Today's theme is simple: tools that put control back in users' hands keep climbing. From managing your photo library on your own hardware to running secure remote access, several open-source projects are consolidating momentum and attention from developers, sysadmins, and privacy-minded users.
In Brief
Excalidraw — virtual whiteboard for sketching
Why this matters now: Excalidraw’s browser-first, collaborative whiteboard continues to be a go-to low-friction tool for teams needing sketchy, human-feeling diagrams without vendor lock-in.
Excalidraw has racked up strong community adoption (over 129k stars) and steady growth, and it remains notable for running entirely in the browser with offline and collaboration capabilities. The project’s README directs people to the web editor and emphasizes the hand-drawn aesthetic that many teams prefer for early brainstorming.
"Excalidraw Editor"
Key takeaway: If you need a lightweight collaborative canvas that’s easy to embed or self-host, Excalidraw is still the simplest, most ergonomically designed option.
Supabase — Postgres-first backend platform
Why this matters now: Supabase is the fastest way for developers to get a managed Postgres experience with auth, realtime, and storage—useful for teams moving from prototypes to production.
Supabase remains a central open-source alternative to proprietary BaaS offerings, with a large codebase and ecosystem. The project blends hosted services and self-managed components; its repo and docs frequently signal breaking changes and migration guidance for deployers.
"Supabase is the Postgres development platform. We're building the features of Firebase using enterprise-grade open source tools."
Key takeaway: Developers building apps that expect to scale from prototype to production should keep an eye on Supabase for feature parity with managed services and clearer migration paths.
IPTV — crowdsourced playlists for global channels
Why this matters now: For hobbyists and cord-cutters, a maintained, community-curated collection of public streams is a practical resource for testing and experimentation.
The iptv-org/iptv repo is essentially a global index of publicly available IPTV streams and electronic program guides. It’s a useful data source for media projects, experiments, or DIY streaming boxes, but users should be mindful of regional rights and reliability—these lists change quickly.
"Collection of publicly available IPTV (Internet Protocol television) channels from all over the world."
Key takeaway: Use iptv-org/iptv as a resource for experimentation, not as a replacement for licensed streaming services.
Deep Dive
Immich — high-performance self-hosted photo and video management
Why this matters now: Immich’s self-hosted photo manager gives users and small orgs a privacy-respecting, high-performance alternative to cloud photo services at a time when photo volume and AI-driven processing demand better local control.
Immich is surging: roughly 109,700 stars and adding about +66 stars/day, which signals broad interest beyond hobbyist circles. The project is TypeScript-based and licensed under AGPLv3, and its README and repo layout point at a modern Node/TypeScript toolchain and a larger packages monorepo. That combination matters: Immich isn’t just a polished client—it's an opinionated stack for ingesting, indexing, and serving large personal libraries.
"License: AGPL_v3"
Beyond feature polish, security and hardening matter. There are reports in the research thread that a DAST tool once bypassed a locked-folder control on Immich, which is a reminder that self-hosted services require constant vigilance and patching. Phrase that carefully: according to third‑party testing notes, an access-control issue was demonstrated — if accurate, it underscores why operators should follow releases and enable automated updates where feasible.
For teams or organizations considering Immich, the immediate implications are practical: you get high-touch features (faces, deduplication, web and mobile access) without outsourcing metadata to a big vendor, but you must treat it like any other backend service — run it on a well-maintained host, monitor logs, and plan for backups. The AGPL license also means derivative server-side forks have obligations around source release, which is relevant to commercial deployments.
Key takeaway: Immich is a compelling self-hosted alternative to proprietary photo services for anyone prioritizing privacy and control, but its operational surface requires proactive security and update strategies.
RustDesk — an open-source remote desktop alternative
Why this matters now: RustDesk offers a self-hostable remote desktop that reduces reliance on proprietary services like TeamViewer—important for IT teams and privacy-conscious users who need remote access without a third-party broker.
RustDesk sits above 119k stars and keeps steady momentum. Built in Rust and licensed AGPLv3, it markets itself as a privacy-first TeamViewer alternative with cross-platform clients and Docker-friendly server options. Recent coverage highlights features such as improved Wayland multi-scale display support—an important area as Linux desktops evolve away from X11.
"RustDesk - Your remote desktop"
Security posture is two-sided: RustDesk enables self-hosting to avoid third-party relay servers, which is a plus. On the flip side, the ecosystem around remote-access tools attracts abuse—there have been warnings about fake RustDesk bundles containing backdoors. Best practice takeaway: always verify binaries, prefer building from source or official Docker images, and enforce strong authentication and allowlists on target machines.
Operationally, RustDesk lowers friction for small IT teams that need ad-hoc remote support and for teams that want a standalone relay/ID server under their control. The project’s active contributor base and forks suggest it’s unlikely to stagnate, but any production deployment should include monitoring, regular updates, and a hardened network perimeter.
Key takeaway: RustDesk is now a mature, privacy-friendly remote desktop choice—very useful for teams that need to self-host—but it requires disciplined acquisition and deployment to avoid supply-chain risk.
Closing Thought
Open-source tooling that returns control to users—whether for photos, remote access, or app backends—continues to gather real momentum. That momentum brings better features and community scrutiny, which is good, but it also shifts operational responsibility onto users and admins. If you adopt these projects, plan for security, updates, and backups as part of the cost of independence.