npm59Moderatehealth index

ejirocodes/better-auth-audit-logsAudit log plugin for Better Auth. Auto-captures auth events with severity inference, PII redaction, custom storage backends, and retention policies.
TypeScript★ 56↓ 8,808/moOct 5, 2026

jackchuka/posturaA deterministic CLI that audits your GitHub enterprise, orgs, and repos against a security baseline you own — rules are data, the bar is per-target.
Go★ 2Sep 11, 2026

kurn-dev/kurnIn-memory search that shows its work — typo-tolerant list matching with versioned, reproducible answers.
Go★ 0Oct 19, 2026
Packagist57Moderatehealth index
PHP · JavaScript · CSS★ 189↓ 15.1K/moOct 17, 2026
npm56Moderatehealth index

TanKimGwan/linmasProof-carrying defensive security reviews for AI-assisted software, with deterministic policy, portable evidence, and human review required.
JavaScript★ 2↓ 237/moSep 14, 2026
Packagist56Moderatehealth index
PHP★ 2↓ 2,623/moOct 13, 2026
npm56Moderatehealth index
JavaScript · TypeScript★ 14↓ 9/moSep 13, 2026
PyPI56Moderatehealth index
Python★ 1↓ 1,413/moSep 14, 2026
npm56Moderatehealth index
Solidity★ 22↓ 5,450/moSep 16, 2026
PyPI54Moderatehealth index
Akunimal/AI-Router-Blocker-AiOOpen-source DevSecOps gateway for AI traffic. Intercept, audit, and route LLM requests to prevent data leaks and enforce zero-trust security policies.
Python★ 1Jul 26, 2026
npm54Moderatehealth index

medelman17/edgar-tsTypeScript library for SEC EDGAR filing discovery and contract exhibit acquisition with built-in rate limiting and compliance
TypeScript · JavaScript★ 4↓ 75/moSep 6, 2026
PyPI · npm54Moderatehealth index

pofky/provenrailGuardrails for AI agents, with a receipt. Blocks destructive tool calls before they run and signs every decision into a hash-chained record anyone can verify with an open-source tool.
Python · HTML★ 0↓ 851/moOct 19, 2026
Go · PyPI53Moderatehealth index
Python · Go★ 0Sep 19, 2026
npm53Moderatehealth index

iAMv1/omnisectesterNation-state grade, defense-in-depth security testing framework. Tests web apps, extensions, desktop, mobile, cloud, AI/LLM, hardware, and supply chain from a single CLI.
JavaScript★ 0↓ 2,133/moSep 22, 2026
PyPI53Moderatehealth index
Python · Jinja★ 1↓ 7/moSep 16, 2026
npm51Moderatehealth index

cdxgen/cdx-purlStrict, definition-driven package-url parser/builder for Node.js.
JavaScript★ 1↓ 19.5K/moSep 15, 2026
npm51Moderatehealth index

regixo/regixoFree, local-first data catalog that auto-drafts your EU compliance evidence — a GDPR Art. 30 RoPA and a DORA register. One command, ~5 minutes, no Docker. Reads names and types, never the values: raw data never leaves your machine. AGPL-3.0; the paid portal adds only the signed official record — price on the page.
TypeScript · JavaScript★ 0↓ 603/moOct 21, 2026
npm50Moderatehealth index

tersignhq/tersign-jsTypeScript SDK + MCP server for Tersign, the evidence layer for the agent economy — counter-signed EIP-712 receipts, hash-chained action and disclosure records, refunds, disputes, venue-ready evidence envelopes. npm: tersign
TypeScript★ 1↓ 2,139/moSep 14, 2026

jsredmond/aws-security-baselineProduction-ready Terraform modules for AWS security services (CloudTrail, GuardDuty, Security Hub, Config, Detective, Inspector, Macie, Access Analyzer)
Python · HCL★ 1Oct 19, 2026
Go · PyPI48Weakhealth index

kordloom/loomsealAn open format for evidence someone else can check. One signed, chained, anchored file, verified offline by a free Apache-2.0 tool with no account and no server.
HTML · Go · Python★ 1Sep 20, 2026
TypeScript★ 0↓ 2,151/moSep 13, 2026
npm · Go · PyPI47Weakhealth index

nonfx/regulaRegula checks infrastructure as code templates (Terraform, CloudFormation, k8s manifests) for AWS, Azure, Google Cloud, and Kubernetes security and compliance using Open Policy Agent/Rego
Open Policy Agent · Go★ 0↓ 91/moSep 13, 2026

mwashburn160/pipeline-builderA self-service AWS platform that lets developers create compliant CI/CD pipelines in minutes while platform teams enforce security, governance, and organizational standards.
TypeScript★ 2↓ 5,643/moSep 5, 2026
Go · npm42Weakhealth index

abd-ulbasit/upgradescopeContinuous Kubernetes upgrade-readiness scanner — deprecated/removed API usage, add-on EOL, version skew, chart compat. Readiness score, ClusterReadiness CRD, CI gate, auditor reports. Self-hosted, Apache-2.0.
Go★ 0Sep 19, 2026

akiflow/licenses-verifierVerify that the dependencies of package.json are licensed in a way that allows their use in a given project
TypeScript★ 3↓ 2,000/moOct 12, 2026
JavaScript · TypeScript★ 0↓ 29.7K/moSep 15, 2026
Python★ 278Sep 16, 2026
JavaScript★ 1↓ 815/moSep 13, 2026
npm · Go38Weakhealth index
Go★ 0↓ 39/moSep 19, 2026
JavaScript★ 0↓ 981/moSep 13, 2026