#security

Process sandbox for untrusted code - Linux namespaces, firejail, bubblewrap, watchdog timeout

An ephemeral workflow engine which acts as the basis for the StyloBot, Wall & Workflow as well as the lucidRAG system

SPK is a single-packet authorization (SPA) port knocking tool that uses post-quantum key encapsulation to protect servers by acting as a cryptographic whitelist layer.

Uncompromising test isolation: your tests structurally cannot touch your real files, secrets, or git identity -- First-class support for Go, Python with pytest, and TypeScript with Node

一套基于 Spring Security 的企业级安全认证与授权框架，提供完整的 JWT 认证、权限管理、OAuth2 支持和 Basic Auth 等功能模块。

Symfony Security ACL Component

Secure your selected route by using a middleware with static password for developers only

This extension protects everything within fileadmin/ based on associated file restrictions.

.gitignore for AI coding agents — tell Claude/Cursor what NOT to read

Keep secrets out of Claude Code transcripts. Encrypted vault plus redaction hooks, written in Go.

A developer CLI tool that manages .env files, detects secret leaks, syncs env drift across teammates, and validates environment parity between local/staging/prod all from your terminal. Written in Go.

Infisical Provider for Secret Store CSI Driver

Panic-free bounded integer readers over untrusted byte slices (no_std, no deps)

Interceptors for PHP's native phar:// stream handling in order to enhance security.

Secrets that refuse to be stolen. Sealed API keys that decrypt only on your allowlisted repo — and raise a security error if anything tries to print, iterate, or read them. Every access attempt alerts the owner.

A rule based HTML sanitizer built on top of the HTML Agility pack

A universal security-by-default framework for Model Context Protocol (MCP) servers that provides multi-layered defense against traditional attacks.

No repository description published.

shadcn/ui for your backend — a CLI that generates production-ready TypeScript blocks (rate limiting, validation, logging) into your codebase. You own the code

Dead-simple two-way encryption for PHP, with tamper detection built in.

Multi-database connectivity diagnostic library & CLI for MySQL, PostgreSQL, MongoDB v2, Oracle, SQL Server, and SQLite with AES-256-GCM cred encryption.

Fortify GitHub Actions

Flags: WordPress admin-controlled user-based feature flags

The Zero-Trust Safety & Settlement Rail for Autonomous AI Agents. Sub-10ms deterministic guardrails, key leak defense, and cryptographic Proof-of-Safety attestations via x402 on Base ($0.002).

Passlib fork

MCP Server for the WPScan (wpscan.com) API

A comprehensive internationalization management toolkit for JavaScript/TypeScript projects. This system helps you initialize, analyze, validate, and maintain translations across multiple languages with visual reports and automated workflows.

No repository description published.

Mirror of https://gerrit.wikimedia.org/g/mediawiki/tools/phan/SecurityCheckPlugin See https://www.mediawiki.org/wiki/Developer_access for contributing

Module to prevent SSRF when sending requests in NodeJS. Blocks request to local and private IP addresses