gloam
A dark, purple, terminal-flavored web design language — CSS, components, and a Claude Code skill to build with it. It styles this very page.
- CSS
- design system
developer · open source · go & rust
Hi, I'm Richard Wooding. I build developer tools.
I build small, dependency-light tools and libraries — static analysis, project & format detection, MCP servers, and the gloam design language that ties these pages together. Mostly Go and Rust, always shipped.
25 open-source projects · all live, all documented
$ richard --whoami name Richard Wooding focus developer tools · libraries langs Go · Rust · Zig · C# · Java · TypeScript · JavaScript projects 25 open-source · all shipped $ richard --projects | wc -l 25
about
Small building blocks that do one thing well.
I'm a software engineer drawn to the unglamorous, reusable layer of the stack: the library, the CLI, the well-behaved server. I like giving a tool a sharp scope and a clean API, keeping dependencies few, and documenting it properly. Recently that's meant per-function complexity metrics, project and binary analysis, Model Context Protocol servers, and a dark little design system so all of it looks like it belongs together.
open source
Projects.
Twenty-five things I've built and shipped — each with a live site and source on GitHub.
codemetrics
Per-function cyclomatic & cognitive complexity for 17 languages — a CLI, a GitHub Action, and a Go library with a standard-library-only core.
- Go
- static analysis
projectdetect
Detect a directory's project type(s) across 18+ ecosystems — Go, Node, Rust, .NET, Python and more — extensible via YAML/CEL. Pure Go, no cgo.
- Go
- library
projectdetect-rs
The Rust port of projectdetect — the same detection semantics, idiomatic and with no unsafe. Published on crates.io & docs.rs.
- Rust
- crate
txtr
Extract strings from binaries — a format-aware, secret-scanning, archive-diving replacement for GNU strings, with JSON and triage output.
- Go
- CLI
feed-mcp
A Model Context Protocol server for RSS, Atom, and JSON feeds — lets an AI assistant read and search syndicated content.
- Go
- MCP
go-arcgis
A dependency-free Go client for ArcGIS Feature Services — automatic pagination, spatial filters, and cheap counts, in a struct or fluent API.
- Go
- library
capetown-opendata-mcp
A comprehensive Model Context Protocol server for querying the City of Cape Town's open-data layers — wards, heritage, water quality, and more.
- Go
- MCP
treesitter-symbols
Cross-language code-symbol extraction for 17 languages — definitions, imports, call edges, and complexity from one parse (Go via go/ast, the rest via tree-sitter).
- Go
- library
go-coupling
Package coupling metrics (Ca/Ce/instability) and circular-dependency detection across 9 ecosystems — from imports you already extracted, no parser needed.
- Go
- static analysis
c2pa
Pure-Go C2PA / Content Credentials for JPEG & PNG — a fast unverified claim reader for triage, plus full cryptographic validation. No cgo.
- Go
- provenance
ssrfguard
Prevent SSRF in Go — validate outbound URLs and block internal addresses at dial time, after DNS resolution, so it's robust against DNS rebinding.
- Go
- security
hostrate
A per-host rate-limiting http.RoundTripper for Go — being slow to one host never throttles another, and it composes cleanly under other middleware.
- Go
- HTTP
go-hashset
Hash allow/deny lookup (MD5/SHA-1/SHA-256) for forensics and security — a fast in-memory store or a bbolt-backed one for NSRL-scale sets.
- Go
- forensics
go-sarif
A minimal, zero-dependency SARIF 2.1.0 emitter for Go static-analysis tools — map findings to the document GitHub Code Scanning and other CI ingest.
- Go
- library
archives
Recursively walk zip/tar/gz/bz2/xz/zstd/deb containers in Go — stream every nested file by virtual path, with decompression-bomb guards.
- Go
- library
triage
String security triage in Go — Shannon entropy, content classification, and secret detection with redaction. Zero dependencies.
- Go
- security
projectdetect-zig
The Zig port of projectdetect — detect a directory's project type(s) across 28 built-in types, walk a tree for roots, resolve a file's project. Zero deps.
- Zig
- library
gitmeta
Fast per-file git metadata in Go — one batch scan, then constant-time last-commit / author / churn / tracked-ignored lookups.
- Go
- library
gitmeta-rs
The Rust port of gitmeta — per-file git metadata via one batch scan, with an optional async (tokio) API.
- Rust
- crate
gitmeta-csharp
The C#/.NET port of gitmeta — per-file git metadata via one batch scan, with both synchronous and async APIs.
- C#
- .NET
gitmeta-zig
The Zig port of gitmeta — per-file git metadata via one batch scan, constant-time lookups, zero dependencies.
- Zig
- library
ollamaembed
A zero-dependency Ollama embeddings client for Go — text→vector, plus vector math and a curated model catalog for semantic / RAG search.
- Go
- library
bm25
Okapi BM25 keyword ranking and reciprocal-rank fusion for Go — the keyword half of hybrid search, zero dependencies.
- Go
- library
fingerprint
SimHash text near-duplicate detection and perceptual image hashing for Go — small, and built for hybrid search.
- Go
- library
toolbox
What I work with.
- Go
- Rust
- Zig
- C#
- Java
- TypeScript
- JavaScript
- CLIs
- libraries & APIs
- static analysis
- MCP servers
- CEL
- GitHub Actions
- design systems
- open source