awesome-repositories.com
Blog
MCP
awesome-repositories.com

Descoperă cele mai bune repository-uri open source cu căutare AI.

ExploreazăCăutări recomandateAlternative open-sourceSoftware self-hostedBlogHartă site
ProiectServer MCPDespreCum realizăm clasamentulPresă
LegalConfidențialitateTermeni
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
·

39 repository-uri

Awesome GitHub RepositoriesDependency Scoping

Mechanisms that restrict the availability or visibility of dependencies to specific project modules or execution contexts.

Explore 39 awesome GitHub repositories matching devops & infrastructure · Dependency Scoping. Refine with filters or upvote what's useful.

Awesome Dependency Scoping GitHub Repositories

Găsește cele mai bune repo-uri cu AI.Vom căuta cele mai potrivite repository-uri folosind AI.
  • jetbrains/kotlinAvatar JetBrains

    JetBrains/kotlin

    52,880Vezi pe GitHub↗

    Kotlin is a statically typed, general-purpose programming language designed for type safety and concise syntax. It functions as a cross-platform development toolkit that enables the sharing of business logic across mobile, web, and server-side environments by compiling a unified intermediate representation into platform-specific machine code, bytecode, or source code. The project distinguishes itself through a multi-target build orchestration model that manages complex compilation units and hierarchical source sets. Developers can define common interface logic that is satisfied by platform-sp

    Restricts the visibility and availability of dependencies to specific project modules to ensure clean, isolated build environments.

    Kotlincompilergradle-pluginintellij-plugin
    Vezi pe GitHub↗52,880
  • lerna/lernaAvatar lerna

    lerna/lerna

    36,066Vezi pe GitHub↗

    Lerna is a monorepo management tool, build orchestrator, and package publisher for JavaScript and TypeScript projects. It enables the management of multiple packages within a single shared repository, providing utilities for workspace organization and the coordinated publishing of packages to a registry. The tool distinguishes itself through dependency-aware task orchestration and automated version management. It uses topological sorting to sequence tasks and utilizes content-hash caching to skip redundant executions when input files remain unchanged. Versioning is automated by parsing standa

    Restricts command execution to specific packages using directory patterns or by identifying changed files.

    TypeScriptlernamonoreponpm
    Vezi pe GitHub↗36,066
  • homebridge/homebridgeAvatar homebridge

    homebridge/homebridge

    25,398Vezi pe GitHub↗

    Homebridge is a Node.js home automation server that acts as a bridge to expose non-native smart home devices to Apple HomeKit. It functions as a plugin-based framework that maps proprietary device APIs to standardized home automation services and protocols. The system utilizes a modular plugin architecture and a protocol emulation layer to make third-party hardware appear as native accessories. It further supports cross-platform compatibility by acting as a Matter device bridge, allowing Matter-standard hardware to connect to various home automation controllers. The software includes a web i

    Supports installing plugins published under specific user or organization scopes from a package registry.

    TypeScript
    Vezi pe GitHub↗25,398
  • tjunnone/npm-check-updatesAvatar tjunnone

    tjunnone/npm-check-updates

    10,264Vezi pe GitHub↗

    npm-check-updates is a command line utility and package version manager used to find and apply newer versions of dependencies within npm package manifests. It functions as a dependency version validator that identifies outdated packages and updates version strings in the project manifest to the latest available releases. The tool features an interactive CLI for selecting specific packages to upgrade through a prompt-based interface. It distinguishes itself by enforcing version cooldown periods to restrict the adoption of very recent releases and providing a mechanism to iteratively install up

    Allows excluding or including specific packages from the update process using strings, wildcards, and regex.

    TypeScript
    Vezi pe GitHub↗10,264
  • raineorshine/npm-check-updatesAvatar raineorshine

    raineorshine/npm-check-updates

    10,146Vezi pe GitHub↗

    npm-check-updates is a command line utility and programmatic module used to check for newer versions of npm packages and update project manifest files. It functions as a registry client and semantic version manager that upgrades package constraints to the latest releases. The tool distinguishes itself by including supply chain security features, such as a release cooldown period and package ownership tracking, to prevent the adoption of unstable or malicious new releases. It also provides a programmatic API for integrating dependency checks and upgrades directly into custom scripts. Broad ca

    Uses wildcards or regular expressions to filter updates for specific packages and organization scopes.

    TypeScriptnpmnpm-check-updates
    Vezi pe GitHub↗10,146
  • masterminds/glideAvatar Masterminds

    Masterminds/glide

    8,095Vezi pe GitHub↗

    Glide is a Go dependency management tool that fetches, pins, and vendors external packages to enable reproducible builds across environments. It stores project-specific copies of Go packages in a vendor directory, isolating dependencies per project to avoid version conflicts, and supports fetching packages from Git, Mercurial, Bazaar, and Subversion repositories. The tool resolves dependency versions using semantic versioning ranges and operators, and generates a lock file that records exact commit IDs for all transitive dependencies. Glide distinguishes itself with an interactive version wiz

    Restricts a dependency to be fetched only for specified operating systems or CPU architectures.

