+========================================================================+

PROJECTS

Everything BMRL has shipped — civic-research dashboards, developer tooling, and OSS releases. 25 entries.

+========================================================================+

filter:

25 / 25 entries

----------------------------------------------------------------------------------------

> ossmile.blackmesalabs.org v1.0 [ACTIVE]

OSSMILE

// a deliberately tiny website about good news

A hand-made corner of the old web that only carries good news. Daily posts on things that went right, alongside a reading room and zine, cartoons, mixtapes and postcards, an arcade of small games, a horoscope, trivia, and trackers for eclipses and launches. No algorithm, no infinite scroll, no engagement mechanics. Sign the guestbook on your way out.

>115 good-news posts and counting, published daily
>Arcade, zine, mixtapes, horoscope and trivia — all hand-built
>Period-correct skins, down to Hot Dog Stand

open → readme →

Astro · Vercel

> spending.blackmesalabs.org v1.0 [ACTIVE]

SPENDING

// defense + law-enforcement spending · FY12–FY27

Interactive dashboard of U.S. federal defense (Budget Function 050) and civilian law-enforcement spending, FY2012 through FY2027 (FY2027 as requested). FY range slider, category toggles, line / stacked bar / doughnut charts, KPIs, and a written report with full bibliography.

>Prerendered static site — no runtime backend
>Raw CSV + rendered markdown report shipped with the UI
>Source of truth is a typed TS module derived from the CSV

open → readme →

SvelteKit · LayerChart · Vercel

> money.blackmesalabs.org v0.3.0 [ACTIVE]

MONEY

// how money is created · interactive lessons

A three-part interactive lesson series on how money actually works. Part 1, Dollar Expedition, walks eleven stops from what money is through the Fed’s ledger, government spending, taxes, deficits and bonds, to inflation as the real limit. Part 2, Ledger Expedition, does the same for commercial bank money. Part 3 carries the notes and sources every technical box links back to.

>Two eleven-stop expeditions — government money, then bank money — stepped through one piece at a time, most stops ending in a check question
>Ledger widgets throughout: post the entries for spending, taxes, QE and QT, then run a bank through lending, repayment, default and charge-off against a capital ceiling
>Part 3 holds the sourced notes the technical boxes link into; progress is kept in the browser, and there is no backend

open → readme →

Static HTML/CSS/JS · Vercel

> naicom · internal v0.1 [ACTIVE]

NAICOM

// agent-dispatch daemon · Jira ticket to merged pull request

The dispatcher behind the way everything else here gets built. A Rust daemon polls the issue tracker, and when a ticket reaches an approval state it spawns a Claude Code operator for the role that state implies — product spec, implementation, architecture review, QA — each in its own git worktree, each closing out with a pull request, a session log, and a comment back on the ticket. A SvelteKit console reads the resulting record.

>Ticket state is the trigger: each workflow state routes to one operator role, one branch, one pull request
>Per-dispatch git worktrees and session tracking, so concurrent operators never share a checkout
>File-based agent memory and a corrections record, both carried forward into later dispatches
>Internal deploy — no public domain

readme →

Rust · SvelteKit · Postgres · Docker

> citadel · internal v0.1 [ACTIVE]

CITADEL

// hardened osquery fleet manager · fork of Kolide Fleet

A maintained, hardened fork of Kolide Fleet, the open-source osquery fleet manager, brought forward off an upstream that stopped moving. Go server and React dashboard for live queries across enrolled hosts, scheduled query packs, and host inventory — plus a curated pack library, a host-native network scanner that finds unenrolled devices on the LAN, and signed agent packages.

>Live queries and scheduled packs against enrolled hosts, driven from the dashboard or the citadelctl CLI
>Curated osquery packs for macOS hardening and code integrity, endpoint protection, file integrity, and Linux inventory
>A separate network scanner surfaces hosts on the LAN that are not enrolled yet
>Toolchain and base images kept current; agent .deb and .rpm built and published from a tag
>Internal deploy — no public domain

readme →

Go · React · MySQL · Redis · Helm

> liechart.blackmesalabs.org v0.2 [ACTIVE]

LIECHART

// two-axis profiles of U.S. political figures

Evidence-based two-axis profiles of U.S. political figures. Every score — ideology and democratic-norms risk — traces back to a direct quote, policy position, or official action, with the source cited inline. Cross-subject scatter plus per-figure dossiers.

