guixvis indexes GNU Guix packages for a keyboard-first terminal UI, a local web application, and an Emacs library. The terminal has per-tab filters, exact dependency and reverse-dependency searches, and quieter dependency graphs. The web UI (guixvis web) serves bubble and rectangle graph views on 127.0.0.1 with right-click Back navigation, deep links, and browser history. The Emacs library provides terminal, browser, and native package search commands.

Mirim is an embedded SQL database encrypted at rest with XChaCha20-Poly1305 and Argon2id. It supports ML-KEM-768 sealed exports, ML-DSA-87 detached signatures and a durable write-ahead log. This package installs the mirim command line interface and mirim-sign.

btpctl (command-line client) and btpd (daemon) from the BTP project, built from the v0.7 source release. Built-from-source dynamic binaries relinked against Guix's glibc.

Zupt is a pure-C11 backup compressor with post-quantum hybrid encryption. Since 4.1.0 it is a source-only build with no vendored binary SDKs: recipient modes are the native ML-KEM-768 + X25519 hybrid (--pq, recommended) and pure ML-KEM-768 with no classical component (--pq-only, for CNSA 2.0-style postures); the SDK-backed --pq-sdk and --pq-box modes are unsupported stubs, and password mode uses PBKDF2-SHA256. 5.0.0 makes the ML-KEM-768 implementation genuinely FIPS 203-conformant (earlier releases shipped round-3 CRYSTALS-Kyber under that label), cross-validated byte-for-byte against OpenSSL 3.5 during this package's build; BREAKING: --pq/--pq-only keys and archives from 4.2.1 or earlier no longer decrypt — regenerate keys and re-encrypt (password mode and plain compression are unaffected). 4.2.0 fixed a critical AES-CTR keystream-reuse flaw in --dedup archives (re-encrypt any written by 4.1.0 or earlier). Payload protection is AES-256-CTR + HMAC-SHA256 Encrypt-then-MAC with measured constant-time tag comparison and runtime AES-NI/SHA-NI dispatch; it embeds the VaptVupt LZ+ANS codec, which is a codec component rather than a compatibility command.

PySide6 (Qt 6) graphical frontend for Zupt: create, inspect and extract .zupt archives with password (PBKDF2-SHA256) or post-quantum recipient encryption via the native ML-KEM-768 + X25519 hybrid (--pq). The launcher pins the matching zupt CLI from the store via ZUPT_BIN, so GUI and CLI versions can never drift apart.

Turbo Recorder captures the screen and audio into a quality-first FFmpeg pipeline, auto-detecting the best hardware encoder (NVIDIA NVENC, then Intel/AMD VAAPI, then software x264), the native screen resolution, and the default microphone and system-audio sources. turborec is a cross-platform Python CLI with a Tkinter GUI (turborec gui); turborecorder is a Linux X11/Wayland bash launcher. Built from source and self-contained: the launchers pin the store python3/bash and the tools they call (ffmpeg, pactl, xrandr, xdpyinfo, lspci).

Loopback web GUI that forces one local user's traffic through Tor's TransPort and DNSPort and drops everything else from that user (a fail-closed killswitch). It automates the upstream torando iptables rules together with torrc and resolv.conf management, adds an ip6tables IPv6 killswitch so v6 cannot leak around Tor, and reports live bootstrap, DNS-leak and exit status. Built from source (pure Python); the shims and systemd unit are rewired to the store, so the package is self-contained. This is the Linux build of a project that also targets macOS, the BSDs and Windows.

MoneyPrinterTurbo generates short-form videos from a topic: an LLM writes the script and keywords, stock B-roll is pulled from Pexels/Pixabay, edge-tts adds a voice-over, subtitles are burned in, and FFmpeg assembles the final clip. This package ships the upstream v1.3.7 source (bundled fonts and music removed; WenQuanYi Zen Hei supplied as the default subtitle font) plus self-contained moneyprinterturbo (Streamlit WebUI) and moneyprinterturbo-api (FastAPI) launchers. On first run each launcher copies the app into $XDG_DATA_HOME/moneyprinterturbo and pip-installs the pinned requirements.txt into a local virtualenv, fetched over Tor via torsocks; thereafter all egress (LLM, material, TTS) is routed through Tor, the local server binds 127.0.0.1, and the store ffmpeg is pinned so no binaries are auto-downloaded. Keep subtitle_provider = "edge" to avoid a multi-GB Whisper model download.

