Barcode-first cataloging
Scan an ISBN or EAN-13. Title metadata resolves asynchronously through a chain of nine providers — BnF, Google Books, Open Library, Library of Congress, K10plus, MusicBrainz, OMDb, TMDb, BDGest — with cover-image download.
v1.20.0 · current
Your home library,
Your home library,
properly cataloged.
mybibli is a self-hosted web app to catalog, locate, and loan your personal library. Barcode-first, multi-media, multi-role — and your data never leaves your network.
140+
volumes in prod
~900
tests green
8
metadata providers
4
languages (EN/FR/DE/IT)
In the wild
Live in production.
Screenshots from the household NAS install that drives the project — same code that's on Docker Hub right now.
More than a spreadsheet.
Built for collectors who want their library to actually work. Scan a barcode, find a book on a shelf, lend it to a friend — and see what's missing in a series.
Multi-media support
Books, BD/comics with multi-position omnibus volumes, audio releases, films and series — each typed correctly with the right provider chain selected automatically.
Series & gap detection
See which volumes are missing in your series at a glance. The dashboard surfaces "series with gaps" alongside Dewey-based browsing and a similar-titles section.
Storage-location tracking
Configurable hierarchy — room → shelf → row, or whatever fits your home. Each shelf gets a barcode; scan the shelf, scan the volume, done.
Loan management
Borrower CRUD, loan registration, automatic location restoration on return, admin-configurable overdue threshold, per-borrower history.
Multi-role access
Anonymous (read-only), Librarian (catalog + loans), Admin (everything). Session inactivity timeout with keep-alive toast. EN / FR language toggle, per-user.
Hardened by construction
Security that sleeps next to your front door.
Self-hosted means your home network. So mybibli is built defensively from day one — not as an afterthought.
-
CSP
Strict Content Security Policy
No
unsafe-inline, nounsafe-eval. Every template — server-rendered or HTMX fragment — is audited for inline script and style attributes. -
CSRF
Per-session synchronizer token
Constant-time compare on every state-changing request. Forms inject the token automatically; HTMX inherits via a small JS listener. Exempt-route allowlist is frozen and policed by tests.
-
Scanner-guard
A USB barcode burst that arrives while a modal is open is intercepted at document-capture phase — no leakage into background scan fields, no accidental Cancel/Confirm activation.
-
Data stays at home
No cloud sync, no telemetry, no analytics. Argon2 password hashing, HttpOnly + SameSite cookies, soft-delete with 30-day auto-purge.
Boring stack, on purpose.
Server-rendered HTML, type-checked templates, no SPA framework. The whole UI talks to the server with HTMX over the same routes that serve the pages.
Backend
Rust 2024 + Axum 0.8
Compiled binary, async tokio runtime, zero-cost middleware tower stack.
Database
MariaDB + SQLx 0.8
Compile-time query checking via the offline cache. Versioned migrations checked into the repo.
Templates
Askama 0.15
Compile-time type-checked Jinja-style templates. Auto HTML-escaping, no surprises.
Frontend
HTMX 2 + Tailwind 4
No build step beyond Tailwind. Server-rendered HTML; small ES modules where the UX needs it.
Auth
Sessions + Argon2
Cookie-based sessions, per-session CSRF synchronizer token, role-based access control.
i18n
rust-i18n
English + French today, key-by-key parity enforced by tests. New languages drop in as a single YAML file.
Testing
cargo + Playwright
~525 unit, ~95 DB integration, ~160 Playwright E2E across two CI lanes (seeded + wizard).
CI/CD
GitHub Actions
Rust tests + clippy + sqlx-prepare check, DB integration, Playwright E2E and wizard E2E — gated on every PR.
v1.20.0 is live.
v1.20.0 — where the labels end: the admin Health tab now shows the last volume number and the last shelf number in use, each with the next free one, so a fresh sheet of barcode labels starts right after the occupied range — trashed items still count, so a printed sticker is never reissued (#489). No migration. Follows v1.19.0 — the security review: three fixes from a review of the 1.18.0 code, and no migration to run. The Trash panel's Restore button now actually restores — it had pointed at an address the application never answered on, so clicking it did nothing at all, quietly, for seventeen releases (#478). The development accounts a fresh install ships with are deleted outright at first boot instead of resting in the Trash with their published passwords intact (#480) — which is exactly what a working Restore button would have handed back. And a cover image can no longer exhaust the server: decoding runs under a fixed budget, so a file that is small on the wire and enormous once decoded is refused rather than taking the whole thing down (#479). Before that, v1.18.0 — management labels applied to titles and copies from one shared vocabulary (#443). Pre-built Docker images on Docker Hub.