Awesome GitHub RepositoriesGit Source Management

EmDash is an open-source content management system built on Astro that combines a visual admin panel with a plugin-driven architecture and server-side rendering. It provides a complete content management system with structured content modeling, a rich text editor using Portable Text format, and a TypeScript API for type-safe content queries. The system supports authentication through passkeys, OAuth 2.1, and external providers, with role-based access control and fine-grained permission scopes. What distinguishes EmDash is its plugin development framework, which supports both native plugins ru

Flux is a Kubernetes GitOps delivery tool used to automate application deployments by synchronizing cluster state with configurations stored in Git, OCI, or Helm repositories. It functions as a set of controllers that monitor desired state in external sources and continuously reconcile the live cluster to match those definitions. The system distinguishes itself through a multi-cluster management plane that coordinates application delivery across fleets of remote clusters from a central hub. It provides a dedicated mechanism for automated image updates, which scans container registries for new

MISP is an open-source threat intelligence sharing platform designed for collecting, storing, and distributing structured threat indicators and intelligence. At its core, it provides a distributed synchronization protocol for transferring events between instances, an attribute-based correlation engine that links matching indicators across events, and a REST API with an OpenAPI specification for programmatic access to threat data. The platform uses formal data formats for JSON, taxonomy, galaxy, and object templates to enable compatibility across tools and communities. The platform distinguish

SWIG is a tool that generates wrapper code to expose C and C++ libraries to a wide range of higher-level programming languages. It reads annotated C/C++ header files and produces language-specific bindings from a single interface definition, supporting languages such as Python, Java, Ruby, C#, Perl, and many others. The generated wrapper code is free from the project's GPL license, allowing users to distribute it under their own terms. The tool handles modern C++ features including templates, namespaces, smart pointers, and constructs up to C++20 through specialized parsing and code generatio

CVXPY is a Python-embedded domain-specific language for modeling and solving convex optimization problems using natural mathematical syntax. It is built on a disciplined convex programming framework that automatically enforces convexity rules, ensuring that problems formulated by the user are valid for convex solvers. The project also functions as a multi-solver optimization interface, abstracting away backend details and dispatching problems to specialized solvers like ECOS, SCS, and Gurobi without manual configuration. Beyond standard convex optimization, CVXPY extends its reach to geometri

Highly scalable realtime pub/sub and RPC framework

CUE is a constraint-based configuration language designed for data validation, schema definition, and code generation. At its core, it unifies types and values into a single concept, enabling compile-time validation that catches structural and value errors before runtime. The language treats data and constraints as the same thing, allowing a single definition to serve as both a schema and concrete configuration data. CUE distinguishes itself through its constraint-based unification engine, which combines multiple configuration sources into a single coherent result by merging their constraints

QOwnNotes is a desktop note editor that stores each note as a plain-text Markdown file on the local filesystem, avoiding proprietary formats and enabling direct file access. It functions as a Nextcloud Notes client, syncing notes and metadata with Nextcloud or ownCloud servers through a companion API service for versioning and sharing. The application also integrates with AI providers and exposes a local MCP server for external agents to search and fetch notes, and includes a companion browser extension for capturing web content, bookmarks, and screenshots. The editor distinguishes itself thr

Tilix is a tiling terminal emulator for Linux that uses GTK+ 3 widgets for native desktop integration and theming. It arranges multiple terminal sessions in a resizable grid layout, allowing users to split the window into several panes simultaneously. The application is built on the VTE terminal emulation engine and uses the Meson build system for compilation. The terminal supports synchronized input broadcasting, where keystrokes typed in one pane are replicated to all grouped terminals via D-Bus inter-process communication. It also offers a Quake-style drop-down mode that slides a terminal

TechXueXi is an automated learning tool designed to complete daily tasks and quizzes on a political education platform, earning points without manual intervention. It combines headless browser automation with human-like behavior simulation, randomizing user-agent strings and mimicking interaction patterns to avoid detection during automated sessions. The tool is built as a Python script that can run directly from source code after installing dependencies and a browser driver, or be deployed inside a Docker container for persistent, 24/7 operation on servers, VPS, or NAS devices. It supports c

NGINX Unit is an open-source application server designed to natively execute code across multiple programming language runtimes and WebAssembly within a single process. It serves as a multi-language application server that can run applications written in Go, Java, Node.js, Perl, PHP, Python, Ruby, and WebAssembly side by side, without requiring separate runtime environments for each language. The server distinguishes itself through a RESTful JSON control API that enables dynamic, zero-downtime configuration changes without restarting the server. It combines event-driven asynchronous I/O with

fswatch is a cross-platform file change monitor that watches files and directories for modifications using the native event API of each operating system. It functions as a multi-backend file watcher library that selects from platform-specific backends such as inotify, kqueue, and FSEvents, with a polling fallback when no native API is available. The tool groups multiple file changes into a single event batch and triggers one command per batch, while also executing user-specified commands each time monitored files or directories are modified. The project applies include, exclude, event-type, a

