Open Source Packages
Libraries, frameworks, tools, and SDKs used by the apps in this directory — scored the same way as the apps themselves.
All Packages
Category1
Sort:Used by Most Apps
bcrypt.js
A zero-dependency, pure JavaScript implementation of bcrypt for hashing and verifying passwords in Node.js and the browser.
forge
A native, pure-JavaScript implementation of TLS and PKI cryptography for building crypto-based Node.js and browser apps.
OTPAuth
HOTP and TOTP one-time password library for Node.js, Deno, Bun, and browsers
webauthn
A spec-conformant WebAuthn and FIDO2 passkey server library for Go, handling registration and authentication ceremonies for passwordless and multi-factor login.
libsodium-wrappers
WebAssembly build of libsodium with hand-friendly JavaScript wrappers for encryption, signing, hashing, and key exchange.
react-native-get-random-values
A native polyfill that implements crypto.getRandomValues() for React Native so libraries like uuid work without modification.
jwx
A complete, opinionated Go implementation of the JOSE stack: JWT, JWS, JWE, JWK, and JWA.
tweetnacl-js
A JavaScript port of the audited TweetNaCl cryptographic library, providing public-key and secret-key encryption, signing, and hashing for Node.js and browsers.
securecookie
Encodes and decodes authenticated, optionally encrypted cookie values for Go web applications, guarding session data from tampering.
certmagic
Automatic HTTPS for Go programs — the production-grade ACME client library that powers Caddy, obtaining and renewing TLS certificates with zero manual cert management.
hash-wasm
Lightning-fast hash and password-derivation functions using hand-tuned WebAssembly binaries
JavaScript-MD5
A zero-dependency JavaScript MD5 and HMAC-MD5 hashing implementation that runs identically in Node.js, browsers, and AMD module loaders.
speakeasy
A Node.js library for generating and verifying RFC 4226 (HOTP) and RFC 6238 (TOTP) one-time passcodes for two-factor authentication.
machineid
Reads a cross-platform machine ID without admin privileges and hashes it for safe, app-specific device identification.
js-md5
A fast, dependency-free MD5 hash function for JavaScript with UTF-8 support
sha.js
A pure JavaScript, streamable implementation of the SHA family of hash functions with a Node-crypto-like API.
PKIjs
A pure TypeScript library implementing the core formats and protocols of public-key infrastructure, built entirely on the WebCrypto API with no native bindings or plug-ins.
gokrb5
A pure Go implementation of Kerberos 5 authentication, SPNEGO negotiation, and Active Directory PAC decoding — no cgo, no native krb5 dependency.
argon2id
A minimal, secure Argon2id password hashing wrapper for Go with built-in salt generation and constant-time verification.
crypto-random-string
Generate cryptographically strong random strings for IDs, slugs, salts, and secrets
ASN1.js
A pure JavaScript/TypeScript library for encoding and decoding ASN.1 BER/DER data, the foundation of X.509 certificates and PKI.
xxhashjs
Pure JavaScript implementation of the xxHash algorithm, delivering fast 32-bit and 64-bit non-cryptographic hashing.
StableLib (@stablelib/base64)
Constant-time Base64 encoding and decoding for TypeScript and JavaScript, including a URL-safe variant.
EVP_BytesToKey
Reimplements OpenSSL's legacy EVP_BytesToKey key-derivation algorithm in pure JavaScript for compatibility with older OpenSSL-encrypted data.
