发现和探索全球最新的开发者工具
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on t
Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API
Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.
Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services
Extensible, strongly-typed Rust OAuth2 client library
以开源为核心的IDaas/IAM平台，用于管理企业内员工账号、权限、身份认证、应用访问，帮助整合部署在本地或云端的内部办公系统、业务系统及三方 SaaS 系统的所有身份，实现一个账号打通所有应用的服务。
*CURRENTLY UNMAINTAINED*. Authority helps you authorize actions in your Rails app. It's ORM-neutral and has very little fancy syntax; just group your models und
OpenCode plugin that uses your existing Claude Code credentials — no separate login needed.
PHP library for Two Factor Authentication (TFA / 2FA)
Software Supply Chain Transparency Log
Detect leaked secrets + live validation. Map blast radius across your stack. Revoke fast. 1,000+ rules.
PHP security vulnerabilities checker