Open Source Packages
Libraries, frameworks, tools, and SDKs used by the apps in this directory — scored the same way as the apps themselves.
All Packages
Category1
Sort:Used by Most Apps
google-api-nodejs-client
Google's officially supported Node.js client library for calling hundreds of Google APIs with built-in OAuth 2.0, API key, and service-account auth.
express-rate-limit
Basic IP rate-limiting middleware for Express to throttle repeated requests and protect public APIs and sensitive endpoints.
jsonwebtoken
Create and decode JSON Web Tokens in Rust in a strongly typed way
@octokit/auth-app
GitHub App authentication strategy for JavaScript and Octokit
set-cookie-parser
Parse raw Set-Cookie header values into structured JavaScript cookie objects
Standard Webhooks (Python)
Python reference implementation for verifying Standard Webhooks HMAC-signed webhook payloads
hvac
Python client library for HashiCorp Vault's secrets, authentication, and system-backend REST APIs.
passport-microsoft
A Passport.js strategy for authenticating users with Microsoft Graph via OAuth 2.0
hapi
A config-driven Node.js framework for building HTTP APIs and web servers with built-in validation, caching, and auth.
AT Protocol API (@atproto/api)
The official TypeScript client for AT Protocol and Bluesky, with session management, OAuth, moderation, and RichText handling built in.
@octokit/webhooks-methods
Sign and verify GitHub webhook payload signatures with constant-time HMAC comparison, in Node.js and the browser.
@octokit/auth-oauth-device
GitHub OAuth Device Flow authentication strategy for Octokit-based JavaScript apps.
Kiota Authentication Azure
Azure Identity-backed authentication provider for Python API clients generated by Microsoft Kiota.
jwt-simple
A fast, safe-by-default Rust library for creating and verifying JWT and JWE tokens across every major signing and encryption algorithm.
LinkedIn API Python Client
Official Python client for LinkedIn's Rest.li APIs, wrapping OAuth2, versioned endpoints, and query tunneling into typed request/response calls.