Client, server, agent, and key tools from the official Evelin x86_64 musl-static release: ML-KEM-1024 key exchange, ML-DSA-87 authentication, ChaCha20-Poly1305 AEAD. Binaries are fully static and carry no runtime dependencies.

PipeWire is a project that aims to greatly improve handling of audio and video under Linux. It aims to support the usecases currently handled by both PulseAudio and Jack and at the same time provide same level of powerful handling of Video input and output. It also introduces a security model that makes interacting with audio and video devices from containerized applications easy, with supporting Flatpak applications being the primary goal. Alongside Wayland and Flatpak we expect PipeWire to provide a core building block for the future of Linux application development.

WirePlumber is a modular session / policy manager for PipeWire and a GObject-based high-level library that wraps PipeWire's API, providing convenience for writing the daemon's modules as well as external tools for managing PipeWire.

LibreWolf is designed to increase protection against tracking and fingerprinting techniques, while also including a few security improvements. This is achieved through our privacy and security oriented settings and patches. LibreWolf also aims to remove all the telemetry, data collection and annoyances, as well as disabling anti-freedom features like DRM.

Google Chrome is a cross-platform web browser developed by Google.

Ungoogled-Chromium is the Chromium web browser, with some functionality disabled in order to protect the users privacy. This package also includes the chromedriver command, which can be useful for automated web testing.

ungoogled-chromium is Google Chromium with the Google-integration and privacy-affecting code removed. This package adapts the upstream portable Linux x86_64 binary to Guix library paths. The binary release can lag behind the source release. Chromium uses its unprivileged user-namespace sandbox; this package does not install a setuid sandbox helper.

ungoogled-chromium is Google Chromium with the Google-integration and privacy-affecting code removed. This package adapts the upstream portable Linux x86_64 binary to Guix library paths. The binary release can lag behind the source release. Chromium uses its unprivileged user-namespace sandbox; this package does not install a setuid sandbox helper.

Esquema provides declarative Scheme containers backed by Linux user, mount, PID, UTS, IPC, network and cgroup namespaces. Its C library applies capability removal, seccomp-BPF, Landlock and descriptor isolation. Optional strict policies verify cgroup and open-file limits before payload execution, and PID-1 supervision provides signal forwarding and bounded teardown. The package includes Guile modules and a GNU Shepherd service definition.

This Emacs build implements graphical UI purely in terms of GTK.

GNU Emacs is an extensible and highly customizable text editor. It is based on an Emacs Lisp interpreter with extensions for text editing. Emacs has been extended in essentially all areas of computing, giving rise to a vast array of packages supporting, e.g., email, IRC and XMPP messaging, spreadsheets, remote server editing, and much more. Emacs includes extensive documentation on all aspects of the system, from basic editing to writing large Lisp programs. It has full Unicode support for nearly all human languages.

Steam is a digital software distribution platform created by Valve. This package provides a script for launching Steam in a Guix container which will use the directory $HOME/.local/share/guix-sandbox-home where all games will be installed.

LibreWolf is designed to increase protection against tracking and fingerprinting techniques, while also including a few security improvements. This is achieved through our privacy and security oriented settings and patches. LibreWolf also aims to remove all the telemetry, data collection and annoyances, as well as disabling anti-freedom features like DRM.

Glances is a curses-based monitoring tool for a wide variety of platforms. Glances uses the PsUtil library to get information from your system. It monitors CPU, load, memory, network bandwidth, disk I/O, disk use, and more.

This package provides GSP firmware of the proprietary NVIDIA driver.

For free driver (nouveau) support, use linux-firmware instead.

This package provides libraries of the proprietary NVIDIA driver. It's mainly used as a dependency of other packages. For user-facing purpose, use nvda instead.