.profile/README.md

# Michał "DualFroz" Fox

Full-stack developer from Kraków, Founder & CEO of [VulCode](https://vulcode.com). I build web apps, panels, bots and infrastructure,
and I fix bugs in the open source tools I use every day.

[dualfroz.com](https://dualfroz.com) · [vulcode.com](https://vulcode.com) · me@dualfroz.com

## Open source contributions

**137 merged pull requests** in **71 projects** with **610 420 GitHub stars** combined.

| Project | Merged |
|---|---|
| [zed-industries/zed](#zed-industrieszed) ★ 91 790 | 1 |
| [telegramdesktop/tdesktop](#telegramdesktoptdesktop) ★ 33 257 | 1 |
| [composer/composer](#composercomposer) ★ 29 549 | 1 |
| [icsharpcode/ILSpy](#icsharpcodeilspy) ★ 26 665 | 3 |
| [urfave/cli](#urfavecli) ★ 24 290 | 1 |
| [PHPMailer/PHPMailer](#phpmailerphpmailer) ★ 22 312 | 3 |
| [postcss/autoprefixer](#postcssautoprefixer) ★ 22 205 | 3 |
| [gleam-lang/gleam](#gleam-langgleam) ★ 21 992 | 1 |
| [twpayne/chezmoi](#twpaynechezmoi) ★ 21 944 | 2 |
| [Seldaek/monolog](#seldaekmonolog) ★ 21 398 | 1 |
| [valeriansaliou/sonic](#valeriansaliousonic) ★ 21 361 | 5 |
| [OpenRA/OpenRA](#openraopenra) ★ 17 576 | 1 |
| [briannesbitt/Carbon](#briannesbittcarbon) ★ 16 588 | 1 |
| [PuerkitoBio/goquery](#puerkitobiogoquery) ★ 14 989 | 2 |
| [App-vNext/Polly](#app-vnextpolly) ★ 14 246 | 1 |
| [hajimehoshi/ebiten](#hajimehoshiebiten) ★ 13 565 | 3 |
| [filp/whoops](#filpwhoops) ★ 13 230 | 2 |
| [spencermountain/compromise](#spencermountaincompromise) ★ 12 162 | 21 |
| [doctrine/lexer](#doctrinelexer) ★ 11 141 | 1 |
| [kanboard/kanboard](#kanboardkanboard) ★ 9 907 | 4 |
| [FluentValidation/FluentValidation](#fluentvalidationfluentvalidation) ★ 9 764 | 1 |
| [serilog/serilog](#serilogserilog) ★ 8 051 | 1 |
| [concourse/concourse](#concourseconcourse) ★ 7 919 | 1 |
| [predis/predis](#predispredis) ★ 7 778 | 3 |
| [vscode-neovim/vscode-neovim](#vscode-neovimvscode-neovim) ★ 7 756 | 1 |
| [NLog/NLog](#nlognlog) ★ 6 549 | 2 |
| [maildev/maildev](#maildevmaildev) ★ 6 141 | 1 |
| [Pagefind/pagefind](#pagefindpagefind) ★ 5 515 | 1 |
| [xoofx/markdig](#xoofxmarkdig) ★ 5 342 | 4 |
| [dromara/carbon](#dromaracarbon) ★ 5 222 | 1 |
| [alecthomas/chroma](#alecthomaschroma) ★ 5 054 | 1 |
| [olekukonko/tablewriter](#olekukonkotablewriter) ★ 4 820 | 1 |
| [knadh/koanf](#knadhkoanf) ★ 4 219 | 1 |
| [spencermountain/spacetime](#spencermountainspacetime) ★ 4 107 | 3 |
| [itchyny/gojq](#itchynygojq) ★ 3 812 | 1 |
| [Suor/funcy](#suorfuncy) ★ 3 509 | 1 |
| [thephpleague/csv](#thephpleaguecsv) ★ 3 482 | 1 |
| [composer/satis](#composersatis) ★ 3 305 | 2 |
| [montanaflynn/stats](#montanaflynnstats) ★ 3 030 | 1 |
| [versity/versitygw](#versityversitygw) ★ 3 027 | 11 |
| [thephpleague/commonmark](#thephpleaguecommonmark) ★ 2 979 | 1 |
| [mitsuhiko/insta](#mitsuhikoinsta) ★ 2 973 | 1 |
| [BurntSushi/jiff](#burntsushijiff) ★ 2 957 | 1 |
| [zzzprojects/html-agility-pack](#zzzprojectshtml-agility-pack) ★ 2 851 | 1 |
| [Paymenter/Paymenter](#paymenterpaymenter) ★ 2 718 | 2 |
| [api-platform/core](#api-platformcore) ★ 2 580 | 2 |
| [pelican/panel](#pelicanpanel) ★ 2 387 | 2 |
| [gookit/goutil](#gookitgoutil) ★ 2 361 | 1 |
| [dedoc/scramble](#dedocscramble) ★ 2 219 | 1 |
| [gocarina/gocsv](#gocarinagocsv) ★ 2 198 | 4 |
| [thephpleague/html-to-markdown](#thephpleaguehtml-to-markdown) ★ 1 907 | 1 |
| [AfterShip/email-verifier](#aftershipemail-verifier) ★ 1 643 | 1 |
| [fabiocaccamo/python-benedict](#fabiocaccamopython-benedict) ★ 1 606 | 1 |
| [gookit/color](#gookitcolor) ★ 1 606 | 1 |
| [olebedev/when](#olebedevwhen) ★ 1 463 | 1 |
| [dgilland/pydash](#dgillandpydash) ★ 1 447 | 1 |
| [cakephp/chronos](#cakephpchronos) ★ 1 362 | 1 |
| [go-playground/form](#go-playgroundform) ★ 931 | 1 |
| [mkideal/cli](#mkidealcli) ★ 723 | 1 |
| [gookit/config](#gookitconfig) ★ 585 | 1 |
| [rust-syndication/rss](#rust-syndicationrss) ★ 502 | 1 |
| [kelindar/bitmap](#kelindarbitmap) ★ 385 | 1 |
| [brick/date-time](#brickdate-time) ★ 361 | 1 |
| [pydantic/pydantic-extra-types](#pydanticpydantic-extra-types) ★ 338 | 2 |
| [rodaine/table](#rodainetable) ★ 324 | 1 |
| [wroberts/pytimeparse](#wrobertspytimeparse) ★ 299 | 1 |
| [QEDK/configparser-rs](#qedkconfigparser-rs) ★ 88 | 1 |
| [thephpleague/uri-src](#thephpleagueuri-src) ★ 51 | 1 |
| [spiral/testing](#spiraltesting) ★ 7 | 3 |
| [mozilla/firefox](#mozillafirefox) | 1 |
| [proxmox/pve-manager](#proxmoxpve-manager) | 1 |

