#security

Run Trivy, Semgrep, Gitleaks and more from one file. Consolidates SAST, SCA, secrets, IaC and container findings into one SARIF report and one pass/fail gate for CI — ranked by real risk, and can fail a PR on new findings only.

Monitor network traffic per executable

Go implementation of JSON Web Tokens (JWT).

Compliance-as-Code framework that automatically enforces mostly all engineering standards.

AWS/GCP KMS-based Ethereum signer for viem with enterprise-grade security. Sign transactions and messages using keys stored in AWS or GCP KMS without exposing private keys.

Real-time guardrails for AI coding agents. 77 rules across 8 packs covering code quality, security, and infrastructure safety. Inline ignore directives, path exemptions, hook timing, and session summaries.

🤫 Discord-gated secrets broker for AI agents — encrypted vault, JWT sessions, Tailscale-only

subresource integrity for npm

🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner

Patchstack connector for JavaScript applications. Scans your lockfile and reports installed packages to Patchstack for vulnerability monitoring.

Scan AI components (MCP servers, agent skills, npm/PyPI packages) for malware & risky capabilities. Local, deterministic, evidence-anchored. Free & OSS.

Java 17 Library with tons of utility classes required in all projects

Canonicalize and neutralize adversarial Unicode — homoglyph/bidi/zalgo/invisibles — before it reaches your classifiers, indexes, and identifiers

Repair and secure untrusted HTML

🔒 Jail your AI agents — sandboxed Docker environments with network isolation for Opencode agents

🔐🔐🔐 A simple Nodejs Async LDAP authentication library

SKCapstone — The sovereign agent framework. CapAuth backbone. Cloud 9 trust. SKMemory persistence. Same agent, same bond, same context — everywhere. Runs from ~/.

A utility for managing Cloudflare Security settings

A library for various security related utility methods

A utility library for security related random operations

A loopback4 extension for helmetjs integration

Use Ciphersweet in your Laravel project

Set content security policy headers in a Laravel app

JavaScript implementation of The Update Framework (TUF)

㊙️ AntiXSS | Protection against Cross-site scripting (XSS) via PHP

An in-cluster templating controller. Manage, mutate, and validate resources using webhooks and reconciliation. Backed by Jsonnet.

Install and persist the official CrowdSec firewall bouncer on UniFi OS devices (UDM, UDM SE, UDR) with automatic recovery from firmware updates