Rafter CLI — the default security agent for AI coding workflows. Free for individuals and open source.

Sync your local environment variables from external source shared among developers

Security-focused CLI tool for JS/TS codebases — catches the vulnerabilities AI coding agents actually introduce, and installs its rules as guidance for your coding agent.

Synanetics custom secrets package for GCP environments

Varlock plugin to load secrets from Proton Pass using the Proton Pass CLI

The security auditor for AI-written code and the pipelines that ship it — taint analysis, agentic/CI risks, multi-ecosystem SCA, adversarial AI triage

Cloudflare Workers integration for varlock - deploy secrets via wrangler and auto-configure Vite

End-to-end encrypted secrets manager CLI — inject decrypted secrets into any command.

The Local-First Backend Health & Security Audit Tool

Refer to the [SDK documentation](https://docs.bucketeer.io/sdk/client-side/javascript) for instructions on how to use the SDK.

Node.js wrapper for dash-licenses, that makes it easier to perform license checks for JS/TS Eclipse Foundation projects

Axios-like NodeJS API for Hashicorp Vault.

Automatically update secrets on an interval with support for seamless secret rotation.

Node.js SDK for Phase

This package helps to transform resources to an i18next backend

Passport-based LTI authorization

AI-powered Git pre-commit guard. Blocks bad code, detects secrets, runs Gemini AI review on every commit.

Scans your code changes for leaked secrets and insecure configuration, and returns actionable fixes to your AI coding agent. MCP server plus CLI for Claude Code, Cursor, Codex and Windsurf.

AWS SDK for JavaScript Secrets Manager Client for Node.js, Browser and React Native (with updated dependencies)

A library of readonly versions of Octokit types and their corresponding validators