Awesome GitHub RepositoriesPackage Scope Filtering

Lerna is a monorepo management tool, build orchestrator, and package publisher for JavaScript and TypeScript projects. It enables the management of multiple packages within a single shared repository, providing utilities for workspace organization and the coordinated publishing of packages to a registry. The tool distinguishes itself through dependency-aware task orchestration and automated version management. It uses topological sorting to sequence tasks and utilizes content-hash caching to skip redundant executions when input files remain unchanged. Versioning is automated by parsing standa

Homebridge is a Node.js home automation server that acts as a bridge to expose non-native smart home devices to Apple HomeKit. It functions as a plugin-based framework that maps proprietary device APIs to standardized home automation services and protocols. The system utilizes a modular plugin architecture and a protocol emulation layer to make third-party hardware appear as native accessories. It further supports cross-platform compatibility by acting as a Matter device bridge, allowing Matter-standard hardware to connect to various home automation controllers. The software includes a web i

npm-check-updates is a command line utility and package version manager used to find and apply newer versions of dependencies within npm package manifests. It functions as a dependency version validator that identifies outdated packages and updates version strings in the project manifest to the latest available releases. The tool features an interactive CLI for selecting specific packages to upgrade through a prompt-based interface. It distinguishes itself by enforcing version cooldown periods to restrict the adoption of very recent releases and providing a mechanism to iteratively install up

npm-check-updates is a command line utility and programmatic module used to check for newer versions of npm packages and update project manifest files. It functions as a registry client and semantic version manager that upgrades package constraints to the latest releases. The tool distinguishes itself by including supply chain security features, such as a release cooldown period and package ownership tracking, to prevent the adoption of unstable or malicious new releases. It also provides a programmatic API for integrating dependency checks and upgrades directly into custom scripts. Broad ca

Glide is a Go dependency management tool that fetches, pins, and vendors external packages to enable reproducible builds across environments. It stores project-specific copies of Go packages in a vendor directory, isolating dependencies per project to avoid version conflicts, and supports fetching packages from Git, Mercurial, Bazaar, and Subversion repositories. The tool resolves dependency versions using semantic versioning ranges and operators, and generates a lock file that records exact commit IDs for all transitive dependencies. Glide distinguishes itself with an interactive version wiz

SimianArmy is a chaos engineering framework and resilience testing tool designed to induce random infrastructure failures in cloud environments. It functions as a cloud instance termination tool that simulates unplanned outages to verify that distributed architectures maintain high availability and fault tolerance. The system identifies and terminates cloud server instances to ensure applications can tolerate unexpected hardware failures without interrupting service. This process allows for the verification of automated failover mechanisms and the identification of weaknesses in system reliab

reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the discovery, mapping, and monitoring of external digital assets. It operates as a modular tool-chain pipeline that coordinates a sequence of security tools to perform intelligence gathering and vulnerability scanning. The project distinguishes itself through a cloud-native deployment model that parallelizes scanning workloads across a fleet of remote VPS instances to bypass local resource constraints. It utilizes container-based environment isolation to ensure consistent executio

Dependency-cruiser 是一个 JavaScript 和 TypeScript 依赖分析器及架构检查工具。它作为一种静态分析工具，用于在无需执行代码的情况下映射、可视化和验证代码库中的模块关系。 该项目的特色在于能够通过基于规则的系统强制执行架构边界。它能检测循环依赖、识别孤立模块和死代码，并使用允许和禁止关系规则来验证依赖约束。它还通过计算传入和传出耦合来提供定量稳定性分析，以识别项目中的脆弱区域。 该工具涵盖了广泛的功能，包括针对 ES6、CommonJS 和 TypeScript 的多标准模块解析，以及带有文件夹级聚合的依赖图可视化。它为持续集成提供了自动化功能，例如违规基准测试以及 JSON 或 CSV 格式的结构化数据导出。 该系统包含一个交互式项目配置引导程序，可根据本地环境生成定制的配置文件。

npm-check is a command-line tool that audits a project's npm dependencies, comparing local package versions against the npm registry to identify outdated, unused, or incorrect entries. It scans both package.json and node_modules, and can also inspect globally installed npm packages for the same issues. The tool distinguishes itself by offering multiple modes of operation. It can automatically update all outdated dependencies to their latest versions without interaction, suitable for automated scripts. Alternatively, it provides an interactive terminal interface that lets users review and

