Ranked by Attention Score: stars gained over the last 7 complete days
82 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Clone any website with one command using AI coding agents
The Postgres development platform. Supabase gives you a dedicated Postgres database to build your web, mobile, and AI applications.
Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness interface
Catch risky npm dependency changes before they merge.
Network-wide ads & trackers blocking DNS server
An easier way to use AI on your own computer. A free, open-source alternative to Claude and ChatGPT that runs open-weight models like Gemma and gpt-oss locally on Mac, Windows and Linux. Private, and works offline.
NPMscan MCP Plugin
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
基于 REA 深度拆解并高保真还原 Claude 官方桌面端 UI。还原 30 个独立 React 组件与 8 项硬核交互物理算法，附带 3000+ 行逆向分析手册。
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
Super Productivity is an advanced todo list app with integrated Timeboxing and time tracking capabilities. It also comes with integrations for Jira, GitLab, GitHub and Open Project.
Reverse engineer anything with agents, from app behavior down to native binaries.
MCP (Model Context Protocol) server for game hacking & reverse engineering. A structured knowledge base of 4,100+ skills with full source code archives, specialized agents, and workflow tools -- designed to be plugged into Claude, Cursor, or any MCP-compatible client.
【全链哨兵】全流程渗透测试 Agent 系统，支持 Web、小程序、安卓 APP、IOS app(测试中)。安全服务渗透测试辅助工具，禁止用于非法攻击。
Composio powers 1000+ toolkits, tool search, context management, authentication, and a sandboxed workbench to help you build AI agents that turn intent into action.
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
Open source agentic operating system
A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Cursor, DeepSeek Harness, Devin CLI, GitHub Copilot CLI, Grok Build, Hermes Agent, Kimi Code, OpenClaw, OpenCode, and Pi.
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
🕵️♂️ All-in-one OSINT tool for analysing any website
The most comprehensive authentication framework
The open-source cloud for agents & devs. Including Auth, Databases, Storage, Functions, Messaging, Hosting, Realtime, WAF and more
Connect your agents & product to 1,000 APIs.
Full-stack web application template with FastAPI, React, SQLModel, PostgreSQL, Vite, Tailwind CSS, shadcn/ui, FastAPI Cloud, and Docker Compose.
Agent-first reverse engineering for macOS, Windows and Linux: any ACP agent reads, renames and patches binaries, Android apps and GPU kernels next to you.
Modern networking and security platform providing secure access and connectivity to apps, infrastructure, and AI workloads. Connect and protect your users.
The all-in-one, open-source backend platform for agentic coding. InsForge gives your coding agent database, auth, storage, compute, hosting, and AI gateway to ship full-stack apps end-to-end.
Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable.
A modern and easy to use dashboard. 80+ integrations. 20K+ icons built in. Authentication out of the box. No YAML, drag and drop configuration.
100% free, open-source personal agents for your messaging apps, tools, and services
A community-curated directory for exploring, requesting, and supporting independently recreated software
A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging apps,, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
Cross-platform desktop GUI app to clean image metadata
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.
Xiryn — the open-source personal agent. Does everything Muse, Grok Bot and Dots do, on your own computer: each agent gets its own Linux desktop in Docker, any model with your keys, an encrypted vault, and control from Telegram.
A fully open source & end-to-end encrypted note taking alternative to Evernote.
Enable Opencode to authenticate against Antigravity (Google's IDE) via OAuth so you can use Antigravity rate limits and access models like gemini-3-pro and claude-opus-4-5-thinking with your Google credentials.
Deprecated in favour of Video.js 10; security fixes only until January 2028. UI components and hooks for building video and audio players on the web.
🧠 Leon is your open-source personal assistant.
✨ AI Spreadsheet for Business
Android Reverse-Engineering Workbench for VS Code
Experience email the way you want with Mail0 – the first open source email app that puts your privacy and safety first. Join the discord: https://mail0.link/discord
Think fearlessly with end-to-end encrypted notes and files. For issues, visit https://standardnotes.com/forum or https://standardnotes.com/help.
The universe in numbers. Free, open-source calculators for everything countable.
The AI Agent for Cyber Security.
Authentication for the Web.
Google's officially supported Node.js client library for accessing Google APIs. Support for authorization and authentication with OAuth 2.0, API Keys and JWT (Service Tokens) is included.
CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
Audited & minimal JS implementation of hash functions, MACs and KDFs.
A powerful obfuscator for JavaScript and Node.js
Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
2000+ crypto svg icons for react
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
Hey is a decentralized and permissionless social media app built with Lens Protocol 🌿
Help secure Express apps with various HTTP headers
Sandbox for developing and testing UI components in isolation
OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
Audited & minimal JS implementation of Salsa20, ChaCha and AES
A self-hosted markdown notes taking app with live preview, document encryption, multi-user support, multi-organization capabilities and more
🔥 A well-tested feature-rich modular Firebase implementation for React Native. Supports both iOS & Android platforms for all Firebase services.
OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications
Audited & minimal JS implementation of elliptic curve cryptography.
Codesign Electron macOS apps
Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible.
OpenScribe is an open-source AI scribe that records patient encounters and generates structured clinical notes automatically. You keep full control over data, workflows, and patient privacy with no vendor lock-in.
🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework
Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.
Support for OAuth 2 and OpenId Connect (OIDC) in Angular.
Authentication built for Nuxt! Easily add authentication via OAuth providers, credentials or Email Magic URLs!
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
AI-ready reference architecture for Angular / ASP.NET Core projects. A hardened foundation with secure authentication, authorization, role and user management, and consistent patterns designed to be safely extended by AI tools. Stop letting AI hallucinate your auth and DB logic - give it a production-grade foundation to build on.
Auditable & minimal JS implementation of public-key post-quantum cryptography
A production-ready SaaS template built with Next.js 15, Supabase, and Tailwind CSS. Includes authentication, user management, file storage, task management demos, and secure RLS policies. Now with a complete React Native + Expo mobile app template! Easily customizable with pre-built themes, i18n support (EN/PL/ZH), and legal documents.
Open-source OSINT intelligence dashboard tracking the Iran conflict in real time — live DeckGL/MapLibre conflict map, 30 bias-labeled feeds, actor dossiers, and daily briefs. Live at conflicts.app.
Interoperable web-based DICOM slide microscopy viewer and annotation tool
◢ High-perfomance, self-hosted and privacy-focused web analytics service. Written in Go.
A flexible playground for Android CTF challenges.
File transfer solution with end-to-end encryption.