domain: legal
80 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| CISOfy/lynis Lynis is an open-source security auditing and hardening tool for UNIX-based systems including Linux, macOS, and BSD. It performs in-depth l… | 90 | 16239 | stable |
| prowler-cloud/prowler Prowler is an open-source cloud security platform that performs security best-practice assessments, audits, continuous monitoring, hardenin… | 95 | 14687 | active |
| anthropics/claude-for-legal A suite of Claude plugins, skills, and MCP connectors from Anthropic for legal workflows across practice areas like commercial, privacy, li… | 58 | 9273 | active |
| codenotary/immudb immudb is an open-source immutable database written in Go that stores data in SQL, key-value, or document models while guaranteeing tamper-… | 88 | 9023 | stable |
| OpenSignLabs/OpenSign OpenSign is a free, open-source document e-signing application and DocuSign alternative built with React, Node.js, and MongoDB. It supports… | 94 | 6919 | active |
| handsomestWei/patent-disclosure-skill A Python-based agent skill for Chinese patent work that mines patentable points from project materials, drafts disclosure documents (invent… | 59 | 5317 | active |
| Fokkyp/SoftwareCopyright-Skill A coding-agent Skill that reads a local project and automatically generates a complete set of Chinese software copyright (软著) application m… | 76 | 5070 | active |
| ossec/ossec-hids OSSEC is an open-source host-based intrusion detection system (HIDS) that combines log analysis, file integrity monitoring, rootkit detecti… | 91 | 5047 | stable |
| nisrulz/app-privacy-policy-generator A free, open-source web app that generates customized Privacy Policy and Terms & Conditions documents for Android, iOS, KaiOS, and Web apps… | 93 | 4675 | active |
| intuitem/ciso-assistant-community CISO Assistant is an open-source, self-hostable GRC (Governance, Risk, and Compliance) platform covering risk management, compliance and au… | 90 | 4376 | active |
| open-legal-products/mike Mike is an open-source, self-hostable legal AI platform combining a Next.js frontend and Express backend for document review, drafting, and… | 79 | 4157 | active |
| osano/cookieconsent A lightweight, free JavaScript plugin that displays cookie consent banners to help websites comply with the EU Cookie Law, GDPR, and CCPA. … | 66 | 3568 | stable |
| 0x6d69636b/windows_hardening HardeningKitty is a PowerShell module that audits and hardens Windows systems against security baselines such as CIS Benchmarks, Microsoft … | 86 | 2655 | active |
| aboutcode-org/scancode-toolkit ScanCode Toolkit is a command-line tool and Python library that scans codebases to detect licenses, copyrights, package manifests, dependen… | 94 | 2612 | active |
| mono0926/LicensePlist LicensePlist is a Swift command-line tool that automatically generates a Plist of license notices for all dependencies of an iOS applicatio… | 96 | 2535 | active |
| chrisryugj/korean-law-mcp An MCP server and CLI that exposes Korea's Ministry of Government Legislation (법제처) open APIs — statutes, precedents, ordinances, treaties,… | 82 | 2521 | active |
| RanKKI/LawRefBook LawRefBook is an open-source handbook of the laws of the People's Republic of China, built in Swift and available on iOS, macOS, and the we… | 48 | 2449 | active |
| ballerine-io/ballerine Ballerine is an open-source infrastructure and data orchestration platform for identity verification (KYC/KYB), fraud prevention, and merch… | 74 | 2426 | active |
| CatalaLang/catala Catala is a domain-specific programming language for deriving faithful-by-construction algorithms from legislative texts via literate progr… | 93 | 2367 | active |
| romainsimon/paperasse Paperasse is a collection of Markdown-based AI agent skills specialized in French bureaucracy: accounting (PCG, TVA, liasse fiscale), invoi… | 59 | 2340 | active |
| LogicLabs-OU/OpenArchiver OpenArchiver is an open-source, self-hosted platform for legally compliant email archiving and eDiscovery. It ingests email from Google Wor… | 85 | 2281 | active |
| oss-review-toolkit/ort The OSS Review Toolkit (ORT) is a FOSS policy automation toolkit that analyzes project dependencies, scans licenses and copyrights, checks … | 95 | 2075 | active |
| shcherbak-ai/contextgem ContextGem is an open-source Python LLM framework for extracting structured data and insights from documents with minimal code. It provides… | 87 | 1993 | active |
| trycompai/comp Comp AI is an open-source, AI-native compliance platform that automates evidence collection, policy generation, and continuous monitoring f… | 81 | 1896 | active |
| cisagov/cset CSET is a free desktop application from CISA and Idaho National Laboratory that guides organizations through step-by-step cybersecurity ass… | 69 | 1887 | active |
| OpenSCAP/openscap OpenSCAP is a NIST-certified open-source toolkit providing both a C library and the 'oscap' command-line tool for parsing, validating, edit… | 87 | 1806 | stable |