Visualize call graph of a Go program using Graphviz

Garble is an obfuscation tool for Go binaries. It transforms compiled Go programs by hashing identifiers, package paths, and filenames into short, opaque strings, making reverse engineering more difficult. The tool produces reproducible results from identical source and a user-supplied seed, enabling verifiable builds. Obfuscation can be restricted to only those packages that match user-defined patterns, leaving other parts of the codebase untouched. Constant string literals in the binary are replaced with runtime-resolved expressions to hide their original content. The tool integrates direct

Dalfox is an automated web application security tool specifically designed for discovering and verifying cross-site scripting vulnerabilities. It functions as an XSS vulnerability scanner that analyzes HTTP parameters and DOM structures to identify reflected, stored, and blind injection points. The project distinguishes itself by providing a Model Context Protocol server and a REST API, allowing artificial intelligence agents and remote interfaces to trigger and manage security scans programmatically. It utilizes a payload mutation engine and fingerprinting strategies to execute WAF evasion t

xcodes 是一个用于 macOS 工具链管理的命令行实用程序，专门用于安装和管理多个 Xcode 版本。它自动化了发现可用版本、下载特定版本的开发环境以及配置相关设备运行时的过程。 该工具通过符号链接更新在活动版本之间切换，并通过识别和删除特定版本来管理本地安装，从而管理软件生命周期。它通过将 Apple ID 凭据存储在系统钥匙串中来处理对下载服务器的安全访问。 该实用程序包括按处理器架构过滤可用软件以及生成 shell 补全脚本以加速命令行交互的功能。

Gox 是一个跨平台构建自动化工具和命令行工具，专为 Go 语言的交叉编译而设计。它作为工具链管理器，负责构建和配置针对不同硬件平台所需的编译工具和标志。 该系统自动化了针对不同操作系统和架构所需的汇编器和链接器的设置、安装和配置。它利用自定义命名模板和链接器标志，并行生成多个平台的二进制可执行文件，以准备软件发布。 该工具提供了使用包含和排除模式进行目标平台过滤的功能，并允许通过环境变量覆盖构建设置。它还支持发现可用的操作系统和架构组合。

Dynaconf is a configuration management library for Python applications that provides a unified system for loading, validating, and managing settings. It aggregates configuration data from multiple files, environment variables, and external stores into a single object using a defined precedence order. The project distinguishes itself through a layered environment manager that separates settings into distinct profiles, such as development and production. It includes a declarative validation framework to enforce data rules and type constraints during the loading process, as well as an external s

Taze is a dependency update automator and monorepo dependency manager that detects newer package versions and updates manifest files. It functions as a CI dependency validator, returning error codes when outdated dependencies are detected to fail continuous integration pipelines. The tool features a release stability filter to defer updates based on a minimum release age and a version constraint controller to manage major, minor, and patch update ranges with custom bumping modes. It supports workspace-wide manifest scanning across multiple subdirectories and provides dependency filtering via

Arachni is a dynamic application security testing vulnerability scanner and web application security tool. It functions as a distributed web audit framework that performs active and passive audits to identify security flaws such as SQL injection and cross-site scripting. The project features a JavaScript-aware web crawler that executes scripts and monitors DOM changes to analyze modern dynamic web applications. It utilizes server platform fingerprinting to target compatible security payloads and provides a grid-based system to distribute scanning workloads across multiple nodes. The tool cov

Nilaway is a static analysis tool and linter plugin for Go designed to identify potential nil pointer dereferences in source code to prevent runtime panics. It functions as an inter-procedural pointer analyzer that tracks data flow across functions and packages to detect memory safety issues. The tool differentiates itself by tracking pointer states through anonymous functions, closures, and struct initializations. It employs a pointer analysis framework that monitors how values flow through a program to determine if a variable is safe to dereference at a specific point. The analyzer can be

Moon is a monorepo build system and task runner designed to orchestrate complex projects with multiple packages. It functions as a dependency graph orchestrator that executes build targets in topological order and utilizes input hashing to cache results and skip redundant work. The project features a polyglot toolchain manager that automates the installation and versioning of language runtimes and CLI tools to ensure environment consistency. It also includes a plugin framework based on WebAssembly, allowing developers to extend build logic and toolchain behavior using any supported language.

This project is an integrated spelling validation tool designed for source code and documentation. It functions as an editor extension that identifies and highlights spelling errors within comments, strings, and programming identifiers, providing real-time feedback and correction suggestions directly within the development environment. The tool distinguishes itself through its ability to parse complex naming conventions, such as camelCase and snake_case, into individual components for accurate validation. It operates as an offline-first engine, ensuring that all text analysis and dictionary l