### zed-industries/zed

Code at the speed of thought – Zed is a high-performance, multiplayer code editor from the creators of Atom and Tree-sitter. · ★ 91 790

- [openai_subscribed: Keep loading slow model catalogs in the background](https://github.com/zed-industries/zed/pull/64925) (2026-10-01)

### telegramdesktop/tdesktop

Telegram Desktop messaging app · ★ 33 257

- [Hide the topics toggle in broadcast group settings](https://github.com/telegramdesktop/tdesktop/pull/31450) (2026-10-14)

### composer/composer

Dependency Manager for PHP · ★ 29 549

- [Clarify which config keys support --json and --merge](https://github.com/composer/composer/pull/13111) (2026-10-08)

### icsharpcode/ILSpy

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform! · ★ 26 665

- [Fix #4137: Keep nint in conditionals with mixed native int branches](https://github.com/icsharpcode/ILSpy/pull/4232) (2026-10-11)
- [Remove the delegate cache left by a discarded method-group conversion](https://github.com/icsharpcode/ILSpy/pull/4133) (2026-09-19)
- [Recognize a VB exception filter's type test](https://github.com/icsharpcode/ILSpy/pull/4134) (2026-09-15)

### urfave/cli

A declarative, simple, fast, and fun package for building command line tools in Go · ★ 24 290

- [fix: use prefixFor for BoolWithInverseFlag names and aliases](https://github.com/urfave/cli/pull/2461) (2026-10-08)

