Data & ML · Intermediate · 1–2 weeks
Resume ↔ Job Description Matcher
Upload a resume and a job posting. It scores how well they match, highlights missing skills, and suggests stronger bullet points.
- Python
- sentence-transformers
- spaCy
- FastAPI
- Streamlit
Features
- PDF parsing and section extraction (experience, skills, education)
- Skill extraction against a curated skills taxonomy
- Semantic similarity scoring with a readable explanation
- Gap report listing missing and weak skills
- A small labeled test set that measures accuracy
Bonus: Benchmark three embedding models on your test set and publish the results table in the README.
Data & ML · Intermediate · 1–2 weeks
Webcam Hand-Gesture Controller
Recognizes hand gestures from a webcam in real time and uses them to control slides, media playback, or smart lights.
- Python
- MediaPipe
- PyTorch or scikit-learn
- OpenCV
Features
- Hand landmark extraction from live video
- Data-collection tool for recording custom gestures
- Trained classifier with a confusion matrix and accuracy report
- Smoothing and debounce so actions don't misfire
- Config file that maps gestures to actions
Bonus: Export the model to ONNX and run it fully in the browser with a live demo page.
Data & ML · Advanced · 2–3 weeks
Predictive Maintenance for Jet Engines
Predicts the remaining useful life of jet engines from sensor time series using NASA's C-MAPSS dataset, served behind an API with a monitoring dashboard.
- Python
- pandas
- LightGBM or PyTorch
- MLflow
- FastAPI
- Docker
Features
- Exploratory analysis and time-series feature engineering
- A baseline model and an LSTM, compared with proper time-based validation
- Experiment tracking in MLflow
- Model served through FastAPI inside Docker
- Dashboard showing predictions per engine
Bonus: Data-drift detection that flags when incoming sensor data stops looking like the training data.
Data & ML · Intermediate · 2 weeks
Codebase Q&A Assistant
Index any Git repository and ask questions like "where is authentication handled?" Answers cite the exact files and lines they came from.
- Python
- tree-sitter
- sentence-transformers
- pgvector or Qdrant
- FastAPI
- An LLM API
Features
- Code-aware chunking by function and class using tree-sitter
- Hybrid keyword and vector search
- Answers with file and line citations
- Incremental re-indexing when new commits land
- An evaluation set of 30+ questions that measures retrieval accuracy
Bonus: A VS Code extension so you can ask questions without leaving the editor.
DevOps & Cloud · Advanced · 2–3 weeks
GitOps Kubernetes Home Lab
A fully automated Kubernetes cluster where pushing to Git builds, scans, and deploys your apps, with monitoring and alerts built in.
- Terraform
- k3s
- Argo CD
- Helm
- Prometheus
- Grafana
- GitHub Actions
Features
- Infrastructure as code for all VMs or cloud instances
- CI pipeline that builds, scans, and pushes container images
- Argo CD auto-sync from a Git repository
- Grafana dashboards and alert rules
- Secrets managed safely with Sealed Secrets
Bonus: Canary rollouts that roll back automatically when the error rate spikes.
DevOps & Cloud · Intermediate · 1–2 weeks
Distributed Tracing Playground
Three small microservices instrumented end to end, so you can follow a single request across every service with linked logs, metrics, and traces.
- OpenTelemetry
- Docker Compose
- Jaeger or Tempo
- Prometheus
- Grafana
- Loki
Features
- Three services in two languages, instrumented with OpenTelemetry
- Trace context carried through HTTP calls and a message queue
- Dashboards for rate, errors, and duration
- Logs linked to their trace IDs
- SLOs with burn-rate alerts
Bonus: A fault-injection switch that adds latency or errors so viewers can see exactly how problems show up.
DevOps & Cloud · Intermediate · 1–2 weeks
Serverless Media Pipeline on AWS
Upload an image or video and an event-driven pipeline resizes, transcodes, and tags it automatically. All infrastructure is defined in code.
- AWS S3, Lambda, SQS, DynamoDB
- AWS CDK or Terraform
- TypeScript or Python
- GitHub Actions
Features
- Direct uploads using presigned URLs
- S3 events feeding SQS and Lambda, with retries and a dead-letter queue
- Thumbnails and metadata stored in DynamoDB
- Least-privilege IAM roles for every function
- CI/CD that deploys separate dev and prod stages on merge
Bonus: A cost report in the README showing the real cost per 1,000 uploads.
Security · Intermediate · 1–2 weeks
Git Secrets Scanner & GitHub Action
A CLI and GitHub Action that scans repositories, including full commit history, for leaked API keys, passwords, and private keys.
- Go
- Regex + entropy analysis
- GitHub Actions
- SARIF
Features
- Pattern and entropy-based secret detection
- Fast scanning of the full Git history
- Allowlist file to suppress false positives
- SARIF output that shows up in GitHub code scanning
- Pre-commit hook mode that blocks leaks before they happen
Bonus: A seeded test corpus that reports precision and recall, compared against an existing open-source scanner.
Security · Intermediate · 1–2 weeks
SSH Honeypot with Attack Dashboard
A fake SSH server on a cheap cloud VM that records the logins and commands real attackers try, shown on a live dashboard.
- Python (asyncssh) or Go
- Docker
- PostgreSQL
- Grafana
- GeoLite2
Features
- Fake shell that imitates a Linux machine and logs every command
- Analytics on the most common passwords and commands
- World map of where attempts come from
- Strong isolation: its own VM, a container, and no outbound network
- Automatically generated weekly threat summary
Bonus: A write-up analyzing one week of real attack data, published alongside the repo.
Security · Advanced · 2 weeks
End-to-End Encrypted File Sharing
Share files by link, with encryption done in the browser so the server never sees file contents or keys.
- TypeScript
- Web Crypto API
- Node.js or Go
- S3-compatible storage
Features
- AES-GCM encryption in the browser, with the key kept only in the URL fragment
- Chunked streaming encryption for large files
- Links that expire or stop after a set number of downloads
- Optional password protection with proper key derivation
- A written threat model in the README
Bonus: A verification page that shows the stored ciphertext is unreadable without the link.