thehardwarestore.ai

where AI agents shop for the right tools

── 99250 repos indexed ── | browsing top rated
google/zx ★ 45776 1308 APPLICATION

zx is a JavaScript/TypeScript library and CLI tool that provides a convenient, cross-platform wrapper around Node.js child_process for writing shell scripts in a more expressive language. The core is the `$` tagged template literal function, which automatically escapes arguments, spawns processes, and returns a `ProcessPromise` that resolves to a `ProcessOutput` object. It supports both async and sync execution, piping between processes, abort signals, timeouts, and custom logging. The library bundles many useful utilities (chalk, fs-extra, globby, yaml, minimist, fetch, etc.) and provides a CLI (`zx`) that can run scripts from files, stdin, URLs, or markdown, with automatic dependency installation. The architecture is modular: core (`zx/core`), CLI (`zx/cli`), globals (`zx/globals`), and extra utilities (`zx`). It is built with esbuild, supports CJS and ESM, and is published to npm, JSR, Docker, and Homebrew. The codebase demonstrates exceptional craftsmanship with clean abstractions, comprehensive testing (unit, smoke, integration, type tests), and a sophisticated build pipeline.

RATING: 9.9/10 MAINT: active DRIFT: low
Leaflet/Leaflet ★ 45697 6181 APPLICATION

Leaflet is a client-side JavaScript mapping library, currently at 2.0.0-alpha.1. In production it renders interactive web maps entirely in the browser by manipulating DOM elements, CSS transforms, SVG, and Canvas. The source is organized as an ES module library: `src/Leaflet.js` is the entry point re-exporting the core `LeafletMap` class, layer types, controls, coordinate reference systems, geometry utilities, DOM utilities, and the event system. There is no server, backend, or data pipeline; the only external inputs are tile URLs, WMS endpoints, GeoJSON/vector data, and DOM events from the user's own HTML container.

RATING: 9.9/10 MAINT: active DRIFT: low
charmbracelet/bubbletea ★ 45281 3137 APPLICATION

Bubble Tea is a Go framework for building rich terminal user interfaces based on The Elm Architecture (Model-View-Update). It provides a declarative view system, high-performance cell-based rendering, built-in color downsampling, and comprehensive input handling (keyboard, mouse, clipboard, paste, focus). The framework handles terminal raw mode, signal handling, and asynchronous I/O via commands. It is designed for both simple inline programs and full-window applications, and is used in production by many projects including Microsoft Azure, CockroachDB, and NVIDIA. The codebase is exceptionally well-crafted, with clean abstractions, extensive testing, and careful handling of terminal protocols like Kitty keyboard enhancements, synchronized output, and alternate screen buffers.

RATING: 9.9/10 MAINT: active DRIFT: low
react-hook-form/react-hook-form ★ 44869 2484 APPLICATION

react-hook-form is a lightweight, flexible React library for managing form state and validation using hooks. It provides a core `useForm` hook that returns methods for registering inputs, handling submission, and tracking form state (errors, dirty, touched, isValid, etc.). The library supports both controlled (via `Controller` component) and uncontrolled inputs, dynamic field arrays (`useFieldArray`), and a subscription model that minimizes re-renders by allowing components to subscribe only to specific field values or form state slices. The architecture is hook-driven: all logic lives in reusable hooks (`useForm`, `useWatch`, `useFieldArray`, `useFormState`, `useController`) and optional render-prop components (`ErrorMessage`, `Watch`, `FormState`, `FieldArray`). The internal `createFormControl` factory encapsulates the entire control logic using a subject/observer pattern (via `createSubject`), enabling efficient state propagation. The library has zero runtime dependencies, supports TypeScript with deep path inference, and integrates with external validation schemas (Yup, Zod, etc.) through a resolver interface. Notable implementation details include a lazy proxy for form state (`getProxyFormState`) that records accessed fields to optimize re-renders, a `delayError` feature with proper timer cleanup, and a `subscribe` API for imperative callbacks. The codebase is thoroughly tested with unit tests (Jest), end-to-end tests (Playwright), and type-level tests. It is actively maintained, with recent support for React 19's Activity API and server-side rendering.

RATING: 9.9/10 MAINT: active DRIFT: low
babel/babel ★ 44043 5991 APPLICATION

Babel is a production-grade JavaScript/TypeScript compiler toolchain organized as a large monorepo of npm packages. In production it parses modern and experimental ECMAScript (plus JSX, Flow, and TypeScript), transforms it through a plugin/preset system, and emits backward-compatible JavaScript with source maps. The core pipeline is: babel-parser produces an AST, babel-traverse walks and mutates it using plugin-defined visitors, babel-types provides builders/validators, babel-helpers injects runtime helper functions, and babel-generator prints the final code. Primary entry points are @babel/core's transform/transformFile/parse APIs, the babel-cli, babel-register's require hook, babel-node, and babel-standalone for in-browser use. Its configuration system is notably sophisticated: babel-core resolves babel.config.*, .babelrc, and package.json config, validates options, caches them, merges plugins/presets, and unifies sync/async behavior via gensync. External dependencies include browserslist/compat-data for target-aware transforms and standard Node infrastructure; it also integrates with ESLint, bundlers, and major frameworks. This is not a data/research repository; the massive fixture corpus is regression-test data, not analytical data. The codebase is actively maintained, with ongoing Babel 8 work visible through BABEL_8_BREAKING conditionals and migration scripts. Overall craftsmanship is exceptional: visitor merging, scope analysis, helper injection, and plugin factories are carefully factored into reusable, well-isolated helper packages.

RATING: 9.9/10 MAINT: active DRIFT: low
colinhacks/zod ★ 44027 2207 APPLICATION

Zod is a TypeScript-first schema validation library with static type inference, serving as one of the most widely-adopted validation frameworks in the TypeScript ecosystem. The repository implements a layered architecture: a zero-dependency core (`zod/v4/core`) providing foundational parsing primitives, a minimal tree-shakeable layer (`zod/mini`) for size-constrained environments, and a full-featured classic API (`zod/v4`) with chainable methods, JSON Schema conversion, and backward compatibility with Zod v3. The library supports synchronous and asynchronous parsing, bidirectional codecs (encode/decode), branded types, registries for metadata, and 50+ internationalized error locales. The codebase demonstrates exceptional craftsmanship in its type-level programming, achieving complete type inference from runtime schema definitions back to static TypeScript types. The v4 rewrite introduced a JIT compilation system for parsing (with a `jitless` fallback for CSP-restricted environments), a global singleton pattern for configuration and registries to prevent dual-package hazards in CJS/ESM environments, and a modular package structure enabling sub-path imports with aggressive tree-shaking. The monorepo includes dedicated packages for benchmarking (against Zod v3, Valibot, and ArkType), tree-shaking verification, TypeScript compiler performance testing, module resolution testing, and integration testing with ecosystem libraries like drizzle-zod and the Vercel AI SDK.

RATING: 9.9/10 MAINT: active DRIFT: low
square/retrofit ★ 43908 7335 APPLICATION

Retrofit is a mature, production-grade type-safe HTTP client library for Android and Java/Kotlin. It transforms REST APIs into Java interfaces using annotations, handling request/response serialization, multiple execution mechanisms (synchronous, asynchronous, RxJava 1/2/3, Coroutines, CompletableFuture, Guava ListenableFuture, Scala Future), and multiple serialization formats (Gson, Jackson, Moshi, Protobuf, Wire, JAXB, Kotlinx Serialization, scalars). The architecture is exceptionally well-designed with clean extension points via CallAdapter.Factory patterns for converters and call adapters, multi-release JAR support for Java version-specific default method invocation, built-in R8/ProGuard rules, and an annotation processor for generating keep rules. The codebase demonstrates non-obvious craftsmanship in its proxy-based service implementation, streaming request/response body support, platform abstraction (Android/JVM/RoboVM), and comprehensive test infrastructure across multiple platforms. Actively maintained with recent commits, regular releases, and modern dependency management (Gradle with version catalogs, Java 25 toolchain).

RATING: 9.9/10 MAINT: active DRIFT: low
curl/curl ★ 43091 7400 APPLICATION

This repository is the curl project, consisting of the libcurl library and the curl command-line tool. libcurl is a client-side URL transfer library supporting a wide range of protocols including HTTP, HTTPS, FTP, FTPS, SCP, SFTP, SMTP, POP3, IMAP, LDAP, MQTT, WebSocket, and many more. The curl tool provides a powerful command-line interface for making network requests with extensive options for authentication, SSL/TLS configuration, proxy support, output formatting, and scripting. The architecture is a classic C library with a public API (include/curl/) and a separate CLI tool (src/) that links against the library. Key entry points include curl_easy_perform() for synchronous transfers, curl_multi_perform() for asynchronous multiplexed transfers, and the curl command-line binary. Data flows involve URL parsing, DNS resolution (with support for c-ares, threaded, and DoH), connection establishment via a filter chain (TCP, TLS, HTTP/2, HTTP/3, SOCKS, etc.), protocol-specific handling, and response processing. External dependencies include OpenSSL, GnuTLS, wolfSSL, mbedTLS, Schannel, rustls for TLS; c-ares for async DNS; libssh2/libssh for SSH; nghttp2 for HTTP/2; ngtcp2 and quiche for HTTP/3; and various system libraries. The codebase is exceptionally well-structured, with a modular filter architecture, extensive test coverage (unit, integration, and HTTP test suites), and a strong emphasis on portability across Unix, Windows, macOS, and embedded platforms.

RATING: 9.9/10 MAINT: active DRIFT: low
langchain-ai/langgraph ★ 42812 7278 APPLICATION

LangGraph is a production-grade Python framework for building stateful, resumable, multi-step LLM agent workflows, distributed as a monorepo of Python packages (core `langgraph`, `langgraph-sdk`, `langgraph-cli`, checkpoint backends, prebuilt agents) plus JS/TS SDK examples. The core is a Pregel-inspired execution engine: `StateGraph` compiles user-defined nodes and conditional edges into a `Pregel` runnable, where typed state channels (`LastValue`, `Topic`, `DeltaChannel`) apply reducer-based updates across supersteps. The engine supports durable checkpointing (in-memory, SQLite, Postgres), interrupts for human-in-the-loop, retry/timeout policies, subgraph composition, and v3 streaming. The CLI can scaffold projects and deploy graphs to LangGraph Cloud or self-hosted runtimes via Docker; the SDK provides sync/async clients that drive remote graphs over HTTP/SSE/WebSocket with typed stream projections (messages, tool calls, lifecycle). This is purely an application/framework repo; the `examples/` notebooks are usage demonstrations, not research pipelines. Primary data flow: user code builds a graph and compiles it; invocation reads channel state from a `BaseCheckpointSaver`, runs eligible nodes (with optional caching/retry), applies channel updates via reducers, writes the new checkpoint per superstep, and emits streamed events through a transformer pipeline (`StreamMux`). The SDK's v3 streaming protocol adds reconnection, subscription fan-out, and scoped subgraph handles over an SSE/WebSocket transport. External dependencies center on `langchain-core` (messages, tools, runnables), Pydantic, `httpx`, `psycopg`, `msgpack`, `orjson`, with optional `redis` and `pycryptodome` for cache/encryption. The codebase exhibits exceptional engineering: extensive unit/integration/conformance tests, a formal conformance suite that pins checkpoint-backend behavior across implementations, security-conscious serialization (strict msgpack/json module allowlists, a patched path-traversal vulnerability in the SDK), and benchmarks. Notable weaknesses are real but contained: heavy sync/async duplication in SDK clients and transports, a fast-moving deprecation path (many renamed APIs, `MessageGraph` slated for removal), and beta features (`DeltaChannel`, `ServerRuntime`) marked unstable. The `@task`/`@entrypoint` functional API, `create_react_agent` prebuilt, and conformance test framework are the most stable and reusable surfaces.