### PHPMailer/PHPMailer

The classic email sending library for PHP · ★ 22 312

- [Don't send QUIT while DATA is in progress](https://github.com/PHPMailer/PHPMailer/pull/3362) (2026-10-04)
- [Fold long address headers](https://github.com/PHPMailer/PHPMailer/pull/3361) (2026-10-04)
- [Normalise line breaks in S/MIME signed messages](https://github.com/PHPMailer/PHPMailer/pull/3358) (2026-09-10)

### postcss/autoprefixer

Parse CSS and add vendor prefixes to rules by Can I Use · ★ 22 205

- [Add `/* autoprefixer: ignore next warning */` control comment](https://github.com/postcss/autoprefixer/pull/1560) (2026-10-07)
- [Set source for Grid prefixes in source maps](https://github.com/postcss/autoprefixer/pull/1559) (2026-10-05)
- [Inherit grid gap set with the row-gap and column-gap longhands](https://github.com/postcss/autoprefixer/pull/1557) (2026-09-15)

### gleam-lang/gleam

⭐️ A friendly language for building type-safe, scalable systems! · ★ 21 992

- [Point guard constant type errors at the guard](https://github.com/gleam-lang/gleam/pull/6418) (2026-10-13)

### twpayne/chezmoi

Manage your dotfiles across multiple diverse machines, securely. · ★ 21 944

- [fix: Don't double backslashes in shellQuote](https://github.com/twpayne/chezmoi/pull/5233) (2026-10-11)
- [fix: Pass /dev/null to diff command for missing files in apply --interactive](https://github.com/twpayne/chezmoi/pull/5232) (2026-10-11)

### Seldaek/monolog

Sends your logs to files, sockets, inboxes, databases and various web services · ★ 21 398

- [Fix RedactingFormatter missing secrets nested inside array-valued sensitive keys](https://github.com/Seldaek/monolog/pull/2067) (2026-09-09)

### valeriansaliou/sonic

🦔 Fast, lightweight & schema-less search backend. An alternative to Elasticsearch that runs on a few MBs of RAM. · ★ 21 361

- [fix(core): Back up and restore FST buckets again](https://github.com/valeriansaliou/sonic/pull/432) (2026-10-05)
- [docs: Document the 128 characters limit on collection, bucket and object names](https://github.com/valeriansaliou/sonic/pull/431) (2026-10-05)
- [fix(core): Make `TRIGGER backup` work while stores are in use](https://github.com/valeriansaliou/sonic/pull/430) (2026-10-05)
- [docs: clarify write_buffer_size](https://github.com/valeriansaliou/sonic/pull/418) (2026-09-24)
- [Stop leaking a client slot when a channel read fails](https://github.com/valeriansaliou/sonic/pull/403) (2026-09-15)

### OpenRA/OpenRA

Open Source real-time strategy game engine for early Westwood games such as Command & Conquer: Red Alert written in C# using SDL and OpenGL. Runs on Windows, Linux, *BSD and Mac OS X. · ★ 17 576

- [Preserve player definition order in MapPlayers](https://github.com/OpenRA/OpenRA/pull/22627) (2026-10-11)

### briannesbitt/Carbon

A simple PHP API extension for DateTime. · ★ 16 588

- [fix: numeric round()/floor()/ceil() precision >= 60 seconds does not carry into minute/hour/day](https://github.com/briannesbitt/Carbon/pull/3359) (2026-09-25)

### PuerkitoBio/goquery

A little like that j-thing, only in Go. · ★ 14 989

- [Expose html parse options (addresses #139, noscript)](https://github.com/PuerkitoBio/goquery/pull/602) (2026-09-30)
- [RemoveClass leaves a class behind when the source repeats it](https://github.com/PuerkitoBio/goquery/pull/603) (2026-09-07)

### App-vNext/Polly

Polly is a .NET resilience and transient-fault-handling library that allows developers to express policies such as Retry, Circuit Breaker, Timeout, Bulkhead Isolation, and Fallback in a fluent and thread-safe manner. From version 6.0.1, Polly targets .NET Standard 1.1 and 2.0+. · ★ 14 246

- [Return null from FaultGenerator when no fault is generated](https://github.com/App-vNext/Polly/pull/3220) (2026-09-06)