Phpbrew is a PHP version manager and build tool used to compile and manage multiple versions of PHP from source within a local user directory. It provides a self-contained development environment that allows for installing and switching between different language versions without requiring root access. The system distinguishes itself by using a variant-driven build configuration, allowing users to compile binaries with specific feature sets, flags, and custom configuration options. It also functions as an extension manager that downloads, compiles, and activates third-party extensions from re

Opal 是一个策略分发引擎和实时授权数据同步器。它作为管理平面，用于在微服务架构中部署和监控分布式策略引擎（如 OPA 和 Cedar）。该项目集中管理策略和数据，同时部署去中心化的决策点。 该系统通过将通过版本控制管理的策略代码与从外部数据库和 API 检索的授权数据解耦而脱颖而出。它使用基于发布/订阅的状态分发模型，通过 WebSocket 和 Webhook 将即时更新推送到代理，确保去中心化代理在不依赖定期轮询的情况下保持同步状态。 该平台涵盖了广泛的功能，包括通过作用域分发实现的多租户策略隔离、带存活探针的代理健康监控，以及将策略引擎作为 Sidecar 部署的编排。它还提供了用于支持离线操作的本地缓存机制，以及使用签名令牌的安全客户端身份验证。 管理服务器可作为容器部署，或使用包管理器部署在 Kubernetes 集群中。

Mercure 是一个基于 HTTP 的消息代理和实时发布/订阅服务器，用于将异步数据更新路由给授权订阅者。它作为一个中心枢纽，通过标准 HTTP 请求接收数据，并使用服务器发送事件（SSE）协议将其广播给 Web 客户端。 该项目的特色在于用单向 HTTP 连接取代了 WebSocket，利用 HTTP/2 和 HTTP/3 实现多路复用、低延迟交付。它实现了使用 JSON Web Token（JWT）和 JSON Web Signature（JWS）的安全访问控制层，以验证发布者和订阅者的身份，并支持通过 JSON Web Encryption（JWE）进行端到端载荷加密。 该系统涵盖了用于事件驱动架构的高可用性集群和水平扩展，包括在客户端断开连接后协调丢失更新的事件历史恢复。其运维层面包括性能监控、客户端在线状态跟踪和请求限流。 该枢纽可作为自托管二进制文件部署，也可部署在 Kubernetes 等容器化环境中，或通过托管配置服务进行部署。

该项目是一个参考实现和教程，旨在演示构建、版本化和上传 Python 分发包的端到端工作流。它作为一个具体的项目模板和示例，用于配置包索引的元数据和构建产物。 该仓库演示了如何通过在静态配置文件中定义项目元数据和依赖项来打包软件。它涵盖了将源代码树转换为版本化归档文件和特定平台二进制分发包的过程，特别展示了如何构建二进制 wheel 和源代码分发包。 该项目涵盖了更广泛的功能领域，包括依赖管理、命令行界面创建以及向仓库发布发布的自动化。它还演示了隔离虚拟环境的使用和二进制扩展的集成。

rsync is a file synchronization and transfer tool that copies data between local and remote systems by sending only the differences between source and destination files. It computes matching blocks using checksums, so only the unmatched portions of files are transmitted, making repeated synchronizations much faster than full copies. The tool preserves file metadata such as ownership, permissions, and modification times during transfers. rsync supports multiple transfer methods, including direct connections through a dedicated daemon mode or via remote shells like SSH. It can mirror directory

Remacs 是用 Rust 实现的 Emacs 文本编辑器重写版。它是一个可编程且可扩展的文本编辑器，旨在提高内存安全性和执行性能。 该项目包含一个原生接口，将 C 库函数和结构映射到 Rust 以执行原生逻辑。它使用原生系统 API 进行跨平台图形界面渲染。 该编辑器提供实时文本编辑，并支持开发自定义输入法和语言词典。开发过程利用容器化环境来确保构建依赖项和工具链的一致性。

ruby-build 是一个适用于类 Unix 系统的 Ruby 版本安装程序和构建工具。它管理从源代码下载、编译和安装多个 Ruby 语言版本的过程。 该工具利用定义文件将版本号映射到下载 URL 和安装说明。它支持自定义构建定义，允许将包下载重定向到镜像 URL，并对下载的源代码存档应用基于校验和的完整性验证。 该工具提供自定义 Ruby 编译功能，包括应用源代码补丁以及通过环境变量配置构建参数。它允许用户浏览可用版本并自动化特定版本的获取与编译。

RubyGems 是 Ruby 语言的包管理器，用作打包、分发和安装库及软件扩展的工具。它作为一个依赖解析器和注册表客户端，管理所需库及其递归依赖项的安装，以确保开发和生产环境的一致性。 该系统处理完整的包生命周期，包括构建可分发的归档文件、编译用于高性能系统集成的原生 C 扩展，以及向注册表发布稳定或预发布版本。它提供了一个安全框架，包括加密包签名、用于发布的多因素身份验证，以及用于协作包所有权和组织管理的基于角色的访问控制。 广泛的能力涵盖了通过项目特定目录进行环境隔离、通过清单文件进行版本锁定以保证可重现的构建，以及运行时加载路径操作。该工具集还包括注册表管理功能，如私有仓库托管、远程源镜像和 API 请求限流。 命令行界面提供了用于 API 密钥管理、已安装包检查以及库内置文档查看器的工具。