macOS · Swift and SwiftUI · GPL
TunnelGuard
macOS gives you no way to exclude a specific domain from a VPN tunnel. Apple removed the kernel extension APIs that VPN clients used for split tunneling in Big Sur, and most clients still do not offer it. TunnelGuard is a native menu bar app that resolves a domain's addresses, adds bypass routes, and optionally pins DNS through the hosts file.
Version 2.0 was mostly about correctness. Users reported the menu bar freezing, which turned out to be shell commands running on the main thread; they all moved off it. The menu bar icon is now driven by a Combine publisher, so its state can never drift from reality.