Open Source Packages
Libraries, frameworks, tools, and SDKs used by the apps in this directory — scored the same way as the apps themselves.
All Packages
Category1
Sort:Used by Most Apps
jwt
A zero-dependency Go implementation of JSON Web Tokens (JWT) with pluggable HMAC, RSA, RSA-PSS, ECDSA, and Ed25519 signing methods.
cookie-parser
Express middleware that parses HTTP Cookie headers into req.cookies, with support for signed and JSON-encoded cookie values.
bcrypt.js
A zero-dependency, pure JavaScript implementation of bcrypt for hashing and verifying passwords in Node.js and the browser.
AWS SDK for Go v2
The official AWS SDK for Go — type-safe, modular clients for every AWS service.
cookie
Basic HTTP cookie parser and serializer for HTTP servers, with zero dependencies and full RFC 6265 support.
supabase-js
The official isomorphic JavaScript SDK for Supabase — database, auth, realtime, storage, and edge functions in one client.
@azure/identity
Microsoft Entra ID credential library that authenticates every Azure SDK client, from managed identity in production to CLI and browser login in development.
express-session
Simple, pluggable session middleware for Express that signs session IDs into a cookie and delegates data storage to any compatible store.
openid-client
Certified OAuth 2 and OpenID Connect client for every modern JavaScript runtime.
OTPAuth
HOTP and TOTP one-time password library for Node.js, Deno, Bun, and browsers
@nestjs/passport
The official NestJS integration module for the Passport authentication middleware
@nestjs/jwt
Official NestJS module for signing, verifying, and decoding JWTs
webauthn
A spec-conformant WebAuthn and FIDO2 passkey server library for Go, handling registration and authentication ceremonies for passwordless and multi-factor login.
firebase-js-sdk
Google's official client SDK for building web and Node.js apps on Firebase's backend services.
sessions
Cookie and filesystem session management for Go's net/http, with pluggable backends and key rotation.
@clerk/backend
The official JavaScript SDK for Clerk's Backend API and JWT session verification.
jwx
A complete, opinionated Go implementation of the JOSE stack: JWT, JWS, JWE, JWK, and JWA.
securecookie
Encodes and decodes authenticated, optionally encrypted cookie values for Go web applications, guarding session data from tampering.
node-oauth2-server
Framework-agnostic, RFC 6749/6750-compliant OAuth 2.0 server module for Node.js with native async/await and PKCE support.
set-cookie-parser
Parse raw Set-Cookie header values into structured JavaScript cookie objects
league/oauth2-client
A framework-agnostic PHP client for building OAuth 2.0 login and API-authorization flows.
speakeasy
A Node.js library for generating and verifying RFC 4226 (HOTP) and RFC 6238 (TOTP) one-time passcodes for two-factor authentication.
SAML Jackson (Polis)
Open-source SAML 2.0 and OIDC library that turns enterprise SSO logins into a plain OAuth 2.0 flow for your Node.js app.
Google2FA
A framework-agnostic PHP implementation of HOTP and TOTP one-time passwords, compatible with Google Authenticator and similar apps.
