dFPRVh

Show HN: Kanji Pairs Explorer https://bit.ly/4vhSgLN May 30, 2026 at 11:56PM

Show HN: Helios – what plug-in solar could generate for any address in Britain https://bit.ly/4fQbxiX

Show HN: Helios – what plug-in solar could generate for any address in Britain Plug-in solar panels (no electrician needed) have just become legal in the UK and will go on sale soon. Helios estimates how much electricity a typical installation could generate at a given address and what that's worth against your tariff. It uses UK government LIDAR data to reflect the actual skyline, so it knows whether there's a building or a hill blocking the sun. Caveats: - Outside LIDAR coverage (most of Scotland and Wales) it falls back to a synthetic horizon (less accurate). - Trees and recent developments (post-2022 or so) may not be in the data, and some address placements could be off (geocoding via OSM). Feedback on the shading model especially welcome. https://bit.ly/4wXJaFN May 30, 2026 at 12:08PM

Show HN: I built an Android OS in the browser https://bit.ly/4wZX5Lg

Show HN: I built an Android OS in the browser https://bit.ly/3RQeQg3 May 30, 2026 at 06:40AM

Show HN: VT Code – open-source terminal coding agent in Rust https://bit.ly/4dUso1F

Show HN: VT Code – open-source terminal coding agent in Rust https://bit.ly/4sTIE8i May 30, 2026 at 04:07AM

Show HN: Free activity calendar for schools, sports clubs, and organizations https://bit.ly/49u7t47

Show HN: Free activity calendar for schools, sports clubs, and organizations https://bit.ly/4uAutGV May 29, 2026 at 11:44PM

Show HN: Terraforming game where the Python code you write IS the gameplay https://bit.ly/4umLOT7

Show HN: Terraforming game where the Python code you write IS the gameplay https://bit.ly/4uDsSAa May 29, 2026 at 10:24AM

Show HN: Mira – Search for files semantically – no exact filenames required https://bit.ly/4veRJu7

Show HN: Mira – Search for files semantically – no exact filenames required Would appreciate a star (and happy for ideas on improving indexing speed/embedding quality)! https://bit.ly/49uLw4S May 29, 2026 at 12:37AM

Show HN: htop for the airwaves — a live 802.11 RF dashboard in your terminal https://bit.ly/3Q4yt3z

Show HN: htop for the airwaves — a live 802.11 RF dashboard in your terminal https://bit.ly/434GAjz May 29, 2026 at 02:51AM

Show HN: An update to our long-turn FreeCiv experience https://bit.ly/4uEW0aq

Show HN: An update to our long-turn FreeCiv experience So we have had quiet the journey here. So 70 days ago (aka 73 turns ago) I posted on HN sharing our FreeCiv deployment ( https://bit.ly/4cVt7Ro ). FreeCiv is a great game, the clients is very buggy however. I'm using the GTK4 version, but a few others have opted for the QT variant. At some point, we might turn our focus to contributing to improving the client based on our experiences playing the game. We've since added a lot of little fun features: - The editor: you can write to the newspaper Editor and they /might/ publish what you write, quote you, or decide you're full of it and write an opinion piece slamming your reputation. The editor will also reach out to a few players, each turn, and ask for their input on current game matters. - The Intelligence Dashboard. People were forgetting what they were up to, so we added a dashboard showing the timeline of what happens per turn for your player. - beta the online map viewer: I wanted a way to view the map without loading the client, so we started working on a beta map viewer that is HTML based. - The Chronicle (The newspaper) has also grown a bit. Maybe too much? We'll see. The crossword is fun. Some other 'fun' things that happened: my brother in law stopped speaking to me because of in game banter that was taken way too seriously. My friends invaded my wifes territory, and well, she didn't like that either. I'm currently in the lead, but theres still a long way to go from 475BC. https://bit.ly/49TxYA0 May 28, 2026 at 01:24AM

Show HN: Open-Source AI Racing Harness https://bit.ly/3PQ7dFL

Show HN: Open-Source AI Racing Harness Hi I'm Dan from Elodin, making an open source real-time capable flight software simulation. For AI Grand Prix contestants, the wait for the Round 1 virtual qualifier simulation has been grueling. If you’re competing, check out our simulation harness to tide you over, built to match the published competition constraints and message format. It runs against real Betaflight, which we learned requires at least 1000 sensor samples per second to run real-time correctly. The competition warranted introducing a new feature to generate the camera sensor directly in the simulation loop. Typically people connect to Unreal or similar game engine to create a camera sensor, which works well but is very heavy. For the simple needs of this challenge, creating sample directly in the loop is very handy and easy to use. Happy to hear your feedback on this! While it's not fancy looking currently, it uses the Rust Bevy game engine, which should allow us to improve the visual fidelity quickly. We all should easily be able to shift our implementation to the published competition sim once it lands. Hope you enjoy and good luck! https://bit.ly/42WNl75 May 27, 2026 at 09:37PM

Show HN: Stumbleback – StumbleUpon for the bookmarks you've been hoarding https://bit.ly/4uuG4Y1

Show HN: Stumbleback – StumbleUpon for the bookmarks you've been hoarding Hi HN, I have about 2000+ bookmarks that I will never read. Probably you do too. I keep collecting new stuff to read, the list grows longer each day, but I barely get around to reading them, and the problem, as I realised, is more to do with the analysis paralysis on what to read. Sort of like how we spend so much time figuring out what movie to watch on Netflix. So I made a simple Chrome extension: it picks one bookmark at random, drops you on the page, and gives you two buttons on a floating toolbar - Stumble (next random one) or Done (mark read and move to the next random one). That's it. It takes away the burden of decision altogether, and it's sort of fun to engage with because of the variability (and novelty) of what it loads next, while still being within the universe of things I've been wanting to get to. Also, I've added daily goal and streaks to keep me motivated to get through the list and turn it into a daily habit. You can simply Right-click -> Add to Stumbleback for new saves, otherwise it just reads your existing Chrome bookmarks, or you can paste URLs as well, no separate database. It's free. Would love feedback from anyone who's tried to get through their reading list of things and failed. https://bit.ly/49WYB77 May 27, 2026 at 05:34AM