Explore tracked sources
Every software and developer-update source on DevUpdate.io, contributed by the community. Browse without an account, or sign in to add any of these to your dashboard.
Descriptions and status summaries are generated by an AI from publicly available data. They may not reflect the current state of a project. More on AI-extracted content. Project owners can request a correction or removal by emailing info@devupdate.io.
DOMPurify is a JavaScript DOM-only XSS sanitizer for HTML, MathML, and SVG. It takes “dirty” markup and returns cleaned output, stripping dangerous elements and attributes, and it is configurable with hooks. Useful for safely rendering user-provided or untrusted HTML-like content in modern browsers (and can also run server-side with Node.js plus a DOM such as jsdom).
DOMPurify (cure53/DOMPurify) appears actively maintained, with very recent upstream activity (last push on 2026-09-09) and multiple security and correctness updates in 2026.
Last release:
dlv is a small JavaScript utility for safely reading nested object properties using dot-notated key paths, returning a default value when the full path is missing or the value is undefined. It is useful for avoiding errors when traversing deep objects, including use with ES Modules, CommonJS, and globals.
The upstream GitHub source appears quiet, with the last upstream push on 2020-12-13, and the most recent tagged update listed here being v1.1.3 from 2019-05-22, so it does not look actively maintained as of 2026-09-10.
Last release:
didYouMean.js is a simple, optimized JavaScript (and Node.js) module that suggests the closest match to short, human-quality input from a provided list of strings or objects. It uses the Levenshtein distance algorithm, and can be used for tasks like suggesting misspelled command-line options or offering nearby valid URLs for a 404 page.
The upstream activity is quiet, with the last known upstream push in 2021-06-24, which is more than 5 years ago relative to today (2026-09-10). There is no evidence in the provided data of ongoing development or active maintenance.
Last release:
detect-libc is a Node.js module that detects which C standard library (libc) implementation a Linux system provides. It supports GNU glibc and MUSL, and offers async and sync functions to determine the libc family and version (returning null when it cannot be detected or when run on non-Linux platforms).
Maintenance status: The most recent upstream update was on 2025-10-05, and there are no further updates visible up to 2026-09-10, so the project appears quiet/dormant (maintenance mode at best).
Last release:
dequal is a tiny utility for checking deep equality between two values in JavaScript. It recursively compares many types, including Function, RegExp, Date, Set, Map, TypedArray, DataView, null, undefined, and NaN, treating object key order as irrelevant while requiring array order to match.
Maintenance status: Evidence of ongoing work exists (last upstream push dated 2026-04-10), but the most recently provided versioned updates are older (latest shown tag v2.0.3 from 2022-07-11), so overall it looks lightly maintained with sporadic, mostly packaging-focused updates.
Last release:
Delayed-stream is a Node.js utility that buffers events from a stream until you are ready to handle them. It lets you delay emitting buffered stream data and then release the stored events later, which can be useful for use cases like delaying an HTTP response.
The upstream source appears dormant, with the last upstream push on 2015-04-30 and no evidence of ongoing updates into 2026.
Last release:
Define multiple non-enumerable properties on an object at once. It uses Object.defineProperty when available, and falls back to standard assignment in older engines, without overriding existing properties unless predicate functions indicate force-overrides.
Maintenance status: The repository shows an upstream push on 2025-12-30, but the provided published updates only go up to v1.2.1 (2023-09-13), suggesting the project is likely in low-frequency maintenance mode rather than actively iterating.
Last release:
This software defines a data property on a JavaScript object, including configurable, enumerable, writable, and value settings. It can fall back to simple assignment in engines without descriptor support, and the optional `loose` mode can also fall back when setting non-normal data properties.
Maintenance status: Evidence of continued upstream activity (last upstream push on 2026-01-13), but the most recent published updates in the provided data are from 2024-02-13 (v1.1.4), so the source appears quiet/dormant in terms of published updates as of today (2026-09-10).
Last release:
A standalone Node.js module that compares two values using the same recursive equality behavior as assert.deepEqual, but treats NaN as equal to NaN. Useful for writing deep equality checks in JavaScript where the default deepEqual behavior differs for NaN.
The repository appears quiet, with the last upstream push on 2021-09-04 and the most recent published update (v0.1.4) on the same date, indicating no recent active maintenance.
Last release:
Decode named character references (for example, converting `amp` to `&`). It is an ES module package, intended as a workaround for webpack, and the author advises using `parse-entities` instead.
The repository appears actively maintained, with a recent upstream push on 2026-01-19 and a follow-up package update to 1.3.0 on the same date, indicating responsiveness to ecosystem/runtime needs.
Last release:
date-fns is a modern JavaScript date utility library for working with dates in both the browser and Node.js. It offers 200+ modular, pure, immutable functions and includes TypeScript support and many locales to format and manipulate native JavaScript Date objects.
date-fns appears actively maintained, with upstream pushes as recent as 2026-08-30 and multiple npm package updates in late May 2026 (v4.2.1, v4.3.0, v4.4.0, v5.0.0-alpha.0).
Last release:
Provides a small helper to extract the `byteOffset` value from a JavaScript `DataView`, handling edge cases across older and modern Node and browser engines. Useful when you need a reliable byte offset even when `DataView.prototype.byteOffset` is missing, deleted, or not exposed as a prototype accessor.
The repository appears to have been recently touched, with the last upstream push on 2026-01-13, but the most recent published version updates in the provided summaries are v1.0.1 (2024-12-19) and v1.0.0 (2024-03-04), so release cadence looks slow relative to today (2026-09-10).
Last release:
Provides a small JavaScript helper to get the `byteLength` value from a `DataView` object in a robust way. Useful when you need consistent access across older Node versions and engines where `DataView.prototype.byteLength` may be missing or deleted.
The source (inspect-js/data-view-byte-length) appears maintained intermittently, with the last upstream push on 2026-01-13, but the most recent published updates version is v1.0.2 on 2024-12-20.
Last release:
This package provides a function to extract the underlying ArrayBuffer from a JavaScript DataView reliably across different JavaScript engine behaviors. It is useful when you need access to the original ArrayBuffer for tasks like low-level binary inspection or manipulation.
The repository appears in a maintenance and light-evolution state, with an upstream push on 2026-01-13, but published “updates” (v1.0.2 in 2024-12-20) have not happened since then.
Last release:
JavaScript library for Node.js that calculates the Damerau Levenshtein distance between two strings. It returns an object with the edit steps, a relative value based on the longer string length, and a derived similarity score useful for string comparison and fuzzy matching.
The repository appears to be largely maintained through occasional dependency and developer-tooling updates (eg Mocha and transitive dev dependency bumps), with no evidence in the provided update summaries of frequent runtime bugfixes.
Last release:
CSSType provides strict TypeScript and Flow type definitions for CSS properties and values, generated from MDN data. It helps with autocompletion and type checking when writing CSS-in-JavaScript or otherwise working with CSS property objects.
The repo appears actively maintained, with an upstream push on 2026-04-10 and multiple npm/GitHub version updates published in November 2025.
Last release:
cssesc is a JavaScript library that escapes text for use in CSS strings or CSS identifiers, generating the shortest possible ASCII-only output. It exposes a `cssesc(value, options)` function (including `isIdentifier`, `quotes`, and `wrap`) and also provides a command-line `cssesc` tool for escaping from a shell.
This GitHub source appears dormant or in maintenance mode, with the last upstream push on 2023-02-02 (and no evidence of active work leading up to today, 2026-09-10).
Last release:
cross-spawn is a cross-platform drop-in replacement for Node.js spawn and spawnSync, intended to avoid Windows issues like PATHEXT handling, shebang support, commands with spaces, and problems with posix relative paths. It provides the same usage shape as Node, using spawn and spawn.sync, to help run child processes more consistently across platforms.
The source (moxystudio/node-cross-spawn) shows no evidence of active maintenance today, with the last upstream push dated 2024-11-18 and no further recorded updates through 2026-09-10.
Last release: