Trending repositories

1.JCodesMore / ai-website-cloner-template

Clone any website with one command using AI coding agents

• ai
• ai-agents
• ai-tools
• automation
• boilerplate
• claude
• +13 more

2.KeygraphHQ / shannon

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

• penetration-testing
• pentesting
• security-audit
• security-automation
• security-tools
• ai-penetration-testing
• +14 more

3.koala73 / worldmonitor

Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness interface

• ai
• dashboard
• geopolitics
• monitoring
• news
• osint
• +6 more

4.promptfoo / promptfoo

Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.

• llm
• prompt-engineering
• prompts
• llmops
• prompt-testing
• testing
• +12 more

5.AdguardTeam / AdGuardHome

Network-wide ads & trackers blocking DNS server

• dns
• adblock
• privacy
• golang
• adguard
• open-source
• +4 more

6.super-productivity / super-productivity

Super Productivity is an advanced todo list app with integrated Timeboxing and time tracking capabilities. It also comes with integrations for Jira, GitLab, GitHub and Open Project.

• task-manager
• linux
• macos
• time-tracker
• to-do-list
• productivity
• +14 more

7.NPMscan / npmscan-action

Catch risky npm dependency changes before they merge.

• dependency-analysis
• devsecops
• github-actions
• malware
• npm
• npm-security
• +2 more

8.Infisical / infisical

Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.

• environment-variables
• secret-management
• secrets
• security
• open-source
• secret-manager
• +14 more

9.NangoHQ / nango

Connect your agents & product to 1,000 APIs.

• oauth2
• oauth1
• api
• api-client
• integrations
• api-integration
• +6 more

10.ComposioHQ / composio

Composio powers 1000+ toolkits, tool search, context management, authentication, and a sandboxed workbench to help you build AI agents that turn intent into action.

• ai
• python
• agents
• aiagents
• function-calling
• developer-tools
• +11 more

11.better-auth / better-auth

The most comprehensive authentication framework

• authentication
• oauth
• oauth2
• typescript
• iam
• oidc
• +2 more

12.lissy93 / web-check

🕵️‍♂️ All-in-one OSINT tool for analysing any website

• osint
• privacy
• security
• security-tools
• sysadmin

13.appwrite / appwrite

The open-source cloud for agents & devs. Including Auth, Databases, Storage, Functions, Messaging, Hosting, Realtime, WAF and more

• appwrite
• docker
• backend-as-a-service
• javascript
• flutter
• backend
• +14 more

14.fosrl / pangolin

Modern networking and security platform providing secure access and connectivity to apps, infrastructure, and AI workloads. Connect and protect your users.

• reverse-proxy
• wireguard
• single-sign-on
• self-hosted
• oidc
• vpn
• +14 more

15.fastapi / full-stack-fastapi-template

Full-stack web application template with FastAPI, React, SQLModel, PostgreSQL, Vite, Tailwind CSS, shadcn/ui, FastAPI Cloud, and Docker Compose.

• python
• docker
• postgresql
• fastapi
• jwt
• openapi
• +14 more

16.juice-shop / juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

• owasp
• javascript
• vulnerable
• hacking
• application-security
• owasp-top-10
• +8 more

17.kenryu42 / cc-safety-net

A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Cursor, DeepSeek Harness, Devin CLI, GitHub Copilot CLI, Grok Build, Hermes Agent, Kimi Code, OpenClaw, OpenCode, and Pi.

• claude
• claude-code
• claude-code-plugin
• security
• codex
• pi-extension
• +14 more

18.homarr-labs / homarr

A modern and easy to use dashboard. 80+ integrations. 20K+ icons built in. Authentication out of the box. No YAML, drag and drop configuration.

• dashboard
• docker
• organization
• privacy
• selfhosting
• servarr

19.aliasvault / aliasvault

Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable.

• argon2id
• blazor
• dotnet
• password-manager
• srp
• wasm
• +5 more

20.nanocoai / nanoclaw

A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging apps,, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK

• ai-agents
• ai-assistant
• claude-code
• claude-skills
• openclaw

21.InsForge / InsForge

The all-in-one, open-source backend platform for agentic coding. InsForge gives your coding agent database, auth, storage, compute, hosting, and AI gateway to ship full-stack apps end-to-end.

• ai
• ai-agents
• coding
• oauth2
• postgresql
• deno
• +7 more

22.elizaOS / eliza

Open source agentic operating system

• agent
• agentic
• ai
• autonomous
• chatbot
• crypto
• +9 more

23.lissy93 / personal-security-checklist

🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026

• privacy
• security
• censorship
• cybersecurity
• checklist
• awesome
• +7 more

24.logto-io / logto

🧑‍🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.

• authentication
• authorization
• identity
• openid-connect
• passwordless
• social-login
• +14 more

25.streetwriters / notesnook

A fully open source & end-to-end encrypted note taking alternative to Evernote.

• note-taking
• notes-app
• notes
• notebook
• note-taking-app
• note-managment
• +13 more

26.szTheory / exifcleaner

Cross-platform desktop GUI app to clean image metadata

• exif
• exiftool
• electron
• javascript
• nodejs
• desktop-app
• +14 more

27.tutao / tutanota

Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.

• javascript
• mithril
• encryption
• email
• tutanota
• security
• +1 more

28.teableio / teable

✨ AI Spreadsheet for Business

• airtable
• airtable-alternative
• database
• no-code
• postgres
• postgresql
• +6 more

29.leon-ai / leon

🧠 Leon is your open-source personal assistant.

• leon
• personal-assistant
• nodejs
• python
• ai
• artificial-intelligence
• +14 more

30.NoeFabris / opencode-antigravity-auth

Enable Opencode to authenticate against Antigravity (Google's IDE) via OAuth so you can use Antigravity rate limits and access models like gemini-3-pro and claude-opus-4-5-thinking with your Google credentials.

• claude
• gemini
• google
• opencode

31.standardnotes / app

Think fearlessly with end-to-end encrypted notes and files. For issues, visit https://standardnotes.com/forum or https://standardnotes.com/help.

• notes
• encrypted
• privacy
• secure
• evernote
• snippets
• +2 more

32.javascript-obfuscator / javascript-obfuscator

A powerful obfuscator for JavaScript and Node.js

• javascript-obfuscator
• obfuscation
• uglify
• javascript
• protection
• obfuscate
• +14 more

33.APKLab / APKLab

Android Reverse-Engineering Workbench for VS Code

• apktool
• apk-decompiler
• apk-editor
• smali
• dalvik
• smalidea
• +12 more

34.Mail-0 / Zero

Experience email the way you want with Mail0 – the first open source email app that puts your privacy and safety first. Join the discord: https://mail0.link/discord

• ai
• email
• privacy
• security

35.vidstack / player

Deprecated in favour of Video.js 10; security fixes only until January 2028. UI components and hooks for building video and audio players on the web.

• player
• web-components
• html
• javascript
• hls
• audio
• +14 more

36.nextauthjs / next-auth

Authentication for the Web.

• nodejs
• nextjs
• oauth
• react
• authentication
• nextauth
• +12 more

37.googleapis / google-api-nodejs-client

Google's officially supported Node.js client library for accessing Google APIs. Support for authorization and authentication with OAuth 2.0, API Keys and JWT (Service Tokens) is included.

• google
• google-api
• nodejs
• client
• client-library

38.FrancescoStabile / numasec

The AI Agent for Cyber Security.

• ai-agent
• ai-security
• appsec
• bug-bounty
• cybersecurity
• devsecops
• +14 more

39.slymnoyann / hey.xyz

Hey is a decentralized and permissionless social media app built with Lens Protocol 🌿

• web3
• blockchain
• graphql
• hacktoberfest
• nextjs
• react
• +9 more

40.niklashigi / apk-mitm

🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection

• cli
• reverse-engineering
• android
• apk
• mitm
• certificate-pinning
• +2 more

41.stalniy / casl

CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access

• authorization
• permissions
• acl
• cancan
• casl
• isomorphic-javascript

42.invertase / react-native-firebase

🔥 A well-tested feature-rich modular Firebase implementation for React Native. Supports both iOS & Android platforms for all Firebase services.

• firebase
• analytics
• android
• ios
• database
• push-notifications
• +14 more

43.step-security / harden-runner

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

• github-actions
• actions
• supply-chain-security
• hardening
• security-hardening
• runners
• +3 more

44.paulmillr / noble-hashes

Audited & minimal JS implementation of hash functions, MACs and KDFs.

• cryptography
• hash
• kdf
• hashing
• sha256
• sha512
• +13 more

45.vvo / iron-session

🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework

• nextjs
• authentication
• session
• stateless
• cookies
• expressjs
• +2 more

46.Agent-Threat-Rule / agent-threat-rules

Open detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable, testable rules for prompt injection, tool poisoning, context exfiltration and MCP attacks. Merged into open-source projects at Microsoft, Cisco, Gen Digital, MISP and FINOS. MIT-licensed.

• agent-security
• ai-security
• llm-security
• mcp-security
• owasp
• prompt-injection
• +5 more

47.panva / openid-client

OAuth 2 / OpenID Connect Client API for JavaScript Runtimes

• oidc
• openid
• openid-client
• openid-connect
• passport
• connect
• +1 more

48.paulmillr / noble-post-quantum

Auditable & minimal JS implementation of public-key post-quantum cryptography

• dilithium
• kyber
• ml-kem
• post-quantum-cryptography
• sphincs
• sphincs-plus
• +14 more

49.helmetjs / helmet

Help secure Express apps with various HTTP headers

• javascript
• middleware
• security
• helmet
• http-headers

50.jeremyckahn / chitchatter

Secure peer-to-peer chat that is serverless, decentralized, and ephemeral

• end-to-end-encryption
• p2p
• peer-to-peer
• privacy
• serverless
• webrtc
• +8 more

51.authts / oidc-client-ts

OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications

• oidc
• oidc-client
• typescript

52.Swetrix / swetrix

📈 Open source, privacy-first web analytics — a cookie-less Google Analytics alternative with built-in error tracking and performance monitoring. Self-host it or use our cloud. Get started for free!

• docker
• webanalytics
• self-hosted
• selfhosted
• privacy
• redis
• +12 more

53.panva / oauth4webapi

Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes

• oauth2
• openid
• openid-connect
• oidc
• authentication
• authorization
• +10 more

54.sammargolis / OpenScribe

OpenScribe is an open-source AI scribe that records patient encounters and generates structured clinical notes automatically. You keep full control over data, workflows, and patient privacy with no vendor lock-in.

• ai
• clinical
• clinical-informatics
• ehr
• electron
• healthcare
• +9 more

55.react-cosmos / react-cosmos

Sandbox for developing and testing UI components in isolation

• react
• devtools
• ui
• components
• testing
• sandbox

56.paulmillr / noble-curves

Audited & minimal JS implementation of elliptic curve cryptography.

• crypto
• cryptography
• ecdsa
• ed25519
• ed448
• eddsa
• +14 more

57.lucia-auth / lucia

Authentication, simple and clean

• oauth
• typescript
• auth

58.ory / polis

Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.

• enterprise-software
• saml
• saml2
• saml-service-provider
• saml-authentication
• sso
• +14 more

59.paulmillr / noble-ciphers

Audited & minimal JS implementation of Salsa20, ChaCha and AES

• aes-siv
• chacha20
• chacha20-poly1305
• chacha20poly1305
• cipher
• cryptography
• +11 more

60.0xa3k5 / web3icons

2000+ crypto svg icons for react

• crypto
• icons
• react-icons
• token
• logos
• web3
• +5 more

61.node9-ai / node9-proxy

Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.

• ai-safety
• ai-security
• claude-code
• llm-agent
• agent-security
• dlp
• +14 more

62.ImagingDataCommons / slim

Interoperable web-based DICOM slide microscopy viewer and annotation tool

• dicomweb
• oidc
• react
• digital-pathology
• idc-viewers

63.albertasaftei / plumio

A self-hosted markdown notes taking app with live preview, document encryption, multi-user support, multi-organization capabilities and more

64.kOaDT / oss-oopssec-store

Security training for the apps you actually ship. Open your browser and start hacking.

• appsec
• ctf
• cybersecurity
• nextjs
• typescript
• owasp-top10
• +8 more

65.deepfence / ThreatMapper

Open Source Cloud Native Application Protection Platform (CNAPP)

• cloud-native
• vulnerability-management
• threat-analysis
• devsecops
• secops
• registry-scanning
• +13 more

66.apache / casbin-node-casbin

An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and Browser

• casbin
• nodejs
• node
• js
• javascript
• access-control
• +8 more

67.XRPLF / xrpl.js

A JavaScript/TypeScript API for interacting with the XRP Ledger in Node.js and the browser

• ripple
• xrp-ledger
• javascript
• api
• xrp
• blockchain
• +8 more

68.electron / osx-sign

Codesign Electron macOS apps

• electron-osx-sign
• macos
• entitlements
• provisioning-profiles
• electron
• codesigning
• +4 more

69.0xMassi / stik_app

Instant thought capture for macOS. One shortcut, post-it appears, type, close.

• ai
• macos
• nlp
• note-taking
• productivity
• react
• +14 more

70.SECFORCE / droidground

A flexible playground for Android CTF challenges.

• android
• ctf
• cybersecurity
• playground
• pentesting
• training

71.sE2EEnd / sE2EEnd

File transfer solution with end-to-end encryption.

• e2ee
• e2ee-encryption
• encryption
• filetransfer
• e2e-encryption
• file-transfer

72.lunasec-io / lunasec

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

• tokenization
• web-security
• compliance
• security
• soc2
• pci-dss
• +14 more

73.emonney / QuickApp

AI-ready reference architecture for Angular / ASP.NET Core projects. A hardened foundation with secure authentication, authorization, role and user management, and consistent patterns designed to be safely extended by AI tools. Stop letting AI hallucinate your auth and DB logic - give it a production-grade foundation to build on.

• template-project
• asp-net-core
• angular
• rapid-development
• rad
• aspnet-core
• +5 more

74.HemmeligOrg / Hemmelig.appArchived

Keep your sensitive information out of chat logs, emails, and more with encrypted secrets.

• secret
• encryption
• onetimesecret
• password
• personal-data
• gdpr
• +9 more

75.ghostery / adblocker

Efficient embeddable adblocker library

• content-blocking
• javascript
• adblocker
• easylist
• adblock
• puppeteer
• +1 more

76.WardPearce / paaster

Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible.

• pastebin
• paaster
• e2ee
• paste
• store
• python
• +8 more

77.Juliusolsson05 / pharos-ai

Open-source OSINT intelligence dashboard tracking the Iran conflict in real time — live DeckGL/MapLibre conflict map, 30 bias-labeled feeds, actor dossiers, and daily briefs. Live at conflicts.app.

• deckgl
• geopolitics
• intelligence
• maplibre
• nextjs
• osint
• +1 more

78.prismelabs / analytics

◢ High-perfomance, self-hosted and privacy-focused web analytics service. Written in Go.

• analytics
• chart
• clickhouse
• go
• google-analytics
• grafana
• +11 more

79.materwelonDhruv / envapt

Typed, validated config from process.env, .env files, or any object, on Node, Bun, Deno, Cloudflare Workers, and the browser. No runtime dependencies.

• config
• decorators
• dotenv
• env
• settings
• typescript
• +12 more

80.manfredsteyer / angular-oauth2-oidc

Support for OAuth 2 and OpenId Connect (OIDC) in Angular.

81.microsoftgraph / microsoft-graph-toolkitArchived

Authentication Providers and UI components for Microsoft Graph 🦒

• web-components
• microsoft-graph-toolkit
• microsoft-graph
• mgt
• msal
• hacktoberfest
• +10 more

82.KishanBagaria / padding-oracle-attacker

🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.

• padding-oracle
• aes
• decryption
• encryption
• cipher-block-chaining
• cbc
• +4 more

83.hamzaydia / verifyfetch

Your users download a 4GB AI model, the connection drops at 3.8GB, verifyfetch resumes from 3.8GB and verifies every byte. Drop-in integrity verification for Transformers.js, WebLLM, and any large file in the browser.

• ai-models
• browser
• fetch
• integrity
• javascript
• nodejs
• +13 more

84.sidebase / nuxt-auth

Authentication built for Nuxt! Easily add authentication via OAuth providers, credentials or Email Magic URLs!

• authentication
• nuxt
• users
• session
• typescript
• local
• +1 more

85.paulmillr / noble-secp256k1

Fastest 5KB JS implementation of secp256k1 signatures and ECDH

• secp256k1
• ecdsa
• ecc
• cryptography
• rfc6979
• noble
• +6 more

86.Escape-Technologies / graphql-armor

🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️

• apollo
• apollo-server
• graphql
• security
• typescript
• middleware
• +5 more

87.paulmillr / noble-ed25519

Fastest 5KB JS implementation of ed25519 signatures

• ed25519
• curve25519
• eddsa
• cryptography
• noble
• x25519
• +6 more

88.juice-shop / juice-shop-ctf

Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF

• owasp
• ctf
• ctfd
• application-security
• capture-the-flag
• pentesting
• +11 more

89.0xfrankz / Kaas

Cross-platform desktop LLM client for OpenAI ChatGPT, DeepSeek R1, Anthropic Claude and more, with a focus on privacy and security.

• desktop-app
• react
• rust
• tauri
• typescript
• azure
• +6 more

90.algorandfoundation / liquid-auth

Liquid Auth Service

• authentication
• fido2
• p2p
• passkeys
• webrtc

91.paulmillr / micro-rsa-dsa-dh

Minimal JS implementation of older cryptography algorithms: RSA, DSA, DH.

• cryptography
• dh
• diffie-hellman
• dsa
• elgamal
• noble
• +2 more