    Gogogolangpackage-management
    Vezi pe GitHub↗8,095
  • netflix/simianarmyAvatar Netflix

    Netflix/SimianArmy

    7,984Vezi pe GitHub↗

    SimianArmy is a chaos engineering framework and resilience testing tool designed to induce random infrastructure failures in cloud environments. It functions as a cloud instance termination tool that simulates unplanned outages to verify that distributed architectures maintain high availability and fault tolerance. The system identifies and terminates cloud server instances to ensure applications can tolerate unexpected hardware failures without interrupting service. This process allows for the verification of automated failover mechanisms and the identification of weaknesses in system reliab

    Implements granular targeting of cloud instances using tags and regions to limit the scope of failure simulations.

    Java
    Vezi pe GitHub↗7,984
  • uber/ribsAvatar uber

    uber/RIBs

    7,923Vezi pe GitHub↗

    RIBs is a mobile architecture framework that structures applications around isolated, lifecycle-managed units of business logic called RIBs. Each RIB separates routing, business logic, and construction into distinct classes through the Router-Interactor-Builder pattern, with hierarchical dependency injection scoping dependencies per node and static analysis enforcing architectural rules at build time. The framework enforces automatic disposal of Rx subscriptions scoped to interactor lifecycles, blocking compilation when subscriptions lack proper disposal to prevent memory leaks. It supports v

    Ships a protocol-based dependency declaration system where each RIB defines its required dependencies in a component class.

    Kotlinandroidarchitectural-patternsarchitecture
    Vezi pe GitHub↗7,923
  • six2dez/reconftwAvatar six2dez

    six2dez/reconftw

    7,226Vezi pe GitHub↗

    reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the discovery, mapping, and monitoring of external digital assets. It operates as a modular tool-chain pipeline that coordinates a sequence of security tools to perform intelligence gathering and vulnerability scanning. The project distinguishes itself through a cloud-native deployment model that parallelizes scanning workloads across a fleet of remote VPS instances to bypass local resource constraints. It utilizes container-based environment isolation to ensure consistent executio

    Implements logic for selecting specific targets to be scanned while respecting authorization boundaries via scope files.

    Shellbug-bountybugbountybugbounty-tool
    Vezi pe GitHub↗7,226
  • sverweij/dependency-cruiserAvatar sverweij

    sverweij/dependency-cruiser

    6,804Vezi pe GitHub↗

    Dependency-cruiser este un analizor de dependențe și linter arhitectural pentru JavaScript și TypeScript. Servește ca instrument de analiză statică pentru maparea, vizualizarea și validarea relațiilor dintre module într-un codebase, fără a necesita execuția codului. Proiectul se distinge prin capacitatea de a impune limite arhitecturale printr-un sistem bazat pe reguli. Detectează dependențele circulare, identifică modulele orfane și codul mort, și validează constrângerile de dependență folosind reguli de relaționare permise sau interzise. De asemenea, oferă o analiză cantitativă a stabilității prin calcularea cuplajului aferent și eferent pentru a identifica zonele fragile ale unui proiect. Instrumentul acoperă o gamă largă de capabilități, inclusiv parsarea modulelor pentru standarde multiple precum ES6, CommonJS și TypeScript, precum și vizualizarea grafului de dependențe cu agregare la nivel de folder. Oferă funcționalități de automatizare pentru integrare continuă (CI), cum ar fi stabilirea unei linii de bază pentru încălcări și exporturi de date structurate în formate JSON sau CSV. Sistemul include un proces interactiv de configurare a proiectului pentru a genera fișiere de configurare personalizate bazate pe mediul local.

    Uses regular expressions to include or exclude specific files or folders from a dependency rule.

    JavaScript
    Vezi pe GitHub↗6,804
  • dylang/npm-checkAvatar dylang

    dylang/npm-check

    6,643Vezi pe GitHub↗

    npm-check is a command-line tool that audits a project's npm dependencies, comparing local package versions against the npm registry to identify outdated, unused, or incorrect entries. It scans both package.json and node_modules, and can also inspect globally installed npm packages for the same issues. The tool distinguishes itself by offering multiple modes of operation. It can automatically update all outdated dependencies to their latest versions without interaction, suitable for automated scripts. Alternatively, it provides an interactive terminal interface that lets users review and

    Allows filtering audits to only production or only development dependencies.

    JavaScript
    Vezi pe GitHub↗6,643
  • ondrajz/go-callvisAvatar ondrajz

    ondrajz/go-callvis

    6,488Vezi pe GitHub↗

    Visualize call graph of a Go program using Graphviz

    Filters call graphs by import path to focus on application-level interactions and reduce visual noise.