### hajimehoshi/ebiten

A dead simple 2D game engine for Go · ★ 13 565

- [audio: run the tests waiting on real time on synctest's fake clock](https://github.com/hajimehoshi/ebiten/pull/3849) (2026-10-06)
- [.github/workflows: run go test -race for all packages](https://github.com/hajimehoshi/ebiten/pull/3848) (2026-10-03)
- [internal/gamepad: don't fail when inotify is unavailable on Linux](https://github.com/hajimehoshi/ebiten/pull/3705) (2026-09-13)

### filp/whoops

PHP errors for cool kids · ★ 13 230

- [Stop output buffer cleanup at buffers that cannot be removed](https://github.com/filp/whoops/pull/795) (2026-10-03)
- [Restrict escapeButPreserveUris() to http/https schemes (fixes #791)](https://github.com/filp/whoops/pull/794) (2026-09-05)

### spencermountain/compromise

modest natural-language processing · ★ 12 162

- [find payloads by term id so they survive a .remove()](https://github.com/spencermountain/compromise/pull/1246) (2026-10-06)
- [keep a titlecase comparative before 'than' as an adjective](https://github.com/spencermountain/compromise/pull/1242) (2026-10-06)
- [keep a closing bracket in the word when it closes one inside it](https://github.com/spencermountain/compromise/pull/1249) (2026-10-05)
- [match lexicon words that start with # or @](https://github.com/spencermountain/compromise/pull/1248) (2026-10-05)
- [leave a spaced dash out of a match's text](https://github.com/spencermountain/compromise/pull/1247) (2026-10-05)
- [contract each match on its own](https://github.com/spencermountain/compromise/pull/1244) (2026-10-05)
- [don't add an implicit 'to' after 'wanna' before a noun](https://github.com/spencermountain/compromise/pull/1243) (2026-10-05)
- [split hyphens in a match the same way the tokenizer does](https://github.com/spencermountain/compromise/pull/1241) (2026-10-05)
- [contract 'he is not' to he's not instead of he'sn't](https://github.com/spencermountain/compromise/pull/1240) (2026-10-05)
- [drop does/did when turning a negative verb positive](https://github.com/spencermountain/compromise/pull/1239) (2026-10-05)
- [contract 'can not' to can't](https://github.com/spencermountain/compromise/pull/1237) (2026-10-05)
- [dates: read singular possessive durations](https://github.com/spencermountain/compromise/pull/1236) (2026-10-05)
- [don't merge an -ent syllable back into an open first syllable](https://github.com/spencermountain/compromise/pull/1233) (2026-10-05)
- [run the regex-boundaries tests on the full build](https://github.com/spencermountain/compromise/pull/1232) (2026-10-05)
- [parse 'fortnight' as two weeks](https://github.com/spencermountain/compromise/pull/1231) (2026-10-05)
- [Treat 's before a copula as possessive](https://github.com/spencermountain/compromise/pull/1230) (2026-09-29)
- [Keep the case in toSingular](https://github.com/spencermountain/compromise/pull/1229) (2026-09-29)
- [Keep "never" when going to the infinitive](https://github.com/spencermountain/compromise/pull/1228) (2026-09-29)
- [Skip the verb of a relative clause following the subject](https://github.com/spencermountain/compromise/pull/1225) (2026-09-19)
- [Recognize more openers of a secondary clause in mainClause](https://github.com/spencermountain/compromise/pull/1224) (2026-09-19)
- [Only treat subordinators as secondary-clause signals before the verb](https://github.com/spencermountain/compromise/pull/1222) (2026-09-14)

### doctrine/lexer

Base library for a lexer that can be used in Top-Down, Recursive Descent Parsers. · ★ 11 141

- [fix: make resetPosition() accept a token character offset](https://github.com/doctrine/lexer/pull/176) (2026-10-01)

### kanboard/kanboard

Kanban project management software · ★ 9 907

- [fix(ical): only accept known columns as the calendar start date](https://github.com/kanboard/kanboard/pull/5914) (2026-10-11)
- [fix(security): escape the project name in the analytic modal title](https://github.com/kanboard/kanboard/pull/5913) (2026-10-11)
- [fix(session): scope the session cookie to the directory without a trailing slash](https://github.com/kanboard/kanboard/pull/5900) (2026-10-02)
- [fix(api): return a full batch response when one request is forbidden](https://github.com/kanboard/kanboard/pull/5899) (2026-09-11)

