Stop vibe-debugging. Every exception, every backtrace, grouped so you see patterns, not noise. Learn more →
Top 23 Python HacktoberFest Projects
-
Free Programming Books
-
AppSignal
AppSignal knows why the f*#k it crashed. Stop vibe-debugging. Every exception, every backtrace, grouped so you see patterns, not noise.
-
-
transformers
🤗 Transformers: the model-definition framework for state-of-the-art machine learning models in text, vision, audio, and multimodal models, for both inference and training.
Project mention: Firefox Download Failed at 99%? How to Resume It Instead of Starting Over | dev.to | 2026-10-13For Hugging Face, neither curl nor aria2 can fix an expired signature halfway through, because the signed URL they hold just stops working. Use hf download from huggingface_hub, which can request fresh signed URLs when the old ones die. It has its own problems, though. A transformers issue shows a download that hit repeated 403s on signed URLs, refreshed them, and then hung without an error. Setting HF_HUB_DISABLE_XET=1 avoided it. That particular bug was on HF's side and was fixed before the issue was closed, but the Neutree FAQ recommends the same thing for unstable networks, noting the HTTP path is slower but more reliable.
-
Wow, it's actually real.
https://old.reddit.com/r/github/comments/1at9br4/i_am_new_to...
https://github.com/sherlock-project/sherlock/issues/2011
-
Home Assistant
:house_with_garden: Open source home automation that puts local control and privacy first.
Home Assistant: https://www.home-assistant.io/
-
PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
-
Project mention: uv Python cheatsheet: what changed in 0.12 and what still trips you up | dev.to | 2026-09-18
Scrapy runs its continuous integration on uv today. The workflow pins astral-sh/setup-uv, drives the test matrix through uvx --with tox-uv tox, and sets UV_PYTHON_PREFERENCE: only-system with a comment explaining why, which is to make uv use the interpreter actions/setup-python already installed instead of downloading one of its own. Steal that last setting. In continuous integration you have usually already paid for a specific interpreter, and letting uv helpfully fetch a second one gives you a build that passes against a Python your users are not running. Although Scrapy's installation guide doesn't mention uv. It covers pip, it covers conda, it covers virtual environments, and it stops. Documentation usually trails practice so this is nobody's failure, but it is real and fixable, and since Zyte maintains Scrapy it is a gap we can close rather than complain about. If you have ever wondered what a genuinely useful first contribution to a large open-source project looks like, updating an installation page to match what the maintainers already do is a strong candidate.
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
Project mention: Benchmarking ASR & Essential Open-Source CV Tools for Local AI | dev.to | 2026-06-09
Source: https://github.com/roboflow/supervision
-
paperless-ngx
A community-supported supercharged document management system: scan, index and archive all your documents
Project mention: 6,918 Paperless matches: a document archive that was meant to replace the filing cabinet | dev.to | 2026-10-03Paperless-ngx documentation: https://docs.paperless-ngx.com/
-
Start-here: Will Google show the URL → Search Console (free). Who visited → GA4 (free standard). Product/errors → PostHog or Sentry. Is it up → UptimeRobot or Better Stack.
-
-
Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
Github: https://github.com/fatehMohamed14/anthropic-cybersecurity-skills-defensive, This is a fork from https://github.com/mukul975/anthropic-cybersecurity-skills.
-
-
linkedin-skill-assessments-quizzes
Full reference of LinkedIn answers 2024 for skill assessments (aws-lambda, rest-api, javascript, react, git, html, jquery, mongodb, java, Go, python, machine-learning, power-point) linkedin excel test lösungen, linkedin machine learning test LinkedIn test questions and answers
-
Redash
Make Your Company Data Driven. Connect to any data source, easily visualize, dashboard and share your data.
Project mention: I ran my code analyzer on 9 codebases it had never seen. It found 3 real bugs, and embarrassed me first. | dev.to | 2026-07-16redash ships a client method calling GET /api/dashboards/recent with no backend route serves it. (Latent: the method has no callers today, which the issue says plainly. #7769)
-
Resume-Matcher
The #1 AI Harness for Building Resumes, PDFs, Cover Letters & more, locally with 100+ LLMs support.
Project mention: Show HN: Resume Matcher – Tailor your resumes with job descriptions | news.ycombinator.com | 2026-03-04- And above all, a simple and faster way to optimize your existing resume to a job description, that light nudge with the keywords that makes it fit.
It's not perfect yet, but I'm working towards it more and more. Grateful to have community support so far.
Also, a new website: https://resumematcher.fyi/
-
spotify-downloader
Download your Spotify playlists and songs along with album art and metadata (from YouTube if a match is found).
-
opik
Debug, evaluate, and monitor your LLM applications, RAG systems, and agentic workflows with comprehensive tracing, automated evaluations, and production-ready dashboards.
[1] comet-ml, "opik — Debug, evaluate, and monitor your LLM applications, RAG systems, and agentic workflows", GitHub (เข้าถึง 13 ก.ย. 2026), https://github.com/comet-ml/opik
-
When I read Discussion #13693, I noticed clear patterns. Maintainers and users shared their real-world experiences with i18n. Here are the five biggest pain points.
-
Project mention: CVE-2026-80104: DB-GPT Skill Upload Path Traversal (and Sibling CVE-2026-73034) | dev.to | 2026-08-30
In DB-GPT 0.8.0, skill_upload in packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/agentic_data_api.py took the multipart file.filename and joined it onto pilot/tmp with no filename validation. A name with ../ segments writes outside the intended upload directory. Auth does not stop this: get_user_from_headers in packages/dbgpt-serve/src/dbgpt_serve/utils/auth.py is a mock that returns role="admin" whether or not a user_id header is set. GitHub issue #3026 tracks the skill-upload traversal. The fix landed as commit aecad1a9 (PR #3065, May 2026), which adds _validate_upload_filename and rejects absolute paths, multi-segment names, and ... That helper is present on tagged/PyPI v0.8.1. CVE-2026-80104 was assigned 2026-08-25.
-
-
DocsGPT
Private AI platform for agents, assistants and enterprise search. Built-in Agent Builder, Deep research, Document analysis, Multi-model support, and API connectivity for agents.
-
parlant
Build reliable customer-facing AI agents with Parlant: an interaction control harness optimized for controlled, consistent, and predictable LLM interactions.
Project mention: parlant VS Radioso - a user suggested alternative | libhunt.com/r/parlant | 2026-09-08 -
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
Python HacktoberFest discussion
Python HacktoberFest related posts
-
Arzi Likho (अर्ज़ी लिखो) — the ₹30 cyber-café application letter, drafted in formal Hindi by Gemma 4 in three minutes
-
AWS Lambda Web Functions
-
Hacktoberfest 2026: How to Participate, Earn Rewards, and Join a Local Fest
-
Sealing the Sighting: Verifiable Bird Records from Nairobi, Powered by Gemma
-
Trailens : reconnect with the real world
-
NatureQuest AI: An Open-Weight AI That Sends You Outside
-
Congrats to the Hacktoberfest Weekend Challenge: Build for a Friend Winners!
-
A note from our sponsor - AppSignal
www.appsignal.com | 15 Oct 2026
Index
What are some of the best open-source HacktoberFest projects in Python? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | free-programming-books | 398,692 |
| 2 | TheAlgorithms | 225,166 |
| 3 | transformers | 167,499 |
| 4 | sherlock | 93,803 |
| 5 | Home Assistant | 91,517 |
| 6 | PayloadsAllTheThings | 81,758 |
| 7 | Scrapy | 64,721 |
| 8 | supervision | 51,173 |
| 9 | paperless-ngx | 46,470 |
| 10 | Sentry | 45,525 |
| 11 | black | 41,890 |
| 12 | Anthropic-Cybersecurity-Skills | 34,111 |
| 13 | PythonRobotics | 30,664 |
| 14 | linkedin-skill-assessments-quizzes | 28,859 |
| 15 | Redash | 28,831 |
| 16 | Resume-Matcher | 28,665 |
| 17 | spotify-downloader | 26,290 |
| 18 | opik | 22,474 |
| 19 | Wagtail | 20,543 |
| 20 | DB-GPT | 20,105 |
| 21 | Taipy | 19,433 |
| 22 | DocsGPT | 18,321 |
| 23 | parlant | 18,297 |