Open Source Packages
Libraries, frameworks, tools, and SDKs used by the apps in this directory — scored the same way as the apps themselves.
All Packages
Category2
Sort:Used by Most Apps
jsonwebtoken
The de facto Node.js library for signing, verifying, and decoding JSON Web Tokens.
jose
Zero-dependency JWT, JWS, JWE, and JWK toolkit for Node.js, browsers, and edge runtimes.
jwt
A zero-dependency Go implementation of JSON Web Tokens (JWT) with pluggable HMAC, RSA, RSA-PSS, ECDSA, and Ed25519 signing methods.
sha2
Pure Rust implementation of the SHA-2 hash function family (SHA-224/256/384/512) with hardware-accelerated backends.
cryptography
The standard cryptographic library for Python, pairing safe high-level recipes with low-level primitives backed by Rust and OpenSSL.
cookie-parser
Express middleware that parses HTTP Cookie headers into req.cookies, with support for signed and JSON-encoded cookie values.
bcrypt.js
A zero-dependency, pure JavaScript implementation of bcrypt for hashing and verifying passwords in Node.js and the browser.
PyJWT
A Python implementation of RFC 7519 for encoding, decoding, and verifying JSON Web Tokens.
AWS SDK for Go v2
The official AWS SDK for Go — type-safe, modular clients for every AWS service.
crypto-js
A JavaScript library of crypto standards - hashing, HMAC, PBKDF2, and symmetric ciphers for Node.js and the browser.
Better Auth
The most comprehensive, framework-agnostic authentication and authorization framework for TypeScript.
google-auth
The foundational Python library for authenticating to Google Cloud and Google APIs with OAuth2, service accounts, and Application Default Credentials.
bcrypt
Battle-tested password hashing for Node.js using the adaptive bcrypt algorithm.
google-api-nodejs-client
Google's officially supported Node.js client library for calling hundreds of Google APIs with built-in OAuth 2.0, API key, and service-account auth.
Certifi
Mozilla's curated root CA bundle for verifying SSL/TLS certificates in Python.
passport
Simple, unobtrusive authentication middleware for Node.js with 480+ pluggable strategies.
cookie
Basic HTTP cookie parser and serializer for HTTP servers, with zero dependencies and full RFC 6265 support.
express-rate-limit
Basic IP rate-limiting middleware for Express to throttle repeated requests and protect public APIs and sensitive endpoints.
supabase-js
The official isomorphic JavaScript SDK for Supabase — database, auth, realtime, storage, and edge functions in one client.
go-oidc
A Go client library for OpenID Connect, built on top of golang.org/x/oauth2.
@azure/identity
Microsoft Entra ID credential library that authenticates every Azure SDK client, from managed identity in production to CLI and browser login in development.
NextAuth.js
Open-source authentication for Next.js with OAuth, OIDC, email, and passkey sign-in.
jwt-decode
A lightweight TypeScript library for decoding JSON Web Token payloads and headers in the browser and Node.js.
express-session
Simple, pluggable session middleware for Express that signs session IDs into a cookie and delegates data storage to any compatible store.