Open Source Packages
Libraries, frameworks, tools, and SDKs used by the apps in this directory — scored the same way as the apps themselves.
All Packages
Category1
Sort:Used by Most Apps
otplib
TypeScript-first TOTP and HOTP library with a pluggable crypto/base32 architecture for Node, Bun, Deno, and browsers.
OTPAuth
HOTP and TOTP one-time password library for Node.js, Deno, Bun, and browsers
webauthn
A spec-conformant WebAuthn and FIDO2 passkey server library for Go, handling registration and authentication ceremonies for passwordless and multi-factor login.
jwx
A complete, opinionated Go implementation of the JOSE stack: JWT, JWS, JWE, JWK, and JWA.
securecookie
Encodes and decodes authenticated, optionally encrypted cookie values for Go web applications, guarding session data from tampering.
certmagic
Automatic HTTPS for Go programs — the production-grade ACME client library that powers Caddy, obtaining and renewing TLS certificates with zero manual cert management.
speakeasy
A Node.js library for generating and verifying RFC 4226 (HOTP) and RFC 6238 (TOTP) one-time passcodes for two-factor authentication.
machineid
Reads a cross-platform machine ID without admin privileges and hashes it for safe, app-specific device identification.
@node-rs/argon2
Native Rust binding for Argon2 password hashing in Node.js
gokrb5
A pure Go implementation of Kerberos 5 authentication, SPNEGO negotiation, and Active Directory PAC decoding — no cgo, no native krb5 dependency.
argon2id
A minimal, secure Argon2id password hashing wrapper for Go with built-in salt generation and constant-time verification.
node-acme-client
A simple, unopinionated Node.js client for the ACME protocol, automating certificate issuance from Let's Encrypt and other CAs.
crypto-hash
Tiny isomorphic hashing module that uses the native crypto API in Node.js and the browser.
better-sqlite3-multiple-ciphers
Synchronous SQLite3 driver for Node.js, forked from better-sqlite3, with built-in multi-cipher database encryption support.