47,133 repositories indexed
1–17 of 17 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
Your web application for managing personal data.
This is the development tree. Production downloads are at:
An opinionated production-ready SQL-/Swagger-first RESTful JSON API written in Go, highly integrated with VSCode DevContainers by allaboutapps.
The Ultimate Boilerplate for Products.
A production-ready SaaS template built with Next.js 15, Supabase, and Tailwind CSS. Includes authentication, user management, file storage, task management demos, and secure RLS policies. Now with a complete React Native + Expo mobile app template! Easily customizable with pre-built themes, i18n support (EN/PL/ZH), and legal documents.
A Rails 6 boilerplate to create your next Saas product. Preloaded with graphQL, devise, JWT, CanCanCan, RailsAdmin, Rubocop, Rspec, i18n and more.
A secure and easy-to-use store for your production secrets
Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.
CTF in a box. Minimal setup required. (not production-ready yet)
🚀 Production-ready AI-friendly Go REST API boilerplate with Clean Architecture, JWT auth, RBAC, PostgreSQL migrations, and highly tested. AI-optimized with built-in guidelines for most used IDEs. Docker hot-reload, Swagger docs, one-command setup. Build production APIs in minutes, not weeks.
The open-source safety layer for AI agents — block unsafe tool calls, require approval, enforce budgets, audit, replay.
Encrypted .env files with TOTP unsealing for production deploys. Cross-stack (Node + Java). Zero deps. Defends against npm supply-chain attacks.
Go client for Meta's Threads - OAuth 2.0, rate limiting, full API coverage, production-ready
A production-ready Go SDK for TRON: gRPC client with connection pooling, HD wallets, TRC-10/TRC-20, event decoding, transaction simulation, and shielded TRC-20 (Sapling) support. 85% test coverage.