Explore Projects

Kyverno supports image signature and attestation verification using the Sigstore Cosign tooling. Re-implement the Kyverno Sigstore Cosign module to use OCI artifacts and references and remove dependencies to the Cosign CLI packages. - Expected outcome: Kyverno can use OCI artifacts to verify container images that are in Cosign format.

This proposal is based on the open LLVM project with the same title, from Tue Ly and Joseph Huber. See https://discourse.llvm.org/t/libc-gsoc-2024-half-precision-in-llvm-libc/77027. The IEEE 754 binary16 format (also known as “half precision”) has most recently gained popularity in machine learning, which often does not require higher precision, and can benefit from increased performance when using smaller data types. It has been standardized as the _Float16 type in the drafts of the C23 standard. This project aims to implement support for this new floating-point data type and the associated variants of the C library’s math functions, in LLVM’s libc. Deliverables: 1. Add support for usage of the new type in generated headers through the float16 alias on supported compilers, compiler versions, and architectures. 2. Add generic implementations of the C23 half precision basic math operations for supported architectures. 3. Add possible specialized, higher-performance implementations of the C23 half precision basic math operations for individual supported architectures using hardware instructions and compiler builtins. 4. Add generic implementations of C23 half precision higher math functions for supported architectures. (Not all higher math functions can be implemented in the amount of time we have.)

<p>coala as a linting and code fixing tool can be far more useful when its power can be directly leveraged from within the code editor. Since all the major IDE's and code editors are now starting to support the standard Microsoft Language Server protocol it is now possible to expose coala's capabilities via the one said protocol and support a wide range of code editors. This proposal outlines the project where I intend to build one such server loosely based upon the proof of concept implementation built for vs-code. It should see noticeable performance improvements, feature upgrades to support actions such as didChange, didSave etc, customization of bears from within the LSP, support for all languages coala supports and be a fully standards confirming general language server.</p>

Currently, SkyWalking Python agent is implemented with the Threading module to provide data reporters. Yet with the growth of the Python agent, it is now fully capable and requires more resources than when only tracing was supported. The goal of this proposal is to refactor both the data reporters and communication protocol client parts using Python asyncio to improve performance and provide reliable test results and documentation.

This project implements a new R package that brings multilingual documentation to R help pages with correct support for dynamic content generated by Rd macros. The package intercepts utils:::.getHelpFile() applies section-level translations from installable modules and renders a per-section toggle so users can switch between translated and original text without changing environment variables.

SLIPS is a Machine Learning based intrusion detection system, which scans network traffic and processes the data using a variety of techniques, both machine learning based as well as heuristic based. Despite having many different features and techniques to detect malicious behaviors on a target network, there will always be a problem of processing so much network traffic data quickly and efficiently, both in regards to the CPU and memory usage. However, there is currently no way to gather data about CPU and memory usage during execution time, which makes it difficult to make further performance improvements to the project. Therefore, this project seeks to remedy this by creating a set of tools to gather performance data about the IDS execution behavior. To improve performance data gathering capabilities, the following features will be added to the project: - CPU profiling module - Memory profiling module - Both modules will allow for: Export of profile data, output as both absolute and difference from input profile baseline (if provided), output as data stream - CPU/Memory data visualization/analysis module which can: Show process resource usage over time, can restrict to top however many if desired, histogram of resource consumption and time spent at consumption level for a single module, and recommendation lists for modules needing optimization, scoring criteria based on highest memory/CPU usage, longest blocking time, and weighted aggregate score.

<p>RTEMS is a real-time operating system, meant to be used in applications that need high-precision task scheduling, such as the <a href="http://flightsoftware.jhuapl.edu/files/2015/Day-1/SolarProbePlusOverview.pdf" target="_blank">NASA's recent Parker Solar Probe</a>, which included RTEMS within its software stack.</p> <p>RTEMS currently only supports specific embeddable microprocessors which are hard to acquire before a project's scope is determined, or only legacy off-the-shelf hardware such as the i386 architecture, which greatly increases the barrier to entry.</p> <p>This proposal aims to create a new RTEMS port and board support package (BSP) which will run on the more modern x86-64 architecture, which is much more commonly available in consumer hardware, and is at the same time magnitudes more capable than other architectures.</p> <p>The BSP aims to include UEFI booting, basic APIC support for interrupts, the APIC timer for clock driver support, UART consoles for COM1 ports, and ACPI support for symmetric multiprocessing if possible. This forms a basis for future integration with RTEMS' existing libbsd codebase to enable TCP/IP, USB, SD, support.</p> <p>The x86_64-rtems-tools have been tested with a stub port and <a href="https://gcc.gnu.org/git/?p=gcc.git;a=commitdiff;h=602fa1e9d3ea5e87d4d6e17e3e91fc2647e42da3" target="_blank">patched up as needed</a> in prep for this port, leaving the port as the primary focus for the program.</p>

<p>OpenWISP installation procedure has some limitations that make it unsuited for complex deployments that need horizontal scaling, custom setups and easily replicable deployments. This project aims to solve these problems by dockerizing the OpenWISP modules to give users plug-and-play images with all the supporting "batteries-included" services so that the user can get OpenWISP working on their servers for their organizations and kubernetes clusters simply by changing the environment variables.</p>

<p>Netlink is, basically, an API used to transfer information between kernel and user-space processes. It consists on a standard sockets-based interface for user-space processes and an internal kernel API for kernel modules. The general idea would be to add netlink messages parsing support in strace. It could be very useful for network debug or tracing.</p> <p>After this work, more netlink family protocols can be added (NETLINK_ROUTE, NETLINK_FIREWALL ...).</p>

Move2Kube is a command-line tool for automating creation of Infrastructure as code (IaC) artifacts. It has inbuilt support for creating IaC artifacts for replatforming to Kubernetes/OpenShift. We want to compile targetting WASM/WASI and run the resulting WASM module in the browser. This will help up showcase Move2Kube for demos and allow users to quickly try out Move2Kube without having to install it or any of its dependencies. - Expected Outcome: - Run Move2Kube CLI in the browser using WebAssembly.

