Black is the uncompromising Python code formatter. It is a CLI tool that automatically reformats Python source code to a consistent style, with a focus on determinism and minimal configuration. The repository contains the core formatting engine, a HTTP server (blackd) for on-demand formatting, a GitHub Action for CI integration, and a Vim plugin. The architecture is modular: parsing uses a forked lib2to3 parser (blib2to3) for lenient syntax handling, then a visitor-based line generator produces formatted lines, with specialized transformers for strings, brackets, and comments. It supports Jupyter notebooks, line-range formatting, caching, and parallel execution. The codebase is exceptionally well-tested with hundreds of edge-case test files and a comprehensive test suite. It demonstrates high craftsmanship in areas like tree manipulation, concurrency patterns, and string normalization.
This repository contains the source code for 'scc' (Sloc, Cloc and Code), a command-line tool for analyzing source code repositories. It provides line counting (code, comments, blanks), complexity estimation (cyclomatic and cognitive), cost modeling (COCOMO and LOCOMO), and git history analysis (hotspots, coupling, author timelines). The tool supports multiple output formats (tabular, JSON, CSV, HTML, etc.) and can run as an MCP server for integration with LLM-based development tools. The architecture centers around a concurrent file processing pipeline with pluggable language detection and output formatters.
ggshield is a production-grade CLI tool for detecting hardcoded secrets in code, git history, Docker images, PyPI packages, archives, and AI coding assistant interactions. It integrates with the GitGuardian API to scan for 500+ secret types, supporting both SaaS and self-hosted instances. The tool is designed for developers and CI/CD pipelines, offering git hooks (pre-commit, pre-push, pre-receive), a plugin system for extensibility, and AI agent hooks for Claude Code, Cursor, Copilot, Codex, Vibe, and Kiro. It also includes HMSL (Has My Secret Leaked) for checking secret exposure via cryptographic queries, honeytoken management, and machine-level setup for comprehensive security coverage. The architecture is a hybrid Python/Rust CLI built with Click. The Python codebase is organized into three layers: `cmd` (CLI commands), `core` (shared infrastructure like config, scan, cache, client, UI, plugin system), and `verticals` (domain logic for secret scanning, AI, HMSL, honeytokens). A Rust native component (`ggshield-hook`) handles AI hook scanning for performance, while a Rust dispatcher delegates non-hook commands to the Python launcher. The plugin system supports dynamic command registration with sigstore signature verification. Configuration is YAML-based with versioned schemas and global/local merging. Key entry points include `ggshield/__main__.py` (CLI root), `ggshield/cmd/secret/scan/` (scan subcommands), `ggshield/cmd/auth/login.py` (authentication), `ggshield/cmd/machine/setup.py` (one-shot protection), and `rust/dispatcher/src/main.rs` (Rust binary). External dependencies include the GitGuardian API (py-gitguardian), keyring for credential storage, and platform-specific utilities for notifications and machine ID derivation. The codebase demonstrates strong engineering practices with lazy command loading, output handler strategy pattern, cache abstractions, and comprehensive test coverage (80%+).
OpenGrok is a production-grade source code search and cross-reference engine. It indexes large codebases using Apache Lucene, supports over 30 programming languages via JFlex-based analyzers, and integrates with multiple version control systems (Git, Mercurial, Subversion, CVS, Perforce, etc.). The system is deployed as a Java web application (Tomcat, Jakarta EE) with a REST API, authentication plugins (LDAP, OSSO, custom), and a suggester for autocomplete. Python administrative tools handle repository mirroring, synchronization, and configuration. The architecture is modular (indexer, web, suggester, plugins, tools) with extensive test coverage. While the codebase is well-structured and actively maintained, it carries legacy support for obsolete VCS and some duplicated code across analyzers.
This is the official OWASP Cheat Sheet Series repository, providing concise, actionable security guidance for developers. It contains over 150 markdown cheat sheets covering web application security, cloud security, AI security, and more. The repository is primarily a documentation project but includes a sophisticated build system (MkDocs, Docker, CI/CD) and tooling for quality assurance: markdown linting, link checking, text linting, and automated PR review agents. The link checker is a standout reusable component with modular architecture. The project is actively maintained with strict quality gates and a well-defined contribution process.
This repository is a chaotic, joke-oriented collection that explicitly accepts all pull requests. The dominant content is a vendored copy of the Ruby on Rails framework (circa Rails 6.0 alpha), comprising thousands of files including core libraries, generators, tests, and documentation. Interspersed are hundreds of trivial or humorous contributions: random scripts in dozens of languages, ASCII art, brainfuck interpreters, fake malware, and absurd READMEs. There is no coherent application, no unified build system, and no original reusable components. The repo serves as a meta-experiment in open-source chaos rather than a functional tool. It is not suitable for production use or as a dependency.