kibitz
Play a friend end to end — chess, backgammon, checkers, reversi, Connect Four, and provably-fair Battleship, with chat, over one encrypted session paired by a code phrase through a relay that can't read a thing.
- Go
- WASM
- crypto
developer · open source · go & rust
Hi, I'm Richard Wooding. I build developer tools.
I build small, dependency-light tools and libraries — static analysis, project & format detection, MCP servers, and the gloam design language that ties these pages together. Mostly Go and Rust, always shipped.
34 open-source projects · all live, all documented
$ richard --whoami name Richard Wooding focus developer tools · libraries langs Go · Rust · Zig · C# · Java · TypeScript · JavaScript projects 34 open-source · all shipped $ richard --projects | wc -l 34
about
Small building blocks that do one thing well.
I'm a software engineer drawn to the unglamorous, reusable layer of the stack: the library, the CLI, the well-behaved server. I like giving a tool a sharp scope and a clean API, keeping dependencies few, and documenting it properly. Recently that's meant per-function complexity metrics, project and binary analysis, Model Context Protocol servers, and a dark little design system so all of it looks like it belongs together.
featured · live
Pull up a chair — play a friend, end to end.
kibitz is six games — chess, backgammon,
checkers, reversi, Connect Four, and provably-fair Battleship — with chat, over one
end-to-end-encrypted session. You get a code phrase like lion-42-maple,
a share link, and a QR; a friend joins as your opponent and the rest kibitz. The relay
that carries it all can never read a move or a message. 100% Go, WASM in the browser.
$ open a table your phrase lion-42-maple share link · QR ready >> ada joined — she's Black, you're White chat ada: en passant? really? chess e5 → move 4 verified ✓ # the relay only ever saw opaque frames
open source
Projects.
Thirty-five things I've built and shipped — each with a live site and source on GitHub.
gloam
A dark, purple, terminal-flavored web design language — CSS, components, and a Claude Code skill to build with it. It styles this very page.
- CSS
- design system
codemetrics
Per-function cyclomatic & cognitive complexity for 17 languages — a CLI, a GitHub Action, and a Go library with a standard-library-only core.
- Go
- static analysis
- live demo
patience
Retro solitaire — Klondike, FreeCell, and Spider on a chunky pixel-art deck, with unlimited undo, safe auto-complete, and the classic bouncing-cards win. 100% Go, in your browser.
- Go
- WASM
- game
chipdeck
A CHIP-8 emulator with a live debugger — registers, disassembly, and traces beside the screen. COSMAC VIP accuracy verified by the Timendus suite. 100% Go, in your browser.
- Go
- WASM
- emulator
suburble
The daily Cape Town suburb puzzle — guess the suburb from its silhouette, with distance and direction hints. 778 official suburbs from the City's open data. A new one every midnight.
- game
- open data
- daily
modbox
Classic tracker music — MOD, S3M, XM, IT — playing in your browser with a FastTracker-style visualizer: scrolling patterns, oscilloscopes, VU meters. 100% Go, compiled to WebAssembly.
- Go
- WASM
- live demo
gitlapse
Replay a repository's complexity history as a terminal timelapse — watch per-function hotspots ignite and cool, commit by commit, no checkouts. Exports to asciinema and GIF.
- Go
- TUI
projectdetect
Detect a directory's project type(s) across 18+ ecosystems — Go, Node, Rust, .NET, Python and more — extensible via YAML/CEL. Pure Go, no cgo.
- Go
- library
projectdetect-rs
The Rust port of projectdetect — the same detection semantics, idiomatic and with no unsafe. Published on crates.io & docs.rs.
- Rust
- crate
txtr
Extract strings from binaries — a format-aware, secret-scanning, archive-diving replacement for GNU strings, with JSON and triage output.
- Go
- CLI
feed-mcp
A Model Context Protocol server for RSS, Atom, and JSON feeds — lets an AI assistant read and search syndicated content.
- Go
- MCP
go-arcgis
A dependency-free Go client for ArcGIS Feature Services — automatic pagination, spatial filters, and cheap counts, in a struct or fluent API.
- Go
- library
shelfofshame
Your board game shelf of shame, from your terminal and your AI assistant — a colourful CLI, an MCP server, and a Go library for the BoardGameGeek® XML API.
