libgossamer
safehtml
| libgossamer | safehtml | |
|---|---|---|
| 13 | 2 | |
| 31 | 340 | |
| - | 2.1% | |
| 2.6 | 0.0 | |
| over 2 years ago | 7 days ago | |
| PHP | Go | |
| ISC License | BSD 3-clause "New" or "Revised" License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
libgossamer
-
Gossamer: Supply Chain Security for Open-Source Software
See the definition of AppendKey:
-
Backdoor in several WP Themes and Plugins from AccessPress
That's why Gossamer exists, though. (I would talk about it more on here, but I figured everyone's still sick of hearing about it.) :)
- Gossamer: Supply Chain Security for the PHP Ecosystem.
- GnuPG used to ask for your support to help protect online privacy
-
Composer Security Hardening
Anyway, Github is still online -- https://github.com/paragonie/libgossamer
-
I am Filippo Valsorda, Go cryptography lead and tool author, Ask Me Anything
More recently, I wrote a blog post about end-to-end encryption, and mentioned integrating with some sort of decentralized authority-free identity system like Gossamer.
safehtml
-
Understanding HTML templates in Go (golang), with sample project
I recently read an articles which recommends google/safehtml instead of html/template. The mentioned article: https://blogtitle.github.io/go-safe-html/
-
I am Filippo Valsorda, Go cryptography lead and tool author, Ask Me Anything
Roberto Clapis is working on a set of packages (including https://github.com/google/safehtml which you can already use and is great) to provide strongly-secure-by-default alternatives to stdlib packages for web development such as html/template, database/sql, and net/http.
What are some alternatives?
Composer - Dependency Manager for PHP
go - The Go programming language
zenbot-sim-runner - A sim run batch aggregator / automator for Zenbot. Eases the process of backtesting and subsequent analysis of results.
jwt-go - ARCHIVE - Golang implementation of JSON Web Tokens (JWT). This project is now maintained at:
PGPy - Pretty Good Privacy for Python
advanced-custom-fields-pro - Advanced Custom Fields Pro, Git-ified. Automatically synced via GitHub Actions! This repository is just a mirror of the Advanced Custom Fields Pro plugin. Please do not send pull requests and issues.
trillian - A transparent, highly scalable and cryptographically verifiable data store.
tierney - Generic library for structured commands with explicit parallelism
sodium_compat - Pure PHP polyfill for ext/sodium
rage - A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composability.
passage - A fork of password-store (https://www.passwordstore.org) that uses age (https://age-encryption.org) as backend.
bedrock - WordPress boilerplate with Composer, easier configuration, and an improved folder structure