Open Source Packages
Libraries, frameworks, tools, and SDKs used by the apps in this directory — scored the same way as the apps themselves.
All Packages
Category1
Sort:Used by Most Apps
cookie-parser
Express middleware that parses HTTP Cookie headers into req.cookies, with support for signed and JSON-encoded cookie values.
bcrypt.js
A zero-dependency, pure JavaScript implementation of bcrypt for hashing and verifying passwords in Node.js and the browser.
PyJWT
A Python implementation of RFC 7519 for encoding, decoding, and verifying JSON Web Tokens.
cookie
Basic HTTP cookie parser and serializer for HTTP servers, with zero dependencies and full RFC 6265 support.
supabase-js
The official isomorphic JavaScript SDK for Supabase — database, auth, realtime, storage, and edge functions in one client.
@azure/identity
Microsoft Entra ID credential library that authenticates every Azure SDK client, from managed identity in production to CLI and browser login in development.
express-session
Simple, pluggable session middleware for Express that signs session IDs into a cookie and delegates data storage to any compatible store.
openid-client
Certified OAuth 2 and OpenID Connect client for every modern JavaScript runtime.
Azure Identity (Python)
Microsoft Entra ID token authentication for Azure SDK clients in Python
OTPAuth
HOTP and TOTP one-time password library for Node.js, Deno, Bun, and browsers
@nestjs/passport
The official NestJS integration module for the Passport authentication middleware
@nestjs/jwt
Official NestJS module for signing, verifying, and decoding JWTs
@octokit/auth-app
GitHub App authentication strategy for JavaScript and Octokit
firebase-js-sdk
Google's official client SDK for building web and Node.js apps on Firebase's backend services.
@clerk/backend
The official JavaScript SDK for Clerk's Backend API and JWT session verification.
node-oauth2-server
Framework-agnostic, RFC 6749/6750-compliant OAuth 2.0 server module for Node.js with native async/await and PKCE support.
set-cookie-parser
Parse raw Set-Cookie header values into structured JavaScript cookie objects
speakeasy
A Node.js library for generating and verifying RFC 4226 (HOTP) and RFC 6238 (TOTP) one-time passcodes for two-factor authentication.
zxcvbn-ts
A TypeScript rewrite of Dropbox's zxcvbn password strength estimator, with pluggable dictionaries and async matcher support.
SAML Jackson (Polis)
Open-source SAML 2.0 and OIDC library that turns enterprise SSO logins into a plain OAuth 2.0 flow for your Node.js app.
Google2FA
A framework-agnostic PHP implementation of HOTP and TOTP one-time passwords, compatible with Google Authenticator and similar apps.
hvac
Python client library for HashiCorp Vault's secrets, authentication, and system-backend REST APIs.
Social Auth Core
The core authentication backend engine behind Python Social Auth, supporting OAuth, OpenID, and SAML.
lcobucci/jwt
A simple, RFC 7519-compliant PHP library for creating, signing, and validating JSON Web Tokens
