* [Anubis v1.28.0](https://github.com/TecharoHQ/anubis) – Weighs the soul of connections using proof-of-work to protect resources from scraper bots.

* [TruffleHog v3.99.0](https://github.com/trufflesecurity/trufflehog) – Powerful tool for discovering, classifying, validating, and analyzing leaked credentials.

* [cnspec v14.5.0](https://github.com/mondoohq/cnspec) – Cloud-native policy-as-code engine that scans infrastructure, containers, Kubernetes, cloud services, and code for vulnerabilities and misconfigurations.

* [MQL v14.5.0](https://github.com/mondoohq/mql) – Cloud-native graph-based query language for querying and discovering infrastructure assets across clouds, containers, and services.

* [Tracecat 1.1.0](https://github.com/TracecatHQ/tracecat) – Modern automation platform for security and IT engineers with YAML templates, no-code workflows, lookup tables, and case management.

* [EVE 17.9.0](https://github.com/lf-edge/eve) – Edge virtualization engine providing hardware-assisted virtualization and resource partitioning for on-premises edge devices.

* [Ship Safe v11.0.0](https://github.com/asamassekou10/ship-safe) – AI-powered security platform that scans codebases for secrets, vulnerabilities, CVEs, and generates prioritized remediation plans.

* [cnspec v14.4.0](https://github.com/mondoohq/cnspec) – Cloud-native policy-as-code engine that scans infrastructure, containers, Kubernetes, cloud services, and code for vulnerabilities and misconfigurations.

* [MQL v14.4.0](https://github.com/mondoohq/mql) – Cloud-native graph-based query language for querying and discovering infrastructure assets across clouds, containers, and services.

* [TruffleHog v3.99.2](https://github.com/trufflesecurity/trufflehog) – Powerful tool for discovering, classifying, validating, and analyzing leaked credentials.

* [EVE 17.8.0](https://github.com/lf-edge/eve) – Edge virtualization engine providing hardware-assisted virtualization and resource partitioning for on-premises edge devices.

* [TruffleHog v3.99.1](https://github.com/trufflesecurity/trufflehog) – Powerful tool for discovering, classifying, validating, and analyzing leaked credentials.

* [Meme v2.0.0](https://github.com/nhovongoc0-max/meme-radar) – Local read-only multi-chain meme candidate scanner with GMGN-backed HTTP API access and manual review workflow.

* [EVE 17.7.0](https://github.com/lf-edge/eve) – Edge virtualization engine providing hardware-assisted virtualization and resource partitioning for on-premises edge devices.

* [Skylos v4.47.0](https://github.com/duriantaco/skylos) – Privacy-first hybrid static-analysis tool for Python, TypeScript, and Go that detects dead code, secrets, and security vulnerabilities.

* [Skylos v4.46.0](https://github.com/duriantaco/skylos) – Privacy-first hybrid static-analysis tool for Python, TypeScript, and Go that detects dead code, secrets, and security vulnerabilities.

* [vet v1.20.0](https://github.com/safedep/vet) – Enterprise-grade software supply chain security tool with real-time malicious package detection and policy as code support.

* [OpenFGA v1.22.0](https://github.com/openfga/openfga) – High-performance authorization engine for modeling and enforcing fine-grained access control inspired by Google Zanzibar.

* [Infisical v0.166.0](https://github.com/Infisical/infisical) – Secret management platform for syncing secrets and configurations across teams and infrastructure while preventing leaks.

* [TruffleHog v3.98.1](https://github.com/trufflesecurity/trufflehog) – Powerful tool for discovering, classifying, validating, and analyzing leaked credentials.

* [cnspec v14.3.0](https://github.com/mondoohq/cnspec) – Cloud-native policy-as-code engine that scans infrastructure, containers, Kubernetes, cloud services, and code for vulnerabilities and misconfigurations.

* [MQL v14.3.0](https://github.com/mondoohq/mql) – Cloud-native graph-based query language for querying and discovering infrastructure assets across clouds, containers, and services.

