Open Source Packages
Libraries, frameworks, tools, and SDKs used by the apps in this directory — scored the same way as the apps themselves.
All Packages
Category1
Sort:Used by Most Apps
jsonwebtoken
The de facto Node.js library for signing, verifying, and decoding JSON Web Tokens.
jose
Zero-dependency JWT, JWS, JWE, and JWK toolkit for Node.js, browsers, and edge runtimes.
sha2
Pure Rust implementation of the SHA-2 hash function family (SHA-224/256/384/512) with hardware-accelerated backends.
cryptography
The standard cryptographic library for Python, pairing safe high-level recipes with low-level primitives backed by Rust and OpenSSL.
bcrypt.js
A zero-dependency, pure JavaScript implementation of bcrypt for hashing and verifying passwords in Node.js and the browser.
PyJWT
A Python implementation of RFC 7519 for encoding, decoding, and verifying JSON Web Tokens.
crypto-js
A JavaScript library of crypto standards - hashing, HMAC, PBKDF2, and symmetric ciphers for Node.js and the browser.
bcrypt
Battle-tested password hashing for Node.js using the adaptive bcrypt algorithm.
Certifi
Mozilla's curated root CA bundle for verifying SSL/TLS certificates in Python.
rustls
A modern, memory-safe TLS library for Rust with no unsafe code and no legacy crypto by default.
otplib
TypeScript-first TOTP and HOTP library with a pluggable crypto/base32 architecture for Node, Bun, Deno, and browsers.
go-jose
The canonical Go implementation of JSON Web Encryption, Signature, and Token standards (JWE, JWS, JWT).
hmac
Generic, pure-Rust implementation of Hash-based Message Authentication Code (HMAC)
ssh2
Pure-JavaScript SSH2 client and server library for Node.js, with SFTP, exec, shell, and port forwarding support.
otp
A Go library for generating and validating TOTP and HOTP one-time passcodes, compatible with Google Authenticator.
xxhash
A pure-Go implementation of the 64-bit xxHash (XXH64) algorithm with hand-written amd64 and arm64 assembly for maximum throughput.
forge
A native, pure-JavaScript implementation of TLS and PKI cryptography for building crypto-based Node.js and browser apps.
cuid2
Secure, collision-resistant unique IDs for JavaScript, built to resist guessing and horizontal-scale collisions.
object-hash
Deterministic SHA1/MD5 hashing for any JavaScript value or object, in Node.js and the browser.
node-jwks-rsa
A Node.js library that retrieves RSA, EC, and OKP signing keys from a JWKS endpoint, with caching and rate limiting built in.
bcrypt (Python)
A Python library for secure password hashing using the bcrypt algorithm with an adjustable work factor
getrandom
A small, cross-platform Rust crate for retrieving random bytes directly from the OS
itsdangerous
A small Python toolkit for cryptographically signing data so you can trust it hasn't been tampered with when it comes back from an untrusted client.
OTPAuth
HOTP and TOTP one-time password library for Node.js, Deno, Bun, and browsers
