Open Source Packages
Libraries, frameworks, tools, and SDKs used by the apps in this directory — scored the same way as the apps themselves.
All Packages
Category1
Sort:Used by Most Apps
Hickory Proto
Safe, low-level DNS protocol library underpinning Hickory DNS in Rust
JavaScript-MD5
A zero-dependency JavaScript MD5 and HMAC-MD5 hashing implementation that runs identically in Node.js, browsers, and AMD module loaders.
PyOTP
Python library for generating and verifying TOTP/HOTP one-time passwords for 2FA
speakeasy
A Node.js library for generating and verifying RFC 4226 (HOTP) and RFC 6238 (TOTP) one-time passcodes for two-factor authentication.
Standard Webhooks (Python)
Python reference implementation for verifying Standard Webhooks HMAC-signed webhook payloads
machineid
Reads a cross-platform machine ID without admin privileges and hashes it for safe, app-specific device identification.
aws4
Signs vanilla Node.js HTTP(S) request options with AWS Signature Version 4 so you can call any AWS service without pulling in the full AWS SDK.
rsa
Pure Rust implementation of RSA encryption, signing, and key handling
base-x
Fast base encoding and decoding for any custom alphabet, using bitcoin-style leading zero compression.
x509-parser
A pure-Rust, zero-copy X.509 certificate parser (RFC 5280) built on the nom parser-combinator framework, with optional signature verification.
node-sshpk
Parse, convert, fingerprint, sign and verify SSH and X.509 keys in pure Node.js, with zero dependency on ssh-keygen or OpenSSL binaries.
murmurhash
Sub-millisecond non-cryptographic string hashing for Node.js and the browser
rustls-pki-types
Shared, dependency-free types for X.509 certificates and keys in the rustls ecosystem
Vault API
The official Go client library for HashiCorp Vault, providing typed access to secrets, auth methods, and system endpoints.
pycryptodome
A self-contained, low-level Python library of cryptographic primitives — ciphers, hashes, MACs, and public-key algorithms — with no OpenSSL dependency.
altcha
Privacy-first, self-hosted CAPTCHA replacement that proves a visitor is human with invisible proof-of-work instead of puzzles, tracking, or third-party APIs.
Google2FA
A framework-agnostic PHP implementation of HOTP and TOTP one-time passwords, compatible with Google Authenticator and similar apps.
elliptic
Pure JavaScript elliptic curve cryptography for ECDSA, EdDSA, and ECDH
@node-rs/argon2
Native Rust binding for Argon2 password hashing in Node.js
aHash
A fast, DOS-resistant, AES-accelerated non-cryptographic hasher purpose-built for in-memory HashMaps
hvac
Python client library for HashiCorp Vault's secrets, authentication, and system-backend REST APIs.
aes
Pure Rust, constant-time implementation of the AES (Rijndael) block cipher with hardware-accelerated backends
hyper-rustls
Rustls TLS connector for the hyper HTTP library, for pure-Rust HTTPS clients and servers.
xxhash-rust
Pure-Rust implementation of the XXH32, XXH64, and XXH3 hash algorithms
