npm80Excellenthealth index
JavaScript★ 20.5K↓ 666M/moSep 16, 2026
Go80Excellenthealth index

mpyw/suveGit-like CLI/TUI/GUI for AWS Parameter Store / Secrets Manager, Google Cloud Secret Manager, and Azure Key Vault / App Configuration
Go★ 14Oct 21, 2026
Go80Excellenthealth index

mrz1836/hush🤫 Discord-gated secrets broker for AI agents — encrypted vault, JWT sessions, Tailscale-only
Go★ 1Sep 10, 2026
Go80Excellenthealth index
Go★ 8Sep 11, 2026
PyPI · npm80Excellenthealth index

superdesigndev/tregOpenRouter for agent tools. Join community here: https://discord.gg/6mQYYfFMAn
Python · HTML★ 5,325↓ 8,377/moOct 16, 2026
TypeScript★ 161↓ 19.1K/moSep 13, 2026
NuGet · PyPI78Goodhealth index
C#★ 12Sep 13, 2026

pypa/gh-action-pypi-publishThe blessed :octocat: GitHub Action, for publishing your :package: distribution files to PyPI, the tokenless way: https://github.com/marketplace/actions/pypi-publish
Python · Shell★ 1,182Sep 19, 2026
JavaScript · TypeScript★ 0↓ 5,272/moSep 19, 2026
JavaScript★ 1,056↓ 152M/moSep 19, 2026
Python★ 1↓ 320/moSep 20, 2026

jitpass/jitFind the plaintext secrets on your Mac and move them behind Touch ID, injected just in time without breaking the tools that read them. Free and local-first.
Go★ 162Oct 22, 2026

materwelonDhruv/envaptType-safe config for TypeScript. Read typed values from any source, .env files, process.env, Workers bindings, browser bundles, or any object you bind. Zero runtime deps, one API across Node, Bun, Deno, Workers, and the browser.
TypeScript · MDX★ 23↓ 1,392/moSep 13, 2026
PyPI · npm · crates.io77Goodhealth index
Rust★ 45↓ 3,839/moAug 28, 2026
C#★ 37Sep 14, 2026

yarrasys/kdbxPer-project secrets in local KeePassXC vaults, injected into commands without ever printing them. Agent-safe: PreToolUse guard hook + read-only MCP server. Single Go binary.
Go★ 4Sep 20, 2026
npm · Go75Goodhealth index

HodeTech/LeakwatchHigh-performance open-source secret scanner — detect, verify & report leaked API keys, tokens & credentials in code, Git history, container images, and the cloud.
Go★ 4Sep 14, 2026
JavaScript · TypeScript★ 1↓ 2,113/moSep 18, 2026

ankhorage/contractsShared TypeScript contracts for app manifests, UI schemas, auth, database, infra, and provider adapters.
HTML · TypeScript★ 1↓ 26.4K/moSep 14, 2026

escoffier-labs/agentpantryYour agent machine needs your logins. Pantry ships them sealed. Opt-in AES-256-GCM browser session and secret sync for AI agent hosts.
Go★ 2Sep 16, 2026
crates.io75Goodhealth index
Rust★ 2↓ 28.9K/moSep 14, 2026
crates.io · npm75Goodhealth index

meteora-pro/devboy-toolsConfigurable tool bundle for AI coding agents — use via MCP server, CLI, or agent skills. npm wrapper for the Rust binary.
Rust★ 14↓ 13K/moSep 13, 2026
TypeScript · Swift★ 15↓ 649/moSep 14, 2026
crates.io75Goodhealth index

valkyoth/sanitizationA dependency-free, no_std Rust crate for secure in-memory secret handling, constant-time checks, and automated clear-on-drop zeroization.
Rust · Python★ 1↓ 8,660/moSep 11, 2026

whiskeyjimbo/bentoSafe-by-default script sandbox in Go. Runs programs under default-deny OS isolation on Linux (bubblewrap + Landlock + seccomp): credential shielding, per-host network allowlisting via a host-side CONNECT proxy, resource limits, and a profile-then-grant consent flow. macOS support is planned.
Go★ 0Sep 19, 2026
C#★ 73Sep 16, 2026
TypeScript★ 11↓ 522.7K/moOct 1, 2026
PyPI · npm73Goodhealth index

ninadphalak/LLM-Shield-ProxyStreaming privacy for LLM apps: pii-leak-benchmark (does your gateway leak PII in streams?), chunk-invariance (one-line test for split-boundary leaks), mcp-ssrf-check, and a self-hosted redacting gateway.
Python★ 13↓ 4,234/moOct 20, 2026
TypeScript · MDX★ 0↓ 1,044/moSep 13, 2026
TypeScript★ 373↓ 34.2K/moSep 15, 2026