### FluentValidation/FluentValidation

A popular .NET validation library for building strongly-typed validation rules. · ★ 9 764

- [fix: reject an inverted range when the comparer returns a negative other than -1](https://github.com/FluentValidation/FluentValidation/pull/2370) (2026-09-09)

### serilog/serilog

Simple .NET logging with fully-structured events · ★ 8 051

- [fix: avoid OverflowException when alignment width is int.MinValue](https://github.com/serilog/serilog/pull/2247) (2026-09-13)

### concourse/concourse

Concourse is a container-based automation system written in Go. It's mostly used for CI/CD. · ★ 7 919

- [Interpolate task file vars before parsing the file](https://github.com/concourse/concourse/pull/9717) (2026-10-05)

### predis/predis

A flexible and feature-complete Redis/Valkey client for PHP. · ★ 7 778

- [Use SENTINEL REPLICAS for Sentinel replica discovery](https://github.com/predis/predis/pull/1745) (2026-10-12)
- [Fix ConnectionErrorProof response count on single node read errors](https://github.com/predis/predis/pull/1739) (2026-10-08)
- [Replace deprecated spl_object_hash() with spl_object_id() in ConnectionErrorProof](https://github.com/predis/predis/pull/1738) (2026-10-08)

### vscode-neovim/vscode-neovim

Vim mode for VSCode, powered by Neovim · ★ 7 756

- [Keep visual selections whole over characters outside the BMP](https://github.com/vscode-neovim/vscode-neovim/pull/2683) (2026-09-23)

### NLog/NLog

NLog - Flexible and Structured Logging for various .NET Platforms · ★ 6 549

- [CachedLayoutRendererWrapper - Added CachedUntil to reset cached value when hour or day changes](https://github.com/NLog/NLog/pull/6292) (2026-10-11)
- [docs: document default values for Filters properties in XML docs](https://github.com/NLog/NLog/pull/6275) (2026-09-05)

### maildev/maildev

:mailbox: SMTP Server + Web Interface for viewing and testing emails during development. · ★ 6 141

- [Build CID attachment URLs against the API route and base path](https://github.com/maildev/maildev/pull/582) (2026-09-22)

### Pagefind/pagefind

Static low-bandwidth search at scale · ★ 5 515

- [fix(pagefind): skip exclude selectors that cannot be parsed](https://github.com/Pagefind/pagefind/pull/1312) (2026-09-13)

### xoofx/markdig

A fast, powerful, CommonMark compliant, extensible Markdown processor for .NET · ★ 5 342

- [Fix definition lists requiring 3 spaces after the marker](https://github.com/xoofx/markdig/pull/959) (2026-10-15)
- [Fix grid table open last cell taking a | from the next line (#494)](https://github.com/xoofx/markdig/pull/958) (2026-10-15)
- [Fix: keep trailing content out of an unmatched emphasis closer (#743)](https://github.com/xoofx/markdig/pull/950) (2026-09-19)
- [Fix heading auto-link hijacking nested link labels (#668)](https://github.com/xoofx/markdig/pull/949) (2026-09-19)

### dromara/carbon

A simple, semantic and developer-friendly  time  package for golang · ★ 5 222

- [fix(boundary): preserve instants at minute boundaries](https://github.com/dromara/carbon/pull/378) (2026-10-10)

### alecthomas/chroma

A general purpose syntax highlighter in pure Go · ★ 5 054

- [fix(lexers): recognize TypeScript binary, octal and exponent literals](https://github.com/alecthomas/chroma/pull/1396) (2026-10-15)

### olekukonko/tablewriter

ASCII table in golang · ★ 4 820

- [twwidth: purge width cache in SetTabWidth](https://github.com/olekukonko/tablewriter/pull/338) (2026-10-11)

### knadh/koanf

Simple, extremely lightweight, extensible, configuration management library for Go. Supports JSON, TOML, YAML, env, command line, file, S3 etc. Alternative to viper. · ★ 4 219

- [MapKeys returns an empty slice for a natively-typed map](https://github.com/knadh/koanf/pull/447) (2026-10-05)

