PyPI95Exceptionalhealth index
Python★ 789↓ 10M/moOct 21, 2026
npm95Exceptionalhealth index

openwallet-foundation-labs/identity-common-tsIdentity Common TypeScript provides a shared library of TypeScript types and utilities for identity-related projects, promoting consistency and reducing duplication across the ecosystem.
TypeScript★ 12↓ 283.5K/moOct 20, 2026
PyPI90Excellenthealth index

61418/boto3-refresh-sessionA drop-in replacement for boto3.Session named RefreshableSession. It automatically refreshes temporary AWS credentials, caches clients, and natively supports MFA providers. It also supports automatic temporary AWS security credential refresh for STS, IOT Core, and custom credential callables.
Python★ 52↓ 19.4K/moSep 14, 2026
crates.io90Excellenthealth index

maxlambrecht/rust-spiffeA collection of crates for SPIFFE workload identity, Workload API clients, SPIRE-specific APIs, and TLS integration.
Rust★ 42↓ 590.3K/moSep 11, 2026
crates.io86Excellenthealth index

c410-f3r/wtxWritten by humans. WTX is a collection of different transport implementations and related tools focused primarily on web technologies.
Rust★ 400↓ 3,413/moSep 15, 2026
Packagist · npm86Excellenthealth index

lsnepomuceno/laravel-a1-pdf-signDigital signatures for Laravel, on top of signet-pdf. Sign straight from a Storage disk, keep the private key outside the process, and fake all of it with Process::fake(), Http::fake() and Storage::fake(). A1/x509 certificates, PAdES profiles, RFC 3161 timestamps, LTV and cryptographic validation.
PHP★ 317↓ 3,406/moSep 16, 2026
Packagist86Excellenthealth index
PHP★ 5,585↓ 11.6M/moAug 27, 2026
crates.io84Excellenthealth index
Rust★ 68↓ 2M/moAug 27, 2026
Go84Excellenthealth index

forgekeep/nebula-meshSelf-hosted control plane for Slack Nebula mesh VPN — issue certificates, manage hosts, distribute config from one place. Go + SQLite + htmx.
Go★ 26Sep 8, 2026
Go84Excellenthealth index

kanywst/y509TUI for X.509 certificate chains: verifies trust, and catches the missing intermediates and bad ordering that break curl but not browsers
Go · Shell★ 28Sep 12, 2026
crates.io · npm78Goodhealth index

KarpelesLab/purecryptoA pure-Rust, no_std cryptography toolkit: constant-time primitives, classical & post-quantum public-key, X.509, and the TLS/DTLS/QUIC stack — no foreign code, no C dependencies.
Rust★ 6↓ 4,758/moOct 20, 2026
crates.io78Goodhealth index
Rust★ 335↓ 90.2M/moSep 16, 2026

ZYLVEXT/litestar-authFail-closed human and workload authentication for Python and Litestar: opaque sessions, mTLS, DPoP, SPIFFE, webhooks, and HTTP signatures.
Python★ 3↓ 2,701/moAug 23, 2026

blamejs/pkiPure-JavaScript PKI toolkit that owns its stack — X.509, ASN.1/DER, CMS, PQC-first.
JavaScript★ 2↓ 17.6K/moSep 13, 2026
Go★ 99Oct 20, 2026

stacksjs/tlsx🔐 A modern & lightweight TLS library & CLI. Built for automation—HTTPS by default. Similar to mkcert.
TypeScript★ 47↓ 45.9K/moSep 10, 2026

digitalbazaar/forgeA native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps
JavaScript★ 5,332↓ 144M/moSep 17, 2026
Packagist75Goodhealth index
PHP★ 31↓ 5.9M/moAug 27, 2026
PyPI · crates.io73Goodhealth index

SCGIS-Wales/dcertA Rust CLI and MCP server for X.509 certificate analysis, format conversion, and key verification. Reads certificates from PEM files or HTTPS endpoints. Validates TLS connections, checks revocation status, converts between PFX and PEM formats and integrates with AI-powered IDEs via the Model Context Protocol (MCP) and Vault.
Rust · Python★ 4↓ 7,475/moSep 27, 2026

richardwooding/c2paPure-Go (no cgo) C2PA / Content Credentials library: a fast unverified reader plus full cryptographic validation — COSE signature, certificate chain, hash bindings, RFC 3161 timestamp. Reads JPEG, PNG, WebP, GIF, TIFF/DNG, HEIC, AVIF, SVG, MP4, MOV, AVI, WAV, MP3 and PDF.
Go★ 1Sep 11, 2026
crates.io69Goodhealth index

namecare/x509-validatorValidates an X.509 certificate chain against a set of root certificates and verifier policy.
Rust★ 8↓ 2,196/moSep 28, 2026
crates.io67Goodhealth index
Rust★ 2↓ 59.9K/moOct 17, 2026

lethek/FluentCertificatesFluentCertificates is a library using the Immutable Fluent Builder pattern for easily creating, finding and exporting certificates. Makes it simple to generate your own certificate chains, or just stand-alone self-signed certificates.
C#★ 12Oct 19, 2026
TypeScript★ 81↓ 385.9K/moOct 4, 2026

kuveris/ocspStandalone, CA-agnostic OCSP responder (RFC 6960) in Go. Answers certificate status from a CRL, a URL, or a CA REST API.
Go★ 2Oct 19, 2026

sukujgrg/go-certstoreA Go library for accessing X.509 certificate identities across native OS stores and token/database-backed backends.
Go★ 2Sep 11, 2026

Bugs5382/go-certkitParse, inspect and convert X.509 certificate/key containers (PEM, DER, PKCS#12, PKCS#7, JKS/JCEKS) through one normalized Bundle type.
Go★ 1Oct 18, 2026
Maven · Go62Moderatehealth index

demoiselle/signerRepositório que contém os componentes para facilitar a implementação de assinatura digital nos padrões da ICP-BRASIL
Java★ 175Sep 13, 2026

kanywst/spiffe-compliance-checkerStatic MUST-clause compliance checker for SPIFFE artifacts (SPIFFE-ID, X.509-SVID, JWT-SVID, WIT-SVID, trust bundle, bundle map). Text, JSON, or SARIF output — every failure cites the spec section.
Go★ 0Sep 21, 2026
crates.io62Moderatehealth index
Rust★ 277↓ 14.1M/moSep 17, 2026