Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Composio powers 1000+ toolkits, tool search, context management, authentication, and a sandboxed workbench to help you build AI agents that turn intent into action.
Authentication for the Web.
Bitwarden client apps (web, browser extension, desktop, and cli).
- webextension
- javascript
- bitwarden
- typescript
Experience email the way you want with Mail0 – the first open source email app that puts your privacy and safety first. Join the discord: https://mail0.link/discord
Help secure Express apps with various HTTP headers
Sandbox for developing and testing UI components in isolation
🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework
Android Reverse-Engineering Workbench for VS Code
- apktool
- apk-decompiler
- apk-editor
- smali
Deprecated in favour of Video.js 10; security fixes only until January 2028. UI components and hooks for building video and audio players on the web.
Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable.
Cross-platform desktop GUI app to clean image metadata
Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.
- enterprise-software
- saml
- saml2
- saml-service-provider
🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.
A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Cursor, DeepSeek Harness, Devin CLI, GitHub Copilot CLI, Grok Build, Hermes Agent, Kimi Code, OpenClaw, OpenCode, and Pi.
Authentication built for Nuxt! Easily add authentication via OAuth providers, credentials or Email Magic URLs!
AI-ready reference architecture for Angular / ASP.NET Core projects. A hardened foundation with secure authentication, authorization, role and user management, and consistent patterns designed to be safely extended by AI tools. Stop letting AI hallucinate your auth and DB logic - give it a production-grade foundation to build on.
A JavaScript/TypeScript API for interacting with the XRP Ledger in Node.js and the browser
- ripple
- xrp-ledger
- javascript
- api
📈 Open source, privacy-first web analytics — a cookie-less Google Analytics alternative with built-in error tracking and performance monitoring. Self-host it or use our cloud. Get started for free!
Audited & minimal JS implementation of elliptic curve cryptography.
Agent-first reverse engineering for macOS, Windows and Linux: any ACP agent reads, renames and patches binaries, Android apps and GPU kernels next to you.
Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
Codesign Electron macOS apps
- electron-osx-sign
- macos
- entitlements
- provisioning-profiles
Fastest 5KB JS implementation of ed25519 signatures