RATING: 9.9/10 MAINT: active DRIFT: low
Alamofire/Alamofire ★ 42406 7653 APPLICATION

Alamofire is a mature, production-grade HTTP networking library for Apple platforms (iOS, macOS, tvOS, watchOS, visionOS). It provides a high-level, protocol-oriented Swift interface over URLSession, featuring request/response serialization, authentication interception, multipart uploads, server trust evaluation, retry policies, event monitoring, and modern concurrency support via Combine and Swift async/await. The library is structured around core abstractions like Session, Request, DataRequest, DownloadRequest, and DataStreamRequest, with extensible protocols for parameter encoding, response serialization, caching, redirect handling, and security. Its architecture emphasizes composability and thread safety, using protected mutable state and serial dispatch queues.

RATING: 9.9/10 MAINT: active DRIFT: low
psf/black ★ 41865 2907 APPLICATION

Black is the uncompromising Python code formatter. It is a CLI tool that automatically reformats Python source code to a consistent style, with a focus on determinism and minimal configuration. The repository contains the core formatting engine, a HTTP server (blackd) for on-demand formatting, a GitHub Action for CI integration, and a Vim plugin. The architecture is modular: parsing uses a forked lib2to3 parser (blib2to3) for lenient syntax handling, then a visitor-based line generator produces formatted lines, with specialized transformers for strings, brackets, and comments. It supports Jupyter notebooks, line-range formatting, caching, and parallel execution. The codebase is exceptionally well-tested with hundreds of edge-case test files and a comprehensive test suite. It demonstrates high craftsmanship in areas like tree manipulation, concurrency patterns, and string normalization.

RATING: 9.9/10 MAINT: active DRIFT: low
duckdb/duckdb ★ 41807 3838 APPLICATION

DuckDB is a high-performance, embeddable, in-process analytical SQL database engine written in C++. It provides a full SQL dialect with vectorized execution, columnar storage, advanced compression (ALP, Chimp, dictionary, FSST), adaptive indexing (ART), and a rich optimizer with rule-based and cost-based transformations. The system is designed for OLAP workloads, supporting complex queries with window functions, recursive CTEs, pivot operations, and lambda expressions. It exposes multiple client APIs: a C API (v1 and v2), C++ library, Swift bindings, and a command-line shell. Extensibility is a first-class concern via a plugin system for table/scalar/aggregate functions, custom storage backends, and data format readers (Parquet, CSV, JSON, Arrow). The repository includes extensive benchmark suites (TPC-H, TPC-DS, ClickBench, LDBC, IMDB, recursive CTE) and a comprehensive test infrastructure. While primarily an application (database engine), it also contains research-grade components in query optimization, compression algorithms, and parallel execution, giving it a hybrid character.

RATING: 9.9/10 MAINT: active DRIFT: low
trpc/trpc ★ 40667 1691 APPLICATION

tRPC is a TypeScript framework for building end-to-end type-safe APIs without code generation or schema definition. It provides a server package with composable adapters (Express, Fastify, Next.js, WebSocket, AWS Lambda, Fetch, standalone), a client package with a composable link system (HTTP batch/stream, WebSocket, SSE, retry, logger, split), and integration packages for React Query (both classic and TanStack variants) and Next.js (Pages and App Router). The server uses a builder pattern with procedures, middleware, routers, and error formatting; the client creates a fully typed proxy that mirrors the server router structure. tRPC also supports data transformers (SuperJSON, etc.), server-side rendering helpers, static site generation, streaming (SSE, JSON-Lines for batch responses), and OpenAPI document generation from tRPC routers. The monorepo contains extensive test suites, regression tests, and example applications covering various runtimes and integrations. Its architecture is highly modular, leveraging advanced TypeScript type inference and proxy patterns to deliver a seamless developer experience.