- Go
- CLI
- MCP
capetown-opendata-mcp
A comprehensive Model Context Protocol server for querying the City of Cape Town's open-data layers — wards, heritage, water quality, and more.
- Go
- MCP
treesitter-symbols
Cross-language code-symbol extraction for 17 languages — definitions, imports, call edges, and complexity from one parse (Go via go/ast, the rest via tree-sitter).
- Go
- library
go-coupling
Package coupling metrics (Ca/Ce/instability) and circular-dependency detection across 9 ecosystems — from imports you already extracted, no parser needed.
- Go
- static analysis
hotspot
Find the code worth refactoring first: fuses git churn × complexity × package coupling into one ranked risk score — composing gitmeta, codemetrics and go-coupling.
- Go
- static analysis
c2pa-inspector
Verify C2PA / Content Credentials entirely in your browser — the pure-Go validator compiled to WebAssembly. Drop an image, see every validation status; nothing is uploaded.
- Go
- WASM
- live demo
c2pa
Pure-Go C2PA / Content Credentials for JPEG, PNG & BMFF (HEIC, MP4, MOV) — a fast unverified claim reader for triage, plus full cryptographic validation. No cgo.
- Go
- provenance
ssrfguard
Prevent SSRF in Go — validate outbound URLs and block internal addresses at dial time, after DNS resolution, so it's robust against DNS rebinding.
- Go
- security
hostrate
A per-host rate-limiting http.RoundTripper for Go — being slow to one host never throttles another, and it composes cleanly under other middleware.
- Go
- HTTP
go-hashset
Hash allow/deny lookup (MD5/SHA-1/SHA-256) for forensics and security — a fast in-memory store or a bbolt-backed one for NSRL-scale sets.
- Go
- forensics
go-sarif
A minimal, zero-dependency SARIF 2.1.0 emitter for Go static-analysis tools — map findings to the document GitHub Code Scanning and other CI ingest.
- Go
- library
archives
Recursively walk zip/tar/gz/bz2/xz/zstd/deb containers in Go — stream every nested file by virtual path, with decompression-bomb guards.
- Go
- library
triage
String security triage in Go — Shannon entropy, content classification, and secret detection with redaction. Zero dependencies.
- Go
- security
projectdetect-zig
The Zig port of projectdetect — detect a directory's project type(s) across 28 built-in types, walk a tree for roots, resolve a file's project. Zero deps.
- Zig
- library
gitmeta
Fast per-file git metadata in Go — one batch scan, then constant-time last-commit / author / churn / tracked-ignored lookups.
- Go
- library
gitmeta-rs
The Rust port of gitmeta — per-file git metadata via one batch scan, with an optional async (tokio) API.
- Rust
- crate
gitmeta-csharp
The C#/.NET port of gitmeta — per-file git metadata via one batch scan, with both synchronous and async APIs.
- C#
- .NET
gitmeta-zig
The Zig port of gitmeta — per-file git metadata via one batch scan, constant-time lookups, zero dependencies.
- Zig
- library
ollamaembed
A zero-dependency Ollama embeddings client for Go — text→vector, plus vector math and a curated model catalog for semantic / RAG search.
- Go
- library
bm25
Okapi BM25 keyword ranking and reciprocal-rank fusion for Go — the keyword half of hybrid search, zero dependencies.
- Go
- library
fingerprint
SimHash text near-duplicate detection and perceptual image hashing for Go — small, and built for hybrid search.
- Go
- library
textlab
triage, bm25 & fingerprint live in your browser — secret detection, keyword ranking, and near-duplicate similarity as WebAssembly. Nothing is uploaded.
- Go
- WASM
- live demo
file-search-on
Content-type aware file search: query 74 file formats by their typed attributes — EXIF, audio tags, code symbols, binary entitlements — with CEL. A CLI and a Claude Code MCP server.
- Go
- CLI
- MCP
toolbox
What I work with.
- Go
- Rust
- Zig
- C#
- Java
- TypeScript
- JavaScript
- CLIs
- libraries & APIs
- static analysis
- MCP servers
- CEL
- GitHub Actions
- design systems
- open source