Awesome GitHub RepositoriesDependency Scoping

Kotlin is a statically typed, general-purpose programming language designed for type safety and concise syntax. It functions as a cross-platform development toolkit that enables the sharing of business logic across mobile, web, and server-side environments by compiling a unified intermediate representation into platform-specific machine code, bytecode, or source code. The project distinguishes itself through a multi-target build orchestration model that manages complex compilation units and hierarchical source sets. Developers can define common interface logic that is satisfied by platform-sp

Lerna is a monorepo management tool, build orchestrator, and package publisher for JavaScript and TypeScript projects. It enables the management of multiple packages within a single shared repository, providing utilities for workspace organization and the coordinated publishing of packages to a registry. The tool distinguishes itself through dependency-aware task orchestration and automated version management. It uses topological sorting to sequence tasks and utilizes content-hash caching to skip redundant executions when input files remain unchanged. Versioning is automated by parsing standa

Homebridge is a Node.js home automation server that acts as a bridge to expose non-native smart home devices to Apple HomeKit. It functions as a plugin-based framework that maps proprietary device APIs to standardized home automation services and protocols. The system utilizes a modular plugin architecture and a protocol emulation layer to make third-party hardware appear as native accessories. It further supports cross-platform compatibility by acting as a Matter device bridge, allowing Matter-standard hardware to connect to various home automation controllers. The software includes a web i

npm-check-updates is a command line utility and package version manager used to find and apply newer versions of dependencies within npm package manifests. It functions as a dependency version validator that identifies outdated packages and updates version strings in the project manifest to the latest available releases. The tool features an interactive CLI for selecting specific packages to upgrade through a prompt-based interface. It distinguishes itself by enforcing version cooldown periods to restrict the adoption of very recent releases and providing a mechanism to iteratively install up

npm-check-updates is a command line utility and programmatic module used to check for newer versions of npm packages and update project manifest files. It functions as a registry client and semantic version manager that upgrades package constraints to the latest releases. The tool distinguishes itself by including supply chain security features, such as a release cooldown period and package ownership tracking, to prevent the adoption of unstable or malicious new releases. It also provides a programmatic API for integrating dependency checks and upgrades directly into custom scripts. Broad ca

Glide is a Go dependency management tool that fetches, pins, and vendors external packages to enable reproducible builds across environments. It stores project-specific copies of Go packages in a vendor directory, isolating dependencies per project to avoid version conflicts, and supports fetching packages from Git, Mercurial, Bazaar, and Subversion repositories. The tool resolves dependency versions using semantic versioning ranges and operators, and generates a lock file that records exact commit IDs for all transitive dependencies. Glide distinguishes itself with an interactive version wiz

SimianArmy is a chaos engineering framework and resilience testing tool designed to induce random infrastructure failures in cloud environments. It functions as a cloud instance termination tool that simulates unplanned outages to verify that distributed architectures maintain high availability and fault tolerance. The system identifies and terminates cloud server instances to ensure applications can tolerate unexpected hardware failures without interrupting service. This process allows for the verification of automated failover mechanisms and the identification of weaknesses in system reliab

RIBs is a mobile architecture framework that structures applications around isolated, lifecycle-managed units of business logic called RIBs. Each RIB separates routing, business logic, and construction into distinct classes through the Router-Interactor-Builder pattern, with hierarchical dependency injection scoping dependencies per node and static analysis enforcing architectural rules at build time. The framework enforces automatic disposal of Rx subscriptions scoped to interactor lifecycles, blocking compilation when subscriptions lack proper disposal to prevent memory leaks. It supports v

reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the discovery, mapping, and monitoring of external digital assets. It operates as a modular tool-chain pipeline that coordinates a sequence of security tools to perform intelligence gathering and vulnerability scanning. The project distinguishes itself through a cloud-native deployment model that parallelizes scanning workloads across a fleet of remote VPS instances to bypass local resource constraints. It utilizes container-based environment isolation to ensure consistent executio

Dependency-cruiser es un analizador de dependencias y linter arquitectónico para JavaScript y TypeScript. Sirve como herramienta de análisis estático para mapear, visualizar y validar las relaciones entre módulos dentro de un codebase sin necesidad de ejecutar el código. El proyecto se distingue por su capacidad para imponer límites arquitectónicos mediante un sistema basado en reglas. Detecta dependencias circulares, identifica módulos huérfanos y código muerto, y valida restricciones de dependencia utilizando reglas de relaciones permitidas y prohibidas. También proporciona análisis cuantitativo de estabilidad calculando el acoplamiento aferente y eferente para identificar áreas frágiles de un proyecto. La herramienta cubre una amplia gama de capacidades, incluyendo el análisis de módulos multi-estándar para ES6, CommonJS y TypeScript, así como la visualización de grafos de dependencia con agregación a nivel de carpeta. Proporciona funciones de automatización para integración continua, como el establecimiento de líneas base de violaciones y exportaciones de datos estructurados en formatos JSON o CSV. El sistema incluye un proceso interactivo de bootstrapping de configuración del proyecto para generar archivos de configuración adaptados al entorno local.

npm-check is a command-line tool that audits a project's npm dependencies, comparing local package versions against the npm registry to identify outdated, unused, or incorrect entries. It scans both package.json and node_modules, and can also inspect globally installed npm packages for the same issues. The tool distinguishes itself by offering multiple modes of operation. It can automatically update all outdated dependencies to their latest versions without interaction, suitable for automated scripts. Alternatively, it provides an interactive terminal interface that lets users review and

Visualize call graph of a Go program using Graphviz

MockK is a Kotlin test double framework that creates mocks, spies, and relaxed mocks for unit testing, with support for final classes, static methods, and coroutines. It functions as a bytecode instrumentation library that modifies compiled class files at load time to intercept constructors, final methods, and static functions without source changes, and also provides dedicated libraries for constructor mocking and coroutine mocking. The framework is designed specifically for Kotlin, handling Kotlin-specific constructs like extension functions, singletons, and suspend functions. MockK disting

Snyk is an application security testing platform designed to identify and remediate vulnerabilities across source code, open-source dependencies, container images, and infrastructure-as-code configurations. It functions as a comprehensive security workflow automation tool, utilizing a static analysis engine and dependency graph mapping to detect security flaws and license compliance issues throughout the software development lifecycle. The platform distinguishes itself through agentic workflow orchestration and an automated remediation pipeline that generates and submits pull requests to patc

Este proyecto es un recurso educativo localizado para aprender el lenguaje de programación Rust, proporcionando una guía completa y especificaciones técnicas traducidas al chino simplificado. Sirve como una herramienta de instrucción para estudiar los modismos del lenguaje, la gestión de memoria y los sistemas de tipos. El repositorio se centra en la localización de documentación de software, convirtiendo las guías oficiales al chino simplificado para aumentar la accesibilidad para hablantes no nativos de inglés. Utiliza un sistema basado en markdown para organizar el contenido y soporta la exportación a múltiples formatos como HTML estático, PDF y EPUB para visualización web y offline. El contenido cubre una amplia gama de dominios técnicos de Rust, incluyendo primitivas de gestión de memoria como ownership y borrowing, diseño avanzado del lenguaje involucrando traits y generics, y estrategias integrales de manejo de errores. También detalla fundamentos de programación, modelado de datos y el uso de herramientas de productividad para desarrolladores para la gestión de builds y dependencias.

Garble is an obfuscation tool for Go binaries. It transforms compiled Go programs by hashing identifiers, package paths, and filenames into short, opaque strings, making reverse engineering more difficult. The tool produces reproducible results from identical source and a user-supplied seed, enabling verifiable builds. Obfuscation can be restricted to only those packages that match user-defined patterns, leaving other parts of the codebase untouched. Constant string literals in the binary are replaced with runtime-resolved expressions to hide their original content. The tool integrates direct

Maven es una herramienta de automatización de compilación de Java y un orquestador de builds. Funciona como un gestor del ciclo de vida del proyecto y un sistema de gestión de dependencias, utilizando un modelo de objeto de proyecto estandarizado para compilar, probar y empaquetar proyectos Java. El proyecto se distingue por un ciclo de vida de compilación basado en fases y un modelo de extensión basado en plugins, permitiendo a los usuarios vincular objetivos personalizados a etapas específicas de la compilación. Coordina software complejo mediante la orquestación de proyectos multimodulares y asegura un flujo de trabajo de compilación reproducible al neutralizar variables de entorno y controlar las versiones de las toolchains. Sus capacidades cubren una gestión integral de dependencias, incluyendo la resolución de dependencias transitivas y la publicación de artefactos en repositorios remotos. El sistema también proporciona generación de proyectos mediante plantillas y generación de documentación detallada para producir referencias de API y sitios de proyectos. La herramienta incluye una interfaz de línea de comandos con autocompletado y admite la ejecución de compilaciones offline utilizando una caché local de artefactos.

Effector is a reactive state management library designed for building complex, event-driven applications. It functions as a data flow engine that models application logic as a directed acyclic graph, ensuring that state updates propagate automatically through interconnected nodes. By utilizing atomic state updates and declarative unit composition, the library maintains data consistency and provides a predictable execution model for managing application state. The project distinguishes itself through its framework-agnostic architecture, which decouples business logic from user interface implem

Dalfox is an automated web application security tool specifically designed for discovering and verifying cross-site scripting vulnerabilities. It functions as an XSS vulnerability scanner that analyzes HTTP parameters and DOM structures to identify reflected, stored, and blind injection points. The project distinguishes itself by providing a Model Context Protocol server and a REST API, allowing artificial intelligence agents and remote interfaces to trigger and manage security scans programmatically. It utilizes a payload mutation engine and fingerprinting strategies to execute WAF evasion t

xcodes es una utilidad de línea de comandos para la administración de toolchains en macOS, diseñada específicamente para la instalación y gestión de múltiples versiones de Xcode. Automatiza el proceso de descubrimiento de versiones disponibles, la descarga de versiones específicas del entorno de desarrollo y la configuración de los runtimes de dispositivos asociados. La herramienta gestiona los ciclos de vida del software permitiendo a los usuarios cambiar entre versiones activas mediante la actualización de enlaces simbólicos y gestionar las instalaciones locales identificando y eliminando versiones específicas. Maneja el acceso seguro a los servidores de descarga almacenando y eliminando las credenciales de Apple ID dentro del llavero del sistema. La utilidad incluye capacidades para filtrar el software disponible por arquitectura de procesador y generar scripts de autocompletado para el shell, acelerando la interacción en la línea de comandos.