Repository Index

:closed_lock_with_key: Security advisories as a simple composer exclusion list, updated daily

• php
• security-advisories
• security-vulnerability
• composer

A neovim plugin that helps managing crates.io dependencies

• crates-io
• cargo
• rust
• nvim-cmp

A CLI tool to check whether a specific composer package uses imported symbols that aren't part of its direct composer dependencies

• code-quality
• ci-tools

✍️ All the npm/yarn/pnpm commands I don't want to type

• neovim
• neovim-plugin
• version
• neovim-lua

Nix dependency pinning. Very similar to Niv but has a few features that I personally wanted.

Dependency analysis and optimization toolkit for modern JavaScript and TypeScript codebases. Enforce dependency graph hygiene and remove unused code with a very fast CLI.

• dependency-analysis
• reverse-dependencies
• dependency-resolution
• file-dependencies

Dependency management and optimization in Jupyter Notebooks

• notebook
• jupyter-notebooks
• package-management
• dependency-manager

A GitHub Action that automatically updates Quarto extensions in your repository, similar to how Dependabot manages dependencies.

• dependabot
• github-actions
• quarto
• quarto-extension

A minimal wrapper around `dot` available at least on Linux systems to generate dependency-graphs.

Pin and update Docker image digests in Dockerfiles and compose files

• docker
• docker-compose
• dockerfile

Spring Boot starter available via JitPack and GitHub Releases, with an Actuator endpoint for identifying used, unused, and indeterminate starters at runtime.

• actuator
• java
• spring-boot
• spring-boot-starter

cmake-xray is a build inspection tool for CMake projects that reveals include hotspots, dependency structures, and rebuild impact.

• cmake
• analysis
• diagnostics
• hexagonal-architecture