PyPI · crates.io96Exceptionalhealth index

GitGuardian/ggshieldDetect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.
Python · Rust★ 1,997Sep 17, 2026
npm · Go94Exceptionalhealth index
TypeScript · Go★ 83↓ 72.5K/moSep 20, 2026
PyPI · crates.io94Exceptionalhealth index

mongodb/kingfisherDetect leaked secrets + live validation. Map blast radius across your stack. Revoke fast. Hundreds of rules.
Rust★ 1,226↓ 87.8K/moSep 11, 2026
Packagist · npm91Excellenthealth index
PHP★ 3↓ 29.9K/moSep 8, 2026
npm90Excellenthealth index
TypeScript★ 345Sep 20, 2026
npm90Excellenthealth index

HugoRCD/shelveOpen-source secret & environment management. Secure, simple, collaborative. CLI & Github Sync
TypeScript · Vue★ 456↓ 2,646/moSep 18, 2026
Go · npm89Excellenthealth index

Infisical/agent-vaultA HTTP credential proxy and vault for AI agents like Claude Code, OpenClaw, Hermes, custom agents + harnesses, and more.
Go · TypeScript★ 2,350Oct 15, 2026
npm89Excellenthealth index
JavaScript★ 24↓ 43.6K/moOct 21, 2026
Go88Excellenthealth index
Go★ 2,273Oct 19, 2026
npm87Excellenthealth index
JavaScript★ 5,712↓ 44.2M/moAug 28, 2026
PyPI · npm · crates.io87Excellenthealth index
Rust★ 2↓ 2,249/moSep 14, 2026
npm86Excellenthealth index
TypeScript★ 175↓ 822.4K/moOct 20, 2026
PyPI84Excellenthealth index
Python★ 29Sep 17, 2026
PyPI83Excellenthealth index
Python★ 234↓ 88.7K/moOct 20, 2026
PyPI · npm83Excellenthealth index

PrismorSec/prismor Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude, codex, langchain etc.)
Python★ 343↓ 2,863/moSep 11, 2026
PyPI83Excellenthealth index

hyperi-io/scalo-pyService runtime for Python control planes. Config, logging, metrics, health, secrets and deployment contracts, wired together.
Python★ 0↓ 21.3K/moSep 27, 2026
Go · npm83Excellenthealth index
Go · TypeScript · Python★ 1Sep 9, 2026
crates.io83Excellenthealth index

zifeo/ladeTemporary access to secrets and private networks for one command, then gone. Same wrap for humans and agents. See which access was used.
Rust★ 133↓ 75/moSep 21, 2026
Go81Excellenthealth index
Go★ 1,301Sep 15, 2026
PyPI81Excellenthealth index

diazoxide/charterControl plane for your harness across many repos — durable personas, per-task workspaces, and a credential vault the model never reads from
Python★ 17↓ 4,941/moSep 18, 2026
npm81Excellenthealth index
JavaScript★ 859↓ 1.4M/moOct 21, 2026
Go · npm81Excellenthealth index

xavidop/mamoriTyped, watchable config and secrets for Go: load from 30+ providers into validated structs, reconciled at runtime without a restart.
Go★ 17Sep 13, 2026
Makefile · Go Template★ 130Sep 12, 2026
Go80Excellenthealth index
Go · Shell★ 3Sep 20, 2026
npm · PyPI · Maven77Goodhealth index

SmooAI/configType-safe multi-language configuration management — schema validation, three-tier config (public, secrets, feature flags), and runtime clients for TypeScript, Python, Rust, and Go.
TypeScript · Rust · Go★ 0↓ 7,711/moSep 19, 2026
Go · PyPI77Goodhealth index

confiify/confii-goConfii — A type-safe configuration management library for Go. Load, merge, validate, and access config from YAML, JSON, TOML, env vars, and cloud stores. Secret resolution, drift detection, versioning, and a 10-command CLI — all in one package.
Go★ 0Oct 20, 2026

jitpass/jitFind the plaintext secrets on your Mac and move them behind Touch ID, injected just in time without breaking the tools that read them. Free and local-first.
Go★ 162Oct 22, 2026
PyPI · npm · crates.io77Goodhealth index
Rust★ 45↓ 3,839/moAug 28, 2026

yarrasys/kdbxPer-project secrets in local KeePassXC vaults, injected into commands without ever printing them. Agent-safe: PreToolUse guard hook + read-only MCP server. Single Go binary.
Go★ 4Sep 20, 2026
npm · Go75Goodhealth index

HodeTech/LeakwatchHigh-performance open-source secret scanner — detect, verify & report leaked API keys, tokens & credentials in code, Git history, container images, and the cloud.
Go★ 4Sep 14, 2026