RATING: 9.9/10 MAINT: active DRIFT: low
pingcap/tidb ★ 40597 6248 APPLICATION

TiDB is a production-grade, open-source distributed SQL database with MySQL compatibility, horizontal scalability, strong consistency (ACID), and HTAP capabilities via TiKV (row store) and TiFlash (columnar store). The architecture separates compute (TiDB Server) from storage (TiKV/TiFlash) with PD for cluster management. Key entry points: cmd/tidb-server (SQL layer), lightning/cmd/tidb-lightning (TB-scale import), br/cmd/br (backup/restore), dumpling/cmd/dumpling (export). The codebase demonstrates exceptional craftsmanship with a modular design: the parser (pkg/parser) is a standalone MySQL-compatible SQL parser used by external projects; pkg/objstore provides a unified storage abstraction (S3/GCS/Azure/local/HDFS) with compression/encryption; pkg/dxf/framework implements a distributed execution framework with scheduler/task-executor/planner; pkg/timer provides distributed cron/interval scheduling with persistence; pkg/extension enables plugin-based authentication/session-hooks/custom-functions; pkg/util/chunk/arena/zeropool/mvmap/intset/bitmap provide high-performance columnar processing and memory management; pkg/expression uses code generation for vectorized SIMD evaluation; pkg/planner implements a Cascades-based cost-based optimizer with plan caching; pkg/ddl executes online schema changes via job-based distributed backfill with schema versioning; pkg/statistics maintains histograms/CMS/FM-sketch with auto-analyze priority queues. The repo includes comprehensive testing (unit, integration, realtikv, chaos) and modern Go practices (generics, interfaces, DI).

RATING: 9.9/10 MAINT: active DRIFT: low
php/php-src ★ 40431 8162 APPLICATION

php-src is the canonical source of the PHP programming language runtime. In production it executes PHP scripts through a pipeline of lexing, parsing, AST construction, opcode compilation, optimization, and execution on a custom virtual machine (the Zend Engine), with an optional JIT compiler provided by OPcache. It ships multiple server APIs (SAPIs): CLI, FastCGI Process Manager (FPM) for web serving, CGI, an Apache 2 module, LiteSpeed, an embeddable SAPI, an interactive debugger (phpdbg), and a fuzzer harness. The standard library spans roughly 80 bundled extensions covering databases (PDO, mysqli, sqlite3), cryptography (openssl, sodium, hash), web protocols (curl, sockets, filter), text processing (mbstring, intl, pcre), and data formats (json, xml, dom, phar, zip). The architecture is a modular C codebase. The Zend Engine (Zend/) implements the language core: the zval value system, a custom memory allocator, garbage collector, highly optimized hash tables, the object model, fibers, and a 16-pass SSA-based optimizer (Zend/Optimizer/) that feeds OPcache's shared-memory script cache and JIT. Extensions register functions, classes, and stream wrappers through a uniform zend_module_entry interface; function signatures are declared in .stub.php files and compiled into generated arginfo headers. The streams layer (main/streams/) provides a uniform I/O abstraction, and TSRM provides thread safety. The build system is autoconf-based with re2c and bison generating scanners and parsers. Primary data flows: PHP source text enters the re2c/bison-generated scanner and parser, producing an AST that the compiler lowers to opcodes; the optimizer performs type inference, dead code elimination, SCCP, and control-flow analysis before the VM executes. OPcache persists compiled scripts in shared memory, and the JIT translates hot traces to native code. Requests flow through the SAPI lifecycle (RINIT, script execution, RSHUTDOWN). Build dependencies include autoconf, bison, re2c, and optional system libraries (ICU, OpenSSL, libxml2, libcurl, libsqlite); several libraries are vendored in-tree (PCRE2/SLJIT, libgd, libmagic, timelib, uriparser, lexbor, boost.context, Keccak). The codebase is exceptionally well maintained: near-daily commits, extensive CI across Linux, macOS, Windows, and FreeBSD, a regression suite of over 20,000 .phpt tests, fuzzing infrastructure, and a formal security response process. The engineering quality is world-class; the hash table, allocator, VM, and optimizer are studied as reference implementations. This is not a conventional reusable library (it is the runtime itself), but its vendored components, test harness, and extension patterns are independently reusable.

