mdp stands for "Mot de Passe", which means "password" in French. It wraps GnuPG for encryption and deals with all the small details of generating, managing, and fetching your passwords. It is similar to many other programs, but differentiates itself with simplicity (not button-driven simplicity, but with a Unix less-is-more style). For example, beyond the use of GnuPG for encryption, it lets you use your own editor to manage your passwords, categorize them, and delete them. In order to avoid passwords lingering on your screen, the results from the queries are displayed through a custom pager which is cleared after a customizable timeout (defaulting to ten seconds).
dnscrypt-proxy acts as a DNS proxy between a regular client, like a DNS cache or an operating system stub resolver, and a DNSCrypt-aware resolver, like OpenDNS. The DNSCrypt protocol focuses on securing communications between a client and its first-level resolver. While not providing end-to-end security, it protects the local network (which is often the weakest link in the chain) against man-in-the-middle attacks. It also provides some confidentiality to DNS queries.
i3 is a dynamic tiling window manager. Its key features are correct implementation of Xinerama (workspaces are assigned to virtual screens, and it does the right thing when attaching new monitors) and XrandR support (which is still unfinished). Both horizontal and vertical columns can be used in tiling. There is a special focus is on writing clean, readable, and well documented code. i3 uses xcb for asynchronous communication with X11, and has several measures to be very fast. i3 is primarily targeted at advanced users and developers.
mk-configure is a lightweight replacement for GNU autotools written in and for bmake (a portable version of NetBSD make). The main goal is to have only one top-level tool instead of aclocal+automake+autoconf+autoheader. Other goals are clean design, simplicity, and "no code generation".
Botan is a crypto library written in C++. It provides a variety of cryptographic algorithms, including common ones such as AES, MD5, SHA, HMAC, RSA, Diffie-Hellman, DSA, and ECDSA, as well as many others that are more obscure or specialized. It also offers SSL/TLS (client and server), X.509v3 certificates and CRLs, and PKCS #10 certificate requests. A message processing system that uses a filter/pipeline metaphor allows for many common cryptographic tasks to be completed with just a few lines of code. Assembly and SIMD optimizations for common CPUs offers speedups for critical algorithms like AES and SHA-1.
fdm (fetch and deliver mail) is a simple, lightweight replacement for mail fetching, filtering, and delivery programs such as fetchmail and procmail. It can fetch using POP3, POP3S, IMAP, IMAPS, or stdin, and deliver to a pipe, file, maildir, mbox, or SMTP server, based on a set of regexps. It can be used for both single user and multiuser setups, and is designed with privilege separation when running as root.
The MiniUPnP project is a library and a daemon. The library is aimed to enable applications to use the capabilities of a UPnP Internet Gateway Device present on the network to forward ports. The daemon adds the UPnP Internet Gateway Device functionality to a NAT gateway running OpenBSD/NetBSD/FreeBSD/Solaris with PF/IPF or Linux 2.4.x/2.6.x with netfilter. One of its most interesting features is to enforce some permissions to allow or deny redirections, bringing some security to UPnP. Newer versions also support the NAT-PMP protocol from Apple.