npm89Excellenthealth index

yeojz/otplibOne Time Password (OTP) / 2FA for Node.js and Browser - Supports HOTP, TOTP and Google Authenticator
TypeScript★ 2,292↓ 51.3M/moSep 17, 2026
Packagist · Go87Excellenthealth index
Java · Elixir · C#★ 1,741↓ 423.5K/moSep 8, 2026
npm · Go · PyPI84Excellenthealth index

primitivedotdev/sdksOfficial Node.js, Python, and Go SDKs plus the primitive CLI for Primitive — email infrastructure for AI agents. Generated from the OpenAPI spec.
TypeScript · Python★ 7↓ 30.7K/moSep 12, 2026
npm · Go83Excellenthealth index
TypeScript★ 10↓ 19.9K/moOct 20, 2026
Packagist · PyPI81Excellenthealth index

infocyph/OTPSimple but Secure Generic OTP, OCRA (RFC6287), TOTP (RFC6238) & HOTP (RFC4226) solution!
PHP★ 17↓ 10.3K/moSep 7, 2026
npm80Excellenthealth index

JiangJie/minigame-stdCross-platform standard library for WeChat minigame and web browsers with unified APIs for crypto, fs, fetch, storage, and more.
TypeScript★ 3↓ 3,438/moSep 9, 2026
NuGet80Excellenthealth index

NetDevPack/Security.JwtJwt Manager. Set of components to deal with Jwt Stuff. Automate your key rotating, add support for jwks_uri. Store your cryptography keys in a secure place.
C#★ 297Oct 1, 2026
TypeScript★ 1↓ 6,265/moOct 14, 2026

digitalbazaar/forgeA native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps
JavaScript★ 5,332↓ 144M/moSep 17, 2026
TypeScript★ 5↓ 7,724/moSep 18, 2026
TypeScript★ 932↓ 385M/moOct 20, 2026

krovacloud/krova-nodeMonorepo for the Krova Cloud JS/TS packages — SDK, CLI, MCP, webhook verifier, n8n node.
TypeScript★ 0↓ 6,150/moSep 13, 2026
C#★ 25Sep 15, 2026

putervision/WebCryptZero-dependency Web Crypto suite & Model Context Protocol (MCP) server for AES-256-GCM, RSA-4096, and AI agent security.
JavaScript★ 28↓ 18.7K/moSep 21, 2026
PyPI · npm67Goodhealth index

ginkida/sallyportA security-first bridge between Claude Code (MCP) and Chrome — HMAC pairing, domain allowlist, per-domain evaluate opt-in.
TypeScript · Python★ 10↓ 576/moSep 10, 2026

junkurihara/jscuJavaScript cryptographic utilities for crypto-suite compatibility including PEM/X509/JWK converter.
TypeScript · JavaScript★ 162↓ 462.7K/moSep 9, 2026
Maven · PyPI65Goodhealth index

AindriuB/data-prismData Prism is an open-source privacy layer for Java/Spring teams putting LLM agents or MCP clients in front of internal APIs holding customer data. It pseudonymises personal data per privacy scope, refuses anything unclassified, and can keep a hash-chained audit trail.
Java★ 1Oct 19, 2026

emn178/js-sha256A simple SHA-256 / SHA-224 hash function for JavaScript supports UTF-8 encoding.
JavaScript★ 969↓ 20M/moAug 27, 2026

emn178/js-sha3A simple SHA-3 / Keccak hash function for JavaScript supports UTF-8 encoding.
JavaScript★ 369↓ 16.6M/moAug 27, 2026
NuGet63Moderatehealth index

Unisys/NSignNSign (/ˈensaɪn/) is a set of .Net libraries for HTTP Message Signatures (RFC 9421).
C#★ 22Sep 15, 2026
crates.io63Moderatehealth index

constantoine/totp-rsRFC-compliant TOTP implementation with ease of use as a goal and additionnal QoL features.
Rust★ 271↓ 973K/moSep 17, 2026
npm63Moderatehealth index

emn178/js-md5A simple MD5 hash function for JavaScript supports UTF-8 encoding.
JavaScript★ 837↓ 28.7M/moAug 27, 2026
Packagist62Moderatehealth index

remotemerge/totp-phpLightweight, fast, and secure TOTP (2FA) authentication library for PHP — battle tested, dependency free, and ready for enterprise integration.
PHP★ 25↓ 3,462/moSep 19, 2026
npm57Moderatehealth index
JavaScript★ 12↓ 78.3K/moSep 5, 2026

ubgo/cryptBatteries-included Go cryptography library: AES-256-GCM & ChaCha20-Poly1305 authenticated encryption, argon2id/bcrypt password hashing, HMAC & Ed25519 signing, HKDF, key rotation, KMS envelope encryption, and secure random — safe defaults, stdlib-only, byte-for-byte interop with the TypeScript crypt-ts.
Go★ 1Sep 10, 2026
crates.io54Moderatehealth index
Rust★ 39↓ 2.2M/moSep 25, 2026
npm · PyPI54Moderatehealth index
TypeScript · Python★ 0↓ 1,278/moSep 17, 2026
PyPI · crates.io · Go48Weakhealth index

bokelleher/sesame-sdkPortable SDK and conformance vectors for SESAME, the proposed SCTE 130-9 security layer for the ESAM interface: HMAC auth, channel-scoped authorization, and AES-256-GCM payload encryption over HTTP headers.
Rust · C++ · Python★ 2↓ 172/moSep 16, 2026
crates.io44Weakhealth index
Rust★ 8↓ 528.4K/moSep 25, 2026
crates.io44Weakhealth index
Rust★ 11↓ 1M/moSep 25, 2026