Show HN: AI-Powered PDF to Markdown Converter https://bit.ly/4e3DG3G

Show HN: AI-Powered PDF to Markdown Converter Turn complex PDFs into clean Markdown that people can review and AI tools can use. https://bit.ly/4e3DGkc June 3, 2026 at 03:56AM

Show HN: A crowdsourced map of surveillance camera's based on OSM https://bit.ly/4dL2O0b

Show HN: A crowdsourced map of surveillance camera's based on OSM https://bit.ly/4o4bUsl June 3, 2026 at 02:21AM

Show HN: Paseo – Beautiful open-source coding agent interface https://bit.ly/4x6FxNA

Show HN: Paseo – Beautiful open-source coding agent interface Repo: https://bit.ly/40WjrP9 Homepage: https://bit.ly/4ta6vkO Discord: https://bit.ly/4c7IHrZ https://bit.ly/40WjrP9 June 2, 2026 at 11:34PM

Show HN: Going from 1+1=2 to Quantum Mechanics https://bit.ly/3RUCdVN

Show HN: Going from 1+1=2 to Quantum Mechanics https://bit.ly/4u5B4In June 1, 2026 at 11:27PM

Show HN: NoSleepAgent – keep your MacBook awake until your agents finish https://bit.ly/437Tiy8

Show HN: NoSleepAgent – keep your MacBook awake until your agents finish https://bit.ly/43t0rt3 June 2, 2026 at 12:23AM

Show HN: DepsGuard – one command to harden NPM/pnpm/yarn/bun/uv configs https://bit.ly/3POC85x

Show HN: DepsGuard – one command to harden NPM/pnpm/yarn/bun/uv configs I kept seeing every npm/pnpm/yarn/bun/uv supply chain post end with the same advice (set a minimum release age, turn off install scripts), and while I know cooldowns are "controversial", they do work. But even if you convince people that they should set cooldowns, it seems many don't end up following through, not sure why, maybe because it means hand-editing five config files in five formats with five different time units, or perhaps the "it won't happen to me" syndrome (or "I'll do it later, it seems complicated" where it's actually very simple). So I created a tool that checks what you have set and fixes it for you. I looked for an existing one first and couldn't find it. It started as a small weekend project and turned into a small research project on the nuances of cooldowns across package managers. Not a proof of P vs NP, but a small convenience that can save you and your loved ones from the next supply chain attack. I've raised this in a couple of HN threads since ( https://bit.ly/4wXqIgl and https://bit.ly/4udvqUG ) but never actually did a Show HN for the tool itself. If you know how to edit your ~/.npmrc, which settings apply to npm vs pnpm, and which one wants minutes vs days vs seconds, you probably don't need this. But if you vibe code and just want a one click fix (or you have a PhD in CS from Stanford, ex-FAANG, started 3 YC companies, now work at Anthropic, and still just want a one click fix), read on. DepsGuard is a single Rust binary, no runtime deps, MIT. Run depsguard and it scans your user-level and repo-level configs, shows a table of what is and isn't set, you pick what to change, hit d for the diff, and apply. It writes a timestamped backup first and depsguard restore rolls it back. depsguard scan is read-only if you just want the report. The settings are the simple ones that work: min-release-age / minimumReleaseAge (npm, pnpm, yarn, bun, and uv all name it differently and use days vs minutes vs seconds, which is half of why doing this by hand is annoying), ignore-scripts, and on newer pnpm block-exotic-subdeps, trust-policy: no-downgrade, and strict-dep-builds. It also handles Renovate and Dependabot cooldowns. The whole thing is a bet on timing. The malicious @bitwarden/cli 2026.4.0 was up ~19 hours and got 334 installs. axios was pulled in ~3h, ua-parser-js in hours, node-ipc in days. A 7-day gate means your installer never resolves any of those, they're gone before the window even opens. It does nothing for the slow ones (event-stream sat 2+ months), and it's not SCA, it won't scan your existing lockfile for known CVEs, that's a different layer. Disclosure: I'm a co-founder and CTO at Arnica (a commercial appsec startup) and built this because putting the same recommendations on each blog post felt like yelling at the clouds. It's free and MIT, no account, no telemetry. I'm also not the only one who had the idea (didn't know at the time), cooldowns.dev does the cooldown part across more ecosystems with a shell helper and is worth a look. DepsGuard covers fewer ecosystems but adds the other settings and the diff/backup/restore flow. If you want to try it: cargo install depsguard, or brew/apt/winget/scoop, all in the README. https://bit.ly/4udvrrI (full settings table and FAQ at depsguard.com) Is this an overkill that could have been a shell script? Probably yes (but I wanted windows support, why not). Did it save someone from a supply chain attack? Also probably yes. Do I know personally someone that without it wouldn't have bothered changing their settings after repeatedly asking, but eventually did it when I gave them depsguard? Absolutely yes. https://bit.ly/4udvrrI June 1, 2026 at 05:58PM

Show HN: Postbase – 100% open source Alternative to Firebase and Supabase [video] https://bit.ly/4u9NNKh

Show HN: Postbase – 100% open source Alternative to Firebase and Supabase [video] Postbase – 100% Opensource Alternative to Firebase and Supabase https://www.youtube.com/watch?v=St_kJZXZ_nE June 1, 2026 at 11:17AM

Show HN: Having fun making mini static site apps https://bit.ly/3PWB7It

Show HN: Having fun making mini static site apps I've been having a blast making multiple mini apps that run in the browser. I've been trying to see how far I can go without having a backend and relying on other services. I wrote these for fun and wanted to know what folks think. https://bit.ly/49w2u2K June 1, 2026 at 06:02AM

Show HN: Zaxy v1.0 https://bit.ly/4u2lOfn

Show HN: Zaxy v1.0 https://bit.ly/4nVg2uw May 31, 2026 at 10:19PM

Show HN: OWASP Agent Memory Guard – Stop AI Agent Memory Poisoning https://bit.ly/3PKB0Ql

Show HN: OWASP Agent Memory Guard – Stop AI Agent Memory Poisoning https://bit.ly/3RHraiG May 31, 2026 at 04:17AM

Show HN: I made a Gemma 4 Mac app that names screenshots with local AI https://bit.ly/4nYv5DT

Show HN: I made a Gemma 4 Mac app that names screenshots with local AI I made my first macOS utility app that ships with a bundled Gemma 4 model, specifically the Gemma E4B one. It made my app DMG have 5.3 GB in size, but I think it is a small size for the power that this free local model can provide. It runs fine on CPU, but can also run on Apple Silicon GPU, although I did not notice any performance improvements with GPU (tested on a M5 chip). I think these local lightweight and multimodal models will open multiple possibilities for new software tools where privacy is essential. https://bit.ly/3Qch88P May 31, 2026 at 02:40AM

Show HN: Lite-Harness – Self-Hosted Cursor Agents (Use Claude Code/OpenCode) https://bit.ly/4ed3R98

Show HN: Lite-Harness – Self-Hosted Cursor Agents (Use Claude Code/OpenCode) We built this Dockerfile because we wanted a simple harness server to run our agents and get memory, durable sessions, cron scheduling, and a vault, out of the box. https://bit.ly/4uN6Zia May 31, 2026 at 12:51AM

Show HN: Kanji Pairs Explorer https://bit.ly/4dFPRVh

Show HN: Kanji Pairs Explorer https://bit.ly/4vhSgLN May 30, 2026 at 11:56PM

Show HN: Helios – what plug-in solar could generate for any address in Britain https://bit.ly/4fQbxiX

Show HN: Helios – what plug-in solar could generate for any address in Britain Plug-in solar panels (no electrician needed) have just become legal in the UK and will go on sale soon. Helios estimates how much electricity a typical installation could generate at a given address and what that's worth against your tariff. It uses UK government LIDAR data to reflect the actual skyline, so it knows whether there's a building or a hill blocking the sun. Caveats: - Outside LIDAR coverage (most of Scotland and Wales) it falls back to a synthetic horizon (less accurate). - Trees and recent developments (post-2022 or so) may not be in the data, and some address placements could be off (geocoding via OSM). Feedback on the shading model especially welcome. https://bit.ly/4wXJaFN May 30, 2026 at 12:08PM

Show HN: I built an Android OS in the browser https://bit.ly/4wZX5Lg

Show HN: I built an Android OS in the browser https://bit.ly/3RQeQg3 May 30, 2026 at 06:40AM

Show HN: VT Code – open-source terminal coding agent in Rust https://bit.ly/4dUso1F

Show HN: VT Code – open-source terminal coding agent in Rust https://bit.ly/4sTIE8i May 30, 2026 at 04:07AM

Show HN: Free activity calendar for schools, sports clubs, and organizations https://bit.ly/49u7t47

Show HN: Free activity calendar for schools, sports clubs, and organizations https://bit.ly/4uAutGV May 29, 2026 at 11:44PM

Show HN: Terraforming game where the Python code you write IS the gameplay https://bit.ly/4umLOT7

Show HN: Terraforming game where the Python code you write IS the gameplay https://bit.ly/4uDsSAa May 29, 2026 at 10:24AM

Show HN: Mira – Search for files semantically – no exact filenames required https://bit.ly/4veRJu7

Show HN: Mira – Search for files semantically – no exact filenames required Would appreciate a star (and happy for ideas on improving indexing speed/embedding quality)! https://bit.ly/49uLw4S May 29, 2026 at 12:37AM

Show HN: htop for the airwaves — a live 802.11 RF dashboard in your terminal https://bit.ly/3Q4yt3z

Show HN: htop for the airwaves — a live 802.11 RF dashboard in your terminal https://bit.ly/434GAjz May 29, 2026 at 02:51AM