>Eight democratic-norms axes + per-issue ideology scale
>Profiles are hand-reviewed JSON against a versioned schema
>Methodology page renders the rubric directly from source

open → readme →

SvelteKit · Vercel

> farm.blackmesalabs.org v0.1 [ACTIVE]

FARM

// U.S. farm bankruptcies · 2016–2025

Ten-year deep dive into U.S. Chapter 12 farm bankruptcy filings, with state and regional breakdowns, farm-sector financial indicators, and the policy drivers behind the trend. Long-form report alongside downloadable CSVs.

>Annual national filings plus state and regional breakdowns
>Flags the 2019 Family Farmer Relief Act debt-cap change in pre-/post comparisons
>Research package (CSVs + report) is the source of truth, baked into the build

open → readme →

SvelteKit · Observable Plot · Vercel

> inflation.blackmesalabs.org v0.1 [ACTIVE]

INFLATION

// the 2019–2025 cost-of-living squeeze

What groceries and essentials actually cost from 2019 through 2025, how paychecks did and didn't keep up, and where the extra money ended up. Rebased price indices, a working-family food-budget breakdown, corporate-profit "sellers' inflation" charts, and a long-form report with full sources.

>Seven theme-reactive Observable Plot charts, each with an sr-only fallback table
>CPI-vs-wages, grocery basket, energy prices, and profit-share views
>Research package (CSVs + report) is the source of truth, synced into the build

open → readme →

SvelteKit · Observable Plot · Vercel

> cu.blackmesalabs.org v0.2 [ACTIVE]

DARK-MONEY

// PAC, super PAC & dark money since Citizens United

PAC, super PAC, and dark-money spending in U.S. federal elections from Citizens United (2010) through 2024. Outside spending rose from $1.25B in 2012 to $4.4B in 2024, with undisclosed-donor "dark money" hitting a record $1.9B. Rebased spending charts, a cost-of-election overlay, and a long-form report with full FEC and Brennan Center sourcing.

>Outside-spending and dark-money series per election cycle, 2010–2024
>Citizens United (2010) marked on every time series
>Flags the OpenSecrets → Brennan Center methodology break in the dark-money figures
>Research package (CSVs + report) is the source of truth, baked into the build

open → readme →

SvelteKit · Observable Plot · Vercel

> poormouth.blackmesalabs.org v0.1 [ACTIVE]

POORMOUTH

// corporate cost-of-living claims vs SEC filings · FY2015–FY2025

Four large consumer companies told investors the American consumer is "running out of money" — while posting strong profits, returning billions to shareholders, and paying CEOs hundreds of times their median worker. The claims set against the SEC filings: net income, buybacks and dividends, and CEO-vs-median pay, every figure cited to a 10-K or DEF 14A.

>Claims-vs-receipts: investor poor-mouthing set against profits, payouts, and pay
>Every figure traces to an SEC 10-K or DEF 14A filing — no unsourced numbers
>Research package (CSVs + report) is the source of truth, baked into the build

open → readme →

SvelteKit · Observable Plot · Vercel

> taco.blackmesalabs.org v0.1 [ACTIVE]

TACO

// Trump Always Chickens Out · documented policy reversals

A cited, factual record of Trump-administration policy reversals — loud cuts, bans, tariffs, and firings later undone, paused, or quietly walked back. Each entry pairs a dated original action with a dated reversal, every claim sourced. Sortable feed, per-reversal timelines, and aggregate stats by area, status, and month.

>Reversal feed filterable by policy area and status, with full-text search
>Per-reversal detail pairs the original action with its walk-back, both dated and sourced
>Normalized reversal dataset typed against a versioned schema is the source of truth

open → readme →

SvelteKit · Vercel

> radar-status.blackmesalabs.org v0.1 [ACTIVE]

NEXRAD-STATUS

// NEXRAD/TDWR weather-radar service status

Tracker of NWS radar outage/maintenance status — polls NWS Free Text Messages every 5 min, derives per-station status (operational / down / intermittent / scheduled), maps ~160 WSR-88D + ~45 TDWR sites with per-station message history.

>NWS FTM polling via Vercel cron
>Status derived from free-text pattern matching
>No-entry-means-operational semantics

open → readme →

SvelteKit · Drizzle/Postgres · Vercel

> ncentcom v1.0 [ACTIVE]

NCENTCOM

// intelligence fusion dashboard · single-screen operational picture

Nova Central Command — intelligence fusion dashboard that consumes nova-core's data pipeline (GDELT, ADS-B, AIS) and presents a single-screen operational picture. WORLDVIEW-inspired dark aesthetic with monospace data readouts, HUD-style UI, drill-down maps, and AG-Grid tabular views.