<p>Mypyc is a compiler from type-annotated Python to CPython C extension modules. It uses type information and restrictions to certain dynamic language features to speed up code, often significantly.</p> <p>This project speeds up compiling three string formatting methods (printf-style, str.format, f-string) and frequently used conversion operations. It also adds the bytes primitive and supports related operations.</p>

The project aims to develop an online tool that can group and aggregate topologically or geographically related alarms in IHR's monitored metrics. The tool will include a JS module for analyzing and aggregating alarms, a VueJS component for displaying the aggregated alarms, and integration with IHR's global report. The tool will provide multi-dimensional reports to enhance the visibility and management of the most important events that generate numerous alarms across multiple datasets.

<p>The aim of this project is to make P5.py ready for public use by completing the APIs to make it on par with Processing and P5.js. Examples and tutorials for the modules will be added to make it more accessible to the Python community. Apart from adding new APIs, I will also focus on fixing the existing issues in P5.py and add test suit to the library which will help in keeping the library stable as it grows in the future.</p>

The project’s objective is to smoothly incorporate an AI module library into Joomla CMS so that site managers, developers, and content producers can take advantage of AI-powered tools for improved user engagement, content management, and creation. A few of the varied use cases that will be made possible by the integration’s adaptable framework, which supports a number of AI models and providers are: • Text Generation. • Image Creation. • Content Analysis. • Intelligent Search.

<p>The current implementation of series expansions in SymPy is developed to a large extent, but not complete. There are a few limit failures that need to be addressed, for which the <code>series</code> module is the backbone. This project aims to fix the computation of leading term methods and make them more robust, which will fix many outstanding issues. This project will also add series and asymptotic expansions support to all special functions, and fix some long standing issues with AccumulationBounds and Order terms.</p>

KubeArmor is Cloud Native Runtime Security Enforcement System that restricts the behavior (such as process execution, file access, and networking operation) of containers and nodes at the system level using Linux Kernel LSMs (Linux Security Modules) and eBPF. KubeArmor cli-tool (aka karmor) connects to the kubearmor-relay service to provide command-line telemetry/observability. Karmor cli options could be extended to support various other parameters as described in the given issue.

This project develops an Operations Center dashboard for centralized deployment, monitoring, and management of multiple Gen3 data commons. It features a microservice-based backend in Go, using gRPC to communicate with Kubernetes-native agents across deployments. A Next.js frontend provides a unified interface for real-time observability and control. The system offers live insights into service health, logs, metrics, and deployment states. It enhances the reliability, scalability, and maintainability of the Gen3 ecosystem.

OpenBLAS is an optimized BLAS implementation. Currently, OpenBLAS supports RISC-V Vector 0.7.1 for Xuantie C920. For RISC-V Vector 1.0 version, OpenBLAS team already update Level-1 and Level-2 BLAS kernel from RVV 0.7.1 intrinsic to 1.0 intrinsic. The next work is developing the Level-3 BLAS kernels (e.g. gemm) for RISC-V Vector 1.0.

Currently, GCP Scanner does not support the parallel enumeration of GCP resources and parallel scanning of GCP targets. This project is aimed to address this shortcoming. Also, GCP Scanner has one giant scanning loop from where it launches GCP resource crawlers. We need to split each crawler into individual modules with proper error handling that will improve code readability and quality. We can leverage python classes for the state of execution control, config parsing, and enabling/disabling certain functionality in the scanner.

In this project the student will participate and contribute to OSS projects L3AF and eBPF for Windows led by Walmart, Microsoft and contributed to by WiPro. L3AF is an API for cross-platform, multi-cloud Enterprise eBPF deployment. With the R1 public release of L3AF R1 one of our next goals is to strengthen our multi-platform capabilities by supporting eBPF for Windows. The intern will work with the L3AF and eBPF for Windows teams to bring the cross-platform vision of the L3AF project into reality for a future release.

Meshery's UI is powerful and utilizes frameworks like Next.js and Material-UI. However, it relies on outdated technology stacks, resulting in performance inefficiencies and increased maintenance overhead. Expected Outcome: Migrate from MUI v4 to MUI v5 and fully utilize features of Nextjs v13. Migrate all class based components to function based component. Reduced code complexity and improved maintainability for long-term sustainability. Responsive and accessible UI that adapts to diverse devices and user needs.

Meshery's UI is powerful and utilizes frameworks like Next.js and Material-UI. However, it relies on outdated technology stacks, resulting in performance inefficiencies and increased maintenance overhead. Expected Outcome: Migrate from MUI v4 to MUI v5 and fully utilize features of Nextjs v13 and Sistent. Migrate all class based components to function based components. Reduced code complexity and improved maintainability for long-term sustainability. Responsive and accessible UI that adapts to diverse devices and user needs.

This project proposes a configuration-driven web application that visualizes data completeness across GraphQL datasets using an interactive heatmap. The system dynamically fetches data from GraphQL endpoints, normalizes hierarchical structures, computes attribute-level density metrics, and renders them as a scalable heatmap using D3.js. It enables researchers and data managers to quickly identify sparsity patterns and data quality issues. The project includes a working prototype, supports dynamic schemas, and focuses on performance, usability, and extensibility.