Repository Index

A utility to safely generate malicious network traffic patterns and evaluate controls.

• security
• testing-tools
• monitoring
• intrusion-detection

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code

Safe, simple and fast JSON Web Tokens for Go

• jwt
• jwt-token
• jwt-claims
• dependency-free

A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.

• golang
• golang-library
• scrypt
• password-hash

Tamper-evident audit log for Go: an append-only, hash-chained, optionally Ed25519-signed log/slog handler, with offline logx verify. Built on the standard library, zero third-party dependencies. Also a full slog toolkit (colored output, JSON, rotation, fan-out, CLI).

• cli
• go
• golang
• slog