Open Source Packages
Libraries, frameworks, tools, and SDKs used by the apps in this directory — scored the same way as the apps themselves.
All Packages
Category1
Sort:Used by Most Apps
cookie-parser
Express middleware that parses HTTP Cookie headers into req.cookies, with support for signed and JSON-encoded cookie values.
google-api-nodejs-client
Google's officially supported Node.js client library for calling hundreds of Google APIs with built-in OAuth 2.0, API key, and service-account auth.
passport
Simple, unobtrusive authentication middleware for Node.js with 480+ pluggable strategies.
cookie
Basic HTTP cookie parser and serializer for HTTP servers, with zero dependencies and full RFC 6265 support.
express-rate-limit
Basic IP rate-limiting middleware for Express to throttle repeated requests and protect public APIs and sensitive endpoints.
@azure/identity
Microsoft Entra ID credential library that authenticates every Azure SDK client, from managed identity in production to CLI and browser login in development.
NextAuth.js
Open-source authentication for Next.js with OAuth, OIDC, email, and passkey sign-in.
express-session
Simple, pluggable session middleware for Express that signs session IDs into a cookie and delegates data storage to any compatible store.
openid-client
Certified OAuth 2 and OpenID Connect client for every modern JavaScript runtime.
otplib
TypeScript-first TOTP and HOTP library with a pluggable crypto/base32 architecture for Node, Bun, Deno, and browsers.
OTPAuth
HOTP and TOTP one-time password library for Node.js, Deno, Bun, and browsers
@nestjs/passport
The official NestJS integration module for the Passport authentication middleware
@nestjs/jwt
Official NestJS module for signing, verifying, and decoding JWTs
firebase-admin-node
Firebase Admin Node.js SDK for privileged, server-side access to Firebase Authentication, Firestore, Realtime Database, Cloud Messaging, and Storage.
@clerk/backend
The official JavaScript SDK for Clerk's Backend API and JWT session verification.
node-oauth2-server
Framework-agnostic, RFC 6749/6750-compliant OAuth 2.0 server module for Node.js with native async/await and PKCE support.
set-cookie-parser
Parse raw Set-Cookie header values into structured JavaScript cookie objects
league/oauth2-client
A framework-agnostic PHP client for building OAuth 2.0 login and API-authorization flows.
speakeasy
A Node.js library for generating and verifying RFC 4226 (HOTP) and RFC 6238 (TOTP) one-time passcodes for two-factor authentication.
passport-apple
Passport.js OAuth2 strategy for Sign in with Apple, handling Apple's JWT client-secret generation and POST-based callback flow.
SAML Jackson (Polis)
Open-source SAML 2.0 and OIDC library that turns enterprise SSO logins into a plain OAuth 2.0 flow for your Node.js app.
Google2FA
A framework-agnostic PHP implementation of HOTP and TOTP one-time passwords, compatible with Google Authenticator and similar apps.
Symfony SecurityBundle
Symfony's full-stack authentication and authorization layer, configuring firewalls, authenticators, and access rules from YAML
TwoFactorAuth
PHP library for TOTP-based two-factor authentication with pluggable QR code providers