### spencermountain/spacetime

A lightweight javascript timezone library · ★ 4 107

- [Return titlecased timezone names from whereIts](https://github.com/spencermountain/spacetime/pull/474) (2026-10-15)
- [Expose the tzdb version as spacetime.tzdbVersion](https://github.com/spencermountain/spacetime/pull/473) (2026-10-15)
- [Fix hour() setter clamping to an invalid hour (24)](https://github.com/spencermountain/spacetime/pull/467) (2026-09-08)

### itchyny/gojq

Pure Go implementation of jq · ★ 3 812

- [fix: release the allocator when an updated value escapes to a query](https://github.com/itchyny/gojq/pull/306) (2026-09-14)

### Suor/funcy

A fancy and practical functional tools lib · ★ 3 509

- [fix: _cut_iter yields wrong-length/wrong-content parts when step > n](https://github.com/Suor/funcy/pull/177) (2026-09-10)

### thephpleague/csv

CSV data manipulation made easy in PHP · ★ 3 482

- [fix: make Buffer::nth() positional so it stays correct after deletions](https://github.com/thephpleague/csv/pull/594) (2026-09-05)

### composer/satis

Simple static Composer repository generator - For a full private Composer repo use Private Packagist · ★ 3 305

- [Allow relative URI references for homepage and archive prefix-url](https://github.com/composer/satis/pull/1218) (2026-10-06)
- [Resolve dependencies through the repositories the packages filter dropped](https://github.com/composer/satis/pull/1207) (2026-09-14)

### montanaflynn/stats

A well tested and comprehensive Golang statistics library package with no dependencies. · ★ 3 030

- [fix: return an error from Quartile and its callers for single-element input](https://github.com/montanaflynn/stats/pull/135) (2026-09-09)

### versity/versitygw

A simple to deploy but feature rich S3 object storage server for your filesystem · ★ 3 027

- [fix: return NextMarker in ListObjects only when a delimiter is set](https://github.com/versity/versitygw/pull/2506) (2026-10-13)
- [fix: reject the start-after query in ListObjects (V1)](https://github.com/versity/versitygw/pull/2505) (2026-10-13)
- [fix: compute IsTruncated from the absolute index in ListMultipartUploads](https://github.com/versity/versitygw/pull/2475) (2026-10-08)
- [fix: validate and apply the ListBuckets bucket-region query](https://github.com/versity/versitygw/pull/2474) (2026-10-07)
- [fix: drop upload-id-marker without key-marker in ListMultipartUploads](https://github.com/versity/versitygw/pull/2477) (2026-10-05)
- [fix: report the last upload in ListMultipartUploads next markers on a single page](https://github.com/versity/versitygw/pull/2476) (2026-10-05)
- [fix: return InvalidURI for a malformed escape in the request path](https://github.com/versity/versitygw/pull/2473) (2026-10-05)
- [fix: accept upload-id-marker together with key-marker in ListMultipartUploads](https://github.com/versity/versitygw/pull/2472) (2026-10-05)
- [fix: return MalformedXML for a DeleteObjects request without objects](https://github.com/versity/versitygw/pull/2471) (2026-10-05)
- [fix: reject ListMultipartUploads requests that also carry uploadId](https://github.com/versity/versitygw/pull/2470) (2026-10-05)
- [Return IllegalLocationConstraintException for a mismatched LocationConstraint](https://github.com/versity/versitygw/pull/2389) (2026-09-14)

### thephpleague/commonmark

Highly-extensible PHP Markdown parser which fully supports the CommonMark and GFM specs. · ★ 2 979

- [fix: accept unordered_list_markers config in InlinesOnlyExtension](https://github.com/thephpleague/commonmark/pull/1151) (2026-09-07)

### mitsuhiko/insta

A snapshot testing library for rust · ★ 2 973

- [Remove trailing semicolon from assert_binary_snapshot! macro body](https://github.com/mitsuhiko/insta/pull/946) (2026-10-10)

### BurntSushi/jiff

A datetime library for Rust that encourages you to jump into the pit of success. · ★ 2 957

- [fmt: fix buffer sizes when printing durations](https://github.com/BurntSushi/jiff/pull/658) (2026-10-13)

### zzzprojects/html-agility-pack

Html Agility Pack (HAP) is a free and open-source HTML parser written in C# to read/write DOM and supports plain XPATH or XSLT. It is a .NET code library that allows you to parse "out of the web" HTML files. · ★ 2 851

