开源项目
🔥 microsoft / power-platform-skills - A plugin marketplace for Claude Code/GitHub Copilot that pro
GitHub热门项目 | A plugin marketplace for Claude Code/GitHub Copilot that provides Power Platform development plugins, including reusable skills, agents, and commands for building and deploying solutions. | Stars: 388 | 7 stars today | 语言: JavaScript
开源项目
🔥 arunbhardwaj / LeetHub-2.0 - Automatically sync your leetcode solutions to your github ac
GitHub热门项目 | Automatically sync your leetcode solutions to your github account - with some updates to keep it working | Stars: 559 | 12 stars today | 语言: JavaScript
开源项目
🔥 pshenok / server-survival - Tower defense game that teaches cloud architecture. Build in
GitHub热门项目 | Tower defense game that teaches cloud architecture. Build infrastructure, survive traffic, learn scaling. | Stars: 6,038 | 35 stars today | 语言: JavaScript
开源项目
🔥 vercel-labs / agent-skills - Vercel's official collection of agent skills
GitHub热门项目 | Vercel's official collection of agent skills | Stars: 28,276 | 32 stars today | 语言: JavaScript
开源项目
🔥 swagger-api / swagger-ui - Swagger UI is a collection of HTML, JavaScript, and CSS asse
GitHub热门项目 | Swagger UI is a collection of HTML, JavaScript, and CSS assets that dynamically generate beautiful documentation from a Swagger-compliant API. | Stars: 28,855 | 6 stars today | 语言: JavaScript
开源项目
🔥 ariadng / metatrader-mcp-server - Model Context Protocol (MCP) to enable AI LLMs to trade usin
GitHub热门项目 | Model Context Protocol (MCP) to enable AI LLMs to trade using MetaTrader platform | Stars: 561 | 8 stars today | 语言: Python
开源项目
🔥 wshobson / agents - Multi-harness agentic plugin marketplace for Claude Code, Co
GitHub热门项目 | Multi-harness agentic plugin marketplace for Claude Code, Codex CLI, Cursor, OpenCode, GitHub Copilot, and Gemini CLI | Stars: 37,124 | 43 stars today | 语言: Python
开源项目
🔥 BerriAI / litellm - Python SDK, Proxy Server (AI Gateway) to call 100+ LLM APIs
GitHub热门项目 | Python SDK, Proxy Server (AI Gateway) to call 100+ LLM APIs in OpenAI (or native) format, with cost tracking, guardrails, loadbalancing and logging. [Bedrock, Azure, OpenAI, VertexAI, Cohere, Anthropic, Sagemaker, HuggingFace, VLLM, NVIDIA NIM] | Stars: 51,382 | 152 stars today | 语言: Python
开源项目
🔥 google-labs-code / design.md - A format specification for describing a visual identity to c
GitHub热门项目 | A format specification for describing a visual identity to coding agents. DESIGN.md gives agents a persistent, structured understanding of a design system. | Stars: 16,759 | 504 stars today | 语言: TypeScript
开源项目
🔥 andreknieriem / headunit-revived - Headunit App for displaying Android Auto
GitHub热门项目 | Headunit App for displaying Android Auto | Stars: 1,359 | 79 stars today | 语言: Kotlin
开源项目
🔥 flutter / flutter - Flutter makes it easy and fast to build beautiful apps for m
GitHub热门项目 | Flutter makes it easy and fast to build beautiful apps for mobile and beyond | Stars: 177,123 | 44 stars today | 语言: Dart
AI 资讯
Dependabot can finally pull from private GitHub Packages without a PAT
The first time I wired Dependabot up to a private package registry, it took three meetings and a calendar reminder set six months ahead. The reminder was for the personal access token I had to mint to do it, the one I would have to rotate by hand before it expired, living in a config that drifted somewhere between repo settings, a .github file, and an internal wiki page nobody had touched in a year. On June 23 GitHub posted a small changelog item that quietly retires that whole ritual: Dependabot can now read your private GitHub Packages and GHCR registries through its own GITHUB_TOKEN , no PAT required. If you have ever had to explain to a security review why your bot account holds a token your team owns but a person minted, you already know why this lands. The PAT we all had and nobody loved Until this week, Dependabot's path to a private GitHub-hosted package was the same path it took years ago. A human minted a personal access token, scoped wide enough to read the registry, stored it as a repo or org secret, and plugged it into Dependabot so the bot could authenticate when it tried to resolve dependencies. That token expired on a human schedule. It belonged to whoever happened to set Dependabot up, which is rarely the person who still owns the repo a year later. You can feel how that ends. Tokens that quietly expire and break a Dependabot PR the day someone needs the patch. Tokens that follow an offboarded engineer out the door. Tokens with scopes wider than the job actually requires, because nobody wanted to mint a fine-grained one per registry path. None of those failures are catastrophic on their own. All of them are the kind of papercut a platform team ends up owning. What the GITHUB_TOKEN does here The new behavior is straightforward. Dependabot's job-scoped GITHUB_TOKEN can now request a packages: read permission. When the bot pulls from a hostname under *.pkg.github.com or ghcr.io , it sends that token instead of asking for a PAT. The same token that alre
开源项目
I automated my job (and it made me a better leader)
Explore how my day as a senior leader looks now that I use 40 automations to help, and learn more about some of my favorites. The post I automated my job (and it made me a better leader) appeared first on The GitHub Blog .
开源项目
🔥 fastrepl / anarlog - Open source Granola AI Alternative
GitHub热门项目 | Open source Granola AI Alternative | Stars: 8,694 | 51 stars this week | 语言: Rust
开源项目
🔥 TencentCloud / CubeSandbox - Instant, Concurrent, Secure & Lightweight Sandbox for AI Age
GitHub热门项目 | Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents. | Stars: 6,458 | 22 stars today | 语言: Rust
开源项目
🔥 louis-e / arnis - Generate any location from the real world in Minecraft with
GitHub热门项目 | Generate any location from the real world in Minecraft with a high level of detail. | Stars: 16,200 | 44 stars today | 语言: Rust
开源项目
🔥 wezterm / wezterm - A GPU-accelerated cross-platform terminal emulator and multi
GitHub热门项目 | A GPU-accelerated cross-platform terminal emulator and multiplexer written by @wez and implemented in Rust | Stars: 26,821 | 56 stars today | 语言: Rust
开源项目
🔥 KeygraphHQ / shannon - Shannon is an autonomous, white-box AI pentester for web app
GitHub热门项目 | Shannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production. | Stars: 44,957 | 57 stars today | 语言: TypeScript
开源项目
🔥 axios / axios - Promise based HTTP client for the browser and node.js
GitHub热门项目 | Promise based HTTP client for the browser and node.js | Stars: 109,082 | 8 stars today | 语言: JavaScript
开源项目
🔥 juliangarnier / anime - JavaScript animation engine
GitHub热门项目 | JavaScript animation engine | Stars: 70,268 | 152 stars today | 语言: JavaScript