Webhook receiver SDK for AIACTA citation events. HMAC-SHA256 signature verification, idempotency, and Express middleware (AIACTA Proposal 2, §3.4)

Simple crypto library for HMAC-SHA256 and AES-256-CBC

Crypto réutilisable : chiffrement au repos (AES-256-GCM authentifié), sha256, HMAC-SHA256, keyring .env, wrapper encryptedStorage. Composé par storage/ged/users/url.

Encryption & blind-index providers for @ycforge/ydb-orm (Yandex Cloud KMS, HMAC-SHA256)

Post-quantum ML-DSA-65 webhook signing and verification. Sign outgoing payloads so recipients can prove they came from you, and verify incoming ones before processing. Drop-in for HMAC-SHA256 patterns, with an optional compact-JWS path.

Authentication security primitives for any Node.js application — account lockout with exponential backoff, password strength validation, session security with suspicious activity detection, and CSRF protection with HMAC-SHA256 signed tokens.

Hash an input value using HMAC-SHA256 and a secret key from an environment variable.

Security primitives for the Graphorin framework: SecretValue runtime-safe wrapper, SecretRef URI parser, pluggable SecretsStore implementations, per-tool ACL, AsyncLocalStorage-based audit scope tracking, server token authentication (HMAC-SHA256 + pepper

Signs API requests using (HMAC-SHA256)

The Unleashed API Auth Signature plugin creates an unleashed specific api call HMAC-SHA256 signature, using your API key as the secret key.

Isomorphic TypeScript client for the Animal-ID Partner API (HMAC-SHA256 signing, zero runtime dependencies).

BonkLM Guardrail HTTP server — Fastify service exposing /litellm, /portkey, /openai-compatible endpoints with HMAC-SHA256 auth for LiteLLM + Portkey integration

OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module.

Vapi (HTTP) + Retell (WebSocket) webhook validators for BonkLM. HMAC-SHA256 auth, sync tool-calls / assistant-request, async transcript observe-only, Retell update_only + response_required.

Standalone vault crypto primitives: multi-round PBKDF2, AES-GCM, HMAC-SHA256, CSPRNG. Pure Web Crypto API, zero dependencies. Extracted from BlackBox Wallet.

Cross-language HMAC-SHA256 request signing with a defined canonical string format.

Stripe-style prefixed API keys for Node.js — 3-segment tokens (prefix_id_secret), HMAC-SHA256 storage hash with pepper rotation, scope allowlists with wildcard match, opt-in lastUsedAt tracking, memory + Redis stores, Express + Fastify middleware. Server-

Tamper-proof audit hash-chain kernel shared across Happy Technologies products: keyed HMAC-SHA256 entry hashing, chain verification, and an optional Postgres single-writer helper. Domain-agnostic; products own their audit_log schema and migrations; app ow

Deterministic random bit generator (hmac)

Validates Contentful webhook signatures using HMAC-SHA256, parses webhook payloads, and provides type-safe interfaces for all webhook event types