SaaSHub helps you find the best software and product alternatives Learn more โ
Top 23 TypeScript Security Projects
-
-
Kargo
Stop Scripting Promotions. Start Shipping with Kargo. Kargo automates promotion across dev, staging, and prod with approval gates and verification. Open source, built by the team behind Argo CD. Download now.
-
infisical
Infisical is the open-source platform for secrets, certificates, and privileged access management.
Project mention: Every secret in my homelab has exactly one home: how I run a self-hosted secrets manager, and the traps that bit me | dev.to | 2026-09-06So I moved everything behind a self-hosted secrets manager (Infisical, though the shape here applies to Vault, OpenBao, or any of them). One rule, ruthlessly applied:
-
personal-security-checklist
๐ A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
-
-
-
Zero
Experience email the way you want with Mail0 โ the first open source email app that puts your privacy and safety first. Join the discord: https://mail0.link/discord
-
Project mention: Introducing hapi-aegis: Helmet-style security headers for hapi.js | dev.to | 2026-04-20
Express has Helmet. One app.use(helmet()) and you get a sensible stack of security headers. Hapi has never had a direct equivalent โ until now.
-
AppSignal
Monitoring that respects your time & budget. APM, error tracking, and dashboards for modern web apps. Ten-minute setup, transparent flat pricing, and support from engineers who actually use the product.
-
Project mention: Release 0.4 Final: Reflecting on My Open Source Contributions for release 0.4 | dev.to | 2025-12-12
Issue: https://github.com/OpenCTI-Platform/opencti/issues/13594
-
Tutanota makes encryption easy
Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.
Project mention: Tuta: FOSS email service with privacy, encrypt emails, contacts and calendar | news.ycombinator.com | 2026-04-25 -
superagent
Superagent protects your AI applications against prompt injections, data leaks, and harmful outputs. Embed safety directly into your app and prove compliance to your customers. (by superagent-ai)
Project mention: Show HN: Local Privacy Firewall-blocks PII and secrets before ChatGPT sees them | news.ycombinator.com | 2025-12-09 -
privacy.sexy
Open-source tool to enforce privacy & security best-practices on Windows, macOS and Linux, because privacy is sexy
Project mention: April 2026 Roundup: Best New Free Tools โ No Signup Required | dev.to | 2026-05-02The full source is on GitHub and publicly auditable. The script definitions are community-contributed, which means they get updated when operating systems change (new telemetry endpoints, updated registry paths, changed service names). No login required, nothing sent to any server.
-
Project mention: AI Native DevConโ26: The London conference for developers building with AI | dev.to | 2026-05-21
Guy Podjarny, founder of Tessl, organizer of AI Native DevCon, and previously of Snyk, frames the 2026 question:
-
varlock
.env files built for sharing powered by @env-spec decorator comments run anywhere with any language, plus deeper integrations for next.js, vite, and more.
View on GitHub
-
tamperchrome
Tamper Dev is an extension that allows you to intercept and edit HTTP/HTTPS requests and responses as they happen without the need of a proxy. Works across all operating systems (including Chrome OS).
-
-
Chaterm
Open source AI terminal for cloud and infrastructure management, enabling you to deploy, troubleshoot, and automate services using natural language and intelligent agents.
Originally published at https://chaterm.ai GitHub๏ผhttps://github.com/chaterm/Chaterm
-
The captcha on orkestr is Altcha. Self-hosted, no third-party JS, no Google, no behavioral tracking. Users don't see a puzzle. There's a single checkbox and a quiet "verifying..." while the browser does some math. About a second, total.
-
Project mention: CyberStrike โ open-source AI harness for offensive security (AGPL) | news.ycombinator.com | 2026-08-22
-
Not new but quite cool. Note: https://creepjs.org/ is NOT official the repo is https://github.com/abrahamjuliot/creepjs
Anyone knows how fingerprinting works mathematically? what do they use? when the signals may vary even slightly, your final hash should be sufficiently accurate and stable. A simple hash won't do it.
Changing IP, missing cookies/session, resizing window, TLS/SSL browser handshake, screen depth, font rendering, MTR, network latency if you want to measure, etc... any signal alone means little but as a whole mathematically what is it possible to use to get a pretty good stable hash? something I want to learn more about. I guess it has something to do with vectors and clustering signals but no idea and would like to know what exists mathematically to archive this (if possible or with very small error).
And then I want a browser that lets me opt-out all WebAPIs ever possible.
-
-
DevDocs
Completely free, private, UI based Tech Documentation MCP server. Designed for coders and software developers in mind. Easily integrate into Cursor, Windsurf, Cline, Roo Code, Claude Desktop App (by cyberagiinc)
-
-
Version of Foal is there!
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
TypeScript Security discussion
TypeScript Security related posts
-
Every secret in my homelab has exactly one home: how I run a self-hosted secrets manager, and the traps that bit me
-
VaultKeepR VS clients - a user suggested alternative
2 projects | 3 Sep 2026 -
The $0 Distribution Playbook for MCP Servers: 12 Channels, 30 Days, Real Numbers
-
I Built an MCP Server That Reviews Code Locally โ No SaaS, No Uploads
-
Pi's Minimalism Is Its Advantage
-
Why you should Homelab as a developer
-
Secure Your TypeScript LLM Pipeline with resk-llm-ts: 11 Threat Detectors in One npm Package
-
A note from our sponsor - SaaSHub
www.saashub.com | 7 Sep 2026
Index
What are some of the best open-source Security projects in TypeScript? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | web-check | 34,669 |
| 2 | infisical | 29,109 |
| 3 | personal-security-checklist | 22,244 |
| 4 | javascript-obfuscator | 16,240 |
| 5 | juice-shop | 13,788 |
| 6 | Zero | 10,797 |
| 7 | helmet | 10,729 |
| 8 | opencti | 9,902 |
| 9 | Tutanota makes encryption easy | 7,898 |
| 10 | superagent | 6,730 |
| 11 | privacy.sexy | 5,998 |
| 12 | cli | 5,655 |
| 13 | varlock | 4,296 |
| 14 | tamperchrome | 4,218 |
| 15 | express-rate-limit | 3,294 |
| 16 | Chaterm | 3,034 |
| 17 | ALTCHA | 2,731 |
| 18 | CyberStrike | 2,565 |
| 19 | creepjs | 2,499 |
| 20 | accesscontrol | 2,328 |
| 21 | DevDocs | 2,106 |
| 22 | comp | 1,937 |
| 23 | foal | 1,935 |
Sponsored
Stop Scripting Promotions. Start Shipping with Kargo
Kargo automates promotion across dev, staging, and prod with approval gates and verification. Open source, built by the team behind Argo CD. Download now.
akuity.io