* [Infisical v0.166.4](https://github.com/Infisical/infisical) – Secret management platform for syncing secrets and configurations across teams and infrastructure while preventing leaks.

* [DOMPurify 3.4.17](https://github.com/cure53/DOMPurify) – Fast and tolerant XSS sanitizer for HTML, MathML, and SVG.

* [mutant v2.6.0](https://github.com/aoiflux/mutant) – A garbage-collected programming language focused on compile-time and runtime security via encrypted bytecode.

* [Scorecards' GitHub action v2.5.0](https://github.com/ossf/scorecard-action) – GitHub Action that runs OpenSSF Scorecards to produce security results, badges, and optional published reporting for repositories.

* [chezmoi v2.73.1](https://github.com/twpayne/chezmoi) – Manage dotfiles across multiple diverse machines securely.

* [osctrl v0.6.0](https://github.com/jmpsec/osctrl) – Fast, efficient osquery management server implementing the osquery remote API as a TLS endpoint.

* [gowitness 3.2.2](https://github.com/sensepost/gowitness) – A Go-based website screenshot utility that uses Chrome Headless to capture web pages from the command line with optional reporting and saved results.

* [gowitness 3.2.1](https://github.com/sensepost/gowitness) – A Go-based website screenshot utility that uses Chrome Headless to capture web pages from the command line with optional reporting and saved results.

* [Authula v1.48.0](https://github.com/Authula/authula) – Embeddable Go library or standalone auth server with plugin-based, composable authentication and extensible hooks.

* [Anubis v1.28.1](https://github.com/TecharoHQ/anubis) – Weighs the soul of connections using proof-of-work to protect resources from scraper bots.

* [Plumber v0.6.0](https://github.com/getplumber/plumber) – CI/CD compliance scanner for GitLab pipelines

* [Infisical v0.166.3](https://github.com/Infisical/infisical) – Secret management platform for syncing secrets and configurations across teams and infrastructure while preventing leaks.

* [@socketsecurity/sdk v4.2.0](https://github.com/SocketDev/socket-sdk-js) – Canonical JavaScript/TypeScript SDK for the Socket.dev API, providing package scoring, quota management, batch lookups, and dependency analysis with built-in request handling.

* [Meme v2.1.0](https://github.com/nhovongoc0-max/meme-radar) – Local read-only multi-chain meme candidate scanner with GMGN-backed HTTP API access and manual review workflow.

* [HotCell v1.1.0](https://github.com/basecamp/hotcell) – Rails-oriented HotCell sidecar isolates untrusted computation in an unprivileged container with strict resource limits and file-descriptor based RPC.

* [OpenCTI 7.261008.0](https://github.com/OpenCTI-Platform/opencti) – Platform for managing, structuring, visualizing, and sharing cyber threat intelligence using a STIX2-based knowledge schema.

* [portchecker.io v4.2.0](https://github.com/dsgnr/portchecker.io) – API for checking port availability on specified hostnames or IP addresses to assist network troubleshooting and firewall validation.

* [Infisical v0.166.2](https://github.com/Infisical/infisical) – Secret management platform for syncing secrets and configurations across teams and infrastructure while preventing leaks.

* [Infisical v0.166.1](https://github.com/Infisical/infisical) – Secret management platform for syncing secrets and configurations across teams and infrastructure while preventing leaks.

* [Grype v0.120.1](https://github.com/anchore/grype) – Vulnerability scanner for container images and filesystems.

* [Password Pusher v2.14.2](https://github.com/pglombardo/PasswordPusher) – Securely share sensitive information with automatic expiration and deletion after a set number of views or duration.

* [express-rate-limit v8.7.1](https://github.com/express-rate-limit/express-rate-limit) – Middleware for limiting repeated requests to public APIs and endpoints.

* [Infisical v0.165.17](https://github.com/Infisical/infisical) – Secret management platform for syncing secrets and configurations across teams and infrastructure while preventing leaks.

