nono - a capability-based, multiplexing sandbox tool, built for developers - lift'n'shift seamless path to prod. Run agents securely without needing any additional infra, zero setup, zero latency.

in-toto Attestation Framework

An incremental parsing system for programming tools

dependency management utility

Protect against malicious open source packages 🤖

An extremely fast Python package and project manager, written in Rust.

GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.

A collection of resources for OSX/iOS reverse engineering.