An eslint rule that searches for potential secrets/keys in code

Browser-safe CreativeKit SDK (no secrets required)

React bindings for PayFanout: PayFanoutProvider, usePayFanout, PaymentFields, PayButton. No secrets, no server logic.

Client-side Stripe adapter for PayFanout (Stripe.js + Payment Element). No secrets, no server code.

IndieGateway browser SDK — merchant BFF client + paywall helpers (no secrets)

MCP server for DotEnvUp — status, keys, and run commands with decrypted env (no secrets over the wire)

OpenClaw integration package for RiddleDC (no secrets).

Container payload: a thin TypeScript wrapper that runs the Pi coding agent against a cloned repo and opens a PR. Runs in the Cloudflare Container (and, in local native mode, as a host process); carries no secrets.

Client-side Paysafe adapter for PayFanout (Paysafe.js hosted iframe fields, tokenize-first). No secrets, no server code.

Client-side PayPal adapter for PayFanout (PayPal Buttons, popup approval, tokenize-first). No secrets, no server code.

Client-side Worldline Direct adapter for PayFanout (Hosted Tokenization Page iframe, tokenize-first). No secrets, no server code.

MCP-related utilities for RiddleDC (no secrets).

Client-side GoCardless adapter for PayFanout (redirect to the GoCardless-hosted bank authorisation flow — no card fields). No secrets, no server code.

Client-side PayZen (Lyra) adapter for PayFanout (krypton-client embedded card fields, confirm-on-client, inline 3DS). No secrets, no server code.

wcagc MCP server — a thin, stateless adapter that translates MCP tool calls into wcagc-api HTTP calls. No database, no secrets beyond WCAGC_API_BASE_URL (+ WCAGC_MCP_KEY for local stdio mode). Open-source: this package holds no business logic or credentia

A standalone chat application for ORBIT that can be installed as an npm package and run as a CLI tool. All API communication is routed through a built-in Express proxy that maps adapter names to backend API keys, so **no secrets ever reach the browser**.

Browser SDK for embedding a BizNexus tenant's online store catalog + checkout on any website. Public per-store API key + Firebase Anonymous Auth (via direct REST calls, no firebase package) - no secrets shipped to the client, and zero runtime dependencies

An open, transparent scorer for X/Twitter follower authenticity — the reference implementation of the TweetBoost Follower Standard. Pure functions, no network, no secrets.

Catto SMS - Runtime-agnostic SMS sender (Telnyx) for Node/Edge apps. No NestJS, no secrets baked in.

AWS SDK for JavaScript Secrets Manager Client for Node.js, Browser and React Native