* [HotCell v1.0.0](https://github.com/basecamp/hotcell) – Rails-oriented HotCell sidecar isolates untrusted computation in an unprivileged container with strict resource limits and file-descriptor based RPC.

* [Plumber v0.6.1](https://github.com/getplumber/plumber) – CI/CD compliance scanner for GitLab pipelines

* [secure-json-parse v4.1.1](https://github.com/fastify/secure-json-parse) – JSON.parse() drop-in replacement that protects against prototype poisoning via \_\_proto\_\_ and constructor.prototype keys.

* [hoop.dev 1.234.0](https://github.com/hoophq/hoop) – Proxy that secures and simplifies access to infrastructure with outbound-only connections and integrated SSO.

* [Meme v2.1.2](https://github.com/nhovongoc0-max/meme-radar) – Local read-only multi-chain meme candidate scanner with GMGN-backed HTTP API access and manual review workflow.

* [Go-TPM tools v0.4.11](https://github.com/google/go-tpm-tools) – High-level Go packages providing APIs for interacting with TPM 2.0 devices.

* [Meme v2.1.1](https://github.com/nhovongoc0-max/meme-radar) – Local read-only multi-chain meme candidate scanner with GMGN-backed HTTP API access and manual review workflow.

* [hoop.dev 1.233.0](https://github.com/hoophq/hoop) – Proxy that secures and simplifies access to infrastructure with outbound-only connections and integrated SSO.

* [hoop.dev 1.231.0](https://github.com/hoophq/hoop) – Proxy that secures and simplifies access to infrastructure with outbound-only connections and integrated SSO.

* [Phase Console v2.77.3](https://github.com/phasehq/console) – Platform for engineering teams to secure, manage, and deploy application secrets across environments.

* [hoop.dev 1.229.0](https://github.com/hoophq/hoop) – Proxy that secures and simplifies access to infrastructure with outbound-only connections and integrated SSO.

* [Skylos v4.47.2](https://github.com/duriantaco/skylos) – Privacy-first hybrid static-analysis tool for Python, TypeScript, and Go that detects dead code, secrets, and security vulnerabilities.

* [Snyk CLI v1.1308.0](https://github.com/snyk/cli) – Scans and monitors projects for security vulnerabilities in code, containers, dependencies, and infrastructure-as-code.

* [Password Pusher v2.14.3](https://github.com/pglombardo/PasswordPusher) – Securely share sensitive information with automatic expiration and deletion after a set number of views or duration.

* [Skylos v4.47.1](https://github.com/duriantaco/skylos) – Privacy-first hybrid static-analysis tool for Python, TypeScript, and Go that detects dead code, secrets, and security vulnerabilities.

* [hoop.dev 1.227.0](https://github.com/hoophq/hoop) – Proxy that secures and simplifies access to infrastructure with outbound-only connections and integrated SSO.

* [hoop.dev 1.226.0](https://github.com/hoophq/hoop) – Proxy that secures and simplifies access to infrastructure with outbound-only connections and integrated SSO.

* [Data security Stack for TypeScript stack-encrypt-derive...](https://github.com/cipherstash/stack) – End-to-end field-level encryption for TypeScript apps with zero-knowledge key management and searchable encrypted queries.

* [hoop.dev 1.225.0](https://github.com/hoophq/hoop) – Proxy that secures and simplifies access to infrastructure with outbound-only connections and integrated SSO.

* [cnspec v14.3.1](https://github.com/mondoohq/cnspec) – Cloud-native policy-as-code engine that scans infrastructure, containers, Kubernetes, cloud services, and code for vulnerabilities and misconfigurations.

* [hoop.dev 1.224.0](https://github.com/hoophq/hoop) – Proxy that secures and simplifies access to infrastructure with outbound-only connections and integrated SSO.

* [MQL v14.3.1](https://github.com/mondoohq/mql) – Cloud-native graph-based query language for querying and discovering infrastructure assets across clouds, containers, and services.

* [Xalgorix v4.6.153](https://github.com/xalgorix/xalgorix) – Autonomous AI pentesting platform that runs an end-to-end methodology and uses independent re-exploitation to verify and prove vulnerabilities.

* [hoop.dev 1.223.0](https://github.com/hoophq/hoop) – Proxy that secures and simplifies access to infrastructure with outbound-only connections and integrated SSO.

* [Xalgorix v4.6.152](https://github.com/xalgorix/xalgorix) – Autonomous AI pentesting platform that runs an end-to-end methodology and uses independent re-exploitation to verify and prove vulnerabilities.

* [Xalgorix v4.6.151](https://github.com/xalgorix/xalgorix) – Autonomous AI pentesting platform that runs an end-to-end methodology and uses independent re-exploitation to verify and prove vulnerabilities.

* [hoop.dev 1.222.0](https://github.com/hoophq/hoop) – Proxy that secures and simplifies access to infrastructure with outbound-only connections and integrated SSO.

* [Xalgorix v4.6.150](https://github.com/xalgorix/xalgorix) – Autonomous AI pentesting platform that runs an end-to-end methodology and uses independent re-exploitation to verify and prove vulnerabilities.

* [hoop.dev 1.221.0](https://github.com/hoophq/hoop) – Proxy that secures and simplifies access to infrastructure with outbound-only connections and integrated SSO.

* [hoop.dev 1.220.0](https://github.com/hoophq/hoop) – Proxy that secures and simplifies access to infrastructure with outbound-only connections and integrated SSO.

* [Xalgorix v4.6.149](https://github.com/xalgorix/xalgorix) – Autonomous AI pentesting platform that runs an end-to-end methodology and uses independent re-exploitation to verify and prove vulnerabilities.

* [Xalgorix v4.6.148](https://github.com/xalgorix/xalgorix) – Autonomous AI pentesting platform that runs an end-to-end methodology and uses independent re-exploitation to verify and prove vulnerabilities.

* [Anchore Kubernetes Inventory v1.8.6](https://github.com/anchore/k8s-inventory) – Periodic Kubernetes API poller reporting containers, images, pods, nodes and namespaces currently in use.

* [Authula v1.48.0-dev.2](https://github.com/Authula/authula) – Embeddable Go library or standalone auth server with plugin-based, composable authentication and extensible hooks.

* [hoop.dev 1.234.4](https://github.com/hoophq/hoop) – Proxy that secures and simplifies access to infrastructure with outbound-only connections and integrated SSO.

* [hoop.dev 1.234.3](https://github.com/hoophq/hoop) – Proxy that secures and simplifies access to infrastructure with outbound-only connections and integrated SSO.

* [hoop.dev 1.234.2](https://github.com/hoophq/hoop) – Proxy that secures and simplifies access to infrastructure with outbound-only connections and integrated SSO.

* [hoop.dev 1.233.5](https://github.com/hoophq/hoop) – Proxy that secures and simplifies access to infrastructure with outbound-only connections and integrated SSO.

* [hoop.dev 1.233.4](https://github.com/hoophq/hoop) – Proxy that secures and simplifies access to infrastructure with outbound-only connections and integrated SSO.

* [hoop.dev 1.233.1](https://github.com/hoophq/hoop) – Proxy that secures and simplifies access to infrastructure with outbound-only connections and integrated SSO.

* [hoop.dev 1.230.2](https://github.com/hoophq/hoop) – Proxy that secures and simplifies access to infrastructure with outbound-only connections and integrated SSO.

* [Authula v1.48.0-dev.1](https://github.com/Authula/authula) – Embeddable Go library or standalone auth server with plugin-based, composable authentication and extensible hooks.

* [Plumber v0.5.24](https://github.com/getplumber/plumber) – CI/CD compliance scanner for GitLab pipelines

* [CoWork OS v0.5.60](https://github.com/CoWork-OS/CoWork-OS) – Security-first personal AI assistant runtime providing multi-provider model access and multi-channel messaging integrations with local-first data control.