>Live GDELT event stream with regional threat composites
>ADS-B + AIS overlays for air and maritime tracking
>Drill-down MapLibre layers and AG-Grid tabular detail

readme →

SvelteKit · D3 · MapLibre · Docker

> saltpeter.blackmesalabs.org v0.1 [ACTIVE]

SALTPETER

// Russian industrial site monitor · FIRMS thermal + OSINT incidents

Russian industrial-site monitoring map combining a facility catalogue with a NASA FIRMS thermal-anomaly layer and an OSINT incidents feed (Bellingcat, GDELT, Telegram, Bluesky) correlated to sites, each incident carrying a source link.

>Thermal-anomaly detections from NASA FIRMS overlaid on a facility catalogue
>Incidents feed correlates OSINT sources (Bellingcat, GDELT, Telegram, Bluesky) to specific sites
>Every incident and detection is traceable to a source

open → readme →

MapLibre GL JS · FastAPI · Postgres · Vercel

> blackmesalabs.org/roguewave v0.0 [RESEARCH]

ROGUEWAVE

// terminal workspace with Claude as the ambient layer

Fork of Waveterm that wires Claude in as the ambient intelligence of the terminal workspace — native Anthropic provider, operator-session and Jira blocks, and role-based workspace presets for Code, Arch, Research, Review, and Ops.

>Native Anthropic/Claude provider, not an OpenAI shim
>Operator-session and Jira issue blocks built on Waveterm view types
>Role-based workspace presets for the NOVAICOM operating model

open →

Electron · React · Go

> blackmesalabs.org/artemis-tracker v0.1 [PREVIEW]

ARTEMIS-TRACKER

// live telemetry for the Artemis II crewed lunar mission

Live mission console for Artemis II — spacecraft state vector from JPL Horizons, Deep Space Network antenna activity, space-weather conditions from NASA DONKI, and a 2D figure-8 trajectory plot. Ground-station-style HUD aesthetic, polled and streamed over WebSocket.

>Position / velocity from JPL Horizons polled every 3 minutes
>DSN dish status from eyes.nasa.gov/dsn polled every 5 seconds
>CME, flare, geomagnetic-storm, and SEP events from NASA DONKI
>No public domain or repo yet — internal preview only

open →

FastAPI · React · CesiumJS · Redis

> backyarddsn.blackmesalabs.org v0.1 [ACTIVE]

BACKYARDDSN

// DIY deep-space reference & utility console

A static, self-contained reference console for hobbyists interacting with satellites, radio telescopes, and spacecraft — receive-first, license-honest, and citizen-science oriented. Filterable catalog, live utilities (DSN Now, NASA APOD, ISS position), and an honest mid-2026 status strip.

>Filterable catalog across seven categories from one typed data model
>Live DSN Now, APOD, and ISS utilities that degrade gracefully offline
>RX-vs-TX honest — surfaces every license caveat and retired-service note

open → readme →

Static HTML/CSS/JS · Vercel

> bitbucket · novaprospekt/ascii-image_mu-converter v1.13 [ACTIVE]

ASCII-IMAGE-CONVERTER

// image → ASCII / braille / Nomadnet Micron

CLI fork of TheZoraiz/ascii-image-converter that adds Nomadnet Micron (.mu) output, intended for use over the Reticulum mesh-network stack. Renders JPEG, PNG, BMP, WEBP, TIFF, and GIF as ASCII or braille art with optional ANSI colour.

>Adds .mu (Nomadnet Micron) output to the upstream encoder set
>ASCII, braille, and full-block colour output modes
>Designed for low-bandwidth, off-grid mesh delivery

open → readme →

Go · cobra · Reticulum / NomadNet

> chrome-extension · mv3 v0.2 [ACTIVE]

TAB-GROUPER

// auto-group browser tabs by user-defined rules

Chrome / Brave MV3 extension that watches tab events and assigns each tab to a named group based on host, URL, title, or regex matchers. Rules sync via chrome.storage.sync, pinned tabs are left alone, and the popup exposes group-all / ungroup-all shortcuts.

>Six matcher types: hostEquals, hostContains, urlContains, titleContains, urlRegex, titleRegex
>Rules roam across signed-in browsers via chrome.storage.sync
>Debounced background service worker — first matching rule wins

readme →

Chrome MV3 · JavaScript

> gitea.com/v0rts/gitea-dash v0.1 [ACTIVE]

GITEA-DASH

// at-a-glance dashboard for self-hosted Gitea

Lightweight dashboard for self-hosted Gitea instances. Surfaces repo activity, open issues, pull requests, and runner state in one view so you can see what your forge is doing without clicking through five tabs.

>Single-pane view across repos, issues, and PRs
>Reads directly from the Gitea API — no extra backend
>Self-hostable alongside your existing Gitea instance

open → readme →

Gitea API

> homelab · internal v0.1 [PREVIEW]

NOVA-DASH

// self-hosted homelab dashboard · single pane of glass

Self-hosted homelab dashboard inspired by CoinMarketCap's layout, pulling together the best of Homarr, Dashy, and Homepage. Service tiles with live health checks, Docker and Caddy widgets sourced from container labels, a retro CRT intel-feed ticker, and a Cmd+K command palette.

>Service grid with per-tile health-check status
>Docker + Caddy widgets derived from container labels
>Cmd+K command palette and a scrolling CRT intel feed
>Internal homelab deploy — no public domain yet

readme →

Next.js 16 · Drizzle · SQLite

> keep · internal v2.3 [ACTIVE]

KEEP

// homelab backup console · hardened fork of borg-ui

A self-host-only fork of borg-ui, the web interface for BorgBackup. Run, schedule and monitor backups, browse archives and restore from them, and manage repositories and the machines that push to them. Every phone-home path is removed, every feature is on with no plan gate, and the default compose file asks for less of the host.

>Repositories over local disk, SSH, SFTP and rclone destinations, with retention, prune and pre/post hooks
>No analytics, no consent banner, no remote announcements — nothing leaves the host unless a backup does
>Docker socket mount is opt-in, privileged mode is gone, and the filesystem browser is role-gated
>Internal deploy — no public domain

readme →

Python · FastAPI · React · Redis · Docker

> quartermaster · internal v0.3 [ACTIVE]

QUARTERMASTER

// the supply officer for your filesystem

A catalog of every file on the machine, keyed by SHA-256, with every place each one has lived. On top of the catalog: duplicate detection that quarantines instead of deleting, tags, labels and ratings, local-model AI tagging, and macOS Finder-tag sync. A CLI does the work; a read-only web UI, a native Mac app and Grafana dashboards read it. Athenaeum, a Markdown-native knowledge base compiled by an LLM, lives in the same repo.

>Content-addressed catalog: one row per SHA-256, every path it has been seen at
>Safe dedup — protected paths are refused, and the default action is a 120-day quarantine, not a delete
>AI tagging runs against a local Ollama model; nothing is sent off the machine
>Internal tool — no public domain

readme →

Python · Postgres · Rust · SwiftUI · Grafana

> kage2027 · internal v0.1-beta [PREVIEW]

KAGE2027

// Metasploit RPC desktop client · modernized fork of WayzDev/Kage

A desktop GUI for the Metasploit RPC server: work meterpreter sessions, browse files on a target, and generate payloads without living in msfconsole. Upstream stopped in 2019 on Electron 2 and Vue 2. This fork brings it forward — Electron 42, Vue 3 with Pinia and Element Plus, current axios and ESLint — and adds tests, a CI gate, and release builds.

>Session control, file manager and payload generation over Metasploit RPC
>Electron 2 → 42 and Vue 2 → 3, migrated in phases with the app launching at each step
>AppImage and .deb builds published from a tag
>For learning and internal testing only — requires a local Metasploit Framework install

readme →

Electron · Vue 3 · Pinia · Element Plus

> fedramp-mgmt · internal v0.1 [PREVIEW]

FEDRAMP-MGMT

// FedRAMP / NIST 800-53 compliance management

A management engine for the paperwork side of a FedRAMP authorization. POA&M items with a risk-scoring engine, SSP authoring control by control, continuous-monitoring scan ingestion with a deviation workflow, an evidence repository mapped to controls, and an immutable audit trail — with the SSP, Customer Responsibility Matrix and monthly POA&M exported as DOCX.

>POA&M lifecycle and risk scoring, with a monthly POA&M exported as DOCX
>Per-control SSP editor with auto-save, plus SSP and CRM DOCX export
>Scan-result ingestion, deviation requests (OR / RA / FP), and an annual assessment scheduler
>Internal deploy — no public domain

readme →

Next.js · Drizzle/Postgres · Docker