39 repository-uri
Mechanisms that restrict the availability or visibility of dependencies to specific project modules or execution contexts.
Explore 39 awesome GitHub repositories matching devops & infrastructure · Dependency Scoping. Refine with filters or upvote what's useful.
Kotlin is a statically typed, general-purpose programming language designed for type safety and concise syntax. It functions as a cross-platform development toolkit that enables the sharing of business logic across mobile, web, and server-side environments by compiling a unified intermediate representation into platform-specific machine code, bytecode, or source code. The project distinguishes itself through a multi-target build orchestration model that manages complex compilation units and hierarchical source sets. Developers can define common interface logic that is satisfied by platform-sp
Restricts the visibility and availability of dependencies to specific project modules to ensure clean, isolated build environments.
Lerna is a monorepo management tool, build orchestrator, and package publisher for JavaScript and TypeScript projects. It enables the management of multiple packages within a single shared repository, providing utilities for workspace organization and the coordinated publishing of packages to a registry. The tool distinguishes itself through dependency-aware task orchestration and automated version management. It uses topological sorting to sequence tasks and utilizes content-hash caching to skip redundant executions when input files remain unchanged. Versioning is automated by parsing standa
Restricts command execution to specific packages using directory patterns or by identifying changed files.
Homebridge is a Node.js home automation server that acts as a bridge to expose non-native smart home devices to Apple HomeKit. It functions as a plugin-based framework that maps proprietary device APIs to standardized home automation services and protocols. The system utilizes a modular plugin architecture and a protocol emulation layer to make third-party hardware appear as native accessories. It further supports cross-platform compatibility by acting as a Matter device bridge, allowing Matter-standard hardware to connect to various home automation controllers. The software includes a web i
Supports installing plugins published under specific user or organization scopes from a package registry.
npm-check-updates is a command line utility and package version manager used to find and apply newer versions of dependencies within npm package manifests. It functions as a dependency version validator that identifies outdated packages and updates version strings in the project manifest to the latest available releases. The tool features an interactive CLI for selecting specific packages to upgrade through a prompt-based interface. It distinguishes itself by enforcing version cooldown periods to restrict the adoption of very recent releases and providing a mechanism to iteratively install up
Allows excluding or including specific packages from the update process using strings, wildcards, and regex.
npm-check-updates is a command line utility and programmatic module used to check for newer versions of npm packages and update project manifest files. It functions as a registry client and semantic version manager that upgrades package constraints to the latest releases. The tool distinguishes itself by including supply chain security features, such as a release cooldown period and package ownership tracking, to prevent the adoption of unstable or malicious new releases. It also provides a programmatic API for integrating dependency checks and upgrades directly into custom scripts. Broad ca
Uses wildcards or regular expressions to filter updates for specific packages and organization scopes.
Glide is a Go dependency management tool that fetches, pins, and vendors external packages to enable reproducible builds across environments. It stores project-specific copies of Go packages in a vendor directory, isolating dependencies per project to avoid version conflicts, and supports fetching packages from Git, Mercurial, Bazaar, and Subversion repositories. The tool resolves dependency versions using semantic versioning ranges and operators, and generates a lock file that records exact commit IDs for all transitive dependencies. Glide distinguishes itself with an interactive version wiz
Restricts a dependency to be fetched only for specified operating systems or CPU architectures.
SimianArmy is a chaos engineering framework and resilience testing tool designed to induce random infrastructure failures in cloud environments. It functions as a cloud instance termination tool that simulates unplanned outages to verify that distributed architectures maintain high availability and fault tolerance. The system identifies and terminates cloud server instances to ensure applications can tolerate unexpected hardware failures without interrupting service. This process allows for the verification of automated failover mechanisms and the identification of weaknesses in system reliab
Implements granular targeting of cloud instances using tags and regions to limit the scope of failure simulations.
