#security

A type-safe-by-design, cost-limited virtual machine that enables the safe execution of untrusted code anywhere

SSH Model Context Protocol Server - 为AI模型提供SSH功能

Agent-safe sealed command execution — secrets injected behind airgap

Proof-carrying defensive security reviews for AI-assisted software, with deterministic policy, portable evidence, and human review required.

Monolog processor to keep sensitive data and secrets out of your logs

Scan your codebase for AI slop. Get a Slop Score. Ship clean. A zero-dependency CLI (85 detectors: security, performance, code-quality, design tells) + a 181-pattern Anti-Slop Protocol for AI coding agents.

CLI + MCP server that audits what AI-generated code hides: security risks, algorithmic complexity, DB quality & code review.

Opinionated, environment-aware encryption for Go, inspired by Laravel’s Crypt facade.

A small Go password hashing helper with create/verify support for Argon2id, bcrypt, scrypt, PBKDF2, and legacy MD5.

CLI vulnerability scanner powered by Vulners — search, audit, scan, offline mode

Find authorization bugs before attackers do. Free SAST — IDOR detection, 100% CVE recall, 0% false positives. 5 languages. Fully offline.

Secure your selected route by using a middleware with static password for developers only

Batteries-included Go cryptography library: AES-256-GCM & ChaCha20-Poly1305 authenticated encryption, argon2id/bcrypt password hashing, HMAC & Ed25519 signing, HKDF, key rotation, KMS envelope encryption, and secure random — safe defaults, stdlib-only, byte-for-byte interop with the TypeScript crypt-ts.

Authentication system for Node.js

Diagnose and fix performance, correctness, and architecture issues in your Svelte codebase

Go linter which checks for dangerous unicode character sequences

Securely encrypt, store, and share files, including but not limited to pictures and videos.

libsodium for .NET - A secure cryptographic library

Fortify GitHub Actions

Prometheus exporter that enriches Trivy Operator VulnerabilityReport CVEs with EPSS scores and CISA KEV presence

Rust library for Windows Filtering Platform (WFP)

El repositorio no publica descripción.

Animated Font and CAPTCHA library for Go — invisible in any single frame, only readable in motion. Resists OCR and AI vision models.

Schema-backed contract layer for governed AI/security workflows: intent, policy decisions, approvals, execution receipts, evidence, and replayable audit traces.

Supply-chain firewall for AI coding agents and developers — checks npm/PyPI packages against OSV advisories, typosquat & lifecycle-script heuristics, and your policy before install. Local-first, MCP-native.

A dependency-free, no_std Rust crate for secure in-memory secret handling, constant-time checks, and automated clear-on-drop zeroization.

Rust library for parsing and evaluating IAM policies. Provider-agnostic and designed for building flexible authorization systems.

A lightweight PHP library for generating and validating TOTP authentication codes and QR codes compatible with Google Authenticator, Microsoft Authenticator, Authy, 1Password, Bitwarden, and other RFC 6238 authenticator apps.

CVE/NVD lookup with offline CVSS scoring in DuckDB (Go)

MIMEDefang is an e-mail filtering tool that works with the Sendmail “Milter” library. MIMEDefang lets you express your filtering policies in Perl rather than C, making it quick and easy to filter or manipulate your mail.