nist — open-source software health

npm · PyPI

98Exceptionalhealth index

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

Python · Svelte★ 4,380Aug 28, 2026

Custom licenseAug 28, 2026 · metrics 2.10.0

npm

94Exceptionalhealth index

hack23/cia-compliance-manager

The CIA Compliance Manager is an application that helps organizations assess and manage the availability, integrity, and confidentiality of their systems and data based on customizable security levels, providing real-time cost estimates, business impact assessments, and technical implementation details.

TypeScript · HTML★ 20↓ 3,879/moJul 17, 2026

Apache-2.0Jul 17, 2026 · metrics 2.10.0

PyPI

89Excellenthealth index

MolSSI/QCElemental

Periodic table, physical constants, and molecule parsing for quantum chemistry.

Python★ 196Aug 4, 2026

BSD-3-ClauseAug 4, 2026 · metrics 2.10.0

npm · Go

81Excellenthealth index

mitre/hdf-libs

Heimdall Data Format (HDF) is a standardized JSON schema for representing security assessment baselines and results across diverse tools and platforms.

Go · TypeScript★ 3↓ 6,373/moSep 5, 2026

Custom licenseSep 5, 2026 · metrics 2.10.0

npm

80Excellenthealth index

MarkAC007/mcp-server-scf

MCP server for SCF Controls Platform — security compliance controls, frameworks, evidence, and risk management for AI agents

TypeScript★ 1↓ 3,562/moJul 22, 2026

MITJul 22, 2026 · metrics 2.10.0

npm

80Excellenthealth index

lua-ai-global/governance

Zero-dependency TypeScript SDK for AI agent governance: policy enforcement, injection detection, tamper-evident audit, and standards mapping (EU AI Act, OWASP, NIST, ISO 42001)

TypeScript★ 25↓ 3,545/moJul 26, 2026

MITJul 26, 2026 · metrics 2.10.0

npm

80Excellenthealth index

quantakrypto/pqc-tools

Open-source post-quantum readiness tooling by quantakrypto

TypeScript★ 9↓ 8,476/moJul 27, 2026

Apache-2.0Jul 27, 2026 · metrics 2.10.0

npm

78Goodhealth index

Null-Square/Null-CLi

Open-source AI pentest and compliance-readiness CLI by NullSquare.

TypeScript · JavaScript★ 81↓ 147/moAug 4, 2026

Custom licenseAug 4, 2026 · metrics 2.10.0

crates.io

77Goodhealth index

RustCrypto/elliptic-curves

Collection of pure Rust elliptic curve implementations: NIST P-224, P-256, P-384, P-521, secp256k1, SM2

Rust★ 873↓ 32.5M/moAug 22, 2026

No licenseAug 22, 2026 · metrics 2.10.0

crates.io

77Goodhealth index

RustCrypto/signatures

Cryptographic signature algorithms: DSA, ECDSA, Ed25519

Rust★ 655↓ 52.3M/moAug 6, 2026

No licenseAug 6, 2026 · metrics 2.10.0

PyPI

75Goodhealth index

msaleme/red-team-blue-team-agent-fabric

540 security tests for AI agent systems — MCP, A2A, x402/L402, decision governance, benchmark integrity, skill supply chain. AIUC-1 pre-cert, NIST AI 800-2 aligned, MCP tool-poisoning reproduction. v4.9.1

Python★ 20↓ 667/moJul 20, 2026

Apache-2.0Jul 20, 2026 · metrics 2.10.0

PyPI

62Moderatehealth index

veldtlabs/veldt-kya

KYA (Know Your Agents) — Open-source trust, governance, and evidentiary assurance infrastructure for autonomous systems. Built on KYP (Know Your Principal), a unified trust model for human users, AI agents, service accounts, and machine identities.

Python★ 2↓ 5,683/moJul 16, 2026

Custom licenseJul 16, 2026 · metrics 2.10.0

Packagist

47Weakhealth index

langleyfoxall/laravel-nist-password-rules

🔒 Laravel validation rules that follow the password related recommendations found in NIST Special Publication 800-63B section 5.

PHP★ 211↓ 6,516/moAug 4, 2026

LGPL-3.0Aug 4, 2026 · metrics 2.10.0

—

36Weakhealth index

PxG-Studio/Lapaki

🏥 Audit-ready healthcare data architecture framework — HIPAA, COBIT 2019, NIST SP 800-53, ISO 27001. Generic, PHI-free, shareable. 10/10 compliance score.

HTML · Python★ 0Aug 4, 2026

Custom licenseAug 4, 2026 · metrics 2.10.0

crates.io

34At Riskhealth index

RustCrypto/KDFs

Collection of Key Derivation Functions written in pure Rust

Rust★ 104↓ 19.1M/moAug 8, 2026

No licenseAug 8, 2026 · metrics 2.10.0

Packagist

34At Riskhealth index

spiral/security

[READ ONLY] RBAC security layer based on NIST definition, role/rule/permission associations, bulletproof. Subtree split of the Spiral Security component (see spiral/framework)

PHP★ 6↓ 455.4K/moAug 22, 2026

MITAug 22, 2026 · metrics 2.10.0

PyPI

28At Riskhealth index

msd0pe-1/cve-maker

Tool to find CVEs and Exploits.

Python★ 486Aug 4, 2026

GPL-3.0Aug 4, 2026 · metrics 2.10.0

Maven

23At Riskhealth index

mhshams/jnbis

NIST Biometric Image Software (Java Implementation)

Java★ 116Aug 4, 2026

Apache-2.0Aug 4, 2026 · metrics 2.10.0

#nist