RIBs is a mobile architecture framework that structures applications around isolated, lifecycle-managed units of business logic called RIBs. Each RIB separates routing, business logic, and construction into distinct classes through the Router-Interactor-Builder pattern, with hierarchical dependency injection scoping dependencies per node and static analysis enforcing architectural rules at build time. The framework enforces automatic disposal of Rx subscriptions scoped to interactor lifecycles, blocking compilation when subscriptions lack proper disposal to prevent memory leaks. It supports v
Ships a protocol-based dependency declaration system where each RIB defines its required dependencies in a component class.
reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the discovery, mapping, and monitoring of external digital assets. It operates as a modular tool-chain pipeline that coordinates a sequence of security tools to perform intelligence gathering and vulnerability scanning. The project distinguishes itself through a cloud-native deployment model that parallelizes scanning workloads across a fleet of remote VPS instances to bypass local resource constraints. It utilizes container-based environment isolation to ensure consistent executio
Implements logic for selecting specific targets to be scanned while respecting authorization boundaries via scope files.
Dependency-cruiser este un analizor de dependențe și linter arhitectural pentru JavaScript și TypeScript. Servește ca instrument de analiză statică pentru maparea, vizualizarea și validarea relațiilor dintre module într-un codebase, fără a necesita execuția codului. Proiectul se distinge prin capacitatea de a impune limite arhitecturale printr-un sistem bazat pe reguli. Detectează dependențele circulare, identifică modulele orfane și codul mort, și validează constrângerile de dependență folosind reguli de relaționare permise sau interzise. De asemenea, oferă o analiză cantitativă a stabilității prin calcularea cuplajului aferent și eferent pentru a identifica zonele fragile ale unui proiect. Instrumentul acoperă o gamă largă de capabilități, inclusiv parsarea modulelor pentru standarde multiple precum ES6, CommonJS și TypeScript, precum și vizualizarea grafului de dependențe cu agregare la nivel de folder. Oferă funcționalități de automatizare pentru integrare continuă (CI), cum ar fi stabilirea unei linii de bază pentru încălcări și exporturi de date structurate în formate JSON sau CSV. Sistemul include un proces interactiv de configurare a proiectului pentru a genera fișiere de configurare personalizate bazate pe mediul local.
Uses regular expressions to include or exclude specific files or folders from a dependency rule.
npm-check is a command-line tool that audits a project's npm dependencies, comparing local package versions against the npm registry to identify outdated, unused, or incorrect entries. It scans both package.json and node_modules, and can also inspect globally installed npm packages for the same issues. The tool distinguishes itself by offering multiple modes of operation. It can automatically update all outdated dependencies to their latest versions without interaction, suitable for automated scripts. Alternatively, it provides an interactive terminal interface that lets users review and
Allows filtering audits to only production or only development dependencies.
Visualize call graph of a Go program using Graphviz
Filters call graphs by import path to focus on application-level interactions and reduce visual noise.
MockK is a Kotlin test double framework that creates mocks, spies, and relaxed mocks for unit testing, with support for final classes, static methods, and coroutines. It functions as a bytecode instrumentation library that modifies compiled class files at load time to intercept constructors, final methods, and static functions without source changes, and also provides dedicated libraries for constructor mocking and coroutine mocking. The framework is designed specifically for Kotlin, handling Kotlin-specific constructs like extension functions, singletons, and suspend functions. MockK disting
Manages mock lifecycle within lexical scopes, automatically clearing interactions after scope exit.
Snyk is an application security testing platform designed to identify and remediate vulnerabilities across source code, open-source dependencies, container images, and infrastructure-as-code configurations. It functions as a comprehensive security workflow automation tool, utilizing a static analysis engine and dependency graph mapping to detect security flaws and license compliance issues throughout the software development lifecycle. The platform distinguishes itself through agentic workflow orchestration and an automated remediation pipeline that generates and submits pull requests to patc
Configures scanning behavior to include or exclude development-specific packages when evaluating project security and compliance.
Acest proiect este o resursă educațională localizată pentru învățarea limbajului de programare Rust, oferind un ghid cuprinzător și specificații tehnice traduse în chineză simplificată. Servește ca instrument de instruire pentru studierea idiomurilor limbajului, gestionarea memoriei și sistemele de tipuri. Repository-ul se concentrează pe localizarea documentației software, convertind ghidurile oficiale în chineză simplificată pentru a crește accesibilitatea pentru vorbitorii non-nativi de engleză. Utilizează un sistem bazat pe markdown pentru a organiza conținutul și suportă exportul în formate multiple către HTML static, PDF și EPUB pentru vizualizare web și offline. Conținutul acoperă o gamă largă de domenii tehnice Rust, inclusiv primitive de gestionare a memoriei precum ownership și borrowing, design avansat de limbaj implicând traits și generics, și strategii cuprinzătoare de gestionare a erorilor. De asemenea, detaliază fundamentele programării, modelarea datelor și utilizarea instrumentelor de productivitate pentru dezvoltatori pentru gestionarea build-urilor și a dependențelor.
