All repos — GH Trending Explorer

Share your Immich photos and albums in a safe way without exposing your Immich instance to the public.

github / codeql-action

Actions for running CodeQL analysis

lissy93 / domain-locker

🌐 The all-in-one tool, for keeping track of your domain name portfolio. Got domain names? Get Domain Locker!

ChiChou / grapefruit

Open-source mobile security testing suite for iOS and Android. Previously Passionfruit

unjs / destr

🚀 Faster, secure and convenient alternative for JSON.parse for arbitrary inputs

s2b-dev / smart-second-brain

A free, open-source Obsidian plugin that makes your vault smarter: better search, an interactive knowledge graph, and an AI assistant that knows your notes.

rahilp / second-brain-cloudflare

One memory layer, every AI tool. Store anything once — recall it in Claude, ChatGPT, Cursor, or any MCP client. Self-hosted on Cloudflare's free tier.

TheDuffman85 / crowdsec-web-ui

A self-hosted dashboard for CrowdSec: investigate alerts, manage decisions, monitor runtime metrics, and send notifications from one responsive UI.

openqodex / openqodex

Open source code review that runs in your coding agent before you push. Scanners plus a separate AI reviewer, on your own login, no key.

m-sec-org / BreachWeave

智能渗透Agent Manager/Observer/Solver 多角色架构，基于 pi-mono SDK。

letstri / permix

🔒 Permix is a lightweight, framework-agnostic, type-safe permissions management library for TypeScript applications on the client and server sides.

zosmaai / pi-llm-wiki

Self-maintaining, Obsidian-compatible knowledge base for pi — turn raw sources into an interlinked wiki that compounds. Native Open Knowledge Format (OKF) v0.2.

Justin0504 / Aegis

Runtime policy enforcement for AI agents. Cryptographic audit trail, human-in-the-loop approvals, kill switch. Zero code changes.

adshao / flounder

Autonomous white-hat security auditor for AI-driven code review, bug bounty research, exploit construction, and execution-grounded verification.

shinthink / blitzstrike

Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.

QiantangCredit / heimdall-agent

An autonomous AI agent framework for authorized CTF and security labs

slywalker2006 / dsh-passwords

Server-grade gateway that turns DeepSeek Harness into a multi-tenant platform: remote access + auto HTTPS, subuser permissions & quotas, sandbox enforcement, encrypted auth, audit log.

MingyiSecLab / Atlas

Open-source local AI Agent desktop app for authorized security assessment — Electron + Mastra-powered runtime, visual pentest workflow, Kali sandbox, multi-provider LLM routing. 本地 AI 安全评估智能体桌面应用

omdsh-dev / dsh-advisor

Advisor - Pair a second model that passively reviews each turn with notes and predicts your next prompt. 搭配一个会在每轮对话被动注入见解和提示词预测的副模型。

javascript-obfuscator / javascript-obfuscator

A powerful obfuscator for JavaScript and Node.js

gitpod-io / gitpod

The developer platform for on-demand cloud development environments to create software faster and more securely.

snyk / cli

Snyk CLI scans and monitors your projects for security vulnerabilities.

thebuilder / react-intersection-observer

React implementation of the Intersection Observer API to tell you when an element enters or leaves the viewport.

dmno-dev / varlock

AI-safe .env files: Schemas for agents, Secrets for humans.

yihong0618 / running_page

Make your own running home page

securingsincity / react-ace

React Ace Component

vvo / iron-session

🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework

vidstack / player

Deprecated in favour of Video.js 10; security fixes only until January 2028. UI components and hooks for building video and audio players on the web.

metorial / metorial

Connect any AI model to 1200+ integrations (MCP, CLI, API)

express-rate-limit / express-rate-limit

Basic rate-limiting middleware for the Express web server

chaterm / Chaterm

Open source AI terminal for cloud and infrastructure management, enabling you to deploy, troubleshoot, and automate services using natural language and intelligent agents.

colinlet / PHP-Interview-QA

系统性的 PHP 技术面试问答大全（面经）。涵盖 PHP8、MySQL、Redis、Nginx、系统设计、算法、Laravel 源码及高并发架构原理，助你斩获后端研发 Offer。PHP Interview Questions & Answers.

dai-shi / use-context-selector

React useContextSelector hook in userland

jesec / flood

A modern web UI for various torrent clients with a Node.js backend and React frontend.

botswin / BotBrowser

Advanced Privacy Browser Core with Unified Fingerprint Defense: Cloudflare, Akamai, Kasada, Shape, DataDome, PerimeterX, hCaptcha, FunCaptcha, Imperva, reCAPTCHA, ThreatMetrix, Adscore

mitre-attack / attack-navigator

Web app that provides basic navigation and annotation of ATT&CK matrices

OneKeyHQ / app-monorepo

Secure, open source and community driven crypto wallet runs on all platforms and trusted by millions.

oldwinter / knowledge-garden

我的第二大脑 second brain，我的数字花园 digital garden，用obsidian双链笔记软件写作而成

unjs / ipx

🖼️ High performance, secure and easy-to-use image optimizer.

RocketChat / Rocket.Chat.ReactNative

The Secure CommsOS™ for mission-critical operations

kyantech / Palmr

🌴 Palmr. is an open-source file-sharing platform focused on privacy and security. It enables users to upload, manage, and share files with features like password protection, custom links, and access control without tracking or limitations. Designed for seamless and secure sharing, Palmr. is completely free.

jeremyckahn / chitchatter

Secure peer-to-peer chat that is serverless, decentralized, and ephemeral

onury / accesscontrol

Role and Attribute based Access Control for Node.js

safe-fndn / safe-smart-account

Safe allows secure management of blockchain assets.

CorentinTh / enclosed

Minimalistic web app designed for sending private and secure notes.

vmoranv / jshookmcp

A search-first, profile-aware reverse-engineering workspace for AI agents — 735 tools across 36 domains in one MCP server.

trycompai / comp

AI Native platform to get companies compliant - Vanta & Drata Alternative

Sync-in / server

Sync-in · Sovereign platform for file storage, sharing, synchronization, and collaboration.

ninoseki / mitaka

A browser extension for OSINT search

RocketChat / Rocket.Chat.Electron

The Secure CommsOS™ for mission-critical operations

node-opcua / node-opcua

Unlocking the Full Potential of OPC UA with Typescript and NodeJS - http://node-opcua.github.io/

kilianc / rtail

rtail(1) - Terminal output to the browser in seconds, using UNIX pipes.

atinux / nuxt-auth-utils

Add Authentication to Nuxt applications with secured & sealed cookies sessions.

omegaee / my-fingerprint

保护你的浏览器指纹 | Protect Your Browser Fingerprints | Chrome, Edge, Firefox | 扩展 / Extension

nowsecure / r2frida

Radare2 and Frida better together.

wotschofsky / domain-digger

Full Toolkit for Next-Level Domain Analysis

franklioxygen / MyTube

Self-hosted downloader and player for YouTube, Bilibili, Twitch, MissAV, and yt-dlp sites. Features channel subscriptions, auto-downloads, and local storage for media. Organize your library into collections with a sleek UI. Includes built-in Cloudflare Tunnel support for secure remote access without port forwarding. Docker-ready deployment.

damienbod / angular-auth-oidc-client

npm package for OpenID Connect, OAuth Code Flow with PKCE, Refresh tokens, Implicit Flow

passportxyz / passport

Passport allows users to prove their identity through a secure, decentralized UI