cssnano is a production-grade CSS minifier built as a modular PostCSS plugin system. It takes CSS input and applies a configurable chain of optimizations—color reduction, value normalization, selector minification, longhand merging, rule merging, whitespace stripping, duplicate removal, and more—to produce the smallest possible CSS output while preserving semantics and browser compatibility. The architecture is a monorepo of over 30 PostCSS plugins, orchestrated by three built-in presets (lite, default, advanced) that balance aggressiveness against safety. The codebase is exceptionally well-engineered: every optimization is driven by data extracted from CSS specifications (via @webref/css) and browser compatibility data (via @mdn/browser-compat-data), ensuring transformations only apply when safe for target browsers. Extensive testing includes unit tests, integration tests against major CSS frameworks, fuzz testing with invariants (idempotency, cascade preservation), mutation testing, and statistical performance benchmarking. The project demonstrates exceptional craftsmanship in its handling of CSS value grammars, cascade-aware merging algorithms, and browser-specific fallbacks.
This repository provides the `honggfuzz` Rust crate, which integrates Google's Honggfuzz fuzzer with Rust. It offers a library with a `fuzz` function and `fuzz!` macro for defining fuzz targets, and two cargo subcommands (`cargo hfuzz` and `cargo honggfuzz`) for building with fuzzing instrumentation and running the fuzzer. The crate handles persistent fuzzing, conditional compilation via `cfg(fuzzing)`, and supports both raw byte slices and structured inputs via the `arbitrary` crate. The build script compiles the Honggfuzz C library from a submodule and links it statically. The codebase is well-structured, with clear separation between the library, CLI tools, and build infrastructure, and demonstrates thoughtful engineering for a security testing tool.
This repository is primarily an 'awesome list' curating fuzzing (fuzz testing) resources - books, talks, papers, tools - organized by venue and type. The core content lives in a single README.md file. What distinguishes it from a simple list is a set of well-engineered Python scripts (ndss.py, sp.py, usenix.py) that automatically scrape conference accepted-paper pages (NDSS, IEEE S&P, USENIX Security) and match titles containing 'fuzz'. For IEEE S&P, the sp.py script goes further by verifying bibliographic metadata via the Crossref API before proposing entries, ensuring only validated DOIs are suggested. These scripts are triggered manually via GitHub Actions workflows, generating pull requests rather than writing directly. The code exhibits careful HTML parsing with validation, idempotent update logic, comprehensive error handling, and extensive unit tests. While the repository's primary output is a static list, the supporting automation demonstrates production-quality data collection and proposal pipelines that could be reused for maintaining other curated lists.