- [Fix HtmlEntity.DeEntitize duplicating '#' on invalid numeric entities](https://github.com/zzzprojects/html-agility-pack/pull/611) (2026-10-12)

### Paymenter/Paymenter

Free and open-source webshop solution for hostings · ★ 2 718

- [fix(cart): hide Edit when there is nothing to configure](https://github.com/Paymenter/Paymenter/pull/1340) (2026-10-10)
- [Refresh the config options of a cart item whose product changed](https://github.com/Paymenter/Paymenter/pull/1326) (2026-09-17)

### api-platform/core

The server component of API Platform: hypermedia and GraphQL APIs in minutes · ★ 2 580

- [fix(state): avoid deprecated PartialDenormalizationException::getErrors()](https://github.com/api-platform/core/pull/8663) (2026-10-13)
- [fix(hal): use spl_object_id() for circular reference counters](https://github.com/api-platform/core/pull/8657) (2026-10-09)

### pelican/panel

Free, open source game server management panel built on Laravel and Docker. · ★ 2 387

- [Move the primary allocation when it is removed from a server](https://github.com/pelican/panel/pull/2635) (2026-10-10)
- [Fix plugin update crashing after the rows are refreshed](https://github.com/pelican/panel/pull/2598) (2026-09-25)

### gookit/goutil

💪 Helper Utils(900+): int, byte, string, array/slice, map, struct, dump, convert/format, error, web/http, cli/flag, OS/ENV, filesystem, system, test/assert, time and more. Go 常用的工具函数：数字，字符串，数组，Map，结构体，反射，文本，文件，错误，时间日期，特殊处理，格式化，常用信息获取等等 · ★ 2 361

- [fix(strutil): prevent Substr panic on out-of-range negative length](https://github.com/gookit/goutil/pull/265) (2026-09-07)

### dedoc/scramble

Modern Laravel OpenAPI (Swagger) documentation generator. No PHPDoc annotations required. · ★ 2 219

- [Fix PhpDoc summary and description split for CRLF files](https://github.com/dedoc/scramble/pull/1271) (2026-09-13)

### gocarina/gocsv

The GoCSV package aims to provide easy CSV serialization and deserialization to the golang programming language · ★ 2 198

- [Add MarshalBytesWithoutHeaders](https://github.com/gocarina/gocsv/pull/305) (2026-10-12)
- [Fix date layout in README and full example](https://github.com/gocarina/gocsv/pull/304) (2026-10-12)
- [Make SetHeaderNormalizer safe to call while decoding](https://github.com/gocarina/gocsv/pull/303) (2026-10-12)
- [Parse integer fields as base 10 (fixes #182)](https://github.com/gocarina/gocsv/pull/293) (2026-09-05)

### thephpleague/html-to-markdown

Convert HTML to Markdown with PHP · ★ 1 907

- [fix: honor start="0" on ordered lists](https://github.com/thephpleague/html-to-markdown/pull/277) (2026-09-07)

### AfterShip/email-verifier

:white_check_mark: A Go library for email verification without sending any emails. · ★ 1 643

- [Document the proxy schemes that work and stop panicking on custom dialers](https://github.com/AfterShip/email-verifier/pull/224) (2026-09-15)

### fabiocaccamo/python-benedict

:blue_book: dict subclass with keylist/keypath support, built-in I/O operations (base64, csv, html, ini, json, pickle, plist, query-string, toml, xls, xml, yaml), s3 support and many utilities. · ★ 1 606

- [Fix RecursionError when assigning a benedict into its own nested descendant (#592)](https://github.com/fabiocaccamo/python-benedict/pull/597) (2026-09-29)

### gookit/color

🎨 Terminal color rendering library, support 8/16 colors, 256 colors, RGB color rendering output, support Print/Sprintf methods, compatible with Windows. GO CLI 控制台颜色渲染工具库，支持16色，256色，RGB色彩渲染输出，使用类似于 Print/Sprintf，兼容并支持 Windows 环境的色彩渲染 · ★ 1 606

- [fix(convert): zero-pad each channel in RgbToHex](https://github.com/gookit/color/pull/120) (2026-09-07)

### olebedev/when

A natural language date/time parser with pluggable rules · ★ 1 463

- [Fix month parsing overflowing into the next month](https://github.com/olebedev/when/pull/50) (2026-09-27)

