Open Source Packages
Libraries, frameworks, tools, and SDKs used by the apps in this directory — scored the same way as the apps themselves.
All Packages
Category1
Sort:Used by Most Apps
cookie-parser
Express middleware that parses HTTP Cookie headers into req.cookies, with support for signed and JSON-encoded cookie values.
PyJWT
A Python implementation of RFC 7519 for encoding, decoding, and verifying JSON Web Tokens.
google-auth
The foundational Python library for authenticating to Google Cloud and Google APIs with OAuth2, service accounts, and Application Default Credentials.
google-api-nodejs-client
Google's officially supported Node.js client library for calling hundreds of Google APIs with built-in OAuth 2.0, API key, and service-account auth.
passport
Simple, unobtrusive authentication middleware for Node.js with 480+ pluggable strategies.
cookie
Basic HTTP cookie parser and serializer for HTTP servers, with zero dependencies and full RFC 6265 support.
express-rate-limit
Basic IP rate-limiting middleware for Express to throttle repeated requests and protect public APIs and sensitive endpoints.
@azure/identity
Microsoft Entra ID credential library that authenticates every Azure SDK client, from managed identity in production to CLI and browser login in development.
NextAuth.js
Open-source authentication for Next.js with OAuth, OIDC, email, and passkey sign-in.
express-session
Simple, pluggable session middleware for Express that signs session IDs into a cookie and delegates data storage to any compatible store.
openid-client
Certified OAuth 2 and OpenID Connect client for every modern JavaScript runtime.
otplib
TypeScript-first TOTP and HOTP library with a pluggable crypto/base32 architecture for Node, Bun, Deno, and browsers.
bcrypt (Python)
A Python library for secure password hashing using the bcrypt algorithm with an adjustable work factor
Azure Identity (Python)
Microsoft Entra ID token authentication for Azure SDK clients in Python
itsdangerous
A small Python toolkit for cryptographically signing data so you can trust it hasn't been tampered with when it comes back from an untrusted client.
OTPAuth
HOTP and TOTP one-time password library for Node.js, Deno, Bun, and browsers
@nestjs/passport
The official NestJS integration module for the Passport authentication middleware
@nestjs/jwt
Official NestJS module for signing, verifying, and decoding JWTs
firebase-admin-node
Firebase Admin Node.js SDK for privileged, server-side access to Firebase Authentication, Firestore, Realtime Database, Cloud Messaging, and Storage.
react-turnstile
React bindings for Cloudflare Turnstile — a privacy-first CAPTCHA alternative with a declarative component and a full imperative ref API.
@clerk/backend
The official JavaScript SDK for Clerk's Backend API and JWT session verification.
argon2-cffi
Secure, high-level password hashing for Python using Argon2
node-oauth2-server
Framework-agnostic, RFC 6749/6750-compliant OAuth 2.0 server module for Node.js with native async/await and PKCE support.
OAuthLib
Generic, spec-compliant OAuth1, OAuth2, and OpenID Connect implementation for Python