    Goawesome-gocallgraphgolang
    Vezi pe GitHub↗6,488
  • mockk/mockkAvatar mockk

    mockk/mockk

    5,747Vezi pe GitHub↗

    MockK is a Kotlin test double framework that creates mocks, spies, and relaxed mocks for unit testing, with support for final classes, static methods, and coroutines. It functions as a bytecode instrumentation library that modifies compiled class files at load time to intercept constructors, final methods, and static functions without source changes, and also provides dedicated libraries for constructor mocking and coroutine mocking. The framework is designed specifically for Kotlin, handling Kotlin-specific constructs like extension functions, singletons, and suspend functions. MockK disting

    Manages mock lifecycle within lexical scopes, automatically clearing interactions after scope exit.

    Kotlinargument-matcherschain-callshacktoberfest
    Vezi pe GitHub↗5,747
  • snyk/snykAvatar snyk

    snyk/snyk

    5,586Vezi pe GitHub↗

    Snyk is an application security testing platform designed to identify and remediate vulnerabilities across source code, open-source dependencies, container images, and infrastructure-as-code configurations. It functions as a comprehensive security workflow automation tool, utilizing a static analysis engine and dependency graph mapping to detect security flaws and license compliance issues throughout the software development lifecycle. The platform distinguishes itself through agentic workflow orchestration and an automated remediation pipeline that generates and submits pull requests to patc

    Configures scanning behavior to include or exclude development-specific packages when evaluating project security and compliance.

    TypeScript
    Vezi pe GitHub↗5,586
  • kaisery/trpl-zh-cnAvatar KaiserY

    KaiserY/trpl-zh-cn

    5,501Vezi pe GitHub↗

    Acest proiect este o resursă educațională localizată pentru învățarea limbajului de programare Rust, oferind un ghid cuprinzător și specificații tehnice traduse în chineză simplificată. Servește ca instrument de instruire pentru studierea idiomurilor limbajului, gestionarea memoriei și sistemele de tipuri. Repository-ul se concentrează pe localizarea documentației software, convertind ghidurile oficiale în chineză simplificată pentru a crește accesibilitatea pentru vorbitorii non-nativi de engleză. Utilizează un sistem bazat pe markdown pentru a organiza conținutul și suportă exportul în formate multiple către HTML static, PDF și EPUB pentru vizualizare web și offline. Conținutul acoperă o gamă largă de domenii tehnice Rust, inclusiv primitive de gestionare a memoriei precum ownership și borrowing, design avansat de limbaj implicând traits și generics, și strategii cuprinzătoare de gestionare a erorilor. De asemenea, detaliază fundamentele programării, modelarea datelor și utilizarea instrumentelor de productivitate pentru dezvoltatori pentru gestionarea build-urilor și a dependențelor.

    Rust controls the visibility of names and paths using a module system to prevent naming conflicts.

    Markdownpdfrust-booktypst
    Vezi pe GitHub↗5,501
  • burrowers/garbleAvatar burrowers

    burrowers/garble

    5,308Vezi pe GitHub↗

    Garble is an obfuscation tool for Go binaries. It transforms compiled Go programs by hashing identifiers, package paths, and filenames into short, opaque strings, making reverse engineering more difficult. The tool produces reproducible results from identical source and a user-supplied seed, enabling verifiable builds. Obfuscation can be restricted to only those packages that match user-defined patterns, leaving other parts of the codebase untouched. Constant string literals in the binary are replaced with runtime-resolved expressions to hide their original content. The tool integrates direct

    Restricts obfuscation to packages matching user-defined name patterns.

    Gobinarybuildcode-obfuscator
    Vezi pe GitHub↗5,308
  • apache/mavenAvatar apache

    apache/maven

    5,161Vezi pe GitHub↗

    Maven este un instrument de automatizare a build-ului Java și un orchestrator de build software. Funcționează ca un manager de ciclu de viață al proiectului și sistem de gestionare a dependențelor, folosind un model de obiect al proiectului (POM) standardizat pentru a compila, testa și împacheta proiecte Java. Proiectul se distinge printr-un ciclu de viață al build-ului bazat pe faze și un model de extensie bazat pe plugin-uri, permițând utilizatorilor să lege obiective personalizate de etape specifice ale build-ului. Coordonează software-ul complex prin orchestrarea proiectelor multi-modul și asigură un flux de lucru reproductibil prin neutralizarea variabilelor de mediu și controlul versiunilor de toolchain. Capabilitățile sale acoperă gestionarea cuprinzătoare a dependențelor, inclusiv rezolvarea dependențelor tranzitive și publicarea artefactelor în repository-uri remote. Sistemul oferă, de asemenea, generarea de proiecte prin template-uri și generarea de documentație detaliată pentru producerea referințelor API și a site-urilor de proiect. Instrumentul include o interfață de linie de comandă (CLI) cu completare automată și suportă execuția build-ului offline folosind un cache local de artefacte.

    Controls the visibility and transitivity of dependencies based on the build stage, such as test or runtime.

    Javaapache-mavenbuild-managementhacktoberfest
    Vezi pe GitHub↗5,161
  • effector/effectorAvatar effector

    effector/effector

    4,837Vezi pe GitHub↗

    Effector is a reactive state management library designed for building complex, event-driven applications. It functions as a data flow engine that models application logic as a directed acyclic graph, ensuring that state updates propagate automatically through interconnected nodes. By utilizing atomic state updates and declarative unit composition, the library maintains data consistency and provides a predictable execution model for managing application state. The project distinguishes itself through its framework-agnostic architecture, which decouples business logic from user interface implem

    Scopes state and effects to specific execution contexts to support parallel testing and server-side rendering.

    TypeScriptbusiness-logiceffectorevent-driven
    Vezi pe GitHub↗4,837
  • hahwul/dalfoxAvatar hahwul

    hahwul/dalfox

    4,846Vezi pe GitHub↗

    Dalfox is an automated web application security tool specifically designed for discovering and verifying cross-site scripting vulnerabilities. It functions as an XSS vulnerability scanner that analyzes HTTP parameters and DOM structures to identify reflected, stored, and blind injection points. The project distinguishes itself by providing a Model Context Protocol server and a REST API, allowing artificial intelligence agents and remote interfaces to trigger and manage security scans programmatically. It utilizes a payload mutation engine and fingerprinting strategies to execute WAF evasion t

    Allows excluding specific parameters, URL patterns, or domains to maintain a strict scanning scope.

    Gobugbountybugbounty-toolcicd-pipeline
    Vezi pe GitHub↗4,846
  • xcodesorg/xcodesAvatar XcodesOrg

    XcodesOrg/xcodes

    4,694Vezi pe GitHub↗

    xcodes este un utilitar de linie de comandă pentru administrarea toolchain-ului macOS, conceput special pentru instalarea și gestionarea mai multor versiuni de Xcode. Acesta automatizează procesul de descoperire a versiunilor disponibile, descărcarea versiunilor specifice ale mediului de dezvoltare și configurarea runtime-urilor pentru dispozitive asociate. Instrumentul gestionează ciclurile de viață ale software-ului permițând utilizatorilor să comute între versiunile active prin actualizarea link-urilor simbolice și să gestioneze instalările locale prin identificarea și eliminarea versiunilor specifice. Acesta gestionează accesul securizat la serverele de descărcare prin stocarea și ștergerea credențialelor Apple ID în keychain-ul sistemului. Utilitarul include capabilități de filtrare a software-ului disponibil după arhitectura procesorului și generarea de scripturi de completare pentru shell, pentru a accelera interacțiunea în linia de comandă.

    Filters available software releases based on the system's processor architecture.

    Swifthacktoberfestmacosswift
    Vezi pe GitHub↗4,694
Înapoi12Înainte
  1. Home
  2. DevOps & Infrastructure
  3. Dependency Management
  4. Environment and Scoping Controls
  5. Dependency Scoping

Explorează sub-etichetele

  • Dependency Confusion MitigatorsTechniques for routing internal package requests to private sources to prevent public registry hijacking. **Distinct from Dependency Scoping:** Distinct from Dependency Scoping: focuses specifically on preventing dependency confusion attacks rather than general visibility scoping.
  • Execution Context IsolationMechanisms to isolate service instances within specific execution flows to prevent data leakage. **Distinct from Dependency Scoping:** Focuses on preventing data leakage between different concurrent execution flows (e.g. requests) rather than just module-level visibility.
  • Hierarchical Scopes3 sub-tag-uriDependency containers organized in a tree structure where children inherit services from parent ancestors. **Distinct from Dependency Scoping:** Focuses on the recursive inheritance tree of scopes rather than simple visibility restrictions.
  • Package Scope Filtering5 sub-tag-uriFiltering logic to include or exclude dependencies based on organization scopes or wildcards. **Distinct from Dependency Scoping:** Focuses on naming scopes (e.g., @org/package) in dependency manifests, not execution context scoping.
  • Protocol-Based Dependency DeclarationsDeclaring required dependencies in a protocol that each RIB must satisfy, then implementing them in a component class. **Distinct from Dependency Scoping:** Distinct from Dependency Scoping: focuses on declaring dependencies via protocols rather than restricting visibility to modules.
  • Scanning ExclusionsConfigures scanning behavior to include or exclude development-specific packages when evaluating project security. **Distinct from Scan-Scoped Exclusions:** Distinct from Dependency Scoping: focuses on scan-time configuration for security analysis rather than general dependency visibility.