Awesome GitHub RepositoriesDependency Scoping

Kotlin is a statically typed, general-purpose programming language designed for type safety and concise syntax. It functions as a cross-platform development toolkit that enables the sharing of business logic across mobile, web, and server-side environments by compiling a unified intermediate representation into platform-specific machine code, bytecode, or source code. The project distinguishes itself through a multi-target build orchestration model that manages complex compilation units and hierarchical source sets. Developers can define common interface logic that is satisfied by platform-sp

Lerna is a monorepo management tool, build orchestrator, and package publisher for JavaScript and TypeScript projects. It enables the management of multiple packages within a single shared repository, providing utilities for workspace organization and the coordinated publishing of packages to a registry. The tool distinguishes itself through dependency-aware task orchestration and automated version management. It uses topological sorting to sequence tasks and utilizes content-hash caching to skip redundant executions when input files remain unchanged. Versioning is automated by parsing standa

Homebridge is a Node.js home automation server that acts as a bridge to expose non-native smart home devices to Apple HomeKit. It functions as a plugin-based framework that maps proprietary device APIs to standardized home automation services and protocols. The system utilizes a modular plugin architecture and a protocol emulation layer to make third-party hardware appear as native accessories. It further supports cross-platform compatibility by acting as a Matter device bridge, allowing Matter-standard hardware to connect to various home automation controllers. The software includes a web i

npm-check-updates is a command line utility and package version manager used to find and apply newer versions of dependencies within npm package manifests. It functions as a dependency version validator that identifies outdated packages and updates version strings in the project manifest to the latest available releases. The tool features an interactive CLI for selecting specific packages to upgrade through a prompt-based interface. It distinguishes itself by enforcing version cooldown periods to restrict the adoption of very recent releases and providing a mechanism to iteratively install up

npm-check-updates is a command line utility and programmatic module used to check for newer versions of npm packages and update project manifest files. It functions as a registry client and semantic version manager that upgrades package constraints to the latest releases. The tool distinguishes itself by including supply chain security features, such as a release cooldown period and package ownership tracking, to prevent the adoption of unstable or malicious new releases. It also provides a programmatic API for integrating dependency checks and upgrades directly into custom scripts. Broad ca

Glide is a Go dependency management tool that fetches, pins, and vendors external packages to enable reproducible builds across environments. It stores project-specific copies of Go packages in a vendor directory, isolating dependencies per project to avoid version conflicts, and supports fetching packages from Git, Mercurial, Bazaar, and Subversion repositories. The tool resolves dependency versions using semantic versioning ranges and operators, and generates a lock file that records exact commit IDs for all transitive dependencies. Glide distinguishes itself with an interactive version wiz

SimianArmy is a chaos engineering framework and resilience testing tool designed to induce random infrastructure failures in cloud environments. It functions as a cloud instance termination tool that simulates unplanned outages to verify that distributed architectures maintain high availability and fault tolerance. The system identifies and terminates cloud server instances to ensure applications can tolerate unexpected hardware failures without interrupting service. This process allows for the verification of automated failover mechanisms and the identification of weaknesses in system reliab

RIBs is a mobile architecture framework that structures applications around isolated, lifecycle-managed units of business logic called RIBs. Each RIB separates routing, business logic, and construction into distinct classes through the Router-Interactor-Builder pattern, with hierarchical dependency injection scoping dependencies per node and static analysis enforcing architectural rules at build time. The framework enforces automatic disposal of Rx subscriptions scoped to interactor lifecycles, blocking compilation when subscriptions lack proper disposal to prevent memory leaks. It supports v

reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the discovery, mapping, and monitoring of external digital assets. It operates as a modular tool-chain pipeline that coordinates a sequence of security tools to perform intelligence gathering and vulnerability scanning. The project distinguishes itself through a cloud-native deployment model that parallelizes scanning workloads across a fleet of remote VPS instances to bypass local resource constraints. It utilizes container-based environment isolation to ensure consistent executio

Dependency-cruiser 是一个 JavaScript 和 TypeScript 依赖分析器及架构检查工具。它作为一种静态分析工具，用于在无需执行代码的情况下映射、可视化和验证代码库中的模块关系。 该项目的特色在于能够通过基于规则的系统强制执行架构边界。它能检测循环依赖、识别孤立模块和死代码，并使用允许和禁止关系规则来验证依赖约束。它还通过计算传入和传出耦合来提供定量稳定性分析，以识别项目中的脆弱区域。 该工具涵盖了广泛的功能，包括针对 ES6、CommonJS 和 TypeScript 的多标准模块解析，以及带有文件夹级聚合的依赖图可视化。它为持续集成提供了自动化功能，例如违规基准测试以及 JSON 或 CSV 格式的结构化数据导出。 该系统包含一个交互式项目配置引导程序，可根据本地环境生成定制的配置文件。

npm-check is a command-line tool that audits a project's npm dependencies, comparing local package versions against the npm registry to identify outdated, unused, or incorrect entries. It scans both package.json and node_modules, and can also inspect globally installed npm packages for the same issues. The tool distinguishes itself by offering multiple modes of operation. It can automatically update all outdated dependencies to their latest versions without interaction, suitable for automated scripts. Alternatively, it provides an interactive terminal interface that lets users review and