RATING: 9.9/10 MAINT: active DRIFT: low
vadimdemedes/ink ★ 40039 1059 APPLICATION

Ink is a mature, widely-adopted React renderer for building terminal/CLI applications — 'React for CLIs.' It implements a custom react-reconciler host config (src/reconciler.ts) that maps React elements to a lightweight virtual DOM (src/dom.ts), lays components out with the WASM-backed Yoga flexbox engine, and writes only the minimal ANSI diff needed to update the terminal frame (src/log-update.ts, src/line-update.ts). Beyond rendering, the codebase owns the full terminal I/O stack: an incremental stdin state machine (src/input-parser.ts) that handles CSI/SS3 sequences and bracketed paste, legacy-plus-kitty keyboard protocol parsing (src/parse-keypress.ts), ANSI tokenizing/sanitizing (src/ansi-tokenizer.ts, src/sanitize-ansi.ts), wide-character-safe clipping (src/output.ts), raw mode, alternate screen, and terminal suspension for child processes. Adoption is broad and evidence of production use is substantial: Claude Code, Gemini CLI, GitHub Copilot CLI, Shopify CLI, and Prisma are documented adopters. The public surface is a library, not an app: render(), renderToString(), and measureElement() plus an instance API (rerender, unmount, waitUntilExit, waitUntilRenderFlush, clear, cleanup), built-in components (Box, Text, Static, Transform, Newline, Spacer, ErrorBoundary), and hooks for input, paste, focus, animation, cursor, window size, box metrics, and the three std streams. The project ships 20+ runnable examples and an extensive test suite spanning in-process fake-stream tests, node-pty PTY integration tests, and frame-by-frame ANSI regression tests keyed to GitHub issue numbers (#442, #450, #725, #935, #969, #973). The craftsmanship is genuinely high: careful Yoga/WASM memory management to avoid use-after-free, line-segment diffing to keep writes minimal, robust handling of CJK/wide-character and zero-width edge cases, and clean module boundaries around terminal I/O primitives. Weaknesses are organizational rather than architectural: test/render.tsx is a monolithic ~44k-token file, App.tsx coordinates a large set of refs in fragile ordering, some tests assert exact ANSI sequence counts (brittle to intentional rendering changes), and the readme documents an 'upcoming' version rather than the stable release. Overall this is near-reference-quality code for anyone building a custom React renderer or terminal UI tooling.

RATING: 9.9/10 MAINT: active DRIFT: low
pola-rs/polars ★ 39870 3131 APPLICATION

Polars is a high-performance DataFrame library and query engine written in Rust with Python bindings. It provides both eager and lazy execution, a streaming engine for out-of-core processing, and a rich expression DSL. The core architecture separates concerns into crates: polars-core (DataFrame, Series, datatypes), polars-arrow (Arrow array implementations and compute kernels), polars-plan (query intermediate representation and optimizer passes), polars-mem-engine (in-memory execution), polars-stream (pipelined streaming execution), polars-io (file I/O for Parquet, CSV, IPC, Avro, JSON, cloud storage), polars-sql (SQL frontend), and polars-python (PyO3 bindings). Key entry points include DataFrame and LazyFrame constructors, expression methods on Expr, and SQLContext for SQL queries. Data flows involve reading from files or databases, building a lazy query plan, optimizing it, and executing either in-memory or streaming with morsel-based parallelism. External dependencies include Apache Arrow format, object_store for cloud access, tokio for async I/O, and various compression libraries. The library is designed for extensibility through plugins and custom namespaces.

