Awesome GitHub RepositoriesDependency Scoping

Kotlin is a statically typed, general-purpose programming language designed for type safety and concise syntax. It functions as a cross-platform development toolkit that enables the sharing of business logic across mobile, web, and server-side environments by compiling a unified intermediate representation into platform-specific machine code, bytecode, or source code. The project distinguishes itself through a multi-target build orchestration model that manages complex compilation units and hierarchical source sets. Developers can define common interface logic that is satisfied by platform-sp

Lerna is a monorepo management tool, build orchestrator, and package publisher for JavaScript and TypeScript projects. It enables the management of multiple packages within a single shared repository, providing utilities for workspace organization and the coordinated publishing of packages to a registry. The tool distinguishes itself through dependency-aware task orchestration and automated version management. It uses topological sorting to sequence tasks and utilizes content-hash caching to skip redundant executions when input files remain unchanged. Versioning is automated by parsing standa

Homebridge is a Node.js home automation server that acts as a bridge to expose non-native smart home devices to Apple HomeKit. It functions as a plugin-based framework that maps proprietary device APIs to standardized home automation services and protocols. The system utilizes a modular plugin architecture and a protocol emulation layer to make third-party hardware appear as native accessories. It further supports cross-platform compatibility by acting as a Matter device bridge, allowing Matter-standard hardware to connect to various home automation controllers. The software includes a web i

npm-check-updates is a command line utility and package version manager used to find and apply newer versions of dependencies within npm package manifests. It functions as a dependency version validator that identifies outdated packages and updates version strings in the project manifest to the latest available releases. The tool features an interactive CLI for selecting specific packages to upgrade through a prompt-based interface. It distinguishes itself by enforcing version cooldown periods to restrict the adoption of very recent releases and providing a mechanism to iteratively install up

npm-check-updates is a command line utility and programmatic module used to check for newer versions of npm packages and update project manifest files. It functions as a registry client and semantic version manager that upgrades package constraints to the latest releases. The tool distinguishes itself by including supply chain security features, such as a release cooldown period and package ownership tracking, to prevent the adoption of unstable or malicious new releases. It also provides a programmatic API for integrating dependency checks and upgrades directly into custom scripts. Broad ca

Glide is a Go dependency management tool that fetches, pins, and vendors external packages to enable reproducible builds across environments. It stores project-specific copies of Go packages in a vendor directory, isolating dependencies per project to avoid version conflicts, and supports fetching packages from Git, Mercurial, Bazaar, and Subversion repositories. The tool resolves dependency versions using semantic versioning ranges and operators, and generates a lock file that records exact commit IDs for all transitive dependencies. Glide distinguishes itself with an interactive version wiz

SimianArmy is a chaos engineering framework and resilience testing tool designed to induce random infrastructure failures in cloud environments. It functions as a cloud instance termination tool that simulates unplanned outages to verify that distributed architectures maintain high availability and fault tolerance. The system identifies and terminates cloud server instances to ensure applications can tolerate unexpected hardware failures without interrupting service. This process allows for the verification of automated failover mechanisms and the identification of weaknesses in system reliab

RIBs is a mobile architecture framework that structures applications around isolated, lifecycle-managed units of business logic called RIBs. Each RIB separates routing, business logic, and construction into distinct classes through the Router-Interactor-Builder pattern, with hierarchical dependency injection scoping dependencies per node and static analysis enforcing architectural rules at build time. The framework enforces automatic disposal of Rx subscriptions scoped to interactor lifecycles, blocking compilation when subscriptions lack proper disposal to prevent memory leaks. It supports v

reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the discovery, mapping, and monitoring of external digital assets. It operates as a modular tool-chain pipeline that coordinates a sequence of security tools to perform intelligence gathering and vulnerability scanning. The project distinguishes itself through a cloud-native deployment model that parallelizes scanning workloads across a fleet of remote VPS instances to bypass local resource constraints. It utilizes container-based environment isolation to ensure consistent executio

Dependency-cruiser est un analyseur de dépendances et un linter architectural pour JavaScript et TypeScript. Il sert d'outil d'analyse statique pour cartographier, visualiser et valider les relations entre modules au sein d'une base de code sans nécessiter l'exécution du code. Le projet se distingue par sa capacité à faire respecter des frontières architecturales via un système basé sur des règles. Il détecte les dépendances circulaires, identifie les modules orphelins et le code mort, et valide les contraintes de dépendance en utilisant des règles de relations autorisées ou interdites. Il fournit également une analyse quantitative de la stabilité en calculant le couplage afférent et efférent pour identifier les zones fragiles d'un projet. L'outil couvre un large éventail de capacités, incluant l'analyse multi-standard pour ES6, CommonJS et TypeScript, ainsi que la visualisation de graphes de dépendances avec agrégation au niveau des dossiers. Il fournit des fonctionnalités d'automatisation pour l'intégration continue, telles que le baselining des violations et l'exportation de données structurées aux formats JSON ou CSV. Le système inclut un processus interactif de configuration pour générer des fichiers de configuration adaptés à l'environnement local.

npm-check is a command-line tool that audits a project's npm dependencies, comparing local package versions against the npm registry to identify outdated, unused, or incorrect entries. It scans both package.json and node_modules, and can also inspect globally installed npm packages for the same issues. The tool distinguishes itself by offering multiple modes of operation. It can automatically update all outdated dependencies to their latest versions without interaction, suitable for automated scripts. Alternatively, it provides an interactive terminal interface that lets users review and

Visualize call graph of a Go program using Graphviz

MockK is a Kotlin test double framework that creates mocks, spies, and relaxed mocks for unit testing, with support for final classes, static methods, and coroutines. It functions as a bytecode instrumentation library that modifies compiled class files at load time to intercept constructors, final methods, and static functions without source changes, and also provides dedicated libraries for constructor mocking and coroutine mocking. The framework is designed specifically for Kotlin, handling Kotlin-specific constructs like extension functions, singletons, and suspend functions. MockK disting

Snyk is an application security testing platform designed to identify and remediate vulnerabilities across source code, open-source dependencies, container images, and infrastructure-as-code configurations. It functions as a comprehensive security workflow automation tool, utilizing a static analysis engine and dependency graph mapping to detect security flaws and license compliance issues throughout the software development lifecycle. The platform distinguishes itself through agentic workflow orchestration and an automated remediation pipeline that generates and submits pull requests to patc

Ce projet est une ressource éducative localisée pour apprendre le langage de programmation Rust, fournissant un guide complet et des spécifications techniques traduites en chinois simplifié. Il sert d'outil pédagogique pour étudier les idiomes du langage, la gestion de la mémoire et les systèmes de types. Le dépôt se concentre sur la localisation de la documentation logicielle, convertissant les guides officiels en chinois simplifié pour accroître l'accessibilité pour les non-anglophones. Il utilise un système basé sur Markdown pour organiser le contenu et prend en charge l'export multi-format vers des formats HTML statiques, PDF et EPUB pour une visualisation web et hors ligne. Le contenu couvre un large éventail de domaines techniques de Rust, incluant les primitives de gestion de la mémoire comme l'ownership et l'emprunt (borrowing), la conception avancée du langage impliquant les traits et les génériques, et des stratégies complètes de gestion des erreurs. Il détaille également les fondamentaux de la programmation, la modélisation des données et l'utilisation d'outils de productivité pour la gestion des builds et des dépendances.

Garble is an obfuscation tool for Go binaries. It transforms compiled Go programs by hashing identifiers, package paths, and filenames into short, opaque strings, making reverse engineering more difficult. The tool produces reproducible results from identical source and a user-supplied seed, enabling verifiable builds. Obfuscation can be restricted to only those packages that match user-defined patterns, leaving other parts of the codebase untouched. Constant string literals in the binary are replaced with runtime-resolved expressions to hide their original content. The tool integrates direct

Maven est un outil d'automatisation de build Java et un orchestrateur de build logiciel. Il fonctionne comme un gestionnaire de cycle de vie de projet et un système de gestion des dépendances, utilisant un modèle d'objet de projet (POM) standardisé pour compiler, tester et packager les projets Java. Le projet se distingue par un cycle de vie de build basé sur des phases et un modèle d'extension par plugins, permettant aux utilisateurs de lier des objectifs personnalisés à des étapes de build spécifiques. Il coordonne des logiciels complexes via l'orchestration de projets multi-modules et assure un workflow de build reproductible en neutralisant les variables d'environnement et en contrôlant les versions de la chaîne d'outils. Ses capacités couvrent une gestion complète des dépendances, incluant la résolution des dépendances transitives et la publication d'artefacts vers des dépôts distants. Le système fournit également la génération de projets via des templates et la génération de documentation détaillée pour produire des références API et des sites de projet. L'outil inclut une interface en ligne de commande avec auto-complétion et prend en charge l'exécution de build hors ligne en utilisant un cache d'artefacts local.

Effector is a reactive state management library designed for building complex, event-driven applications. It functions as a data flow engine that models application logic as a directed acyclic graph, ensuring that state updates propagate automatically through interconnected nodes. By utilizing atomic state updates and declarative unit composition, the library maintains data consistency and provides a predictable execution model for managing application state. The project distinguishes itself through its framework-agnostic architecture, which decouples business logic from user interface implem

Dalfox is an automated web application security tool specifically designed for discovering and verifying cross-site scripting vulnerabilities. It functions as an XSS vulnerability scanner that analyzes HTTP parameters and DOM structures to identify reflected, stored, and blind injection points. The project distinguishes itself by providing a Model Context Protocol server and a REST API, allowing artificial intelligence agents and remote interfaces to trigger and manage security scans programmatically. It utilizes a payload mutation engine and fingerprinting strategies to execute WAF evasion t

xcodes est un utilitaire en ligne de commande pour l'administration de toolchains macOS, spécifiquement conçu pour l'installation et la gestion de plusieurs versions de Xcode. Il automatise le processus de découverte des versions disponibles, le téléchargement de versions spécifiques de l'environnement de développement et la configuration des runtimes d'appareils associés. L'outil gère les cycles de vie des logiciels en permettant aux utilisateurs de basculer entre les versions actives via des mises à jour de liens symboliques et de gérer les installations locales en identifiant et en supprimant des versions spécifiques. Il gère l'accès sécurisé aux serveurs de téléchargement en stockant et en effaçant les identifiants Apple ID dans le trousseau système. L'utilitaire inclut des capacités de filtrage des logiciels disponibles par architecture de processeur et la génération de scripts de complétion shell pour accélérer l'interaction en ligne de commande.