Visualize call graph of a Go program using Graphviz

MockK is a Kotlin test double framework that creates mocks, spies, and relaxed mocks for unit testing, with support for final classes, static methods, and coroutines. It functions as a bytecode instrumentation library that modifies compiled class files at load time to intercept constructors, final methods, and static functions without source changes, and also provides dedicated libraries for constructor mocking and coroutine mocking. The framework is designed specifically for Kotlin, handling Kotlin-specific constructs like extension functions, singletons, and suspend functions. MockK disting

Snyk is an application security testing platform designed to identify and remediate vulnerabilities across source code, open-source dependencies, container images, and infrastructure-as-code configurations. It functions as a comprehensive security workflow automation tool, utilizing a static analysis engine and dependency graph mapping to detect security flaws and license compliance issues throughout the software development lifecycle. The platform distinguishes itself through agentic workflow orchestration and an automated remediation pipeline that generates and submits pull requests to patc

本项目是一个用于学习 Rust 编程语言的本地化教育资源，提供翻译成简体中文的综合指南和技术规范。它作为学习语言惯用法、内存管理和类型系统的教学工具。 该仓库专注于软件文档本地化，将官方指南转换为简体中文，以提高非英语使用者的可访问性。它利用基于 Markdown 的系统来组织内容，并支持导出为静态 HTML、PDF 和 EPUB 格式，以供 Web 和离线查看。 内容涵盖广泛的 Rust 技术领域，包括所有权和借用等内存管理原语、涉及 trait 和泛型的先进语言设计，以及全面的错误处理策略。它还详细介绍了编程基础、数据建模以及用于构建和依赖管理的开发者生产力工具的使用。

Garble is an obfuscation tool for Go binaries. It transforms compiled Go programs by hashing identifiers, package paths, and filenames into short, opaque strings, making reverse engineering more difficult. The tool produces reproducible results from identical source and a user-supplied seed, enabling verifiable builds. Obfuscation can be restricted to only those packages that match user-defined patterns, leaving other parts of the codebase untouched. Constant string literals in the binary are replaced with runtime-resolved expressions to hide their original content. The tool integrates direct

Maven 是一个 Java 构建自动化工具和软件构建编排器。它作为一个项目生命周期管理器和依赖管理系统，使用标准化的项目对象模型（POM）来编译、测试和打包 Java 项目。 该项目以基于阶段的构建生命周期和基于插件的扩展模型为特色，允许用户将自定义目标绑定到特定的构建阶段。它通过多模块项目编排来协调复杂的软件，并通过中和环境变量和控制工具链版本来确保可重复的构建工作流。 其功能涵盖全面的依赖管理，包括传递依赖解析和向远程仓库发布构件。该系统还通过模板提供项目生成，并为生成 API 参考和项目站点提供详细的文档生成功能。 该工具包含一个带有输入补全功能的命令行界面，并支持使用本地构件缓存进行离线构建执行。

Effector is a reactive state management library designed for building complex, event-driven applications. It functions as a data flow engine that models application logic as a directed acyclic graph, ensuring that state updates propagate automatically through interconnected nodes. By utilizing atomic state updates and declarative unit composition, the library maintains data consistency and provides a predictable execution model for managing application state. The project distinguishes itself through its framework-agnostic architecture, which decouples business logic from user interface implem

Dalfox is an automated web application security tool specifically designed for discovering and verifying cross-site scripting vulnerabilities. It functions as an XSS vulnerability scanner that analyzes HTTP parameters and DOM structures to identify reflected, stored, and blind injection points. The project distinguishes itself by providing a Model Context Protocol server and a REST API, allowing artificial intelligence agents and remote interfaces to trigger and manage security scans programmatically. It utilizes a payload mutation engine and fingerprinting strategies to execute WAF evasion t

xcodes 是一个用于 macOS 工具链管理的命令行实用程序，专门用于安装和管理多个 Xcode 版本。它自动化了发现可用版本、下载特定版本的开发环境以及配置相关设备运行时的过程。 该工具通过符号链接更新在活动版本之间切换，并通过识别和删除特定版本来管理本地安装，从而管理软件生命周期。它通过将 Apple ID 凭据存储在系统钥匙串中来处理对下载服务器的安全访问。 该实用程序包括按处理器架构过滤可用软件以及生成 shell 补全脚本以加速命令行交互的功能。