Seven picks from the GitHub trending board for the week of September 27, 2026. The top of the board is agent memory and agent-native tooling again, with a security-release tail underneath it. Four of the week’s biggest movers — Anthropic’s financial-services skills, Paperclip, Claude Code Templates, and Tencent’s Octop — were already covered in the September 25 video roundup and are skipped here. Grouped by theme:

Agent memory

  • vectorize-io/hindsight — the week’s biggest mover at ~7.3k stars gained (35.6k total, MIT, Python). The pitch is memory that learns rather than just remembers: three operations (retain, recall, reflect) over memory banks, with world facts, the agent’s own experiences, consolidated observations and mental models kept as separate structures instead of one flat vector index. Recall runs four retrievers in parallel — vector similarity, BM25 keyword, entity/temporal/causal graph, and time-range filtering — then merges with reciprocal rank fusion and a cross-encoder reranker. Self-hostable as Docker/pip/Helm or embedded with no server at all, 25+ LLM providers including local Ollama and LM Studio, an MCP endpoint per bank, and 60+ integrations — including a one-command install that wires per-repo long-term memory into Claude Code, Codex, Cursor, Copilot and friends. It claims state-of-the-art on LongMemEval, independently reproduced by researchers at Virginia Tech and The Washington Post.

Agent-native software & skills

  • HKUDS/CLI-Anything — ~1.1k stars this week (50.7k total, Apache-2.0, Python). The thesis is in the tagline: today’s software serves humans, tomorrow’s users are agents. Two halves — CLI-Hub, a package manager for ready-made agent CLIs you install with pip install cli-anything-hub, and a plugin that auto-generates one for any codebase through a seven-phase pipeline (analysis, architecture, implementation, tests, docs, SKILL.md, PyPI packaging). The catalog is the interesting part: Blender, FreeCAD, LibreOffice, GIMP, Draw.io, Zotero, Obsidian, Kdenlive, QGIS, MuseScore — real applications called directly, structured JSON out, no screenshots or pixel-clicking. It reports 2,461 passing tests and ships demos of agents driving CAD, 3D scenes and game automation.
  • cloudflare/security-audit-skill — ~6.5k stars this week (22.2k total, MIT, JavaScript). A coding-agent skill that runs a six-phase security audit: reconnaissance into a coverage ledger, isolated hunters assigned from that ledger, adversarial validation where the verifier is never the agent that found the finding, schema-validated findings.json, independent re-verification of every surviving claim, and target-neutral reports. Findings arrive in three verdicts — confirmed, needs-validation, rejected — and severity only counts when there is demonstrated impact. It is the single-repo starting point behind Cloudflare’s fleet-wide vulnerability discovery harness, and the honest headline from their own runs is that one pass finds roughly half of what repeated passes find.

Infrastructure

  • cloudflare/quiche — ~740 stars this week (12.6k total, BSD-2-Clause, Rust). The QUIC transport and HTTP/3 implementation with a low-level packet API; it powers HTTP/3 on Cloudflare’s edge, Android’s DNS-over-HTTP/3 resolver, and curl’s HTTP/3 support. Release 0.30.0 (Sept 17) is a breaking one: PathEvent became non-exhaustive with a path-MTU variant, the supported boring range moved to include 5.x — which enables post-quantum key exchange groups by default, large enough that a ClientHello can split across Initial packets and needs set_curves_list() to rein in — and stream_readable_len() landed for contiguous readable bytes.
  • vercel/next.js — ~280 stars this week (142.8k total, MIT). On the board for a security release rather than a feature: 16.3.6 (Sept 22) patches CVE-2026-94545, a critical (CVSS 9.5) remote code execution in the Node.js next/og ImageResponse implementation, triggered when attacker-controlled values reach SVG content, attributes or styles during image generation. Affected range is 16.2.0 through 16.3.5; the Edge implementation is not affected. If anything self-hosted runs Next 16.2+, this is the patch.
  • pytorch/pytorch — ~300 stars this week (103.4k total, Python). Steady traffic, but 2.14.0 (Sept 2) is worth skimming: NVGEMM brings CuTeDSL-generated CUTLASS kernels to Inductor with epilogue fusion, autotuned alongside Triton and ATen; torch.switch generalizes torch.cond to multi-way branching; torch.while_loop can now be captured in a CUDA graph; and dynamic shapes get a declarative @dynamic_spec shared across torch.compile, torch.export and make_fx.

Self-hosting odds and ends

  • FxEmbed/FxEmbed — ~420 stars this week (5.5k total, MIT, TypeScript). The service behind fxtwitter.com, fixupx.com and fxbluesky: put fx or fixup in front of a Twitter/X or Bluesky link and clients like Discord and Telegram render a proper embed — multiple images, video, polls, translations — instead of collapsing it. It is a Cloudflare Worker, but there is a documented self-hosting path (Docker running the local Workers runtime through Wrangler) with your own domains and branding, which is the reason to care if you would rather not route links through someone else’s domain.

Registry note: all seven repo URLs are recorded in the roundup registry, so next week’s script won’t repeat them.