RATING: 9.9/10 MAINT: active DRIFT: low
llvm/llvm-project ★ 39817 18277 APPLICATION

The LLVM Project is a comprehensive compiler infrastructure and toolchain ecosystem, serving as the foundational layer for modern C/C++ compilation, optimization, and debugging. It operates as a monolithic monorepo containing distinct but tightly integrated sub-projects: Clang (frontend), LLVM (backend IR and optimizer), LLDB (debugger), MLIR (multi-level intermediate representation), and compiler-rt (runtime libraries). The system's primary function is to transform source code into optimized machine code while providing robust tooling for static analysis, dynamic instrumentation (sanitizers), and debugging. It supports a vast array of architectures (x86, ARM, RISC-V, etc.) and languages (C, C++, OpenMP, SYCL), making it a critical piece of infrastructure for high-performance computing and systems programming. Despite its complexity, the codebase maintains exceptional craftsmanship through rigorous testing and modular design. The architecture relies heavily on a custom testing framework (Lit) and a strict review process, ensuring that low-level optimizations and standard library implementations remain correct across platforms. The project is not a data pipeline or research notebook collection; rather, it is a production-grade software engineering toolset that defines industry standards for compiler correctness and performance. Key data flows involve source code ingestion through Clang's frontend, transformation into LLVM IR, optimization passes within the LLVM backend, and final code generation for specific targets. External dependencies include CMake for build configuration, Python for tooling scripts, and various system libraries for runtime support. The repository is actively maintained with frequent commits, reflecting its role as a leading-edge technology in the software development ecosystem.

RATING: 9.9/10 MAINT: active DRIFT: low
preactjs/preact ★ 38901 3408 APPLICATION

Preact is a fast, lightweight React-compatible library for building user interfaces in JavaScript/JSX. It implements a virtual DOM component model with efficient diffing and reconciliation, aiming to provide the same modern API as React (ES6 classes, hooks, functional components, JSX) in a 4kB package. The architecture is a library with multiple subpackages: core (Component, render, createElement), compat (React API compatibility layer with Suspense, lazy, memo, forwardRef), hooks (React-like hooks: useState, useEffect, useRef, etc.), debug/devtools (development warnings and debugging bridge), test-utils (act, setupRerender), and jsx-runtime (JSX transform support). Key entry points include render(), createElement(), the Component class, and the options object that serves as an extension mechanism for all addons. Data flows from JSX/component trees through a diff engine that computes minimal DOM mutations, with support for keyed reconciliation, portals, and context propagation. External dependencies are minimal: core has none; optional preact-render-to-string for server-side rendering. The codebase is highly optimized for size and performance, with property mangling, bitmask state flags, and a custom build pipeline using Rollup, Babel, and Terser.

RATING: 9.9/10 MAINT: active DRIFT: low
aquasecurity/trivy ★ 38276 738 APPLICATION

Trivy is a comprehensive, production-grade security scanner for container images, filesystems, Git repositories, Kubernetes clusters, cloud infrastructure (IaC), and virtual machines. It detects vulnerabilities in OS packages and language-specific dependencies, scans for IaC misconfigurations (Terraform, CloudFormation, ARM, Ansible, Helm, Dockerfile), secrets, and license compliance. The architecture is modular: a CLI entry point (`cmd/trivy/main.go`) orchestrates scanning via a file analysis engine (`pkg/fanal`), dependency parsers (`pkg/dependency/parser`), vulnerability detectors (`pkg/detector`), IaC scanners with Rego-based policies (`pkg/iac`), and multiple output formats (JSON, SARIF, CycloneDX, SPDX, table, etc.). It supports client-server mode via gRPC, a plugin system, WASM modules, and VEX/SBOM attestation integration. The codebase is well-structured with clear separation of concerns, extensive test coverage, and many reusable utility packages (parallel processing, generic sets, caching, version constraints, license expression parsing). It is actively maintained with frequent releases and a large community.

RATING: 9.9/10 MAINT: active DRIFT: low
$ loading more...
$ submit: