npm
adamsjack711-ux/pkgxray
Local CLI/MCP tool that audits AI-agent extensions and npm packages for supply-chain risk. Zero-dep Node. Static scan + OSV vuln precheck + sandboxed quarantine.
MIT17 jul 2026 · métricas 2.10.0
Todas las etiquetas
Etiqueta del catálogo
#security
Todos los repositorios del registro público que llevan esta etiqueta, procedente de sus topics de GitHub o de las palabras clave que publican sus registros de paquetes. La salud se mide con la misma metodología versionada que el resto del registro.
836 registros
npm
badchars/cve-mcp
23-tool MCP server for CVE & vulnerability intelligence. NVD, EPSS, CISA KEV, GitHub Advisory, OSV — unified in one server. Risk scoring, bulk triage, exploit search. 2 dependencies, runs with npx.
MIT4 ago 2026 · métricas 2.10.0
Go
elementsinteractive/sheriff
Sheriff is a tool to scan repositories and generate security reports.
MIT17 jul 2026 · métricas 2.10.0
npm
entwico/astroscope
Astro integrations built for production — logging, tracing, security, i18n, and more for real-world websites.
MIT22 jul 2026 · métricas 2.10.0
Go
jackchuka/git-customs
Client-side, cross-host pre-push gate that catches PII and secrets — using an engine you choose — before anything reaches a public remote.
MIT17 jul 2026 · métricas 2.10.0
Go
jackchuka/postura
A deterministic CLI that audits your GitHub enterprise, orgs, and repos against a security baseline you own — rules are data, the bar is per-target.
MIT19 jul 2026 · métricas 2.10.0
Go
krisiasty/vcheck
Vulnerability detection and mitigation tool for Copy Fail and Dirty Frag bugs (CVE-2026-31431, CVE-2026-43284, CVE-2026-43500)
Apache-2.018 jul 2026 · métricas 2.10.0
npm
michaelpipkin/dependabot-agent
El repositorio no publica descripción.
MIT27 jul 2026 · métricas 2.10.0
Go
orislabsdev/gocore
Engineering-first HTTP backend library for Go focused on performance, security, and production-ready architecture.
MIT23 jul 2026 · métricas 2.10.0
npm
sudoeren/arhus
local-first security analysis for TypeScript & JavaScript
MIT17 jul 2026 · métricas 2.10.0
npm
taherkaraki/tie-mcp-server
El repositorio no publica descripción.
MIT15 jul 2026 · métricas 2.10.0
Go
ufukty/ovpn-auth
Simple to use, easy to deploy 2FA login for OpenVPN servers
Apache-2.027 jul 2026 · métricas 2.10.0
RubyGems
urbanadventurer/WhatWeb
Next generation web scanner
GPL-2.028 ago 2026 · métricas 2.10.0
PyPI · npm
wrapsec/wrapsec
AI security gateway that inspects every prompt and response through a multi-layer detection pipeline - enforcing ALLOW, BLOCK, or SANITIZE before anything reaches the model.
MIT28 jul 2026 · métricas 2.10.0
Go
yedidiaSch/pandion
Spin up secure, throwaway multi-node cloud test clusters — CPU or GPU — for distributed C++/IPC software. One command up, nothing left behind.
AGPL-3.017 jul 2026 · métricas 2.10.0
NuGet
FabriBertani/Plugin.Maui.ScreenSecurity
Safeguard your .NET MAUI app effortlessly by preventing content exposure, screenshots, and recordings with ease.
MIT3 ago 2026 · métricas 2.10.0
npm · Go
Hossiy21/razify
A developer CLI tool that manages .env files, detects secret leaks, syncs env drift across teammates, and validates environment parity between local/staging/prod all from your terminal. Written in Go.
MIT21 ago 2026 · métricas 2.10.0
npm
Majikah/majik-key
Majik Key is a next-generation seed phrase account library for creating and managing mnemonic-based identities. It provides a post-quantum ready, high-security bridge between BIP39 mnemonics and the Majikah ecosystem.
Licencia propia18 jul 2026 · métricas 2.10.0
crates.io
SecurityRonin/safe-read
Panic-free bounded integer readers over untrusted byte slices (no_std, no deps)
Apache-2.09 ago 2026 · métricas 2.10.0
npm
Sting25/ai-coding-rules-scaffold
Two-layer enforcement (pre-commit hook + CI mirror) for small teams using AI agents. Catches debug leaks, file growth, secrets, and forbidden patterns before they merge.
MIT17 jul 2026 · métricas 2.10.0
Go
atensecurity/terraform-provider-thoth
Official Terraform provider for the Thoth headless control plane
Apache-2.017 jul 2026 · métricas 2.10.0
Go
crenoxhq/crenox
Statically compiled, zero-dependency Git pre-commit secret scanner and credentials detector written in Go. An alternative to Gitleaks and git-secrets.
AGPL-3.017 jul 2026 · métricas 2.10.0
PyPI
dwolfhub/zxcvbn-python
Python implementation of Dropbox's realistic password strength estimator
MIT27 ago 2026 · métricas 2.10.0
RubyGems
markets/invisible_captcha
🍯 Unobtrusive and flexible spam protection for Rails apps
MIT30 jul 2026 · métricas 2.10.0
PyPI
meidielo/aes-256-gcm-python-tool
Reviewable AES-256-GCM educational tool with Argon2id, JSON envelopes, and safe-mode streaming.
MIT19 jul 2026 · métricas 2.10.0
npm
mobb-dev/bugsy
Automatic security vulnerability remediation for your code.
MIT26 jul 2026 · métricas 2.10.0
—
momenbasel/keyFinder
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
MIT27 jul 2026 · métricas 2.10.0
npm
netlify/plugin-csp-nonce
Build plugin to use a nonce for the script-src directive of your site's Content Security Policy.
Sin licencia19 jul 2026 · métricas 2.10.0
npm · Go · PyPI
nonfx/regula
Regula checks infrastructure as code templates (Terraform, CloudFormation, k8s manifests) for AWS, Azure, Google Cloud, and Kubernetes security and compliance using Open Policy Agent/Rego
Apache-2.026 jul 2026 · métricas 2.10.0
Packagist
phpMussel/Core
phpMussel core (dedicated Composer version).
GPL-2.018 ago 2026 · métricas 2.10.0