I'm Cole. I build small, sharp tools under Flight Unreached and contribute to open source where correctness matters — security, RF/SDR, accessibility, health tech.
Everything below is free for noncommercial use and runs with zero dependencies. Each has a live demo you can try in your browser right now — no install, no account. Pick whichever fits; each repo has the full story.
| Project | What it does |
|---|---|
| unslop | Catches the AI tells in your writing — buzzwords, filler, flat rhythm — and points you at what to fix before you hit send. Reads sixteen languages, each with its own researched tell lists. Runs in your browser (UI in 32 languages), your terminal, CI, or as an agent skill. |
| hopandhaul | Finds when flying into a cheaper hub and taking the train the rest of the way beats flying direct. Click-the-map planner that runs in your browser with no install, 4,175 airports, UI in 46 languages. |
| liftmath | Strength-training math with receipts — consensus 1RM, load charts, volume landmarks, macros, plate loading, program templates. A web app plus a CLI, 32 languages. |
| translint | A linter for your translation files — catches missing keys, placeholder mismatches, and untranslated values before they ship. CLI, CI gate, pre-commit, or agent skill. Its site practices what it lints: 32 languages, RTL included. |
All four are open to contributors — each has issues tagged good first issue if you want a place to start.
Fifteen merged now, with another forty-odd open across roughly thirty more repos: correctness, security, accessibility, and translation. A few that were fun to track down: byte-order corruption in RFID dump files, authenticode digest buffers that were never null-terminated in YARA, an OAuth open-redirect in a medical-records system, a flipped GPS hemisphere in a photo-evidence app, and a fixed-size HTTP header buffer that overflowed on emit.
| Repo | Change |
|---|---|
| VirusTotal/yara | Null-terminate authenticode digest/thumbprint hex buffers |
| VirusTotal/yara | Fix a string leak in CLI args_free |
| VirusTotal/yara | Honor -w/--no-warnings for the file-too-large skip message |
| YARAHQ/yara-forge | Align indexed and patterned hash meta fields |
| SigmaHQ/sigma | Add a vmmemWSL exception to the non-existing-file rule |
| splunk/security_content | Add a PreAuthType filter to the PetitPotam Kerberos detection |
| RfidResearchGroup/proxmark3 | Fix byte-swapped, corrupted EM 4x05 dump files |
| merbanan/rtl_433 | Restore a missing bitbuffer_clear in pulse_slicer_dmc |
| merbanan/rtl_433 | Fix swapped order/inversion nibbles in the secplus_v2 docs |
| jcsteh/osara | Make paste/duplicate screen-reader messages translatable |
| guardianproject/orbot-android | Request ACCESS_LOCAL_NETWORK before opening the proxy on all interfaces |
| symfony/symfony | Fix the Finnish BIC/IBAN mismatch translation |
| ghostfolio/ghostfolio | Improve the French localization |
| ghostfolio/ghostfolio | Improve the Dutch localization |
| openfoodfacts/robotoff | Replace obsolete facet URLs with the /facets/ prefix |
Open / in review — 40+ PRs across ~30 more repos
Security and detection
- elastic/detection-rules #6383: KQL wildcard lexer fails on escaped specials with spaces
- splunk/security_content #4147: computer-account filter in the service-ticket detection
- openemr/openemr #12768: validate
post_logout_redirect_uribefore redirecting (open-redirect) - chimera-nas/libevpl #114: fixed-size HTTP header buffer overflow on emit
RF / SDR
- PentHertz/urh-ng #3: wrong int8 magnitude/demod on ARM (signed
char)
Accessibility
- nvaccess/nvda #20444: clearer error for bare drive letters in Create Portable
- patternfly/patternfly #8481: document listbox/option/aria-selected for select menus
Privacy / anti-censorship
- guardianproject/proofmode-android #136: correct the QR bitmap stride
- guardianproject/proofmode-android #135: correct the C2PA GPS hemisphere
- ooni/probe-cli #1786: remove a stray debug print in the feature-flag cache
Systems / web
- osquery/osquery #8986: scan XDG-base-directory Firefox profiles
- osquery/osquery #8987: add the Windsurf
.devinpath tovscode_extensions - ClickHouse/click-ui #1141: default Button
htmlTypeto button - ClickHouse/click-ui #1140: respect a consumer-supplied
aria-label - openclimatefix/graph_weather #231: division-by-zero on single-axis grids
- openclimatefix/graph_weather #230: guard optional data-module imports
- hotosm/tasking-manager #7287: replace Nominatim reverse geocoding with pg-nearest-city
- symfony/symfony #64815: drop an always-true
method_existscheck
Health / food
- openfoodfacts/open-prices #1376: remove an unreachable branch in the barcode fixups
- davidhealey/waistline #961: guard
Meals.initagainst overlapping calls - davidhealey/waistline #960: distinguish rate-limit/network errors from bad USDA keys
- simonoppowa/OpenNutriTracker #513: catch silent 0-byte exports
Localization (Symfony validator placeholder fixes plus a wider i18n wave)
- symfony/symfony: placeholder fixes across Armenian, Arabic, Basque, Turkish, Galician, Azerbaijani, Traditional Chinese, Finnish, and Welsh
- mdn/translated-content #36835: correct the Japanese
Reflect.deleteProperty()docs - TheIllusiveC4/Curios #622 and #621: Turkish placeholder and locale-casing bugs
- chubin/wttr.in #1279 and #1278: RTL mark and corrupted Persian/Hebrew/Arabic captions
- tolgee/tolgee-platform #3789: keep the zero plural form in Apple XLIFF export
- jsverse/transloco #940: respect currency in
numberFormatOptions - simonoppowa/OpenNutriTracker #515 and #514: Slovak and English i18n keys
GitLab mirrors · Munzzyy5@proton.me