OHRisk vs Photo Curator

OHRisk is a local command-line tool for assessing open-source license risk in software dependencies. It evaluates dependencies against SaaS or distributed-app usage profiles and reports findings as low, review, high, or unknown. Inputs span package information from npm, Rust, Go, Python, Java, .NET, Ruby, and PHP, plus CycloneDX or SPDX software bills of materials. It can use local package evidence and selected remote evidence sources, with checksum and identity validation described for supported ecosystems. Reports can be generated for the terminal or as JSON, HTML, Markdown, SARIF 2.1.0, or CycloneDX 1.5 JSON. A bundled GitHub Actions composite action supports scan, ci, and diff commands; the guide also documents SARIF upload to GitHub code scanning. Local waiver files can keep findings visible in reports while excluding them from CI threshold failures. OHRisk is free under the MIT License and distributed as an npm package, also runnable with pnpm, Yarn, or Bun. The packaged CLI requires Node.js 24.0.0 or later. It is a risk decision aid, not a replacement for legal review.

Photo Curator helps photographers sort large photo libraries and identify likely keepers. Cull groups images as Sharp, Soft (recoverable) or Blurry using a contrast-normalized sharpness measure. Dedup clusters near-duplicates using perceptual hashing, capture-time metadata and ORB feature matching, then keeps the sharpest frame in each group. Rank scores composition, lighting, focus, color and contrast, showing top selections with per-photo radar charts. It reads JPEG, PNG, HEIC, HEIF, HIF, TIFF, BMP, WebP and RAW formats supported by LibRaw. Processing runs locally on the user's machine; the app binds its server to 127.0.0.1 and says photos are not uploaded. Files are not moved or deleted unless the user chooses an action. The GPS view can make optional requests for OpenFreeMap tiles, loaded by the browser. Photo Curator is free and open source under the MIT license. Its offline Linux bundle supports x86_64 and requires glibc 2.28 or later; ARM and musl distributions are not covered by that bundle.