* [Plumber v0.5.23](https://github.com/getplumber/plumber) – CI/CD compliance scanner for GitLab pipelines

* [Plumber v0.5.22](https://github.com/getplumber/plumber) – CI/CD compliance scanner for GitLab pipelines

* [hoop.dev 1.226.1](https://github.com/hoophq/hoop) – Proxy that secures and simplifies access to infrastructure with outbound-only connections and integrated SSO.

* [Anubis v1.28.0-pre3](https://github.com/TecharoHQ/anubis) – Weighs the soul of connections using proof-of-work to protect resources from scraper bots.

* [hoop.dev 1.224.1](https://github.com/hoophq/hoop) – Proxy that secures and simplifies access to infrastructure with outbound-only connections and integrated SSO.

* [ReVens 1.5.6](https://github.com/Jakiboy/ReVens) – Windows-based, AI-powered all-in-one reverse engineering package manager for malware analysis, penetration testing, and education.

* [hoop.dev 1.223.1](https://github.com/hoophq/hoop) – Proxy that secures and simplifies access to infrastructure with outbound-only connections and integrated SSO.

* [Anchore Kubernetes Inventory v1.8.6-alpha.0](https://github.com/anchore/k8s-inventory) – Periodic Kubernetes API poller reporting containers, images, pods, nodes and namespaces currently in use.

* [Tracecat 1.1.0-alpha.11](https://github.com/TracecatHQ/tracecat) – Modern automation platform for security and IT engineers with YAML templates, no-code workflows, lookup tables, and case management.

* [Tracecat 1.1.0-alpha.10](https://github.com/TracecatHQ/tracecat) – Modern automation platform for security and IT engineers with YAML templates, no-code workflows, lookup tables, and case management.

* [Tracecat 1.1.0-alpha.9.1](https://github.com/TracecatHQ/tracecat) – Modern automation platform for security and IT engineers with YAML templates, no-code workflows, lookup tables, and case management.

* [Yaklang 1.4.9-beta2](https://github.com/yaklang/yaklang) – Cybersecurity-focused domain-specific programming language with a dedicated virtual machine and IDE support.

* [AEGIS aegis-v0.19.2-beta](https://github.com/antropos17/Aegis) – Local-first EDR-style monitor tracking AI agent processes, file and network activity with per-agent risk scoring.

* [AEGIS aegis-v0.19.1-beta](https://github.com/antropos17/Aegis) – Local-first EDR-style monitor tracking AI agent processes, file and network activity with per-agent risk scoring.

* [AEGIS aegis-v0.19.0-beta](https://github.com/antropos17/Aegis) – Local-first EDR-style monitor tracking AI agent processes, file and network activity with per-agent risk scoring.

* [vet v2.0.0-alpha.2026101...](https://github.com/safedep/vet) – Enterprise-grade software supply chain security tool with real-time malicious package detection and policy as code support.

* [vet v2.0.0-alpha.2026101...](https://github.com/safedep/vet) – Enterprise-grade software supply chain security tool with real-time malicious package detection and policy as code support.

* [Firewalla gold-alpha-v1.984.00...](https://github.com/firewalla/firewalla) – A network security appliance firmware and companion mobile and web apps for managing and monitoring home or small office networks.

* [Firewalla goldplus2-alpha-v1.9...](https://github.com/firewalla/firewalla) – A network security appliance firmware and companion mobile and web apps for managing and monitoring home or small office networks.

* [vet v2.0.0-alpha.2026100...](https://github.com/safedep/vet) – Enterprise-grade software supply chain security tool with real-time malicious package detection and policy as code support.

* [vet v2.0.0-alpha.2026100...](https://github.com/safedep/vet) – Enterprise-grade software supply chain security tool with real-time malicious package detection and policy as code support.

* [vet v2.0.0-alpha.2026100...](https://github.com/safedep/vet) – Enterprise-grade software supply chain security tool with real-time malicious package detection and policy as code support.

* [vet v2.0.0-alpha.2026100...](https://github.com/safedep/vet) – Enterprise-grade software supply chain security tool with real-time malicious package detection and policy as code support.