Directory

Open Source Packages

Libraries, frameworks, tools, and SDKs used by the apps in this directory — scored the same way as the apps themselves.

5929 packages

All Packages

Kind
Library4824 SDK549 Tool342 Framework214
Category1
Utilities Ids Helpers1293 Serialization Data Formats487 UI Component Libraries383 Cli Terminal323 Authentication Authorization289 Cryptography Hashing259 Web Frameworks API Servers246 Build Tools Bundlers227 Image Media Processing213 Cloud Sdks200 Database Drivers Clients200 Async Concurrency Runtimes194
Tags3
React667 Python639 Javascript591 Rust485 Typescript408 Hacktoberfest308 PHP304 Nodejs280 Parser224 JSON204 Laravel203 Go192 Python23
Sort:Used by Most Apps
Used by Most Apps Health Score Most Stars A-Z
Showing 12 of 5929 packages
Cryptography Hashing Python2 Go JSON Clear all
86Health
Library PyPI

PyJWT

A Python implementation of RFC 7519 for encoding, decoding, and verifying JSON Web Tokens.

5,706
MIT
Used by 44
88Health
Library Go

webauthn

A spec-conformant WebAuthn and FIDO2 passkey server library for Go, handling registration and authentication ceremonies for passwordless and multi-factor login.

1,338
BSD 3
Used by 11
88Health
Library Go

jwx

A complete, opinionated Go implementation of the JOSE stack: JWT, JWS, JWE, JWK, and JWA.

2,427
MIT
Used by 7
44Health
Library Go

securecookie

Encodes and decodes authenticated, optionally encrypted cookie values for Go web applications, guarding session data from tampering.

729
BSD 3
Used by 7
77Health
Library Go

certmagic

Automatic HTTPS for Go programs — the production-grade ACME client library that powers Caddy, obtaining and renewing TLS certificates with zero manual cert management.

5,605
Apache 2.0
Used by 6
75Health
Library PyPI

Standard Webhooks (Python)

Python reference implementation for verifying Standard Webhooks HMAC-signed webhook payloads

1,753
Apache 2.0
Used by 5
40Health
Library Go

machineid

Reads a cross-platform machine ID without admin privileges and hashes it for safe, app-specific device identification.

1,179
MIT
Used by 5
50Health
Library Go

gokrb5

A pure Go implementation of Kerberos 5 authentication, SPNEGO negotiation, and Active Directory PAC decoding — no cgo, no native krb5 dependency.

780
Apache 2.0
Used by 2
47Health
Library npm

jws

Complete JSON Web Signature (JWS) implementation for Node.js with sync and streaming APIs

719
MIT
Used by 2
40Health
Library Go

argon2id

A minimal, secure Argon2id password hashing wrapper for Go with built-in salt generation and constant-time verification.

700
MIT
Used by 2
74Health
Library Cargo

jwt-simple

A fast, safe-by-default Rust library for creating and verifying JWT and JWE tokens across every major signing and encryption algorithm.

282
Other
Used by 1
42Health
Library Cargo

biscuit

A typed Rust library for JWT, JWS, and JWE - full JOSE token signing, encryption, and validation built on ring.

188
MIT
Used by 1

Join founders buildingwith open source

Opinionated takes, migration guides, cost-saving tips, and insights from the open source ecosystem.

Subscribe on Substack
Join 750+ subscribers