### dgilland/pydash

The kitchen sink of Python utility libraries for doing "stuff" in a functional way. Based on the Lo-Dash Javascript library. · ★ 1 447

- [Fix `fill` growing the array when `start` comes after `end`](https://github.com/dgilland/pydash/pull/257) (2026-09-20)

### cakephp/chronos

A standalone DateTime library originally based off of Carbon · ★ 1 362

- [fix: parse fractional seconds in ChronosTime as a fraction of a second](https://github.com/cakephp/chronos/pull/531) (2026-09-06)

### go-playground/form

:steam_locomotive: Decodes url.Values into Go value(s) and Encodes Go value(s) into url.Values. Dual Array and Full map support. · ★ 931

- [Fix panic when a custom type function returns nil for a pointer field](https://github.com/go-playground/form/pull/77) (2026-09-08)

### mkideal/cli

CLI - A package for building command line app with go · ★ 723

- [fix(flag): honor full separator length when splitting map key=value pairs](https://github.com/mkideal/cli/pull/75) (2026-09-06)

### gookit/config

📝 Go configuration manage(load,get,set,export). support JSON, YAML, TOML, Properties, INI, HCL, ENV and Flags. Multi file load, data override merge, parse ENV var. Go应用配置加载管理，支持多种格式，多文件加载，远程文件加载，支持数据合并，解析环境变量名 · ★ 585

- [fix(read): prevent panic on negative slice index in a key path](https://github.com/gookit/config/pull/221) (2026-09-07)

### rust-syndication/rss

Library for serializing the RSS web content syndication format · ★ 502

- [Fix image height validation to allow the spec maximum of 400](https://github.com/rust-syndication/rss/pull/194) (2026-09-05)

### kelindar/bitmap

Simple dense bitmap index in Go with binary operators · ★ 385

- [Fix Or/Xor dropping bits when combining bitmaps of different lengths](https://github.com/kelindar/bitmap/pull/51) (2026-09-23)

### brick/date-time

Date and time library for PHP · ★ 361

- [fix: emit full seconds in Instant and ZonedDateTime toISOString (RFC 3339)](https://github.com/brick/date-time/pull/131) (2026-09-30)

### pydantic/pydantic-extra-types

Extra Pydantic types. · ★ 338

- [Add Sha256Str type](https://github.com/pydantic/pydantic-extra-types/pull/433) (2026-10-03)
- [Fix MacAddress accepting octets with a sign or whitespace](https://github.com/pydantic/pydantic-extra-types/pull/424) (2026-09-05)

### rodaine/table

Go CLI Table Generator · ★ 324

- [fix: pad short rows in SetRows to the number of columns](https://github.com/rodaine/table/pull/67) (2026-09-14)

### wroberts/pytimeparse

A small Python module to parse various kinds of time expressions. · ★ 299

- [Fix sign character class accidentally matching a pipe `|`](https://github.com/wroberts/pytimeparse/pull/33) (2026-10-03)

### QEDK/configparser-rs

A simple configuration parsing utility with no dependencies built on Rust. · ★ 88

- [Fix panic when parsing with a multi-byte delimiter](https://github.com/QEDK/configparser-rs/pull/61) (2026-09-06)

### thephpleague/uri-src

URI toolkit Library · ★ 51

- [Fix multibyte characters being split by the URI Template prefix modifier](https://github.com/thephpleague/uri-src/pull/192) (2026-09-06)

### spiral/testing

Spiral Framework testing SDK · ★ 7

- [Ignore line endings in scaffolder output assertions](https://github.com/spiral/testing/pull/95) (2026-10-04)
- [Ignore line endings in console output assertions](https://github.com/spiral/testing/pull/94) (2026-10-04)
- [Keep configured auth transports when faking an actor](https://github.com/spiral/testing/pull/91) (2026-09-21)

### mozilla/firefox

Firefox web browser

- [Bug 1996443: focus the browser window when opening about:logins via LoginHelper.openPasswordManager](https://phabricator.services.mozilla.com/D332854) (2026-10-21)

### proxmox/pve-manager

Proxmox VE: web interface and API

- [4 patches merged through the pve-devel mailing list](https://git.proxmox.com/?p=pve-manager.git;a=search;h=HEAD;s=Michal+Fox;st=author)