Awesome GitHub RepositoriesPattern Matching Engines

Gitleaks is a security scanning engine designed to identify hardcoded credentials, API keys, and other sensitive information within version control systems and local file structures. It functions as a static analysis tool that automates the detection of secrets, helping to prevent the accidental exposure of sensitive data during the development lifecycle. The tool distinguishes itself through its ability to perform deep forensic analysis of git history, allowing users to audit entire project timelines or enforce security gates within continuous integration pipelines. It supports complex detec

Joi is a JavaScript data validation library used to define schemas that validate, cast, and sanitize data objects. It functions as an object schema validator and parser, ensuring that input data matches specific types and formats before it is processed by an application. The library features a conditional validation engine capable of dynamic schema enforcement, where validation logic and dependencies change based on the values of other keys within an object. It also serves as a data casting and sanitization tool, transforming input values into target types and removing sensitive keys from the

node-uuid is a JavaScript library for generating and validating universally unique identifiers that comply with the RFC 4122 standard. It provides a utility for creating random, timestamp-based, or namespace-based identifiers within a Node.js environment. The library includes tools for detecting the specific standard version of a provided identifier and transforming identifiers between different versions. It also provides a command line utility for generating identifiers directly from the terminal. The project covers binary manipulation, including parsing strings into byte arrays and stringi

RapidJSON is a header-only C++ library designed for high-performance parsing, generation, and manipulation of JSON data. It functions as a dual-mode engine, providing both an in-memory document object model for tree-based manipulation and a stream-based interface for event-driven processing. The library is built to minimize memory footprint and maximize execution speed, making it suitable for resource-constrained environments. The library distinguishes itself through advanced memory management and optimization techniques, including in-situ parsing that modifies input buffers directly to elimi

Ajv is a high-performance data validation framework that compiles JSON schemas into optimized, standalone JavaScript functions. By transforming declarative schema definitions into executable code, it eliminates runtime interpretation overhead and provides a secure, efficient way to enforce data integrity across both browser and server environments. The library distinguishes itself through its focus on performance and type safety. It employs advanced compilation techniques, including abstract syntax tree optimization and function caching, to ensure rapid validation. Beyond standard checks, it

Git-secrets is a security utility designed to prevent the accidental exposure of sensitive credentials by integrating automated scanning directly into the version control commit lifecycle. It functions as a commit scanner that evaluates staged files and commit messages against defined security policies before changes are finalized in a repository. The tool utilizes regular expression pattern matching to identify potential secrets and supports the registration of custom patterns to address specific organizational security requirements. To manage operational friction, it includes mechanisms for

This PHP library provides tools for generating and validating universally unique identifiers according to RFC 4122 standards. It implements a generation tool for creating version 1, 3, 4, and 5 identifiers, as well as sequential and Nil UUIDs. The library features specialized capabilities for transforming identifiers between hexadecimal strings, binary bytes, integers, and date objects. It supports the generation of sequential identifiers to improve database indexing and storage performance, as well as deterministic name-based identifiers using MD5 or SHA-1 hashing. The project includes a va

CrowdSec is a collaborative, distributed security engine designed for threat detection and infrastructure protection. It functions as an intrusion detection system that parses logs and network traffic to identify malicious patterns, utilizing a bucket-based threshold detection model to aggregate events and trigger alerts. The platform is built on a modular architecture that includes a centralized local API server for managing security signals and a relational database for persistent storage of remediation decisions. What distinguishes the project is its decoupled enforcement model, which offl

This project provides a custom rule set and configuration profiles for content processing tools. It consists of declarative rules and JSON-based configurations that define how a target application identifies and handles specific types of data. The system enables dynamic tool configuration by injecting external logic at runtime, removing the need for core system recompilation. These configurations use schema-validated rule sets to ensure structural integrity and prevent errors during processing. The project implements pattern-based data identification using regular expressions and a priority-

Airtest is a cross-platform UI automation framework that enables test scripts to run on Android, iOS, and Windows devices without platform-specific modifications. It combines image recognition with control hierarchy traversal to locate and interact with on-screen elements, supporting automation even when source code or UI metadata is unavailable. The framework provides a cloud-based test orchestrator that schedules test cases, manages device clusters, and generates detailed HTML reports with screen recordings after execution. It includes a command-line test runner for headless execution in CI

YARA is a pattern matching engine and binary analysis tool used to identify and classify malware samples. It functions as a malware research framework that allows for the definition of file descriptions and detection rules to find indicators of compromise within binaries. The system enables the creation of custom detection rules using strings, wildcards, and regular expressions. These rules use boolean logic to match textual or binary patterns, allowing for the classification of files into specific malware families and the automation of threat intelligence. The engine utilizes Aho-Corasick s

DevToysMac is a native macOS developer utility suite designed to encode, decode, and transform common data formats. It serves as a centralized tool suite for formatting and converting developer data into human-readable or machine-compatible strings. The application provides a set of tools for developer data manipulation, including JSON validation and formatting, Base64 encoding and decoding, and URL encoding and decoding. It also includes a text manipulation toolkit for cleaning up configuration files and developer logs through common string operations. The software is built as a SwiftUI des

Any-rule is a multi-platform regular expression tool that provides a curated catalog of over 70 ready-to-use patterns for validating and extracting common data formats. The project separates its static regex collection from editor-specific plugins, allowing the same pattern library to be accessed through VS Code, IntelliJ IDEA, Alfred Workflow, and a web interface. The tool enables keyword-based pattern retrieval, letting users search for the correct regex by typing descriptive terms rather than remembering exact syntax. It covers a broad range of validation needs including email addresses, U

pyWhat is a Python-based data extraction tool designed to scan files and text for sensitive identifiers, credentials, and network artifacts using regular expressions. It functions as a pattern matching engine and PII scanner capable of identifying personal identifiers and sensitive data patterns across directories and binary files. The project specializes in the identification of unknown data formats through file signatures and the extraction of high-value identifiers, such as URLs, IP addresses, and phone numbers, from network capture files. It utilizes a rarity-based filtering system and sp

PasteMD is a clipboard-based document processor and productivity tool designed to convert Markdown or HTML content into formatted office documents. It transforms markup and mathematical formulas from the clipboard into rich text for direct insertion into word processors and spreadsheets. The system functions as a style orchestrator, using reference documents and templates to apply specific fonts, colors, layouts, and margins to the converted text. This allows for the customization of output appearances to match specific document requirements. The tool handles technical document composition b

AntiZhaPian is a social engineering framework and fraud simulation application. It generates fake security center dashboards and anti-fraud interfaces designed to deceive users into believing that official security software is installed. The project functions as a simulation tool that mimics the visual appearance and behavior of anti-fraud applications. It uses template-based rendering and state-driven UI simulation to create synthetic dashboards with dynamic dates and fake status indicators. The application includes a user profile management interface for viewing and updating personal accou