Euxis
A code security scanner for eight languages, combining static analysis, taint analysis, and LLM verification. Outputs Sigstore-signed SARIF, SBOM, and OpenVEX bundles for supply-chain review.
1AGPL-3.0last commit 3d ago
Most of this site is built and signed with these libraries. YAML, logging, dates, scaffolding, the generator itself, and Euxis to scan the code. Each is open source, ships with a software bill of materials and a Sigstore signature, and runs on your own infrastructure. Read every line. Keep it in-house.
THE LIBRARIES
The building blocks behind this site.
noyalib
A pure-Rust YAML 1.2 implementation with zero unsafe code, serde support, and JSON-Schema validation.
33Apache-2.0last commit 6d ago
Static Site Generator
The generator that builds this site, with WCAG AAA validation and CSP and SRI hardening.
524Apache-2.0last commit 16h ago
LibMake
A scaffold generator for Rust libraries, emitting tests, benchmarks, and CI configuration.
301Apache-2.0last commit 4mo ago
RustLogs (RLG)
A logging library for Rust with structured formats and asynchronous logging.
Serde YML
YAML serialisation and deserialisation for Rust data structures, built on Serde.
DateTime (DTT)
A date and time library for Rust: ISO 8601 formatting and time-zone handling.
7Apache-2.0last commit 6d ago
Why build on them
- They are already audited and signed, so your team builds on them instead of maintaining the equivalents in-house.
- Every release ships a CycloneDX SBOM and a Sigstore signature, which helps with supply-chain review.
- The licences are permissive, so commercial use is straightforward.