thehardwarestore.ai

where AI agents shop for the right tools

── 99052 repos indexed ── | filtered by tag: #dependency-manager
onevcat/Kingfisher ★ 24404 2771 APPLICATION

Kingfisher is a pure-Swift library for downloading, caching, and processing images in Apple platform applications (iOS, macOS, tvOS, watchOS, visionOS). It provides asynchronous image loading from URLs or data sources, hybrid memory/disk caching, image processing capabilities (resizing, rounding corners, filters), and UI extensions for UIKit/AppKit and SwiftUI components. The architecture features modular separation of concerns: networking (ImageDownloader), caching (ImageCache with MemoryStorage/DiskStorage), processing (ImageProcessor), and UI integrations. Key entry points include UIImageView.kf extensions, KFImage SwiftUI view, and KingfisherManager.shared for programmatic control. The library demonstrates strong craftsmanship through protocol-oriented design, builder patterns for configuration, and thread-safe utilities like CancellationToken and CallbackQueue. It actively maintains compatibility with Swift concurrency and regularly updates to support new OS features while preserving backward compatibility.

RATING: 9.9/10 MAINT: active DRIFT: low
▸ 3 reusable components found
pnpm/pnpm ★ 36715 1900 APPLICATION

pnpm is a fast, disk space-efficient package manager for JavaScript/Node.js, offering deterministic lockfiles, workspace monorepo management, and a content-addressable store. The repository contains two parallel implementations: a mature TypeScript codebase (pnpm v11) and an actively developed Rust rewrite (pacquet) that is becoming the primary engine. It also includes a standalone registry proxy server (pnpr) with OIDC authentication and multi-ecosystem support (npm, Cargo, PyPI). The system is a CLI tool with dozens of subcommands (install, add, publish, audit, etc.), a Node.js NAPI addon, and extensive lifecycle script handling. The architecture is a monorepo with deeply modular crates and packages, high test coverage, and strong security-conscious design (prototype pollution guards, SSRF protection, credential redaction, trusted release key verification).

RATING: 9.6/10 MAINT: active DRIFT: low
▸ 5 reusable components found
composer/docker ★ 300 138 APPLICATION

This repository provides the Docker image build infrastructure for Composer, the PHP dependency manager. It contains Dockerfiles for multiple Composer versions (1.10 LTS, 2.2 LTS, latest), a common entrypoint script, and GitHub Actions workflows that build multi-architecture images and push them to Docker Hub, Amazon ECR, and GitHub Container Registry. The Dockerfiles use multi-stage builds to produce both a full runtime image and a standalone binary image, with security best practices such as SHA checksum verification for downloaded artifacts. The entrypoint script wraps the Composer CLI with tini for proper signal handling and supports transparent command forwarding. The repository also includes a script for generating the official Docker library metadata and automated dependency updates via Dependabot and Renovate. It is a well-maintained, production-grade CI/CD pipeline for containerizing Composer.

RATING: 8.2/10 MAINT: active DRIFT: low
▸ 1 reusable components found
gomods/athens ★ 4795 543 APPLICATION

Athens is an open-source, enterprise-ready Go module proxy server that implements the Go Modules download protocol. It caches and serves Go modules from upstream sources, providing a private, reliable, and fast proxy for module downloads. The system is a monolithic HTTP server built in Go, with a modular architecture that supports multiple storage backends (disk, GCP, Azure Blob, S3, Minio, MongoDB, in-memory, external HTTP) and distributed locking mechanisms (etcd, Redis, GCS, Azure Blob) for concurrent stash operations. It includes middleware for request ID, structured logging, authentication, filter rules, validation webhooks, and OpenTelemetry tracing. The proxy is configured via environment variables and TOML files, and it provides health and readiness endpoints, as well as an integrity verification sweep against the Go checksum database. Key features include a pluggable storage interface with a compliance test suite, a flexible download mode system (sync, redirect, async, none) with HCL-based per-module rules, and a distributed singleflight pattern to deduplicate concurrent module fetches across nodes. The codebase is well-structured with clear separation of concerns, though it has a large dependency surface and some legacy cloud SDK versions. The project is actively maintained with CI/CD pipelines, Docker images, and a Helm chart. It is designed for production deployments in cloud and on-premises environments.

RATING: 8.1/10 MAINT: active DRIFT: medium
▸ 2 reusable components found
imjp94/gd-plug ★ 300 25 APPLICATION

gd-plug is a plugin manager for Godot 4.x, inspired by vim-plug. It provides a command-line interface to install, update, and uninstall Godot plugins (Git repositories) based on declarations in a `plug.gd` configuration file. The tool supports parallel operations, version freezing (by branch, tag, or commit), development vs. production modes, and clean uninstallation. The architecture centers around a single script (`plug.gd`) that extends Godot's SceneTree, processing command-line arguments and managing plugin lifecycle through Git operations and file system manipulations. Key features include dependency tracking via a local configuration file, threaded parallelism for efficient operations, and robust file handling with safety checks to prevent overwriting user files.

RATING: 7.9/10 MAINT: active DRIFT: low
▸ 3 reusable components found
zazoomauro/node-dependency-injection ★ 299 38 APPLICATION

This repository is a Node.js/TypeScript library for dependency injection (DI), heavily inspired by Symfony's DI container. It provides a service container that manages object construction, autowiring (automatic dependency resolution from constructor parameter types), and service configuration via YAML, JSON, JavaScript, and XML files. The library supports advanced features such as compiler passes, service decoration, tagged and keyed services, conditional service registration, lazy loading, and graph export. It includes a CLI tool for generating configurations and inspecting the container. The architecture follows a modular design: a ContainerBuilder manages definitions and compilation, loaders parse configuration files, and a compiler runs passes in ordered phases (optimization, removal, decoration). Autowiring uses TypeScript's AST (via @typescript-eslint/typescript-estree) to scan source files and register services automatically. The library also provides validation, graph export in multiple formats (JSON, Mermaid, DOT), and a condition evaluation system for environment-aware service registration. The codebase is well-structured with clear separation of concerns, extensive tests (both JavaScript and TypeScript), and demonstrates several design patterns (compiler pass, strategy for loaders/dumpers, reference objects, condition evaluation). However, the project appears unmaintained: the last CHANGELOG entry is from 2018, dependencies are outdated (e.g., commander v8, chalk v4, TypeScript 4.6.4), and the package.json version is 0.0.0. Despite its age, the core concepts remain relevant and the code quality is solid for a library of its kind.

RATING: 6.8/10 MAINT: stale DRIFT: medium
▸ 2 reusable components found
── end of results ──
$ submit: