Open Source Packages
Libraries, frameworks, tools, and SDKs used by the apps in this directory — scored the same way as the apps themselves.
All Packages
Category1
Sort:Used by Most Apps
google-api-nodejs-client
Google's officially supported Node.js client library for calling hundreds of Google APIs with built-in OAuth 2.0, API key, and service-account auth.
express-rate-limit
Basic IP rate-limiting middleware for Express to throttle repeated requests and protect public APIs and sensitive endpoints.
NextAuth.js
Open-source authentication for Next.js with OAuth, OIDC, email, and passkey sign-in.
jsonwebtoken
Create and decode JSON Web Tokens in Rust in a strongly typed way
@octokit/auth-app
GitHub App authentication strategy for JavaScript and Octokit
react-turnstile
React bindings for Cloudflare Turnstile — a privacy-first CAPTCHA alternative with a declarative component and a full imperative ref API.
@clerk/backend
The official JavaScript SDK for Clerk's Backend API and JWT session verification.
React OAuth (Google)
Typed React hooks and components for Google Sign-In, One Tap, and OAuth2 login built on Google's Identity Services SDK.
league/oauth2-client
A framework-agnostic PHP client for building OAuth 2.0 login and API-authorization flows.
Standard Webhooks (Python)
Python reference implementation for verifying Standard Webhooks HMAC-signed webhook payloads
Google2FA
A framework-agnostic PHP implementation of HOTP and TOTP one-time passwords, compatible with Google Authenticator and similar apps.
hvac
Python client library for HashiCorp Vault's secrets, authentication, and system-backend REST APIs.
Symfony SecurityBundle
Symfony's full-stack authentication and authorization layer, configuring firewalls, authenticators, and access rules from YAML
TwoFactorAuth
PHP library for TOTP-based two-factor authentication with pluggable QR code providers
react-turnstile
A minimal React component and hook for rendering Cloudflare Turnstile CAPTCHA challenges.
passport-microsoft
A Passport.js strategy for authenticating users with Microsoft Graph via OAuth 2.0
hapi
A config-driven Node.js framework for building HTTP APIs and web servers with built-in validation, caching, and auth.
Firebase php-jwt
A simple PHP library to encode and decode JSON Web Tokens conforming to the JWT spec.
AT Protocol API (@atproto/api)
The official TypeScript client for AT Protocol and Bluesky, with session management, OAuth, moderation, and RichText handling built in.
lcobucci/jwt
A simple, RFC 7519-compliant PHP library for creating, signing, and validating JSON Web Tokens
Bouncer
Elegant roles and abilities authorization for Laravel using Eloquent.
Symfony Security Core
Infrastructure for authentication and sophisticated authorization, decoupled from user credential storage.
Symfony Security CSRF
Generate and validate CSRF tokens to protect PHP applications against cross-site request forgery.
OTPHP
A PHP library for generating TOTP and HOTP one-time passwords per RFC 4226 and RFC 6238
