Helm is the CNCF-graduated package manager for Kubernetes, shipping as a single Go CLI binary (cmd/helm/helm.go) built on the Cobra command framework. In production it packages applications as "charts" — versioned bundles of templated Kubernetes manifests — and manages their full lifecycle: install, upgrade, rollback, uninstall, and release testing. Release state is persisted in pluggable storage drivers: Kubernetes Secrets, ConfigMaps, in-memory, or SQL (PostgreSQL). It also handles chart repository management, dependency resolution with lock files, OCI registry push/pull, plugin installation (subprocess and WASM/Extism runtimes), and PGP-style provenance signing/verification of chart tarballs. The architecture is a layered Go monolith: pkg/cmd defines ~40 Cobra subcommands that delegate to pkg/action business-logic objects (Install, Upgrade, Rollback, List, Status, etc.); pkg/engine renders Go templates against coalesced chart values; pkg/kube wraps k8s.io/client-go for resource apply/delete with readiness waiting and retrying round-trippers; pkg/registry implements an OCI client via ORAS; internal/plugin provides an extensible plugin system with subprocess and Extism (WASM) runtimes; pkg/provenance handles cryptographic chart signing. Chart APIs are versioned — a public v2 API (pkg/chart/v2) coexists with a gated v3 API (internal/chart/v3), and release records have v1/v2 variants behind accessor interfaces — a deliberate compatibility strategy that introduces some code duplication. The primary data flow is: chart archive (tgz from a repository, local path, or OCI artifact) → chart loader with path-traversal and decompression-size guards → value coalescing (user overrides merged over chart defaults with subchart scoping) → Go template engine with Sprig-style functions → validated YAML manifests → Kubernetes API via client-go; the resulting release record is gzip+base64 encoded into the storage backend. External dependencies are the Kubernetes API server, HTTP/HTTPS chart repositories, OCI registries, and GnuPG-compatible keyrings. The main structural debt is the intentional v2/v3 migration duplication (internal/storage/driver and internal/chart/v3 mirror their public pkg/ counterparts) plus legacy compatibility paths such as requirements.yaml and deprecated boolean --dry-run flags. This is purely an application repository with no data-research character.
Cog is an open-source CLI and runtime for packaging machine learning models into production-ready Docker containers. It automatically generates HTTP inference servers with OpenAPI schema, handles GPU/CUDA/cuDNN compatibility, and provides a full weight management pipeline for large model artifacts. The project consists of a Go CLI (build, push, serve, predict, doctor, weights management), a Rust/PyO3 prediction server (coglet) with slot-based concurrency, a Python SDK for defining model interfaces (BaseRunner, Input, streaming), and a TypeScript playground UI. Key workflows include building OCI images from cog.yaml, pushing to registries, serving models via HTTP with SSE streaming, and managing model weights via content-addressed storage and lockfiles. The architecture is multi-language but cleanly separated, with well-defined protocols between components.