29 posts
OxiLLaMa 0.1.4 is the Pure Rust LLM inference engine and sovereign alternative to llama.cpp. This release fixes a remotely-crashable GGUF parser, an unauthenticated /admin/*, and a shipped server that ran with every middleware disabled; adds a GGUF-embedded tokenizer, K-quant encoders, and a GPU offload backend; and verifies logits token-for-token against real llama.cpp — plus a 37.5x Qwen3 decode speedup. 3,751 tests passing.
ToRSh 0.2.0 completes autograd backward coverage, consolidates GPU compute onto the pure-Rust oxicuda stack, ships full NumPy/pandas/SciPy interop and PyTorch-compatible LR schedulers, and replaces fabricated success paths with honest errors. 10,638 tests passing. The sovereign deep-learning layer for COOLJAPAN.
OxiHTTP 0.2.1 is a security-hardening release for the COOLJAPAN Pure-Rust HTTP stack: it closes a redirect credential leak, two WebSocket unbounded-memory DoS paths, a chunked-encoding body-limit bypass, a spoofable rate-limiter key, a client decompression bomb, and more — 320 tests passing (446 with all features), the sovereign HTTP layer for the COOLJAPAN ecosystem.
OxiArc 0.4.1 is a security-hardening release: ZIP AES/ZipCrypto salts and headers now always come from a real OS CSPRNG (no more silent low-entropy fallback), WinZip-AES is now constant-time, a silently-wrong x86_64 CRC-32 SIMD path is fixed and enabled, and 7z folder coder chains are bounded against decompression-bomb amplification. Plus Zstandard FSE_Compressed_Mode sequence tables and Brotli literal/command/distance block splitting close two long-standing encoder-ratio gaps. 2,658 tests passing, Pure Rust.
OxiCode 0.2.6 hardens the serde bridge, closing an infinite-decode-loop bug and unbounded allocations 0.2.5 missed. A wire-format-relevant fix restores byte compatibility with bincode::serde (migration note included). Adds bounded-length decode entry points and decode contexts in the derive macros. 20,198 tests passing.
OxiQUIC 0.2.1 closes five RFC 9000 security gaps — spoofed-source reflection amplification, unbounded per-stream and CRYPTO-buffer memory growth, and a forgeable Retry handshake — adds bidirectional ECN (RFC 9000 §13.4 / RFC 9002 §7.4) and true per-path congestion control for multipath, and ships runnable QUIC/HTTP-3 examples. 445 tests passing, the sovereign Pure Rust QUIC layer for the COOLJAPAN ecosystem.
OxiSound 0.2.1 ships oxisound-pulse — a brand-new, 100% Pure Rust PulseAudio/PipeWire native-protocol backend with zero C in its Linux audio path — plus three denial-of-service fixes in oxisound-osc's untrusted-UDP decode path (an out-of-bounds read, unbounded nesting, and a 32-bit integer wraparound), a new fuzz workspace, and a stream_stats() correctness fix. The sovereign audio device I/O layer for the COOLJAPAN ecosystem.
OxiText 0.2.2 vendors its own fork of swash to fix a Devanagari reph-duplication bug and an out-of-bounds panic that has sat open and unfixed upstream since April 2025, adds a Pure-Rust PNG decoder to fully remove the `png`/`flate2` dependency chain, and fixes color-glyph misdetection for sbix/CBDT/SVG fonts — 845 tests passing, the sovereign text layer for the COOLJAPAN ecosystem.
OxiTLS 0.3.0 fixes an OCSP staple false-rejection on leaf-only certificate chains, converts an HPKE LabeledExpand panic into a propagated Result, and adds three new fuzz targets covering its own hand-rolled TLS parsers — 364 tests passing, the sovereign Pure Rust TLS layer for the COOLJAPAN ecosystem.
OxiUI 0.2.2 wires the facade's multi-window registry and menu bar into a real rendering path for the first time (egui opens real OS viewports, iced/headless render the bar too), makes oxiui-slint and oxiui-dioxus return an honest error instead of a fabricated Ok(()), fixes GPU device-loss/OOM panics in oxiui-compute-wgpu, and restores wasm32 compilation for oxiui-web. 2,024 tests passing, the sovereign Pure Rust GUI layer for the COOLJAPAN ecosystem.
OxiCode 0.2.5 is a hardening release: fixes decode-time allocation-DoS, decompression-bomb, and checksum-overflow issues across containers, streaming, and derive macros, and replaces a fabricated SIMD speedup claim with real AVX2/SSE2/NEON kernels. No wire-format change for valid input. 20,126 tests passing.
OxiFont 0.2.1 ships oxifont-hinting, a from-scratch Pure Rust TrueType bytecode hinting interpreter (grid-fitting VM) that never panics on hostile input, plus a WOFF2 spec-compliance fix and a closed large-allocation DoS in bundled CJK font resolution. The sovereign font layer for the COOLJAPAN ecosystem.
OxiText 0.2.1 fixes COLRv0/COLRv1 color-glyph rendering — previously 0% pixel coverage on every color emoji — into a complete paint-graph interpreter with gradients, transforms, clips, and all 28 composite modes, swaps in a Pure-Rust PNG encoder to clear the last banned dependency, and cuts font-cache overhead by up to 13,000x. The sovereign text layer for the COOLJAPAN ecosystem.
OxiUI 0.2.1 wires on_close/on_resize/on_focus into the real egui and iced event loops for the first time, makes with_persistent_state actually write to disk via oxicode, and closes an integer-overflow bounds bypass plus an unbounded-iteration DoS in the CPU rasterizer. The sovereign GUI layer for the COOLJAPAN ecosystem.
OxiRS 0.4.1 closes a full oxirs-fuseki authentication bypass, makes Raft storage genuinely fsync-durable, fixes a SPARQL parser that silently dropped FILTER clauses, and removes fabricated results from SHACL/AutoML/federation — 308 findings audited, ~300 fixed, 46,255 tests passing across 27 crates.
OxiGeo 0.2.1 is a production-hardening release: a multi-agent defect sweep found 342 bugs and fixed 314, including two CRITICAL silent-corruption decoders (JPEG2000, GRIB2) and a WFS-T fail-open security hole. A new axum gateway serving layer ships, and retiring oxigeo-kafka makes the workspace fully C-toolchain-free.
OxiBonsai 0.2.3 ships a two-pass, 109-agent production-hardening audit: a P0 fix for a silent CUDA prefill/decode KV-cache desync, full Metal GPU coverage for Q4_0/Q8_0/K-quant and FP8 batch prefill, real OpenAI-compatible penalties and logprobs, and tokenizer fidelity fixes for CJK/emoji text — 91 confirmed findings closed, 5,158 tests passing. Sub-2-bit Pure Rust sovereign AI inference for the COOLJAPAN ecosystem.
SciRS2 0.6.2 replaces the C-linked hdf5 crate with pure-Rust oxih5, fixing a critical silent-data-loss bug in compressed HDF5 writes and a self-concealing dataspace-parsing bug along the way. libnuma, tracy-client, and opencl3 are gone from the dependency graph, plus a breaking TLS-provider hardening. Pure Rust, Apache-2.0.
OxiGDAL 0.1.7 is a production-hardening release: 233 verified defects fixed across 69 crates — a GeoTIFF corruption bug, JPEG2000 spec conformance, real FlatGeobuf/HDF5 codecs, an RBAC bypass — plus a blake3/Ed25519 attestation module and three new WASM demos. 76 crates, 16,909 tests. The sovereign geospatial layer for COOLJAPAN.
OxiProj 0.1.2 is a hardening/correctness release for the Pure-Rust PROJ replacement: automatic epoch-aware datum pathfinding, exact-autodiff Tissot distortion reachable from the public engine API, guaranteed-bounds interval-arithmetic transforms, SIMD batch lane-correctness fixes, and an SQL-injection fix — still no C, no FFI.
OxiCrypto 0.2.1 measures ML-DSA-87's worker-thread stack down to 2 MiB from a hardcoded 8 MiB, ships a default-on alloc feature for genuine no_std core-only builds, adds a PQ-to-AEAD hybrid encryption test, and fixes a truncated-HMAC panic — the sovereign Pure Rust cryptography layer for the COOLJAPAN ecosystem.
OxiTLS 0.2.1 eliminates RUSTSEC-2026-0104 by forking its Pure-Rust CryptoProvider into a webpki-free oxitls-rustcrypto-provider crate, closes an OCSP staple replay bypass, and fixes SCT parsing — 443 tests passing, the sovereign Pure Rust TLS layer for the COOLJAPAN ecosystem.
OxiMedia 0.1.9 ships a 100% Pure Rust default build (zero C/C++/Fortran), fixes four real security vulnerabilities (SRT crypto, MP4 DoS, WebRTC DTLS honesty, SQL injection), and launches oximedia-web — four WASM modules downstream of WebCodecs, live in OxiScope and OxiLink. 114 crates, ~2.95M SLOC.
CeleRS 0.3.0 eliminates sqlx and reqwest workspace-wide for oxisql/oxihttp-client, swaps mock XOR encryption for real AES-256-GCM/ChaCha20-Poly1305, and fixes chord/chain execution and Kombu middleware that were silent no-ops. 18 crates, 5,676 tests passing. The sovereign task-queue layer for COOLJAPAN.
OxiArc 0.3.6 pairs a security-hardening pass with a 22-auditor, 75-item reference-interop campaign: zstd's FSE fix takes real-frame decode from 0/64 to 64/64, brotli's RFC 7932 rewrite goes 141/172 failures to 608/608, plus LZMA2, bzip2, and SZIP fixes. 2,426 tests passing, Pure Rust.
Meet OxiCrypto: the COOLJAPAN Pure Rust cryptographic primitives layer — hashes, MACs, AEADs, signatures, key exchange, KDFs, password hashing, CSPRNGs, and a post-quantum preview (ML-KEM / ML-DSA / SLH-DSA). Zero *-sys crates by default, no C toolchain, the NoFFI replacement for OpenSSL, BoringSSL, ring, and aws-lc-rs as crypto backends.
OxiTLS is the COOLJAPAN Pure Rust TLS transport stack — a NoFFI replacement for OpenSSL, native-tls, and the ring / aws-lc-rs C-and-assembly crypto backends. TLS 1.3 and 1.2, mTLS, ALPN, session resumption, OCSP stapling, post-quantum key exchange, and a Pure-Rust CryptoProvider by default. The transport-security foundation under OxiHTTP, OxiQUIC, and OxiRPC.
OxiRS 0.2.2 is a hardening release: a production unwrap() audit confirming zero panic paths outside tests, a workspace-policy migration across all 27 crates, an oversized module split via splitrs, two security advisories reviewed, and dependency refreshes — 40,786 tests passing.
A major milestone for the pure Rust DataFrame library — PandRS 0.2.0 delivers all planned v1.0.0 features. Google Zanzibar-style ReBAC authorization, 6,984 unwrap() calls eliminated, a zero-vulnerability default build, optional SQL backends, new SciRS2 0.3.1 stats/linalg integration, 300+ pages of docs, and 24-month LTS. 3-9x faster than pandas with up to 89% less memory.