Rust controls the visibility of names and paths using a module system to prevent naming conflicts.
Garble is an obfuscation tool for Go binaries. It transforms compiled Go programs by hashing identifiers, package paths, and filenames into short, opaque strings, making reverse engineering more difficult. The tool produces reproducible results from identical source and a user-supplied seed, enabling verifiable builds. Obfuscation can be restricted to only those packages that match user-defined patterns, leaving other parts of the codebase untouched. Constant string literals in the binary are replaced with runtime-resolved expressions to hide their original content. The tool integrates direct
Restricts obfuscation to packages matching user-defined name patterns.
Maven este un instrument de automatizare a build-ului Java și un orchestrator de build software. Funcționează ca un manager de ciclu de viață al proiectului și sistem de gestionare a dependențelor, folosind un model de obiect al proiectului (POM) standardizat pentru a compila, testa și împacheta proiecte Java. Proiectul se distinge printr-un ciclu de viață al build-ului bazat pe faze și un model de extensie bazat pe plugin-uri, permițând utilizatorilor să lege obiective personalizate de etape specifice ale build-ului. Coordonează software-ul complex prin orchestrarea proiectelor multi-modul și asigură un flux de lucru reproductibil prin neutralizarea variabilelor de mediu și controlul versiunilor de toolchain. Capabilitățile sale acoperă gestionarea cuprinzătoare a dependențelor, inclusiv rezolvarea dependențelor tranzitive și publicarea artefactelor în repository-uri remote. Sistemul oferă, de asemenea, generarea de proiecte prin template-uri și generarea de documentație detaliată pentru producerea referințelor API și a site-urilor de proiect. Instrumentul include o interfață de linie de comandă (CLI) cu completare automată și suportă execuția build-ului offline folosind un cache local de artefacte.
Controls the visibility and transitivity of dependencies based on the build stage, such as test or runtime.
Effector is a reactive state management library designed for building complex, event-driven applications. It functions as a data flow engine that models application logic as a directed acyclic graph, ensuring that state updates propagate automatically through interconnected nodes. By utilizing atomic state updates and declarative unit composition, the library maintains data consistency and provides a predictable execution model for managing application state. The project distinguishes itself through its framework-agnostic architecture, which decouples business logic from user interface implem
Scopes state and effects to specific execution contexts to support parallel testing and server-side rendering.
Dalfox is an automated web application security tool specifically designed for discovering and verifying cross-site scripting vulnerabilities. It functions as an XSS vulnerability scanner that analyzes HTTP parameters and DOM structures to identify reflected, stored, and blind injection points. The project distinguishes itself by providing a Model Context Protocol server and a REST API, allowing artificial intelligence agents and remote interfaces to trigger and manage security scans programmatically. It utilizes a payload mutation engine and fingerprinting strategies to execute WAF evasion t
Allows excluding specific parameters, URL patterns, or domains to maintain a strict scanning scope.
xcodes este un utilitar de linie de comandă pentru administrarea toolchain-ului macOS, conceput special pentru instalarea și gestionarea mai multor versiuni de Xcode. Acesta automatizează procesul de descoperire a versiunilor disponibile, descărcarea versiunilor specifice ale mediului de dezvoltare și configurarea runtime-urilor pentru dispozitive asociate. Instrumentul gestionează ciclurile de viață ale software-ului permițând utilizatorilor să comute între versiunile active prin actualizarea link-urilor simbolice și să gestioneze instalările locale prin identificarea și eliminarea versiunilor specifice. Acesta gestionează accesul securizat la serverele de descărcare prin stocarea și ștergerea credențialelor Apple ID în keychain-ul sistemului. Utilitarul include capabilități de filtrare a software-ului disponibil după arhitectura procesorului și generarea de scripturi de completare pentru shell, pentru a accelera interacțiunea în linia de comandă.
Filters available software releases based on the system's processor architecture.