Explore tracked sources
Every software and developer-update source on DevUpdate.io, contributed by the community. Browse without an account, or sign in to add any of these to your dashboard.
Descriptions and status summaries are generated by an AI from publicly available data. They may not reflect the current state of a project. More on AI-extracted content. Project owners can request a correction or removal by emailing info@devupdate.io.
Keycloak is open source identity and access management for modern applications and services. It helps add authentication and authorization features such as user federation, strong authentication, user management, and fine-grained authorization without requiring you to build those systems yourself.
Keycloak (keycloak/keycloak) appears actively maintained, with upstream pushes on 2026-09-03 and frequent tagged updates with security and bug-fix focus.
Last release:
sqs-consumer is a Node.js library for building Amazon Simple Queue Service (SQS) based applications, helping you consume messages with less setup code. You define an async `handleMessage` function, and it handles continuous long polling, message processing, and acknowledgement behavior, with options for parallel batch handling and error handling.
Actively maintained, with a very recent upstream push on 2026-08-11 and a steady stream of tagged updates in 2026 (canaries in early May, stable tags in April through July).
Last release:
sql-highlight is a lightweight SQL syntax highlighting library written in pure JavaScript. It highlights SQL queries for terminal output using Unicode escape sequences, or renders highlighted HTML spans (optionally escaping HTML entities). It also exposes getSegments so you can parse SQL into labeled segments for custom highlighting.
The repo appears actively maintained, with an upstream push on 2026-08-10 (just a few days before today), despite the most recent documented published update in the provided list being v6.1.0 on 2025-06-06.
Last release:
Split is a Node.js streaming utility that breaks an input stream into chunks by line endings or a provided matcher (string or regular expression), emitting each line as a separate data event. It can also transform each line (for example, parsing newline-delimited JSON), with options like maxLength and trailing behavior.
Maintenance status: The repository is marked as archived upstream, and the last upstream push was 2019-07-02, indicating it is effectively dormant/in maintenance mode (not actively maintained) as of 2026-08-12.
Last release:
This software encodes and decodes the `mappings` property of a source map, making it easier to work with the variable-length quantity format used for mapping segments. It is useful for developers who need to transform sourcemap mapping data to or from a structured form.
Rich-Harris/sourcemap-codec appears quiet and in maintenance mode, the upstream project is marked archived, and the last upstream push was in 2022-12-03 (with the most recent summarized package updates dating to 2020-01).
Last release:
Sonic Boom is an extremely fast utf8 only stream implementation for Node.js, designed for writing log data to files or file descriptors. It supports backpressure and `.pipe()`, and provides options for async or sync writes, buffering controls, and events for readiness, errors, and dropped data.
Actively maintained, with recent activity: the upstream last push was 2026-08-01, and there have been multiple updates in 2025 to early 2026 (latest shown update is v5.0.0 on 2026-03-31).
Last release:
Slugify is a JavaScript utility that converts a string into a URL-friendly “slug” (for example, `some string` to `some-string`). It supports options like custom separators, lowercasing, trimming, removing characters via regex, locale-specific transliteration, and extending or overriding the character map, and it works in the browser and with AMD/CommonJS module loaders.
The source (simov/slugify) appears to be under maintenance, with recent updates published in 2026 (v1.6.7 and v1.6.8 on 2026-03-13) and an upstream push recorded on 2026-06-29.
Last release:
slice-ansi is a Node.js utility that slices strings containing ANSI escape codes, such as those produced by chalk. It lets you extract a substring by visible column indexes while keeping grapheme clusters intact and excluding partial clusters at the end boundary.
The source (chalk/slice-ansi) appears actively maintained, with the latest upstream push and corresponding update both on 2026-04-04 (v9.0.0).
Last release:
slash converts Windows backslash paths into forward-slash paths (for example, `foo\bar` becomes `foo/bar`). It is useful when Node.js path methods produce `\\` on Windows and you need consistent slash-separated paths for code, URLs, or other tooling.
The repository is not actively maintained as of today, with the most recent upstream push and the newest recorded updates both on 2023-05-09, which is over three years ago.
Last release:
simple-eval is a JavaScript expression evaluator for evaluating a deliberately limited subset of JavaScript expressions. It supports optional context values, and it can use an ESTree compliant parser like jsep (default) or alternatives such as acorn, @babel/parser, or esprima, while blocking certain dangerous access patterns. It is useful for computing expressions from strings with basic operators and selected globals, but it is not a sandbox for untrusted input.
The source appears to be largely dormant, with no tagged updates since v2.0.0 on 2025-05-30, even though there was an upstream push on 2026-06-10. Based on published updates, maintenance looks low.
Last release:
Shimmer is a Node.js utility for safer monkeypatching, letting you wrap existing methods on objects or required modules with your own wrapper functions. It’s useful when you need to add behavior around built-in or third-party functions without fully replacing them, and includes helpers to wrap or unwrap single or multiple methods (for restoring the original behavior later).
Actively maintained: No clear evidence of active maintenance as of 2026-08-13. The last upstream push is 2024-05-31, but the provided package updates/release notes stop in 2017, suggesting the project is likely quiet/dormant rather than actively maintained.
Last release:
sha.js is a pure JavaScript implementation of SHA hashing, with a Node-style API for computing SHA-1, SHA-2 (such as SHA-256 and SHA-512), and related variants. It supports incremental updates for hashing large inputs without loading everything into memory at once.
Maintenance status: The repository shows at least one recent modernization, with the latest tagged update (v2.4.12) on 2025-07-01 and an upstream push on 2025-10-23, but the overall history has very large gaps, suggesting quiet, maintenance-mode activity rather than active feature development.
Last release:
Parse HTTP Set-Cookie headers in JavaScript, converting one or more set-cookie values into JavaScript cookie objects. It’s useful for turning cookie header data from strings, Node.js response objects, or fetch Response objects into structured data (array by default, or a name to cookie map with the `map` option).
Actively maintained, recent activity: GitHub upstream push was 2026-08-11, and npm versions have updates in 2026 (v3.1.0 on 2026-03-20, v3.1.1 on 2026-06-24, v3.1.2 on 2026-07-09), indicating ongoing maintenance rather than dormancy.
Last release:
secure-json-parse provides a JSON.parse() drop-in replacement that protects against prototype poisoning by handling special keys like __proto__ and constructor.prototype during parsing. It is useful when you need safer JSON parsing in Node.js, with options to throw an error, remove those keys, ignore validation, or return null in “safe” mode.
The upstream repo appears active (last upstream push on 2026-08-06, just about a week before today 2026-08-13), but the most recent documented package update in the provided history is v4.1.0 from 2025-10-05, so published changes seem to be infrequent lately.
Last release:
schema-utils is a JavaScript package used to validate the options for webpack loaders and plugins using JSON schema. It provides a validate function that checks an options object against a schema and can format validation errors, with configuration for error naming and base data paths.
Actively maintained: Yes, the most recent upstream push and update (v4.4.0, 2026-09-09) is very recent relative to today (2026-09-10), indicating ongoing maintenance.
Last release:
safe-stable-stringify is a zero-dependency JavaScript serialization utility that provides a safe, deterministic, and fast alternative to JSON.stringify, including support for circular structures and BigInt without throwing (configurable). It offers the same stringify signature as JSON.stringify, plus configuration options such as deterministic key ordering and strict JSON compatibility checks.
Maintenance status: The repo shows an upstream push on 2026-02-05, but the latest documented package update in the provided history is v2.5.0 (2024-08-01), suggesting maintenance is active but not on a steady, frequent tagged cadence.
Last release:
safe-regex2 is a JavaScript utility that detects potentially catastrophic, exponential-time regular expressions by limiting regex star height to 1. It returns a boolean (true for likely safe, false for possibly unsafe) and is meant as a basic checker rather than a complete solution.
Actively maintained: There are recent tagged updates in 2026 (v5.1.0 on 2026-03-12, v5.1.1 on 2026-04-19) and an upstream GitHub push on 2026-08-06, suggesting ongoing development rather than dormancy.
Last release:
Provides a safer drop-in replacement for Node.js `Buffer` with a “safer” Buffer API (`Buffer.from`, `Buffer.alloc`, `Buffer.allocUnsafe`, `Buffer.allocUnsafeSlow`). Useful for creating and converting buffers explicitly and avoiding the potentially unsafe behavior of older `Buffer` usage, while using Node’s built-in implementation when available.
This source appears largely dormant, with the most recent upstream push on 2023-06-03 and the newest observed update being v5.2.1 from 2020-05-10, which strongly suggests it is not actively maintained in 2026.
Last release: