Tiny JavaScript tokenizer.

in-memory, signed and encrypted JavaScript store

White-label Nuxt 4 adapter for OpenID Connect authentication and application-owned authorization.

Field-level encryption for PII at rest: AES-256-GCM with versioned key rotation, key namespaces, HMAC blind indexes for equality lookups on encrypted columns, and row helpers with systemic-failure detection. Zero dependencies, bring your own database.

Take an array of token and produce a more useful API to give to a parser

Sol — agent-native version control (a new git). CLI, MCP server, and no-filesystem SDK.

Lightweight fuzzy-search

A lightweight library for generating short-term bearer tokens for AWS Bedrock API authentication

Kubernetes sealed-secrets models

oidc-token-hash validates (and generates) ID Token `_hash` claims such as `at_hash` or `c_hash`

SPL Token Program JS API

Checksum-tracked SQL migrations for MySQL/MariaDB with a dev-first lifecycle: migrations start unnumbered as dev_<slug>/ and are sealed to NNN_<slug>/ right before merge, so parallel branches never collide on numbers.

Use [Shamir's secret sharing](https://en.wikipedia.org/wiki/Shamir%27s_secret_sharing) with [@wharfkit/antelope](https://github.com/wharfkit/antelope) Public/Private Keys to encrypt and decrypt a message.

Type-safe implementation of invariant with positionals.

SealedSecret CR backend for konfig.ts — shells out to kubeseal at render time and emits bitnami.com/v1alpha1 manifests.

Sealed-cookie session manager for Node.js — rotation, revocation, sudo mode, impersonation, concurrent limits, fingerprint binding, device labels, Redis distributed revocation, and adapters for Fastify and Express.

Port of TweetNaCl cryptographic library to JavaScript, includes implementation of sealed boxes

BLACKBOX — the flight recorder for AI agents. One command to enroll a device, record every Claude Code / MCP tool call into a tamper-evident hash-chained + signed log, anchor it to a public timestamp, ship to a fleet, and verify offline.

TypeScript auth lifecycle primitives for Jakuta-family web apps.

Decode JWT tokens, mostly useful for browser applications.