npm54Moderatehealth index
JavaScript★ 23↓ 58.8K/moSep 15, 2026
npm54Moderatehealth index

davidnichols-ops/trustcardCryptographic trust infrastructure for MCP servers — signed manifests, TOFU pinning, two-gate enforcement, and the "npm audit" scanner.
JavaScript★ 4↓ 1,290/moSep 13, 2026

terglos/go-identogo-idento — a complete, embedded identity & authentication framework for Go (Golang). Users, roles, RBAC, password hashing, JWT (HS256/RS256/ES256 + JWKS), TOTP & SMS two-factor, OAuth/OIDC logins, sessions. Pluggable stores: GORM, pgx, sqlc.
Go★ 1Sep 18, 2026
npm53Moderatehealth index
TypeScript★ 3↓ 602/moSep 11, 2026
npm53Moderatehealth index
TypeScript · JavaScript★ 18↓ 25.7K/moOct 12, 2026
crates.io53Moderatehealth index

crates-dev/ctaresMonorepo consolidating all 21 crates-dev Rust crates into a single workspace
Rust★ 1↓ 2,250/moSep 27, 2026
Packagist53Moderatehealth index
PHP★ 36↓ 19.2K/moSep 14, 2026
Packagist · npm53Moderatehealth index

pktharindu/nova-permissionsAdd Permissions based authorization for your Nova installation via User-based Roles and Permissions. Roles are defined in the database whereas Permissions are defined in the code base.
PHP · Vue★ 136↓ 12.2K/moSep 12, 2026

warrant-dev/warrantWarrant is a highly scalable, centralized authorization service based on Google Zanzibar. Use it to define, enforce, query, and audit application authorization and access control.
Go★ 1,340Oct 19, 2026
Go★ 0Sep 9, 2026
Packagist50Moderatehealth index
PHP★ 14↓ 64.8K/moOct 12, 2026
PyPI50Moderatehealth index
Python★ 1,975↓ 474.1K/moSep 17, 2026
C#★ 5Sep 13, 2026
TypeScript · JavaScript★ 0↓ 11.6K/moOct 14, 2026
PHP★ 21↓ 28K/moSep 12, 2026
TypeScript★ 0↓ 1,113/moSep 18, 2026

golang-acexy/cloud-webStandard Go web-layer contracts for typed CRUD routers and business services, with DTO controls, pagination, responses, and row-level authority.
Go★ 0Aug 24, 2026

atol-sh/atol-sdk-goEmbeddable Go SDK for Atol: in-process JWT validation, OPA policy evaluation, and Zanzibar relationship checks for sub-millisecond, no-network authorization.
Go★ 0Sep 5, 2026
Elixir★ 23↓ 11.8K/moSep 9, 2026
TypeScript★ 0↓ 2,741/moSep 24, 2026

jchristn/GatekeeperLightweight library in C# for implementing roles-based access control (RBAC). With Gatekeeper, you can define users, roles, resources, and permissions, and authorize requests.
C#★ 35Sep 18, 2026
TypeScript★ 0↓ 1,914/moSep 13, 2026
C#★ 0Sep 11, 2026

vengtoo/vengtoo-goOfficial Go SDK for Vengtoo — authorization client for Vengtoo cloud and local agent
Go★ 0Sep 9, 2026

imchintoo/rbac-fsGit-friendly, zero-database RBAC — roles and permissions as JSON files, multi-tenant by default, works in Node and the browser, in JS or TS.
TypeScript · JavaScript★ 0↓ 13K/moSep 15, 2026

cpjk/canary:hatching_chick: Elixir authorization and resource-loading library for Plug applications.
Elixir★ 485↓ 3,469/moSep 9, 2026

IsaiahTek/nestjs-multi-authBuild a complete authentication system in NestJS — without Firebase or Auth0. nestjs-multi-auth is a self-hosted identity provider that handles: JWT + refresh tokens OAuth (Google, Facebook, Apple) Magic links (passwordless login) MFA / 2FA (TOTP) Account linking (multiple login methods per user)
TypeScript · JavaScript★ 1↓ 840/moSep 12, 2026

OpenIdentityPlatform/OpenAMOpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
Java★ 899Oct 19, 2026
PHP★ 427↓ 57.4K/moOct 20, 2026
Python★ 12K↓ 17M/moSep 17, 2026