Open Source Packages
Libraries, frameworks, tools, and SDKs used by the apps in this directory — scored the same way as the apps themselves.
All Packages
Category1
Sort:Used by Most Apps
PyJWT
A Python implementation of RFC 7519 for encoding, decoding, and verifying JSON Web Tokens.
@azure/identity
Microsoft Entra ID credential library that authenticates every Azure SDK client, from managed identity in production to CLI and browser login in development.
Azure Identity (Python)
Microsoft Entra ID token authentication for Azure SDK clients in Python
@octokit/auth-app
GitHub App authentication strategy for JavaScript and Octokit
node-oauth2-server
Framework-agnostic, RFC 6749/6750-compliant OAuth 2.0 server module for Node.js with native async/await and PKCE support.
zxcvbn-ts
A TypeScript rewrite of Dropbox's zxcvbn password strength estimator, with pluggable dictionaries and async matcher support.
SAML Jackson (Polis)
Open-source SAML 2.0 and OIDC library that turns enterprise SSO logins into a plain OAuth 2.0 flow for your Node.js app.
Google2FA
A framework-agnostic PHP implementation of HOTP and TOTP one-time passwords, compatible with Google Authenticator and similar apps.
hvac
Python client library for HashiCorp Vault's secrets, authentication, and system-backend REST APIs.
Social Auth Core
The core authentication backend engine behind Python Social Auth, supporting OAuth, OpenID, and SAML.
lcobucci/jwt
A simple, RFC 7519-compliant PHP library for creating, signing, and validating JSON Web Tokens
Social Auth App Django
Django integration for python-social-auth, adding social login and registration to Django projects
SocialiteProviders: Google
Google OAuth2 provider for Laravel Socialite, part of the community SocialiteProviders collection
@badgateway/oauth2-client
Dependency-free OAuth2 client for Node.js and browsers with PKCE and token refresh
node-appwrite
Official Node.js server SDK for Appwrite's open-source backend-as-a-service platform, covering auth, databases, storage, and functions.
@octokit/webhooks-methods
Sign and verify GitHub webhook payload signatures with constant-time HMAC comparison, in Node.js and the browser.
@octokit/auth-oauth-device
GitHub OAuth Device Flow authentication strategy for Octokit-based JavaScript apps.
Kiota Authentication Azure
Azure Identity-backed authentication provider for Python API clients generated by Microsoft Kiota.
nookies
A lightweight set of cookie helpers for parsing, setting, and destroying cookies in Next.js apps, on both server and client.
pyrad
A pure-Python library for building RADIUS clients and servers, covering authentication, accounting, and Change-of-Authorization out of the box.
biscuit
A typed Rust library for JWT, JWS, and JWE - full JOSE token signing, encryption, and validation built on ring.
axios-ntlm
Drop-in Axios wrapper that transparently handles NTLM authentication handshakes for Windows-protected HTTP endpoints.