| zubair-trabzada/ai-legal-claude A Claude Code skill pack providing an AI legal assistant with 14 slash commands and 5 parallel agents for contract review, risk analysis, N… | 48 | 1710 | active |
| pgaudit/pgaudit pgAudit is a PostgreSQL extension written in C that provides detailed session and object audit logging through the standard PostgreSQL logg… | 80 | 1695 | stable |
| pengxiao-song/LaWGPT LaWGPT is a series of open-source large language models tuned with Chinese legal knowledge, built on Chinese-LLaMA/ChatGLM base models with… | 30 | 6059 | maintenance |
| cla-assistant/cla-assistant CLA assistant is a web service and self-hostable application that automates Contributor License Agreement handling for GitHub repositories.… | 23 | 1532 | stable |
| fossas/fossa-cli FOSSA CLI is a zero-configuration, language-agnostic dependency analysis tool that detects dependencies in any codebase across 20+ build sy… | 95 | 1516 | active |
| spatie/laravel-cookie-consent A Laravel package by Spatie that adds a simple, customizable cookie consent banner to help sites comply with the EU cookie law. It displays… | 80 | 1499 | active |
| allthemusicllc/atm-cli A Rust command line tool for generating and working with MIDI files, built to brute-force generate all mathematically possible melodies. It… | 70 | 1414 | active |
| lvwzhen/law-cn-ai An AI legal assistant for Chinese law that answers questions using a knowledge base of Chinese legal documents. It is a Next.js app that em… | 30 | 4908 | maintenance |
| getprobo/probo Probo is an open-source, self-hostable governance, risk, and compliance (GRC) platform for engineering and security teams, covering risk ma… | 84 | 1315 | active |
| 123xiao/sex-agreement-app A Next.js web application for creating, digitally signing, and managing sexual consent agreements, with PDF export and multi-step form guid… | 33 | 1189 | active |
| XmirrorSecurity/OpenSCA-cli OpenSCA-cli is an open-source Software Composition Analysis (SCA) command-line tool that scans projects to detect third-party open-source d… | 82 | 1125 | active |
| saidsurucu/yargi-mcp A FastMCP-based Model Context Protocol server that provides access to Turkish legal databases, including Yargıtay, Danıştay, Anayasa Mahkem… | 82 | 1107 | active |
| cncases/cases A self-hosted Rust application for locally searching over 85 million Chinese court judgment documents from the China Judgments Online websi… | 86 | 1096 | active |
| maester365/maester Maester is a PowerShell-based test automation framework that monitors and validates the security configuration of Microsoft 365 and Entra I… | 88 | 1080 | active |
| ovh/debian-cis A set of modular shell scripts that audit and harden Debian 11/12/13 systems according to CIS security benchmarks, used in production at OV… | 78 | 1060 | active |
| jonrau1/ElectricEye ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for asset management, security posture management, and attack surface monitoring. … | 62 | 1045 | active |
| fossology/fossology FOSSology is an open source license compliance system and toolkit that scans software for licenses, copyrights, and export control data. It… | 87 | 1024 | active |
| google/go-licenses A Go CLI tool that analyzes a Go package's dependency tree and reports the licenses of all libraries used, with versioned URLs to each lice… | 77 | 1012 | active |
| Project-DARC/DARC DARC is a company virtual machine that deploys to EVM-compatible blockchains, featuring multi-level tokens, dividend mechanisms, and a plug… | 30 | 9157 | experimental |
| pivotal/LicenseFinder LicenseFinder is a Ruby CLI tool that scans a project's dependencies via its package manager, detects each package's license, and compares … | 23 | 1794 | maintenance |
| davglass/license-checker A Node.js CLI tool that inspects an npm project's dependency tree and reports the license of every installed package. It supports JSON/CSV … | 32 | 1680 | maintenance |
| liuhuanyong/CrimeKgAssitant A Chinese legal intelligence application built around a crime knowledge graph covering 856 crime types. It provides crime type prediction f… | 32 | 1584 | maintenance |
| strongdm/comply Comply is an open-source SOC2-focused compliance automation CLI written in Go. It generates auditor-friendly policy documents from Markdown… | 23 | 1576 | maintenance |
| mnemox-ai/tradememory-protocol TradeMemory Protocol is an MCP server providing persistent memory and a tamper-evident decision audit trail for AI trading agents, with out… | 80 | 1412 | maintenance |
| tmobile/pacbot PacBot is a platform for continuous compliance monitoring, compliance reporting, and security automation for the cloud, where security and … | 23 | 1310 | maintenance |
| square/sudo_pair A sudo IO-plugin written in Rust that requires a second live human to approve and monitor privileged sudo sessions. It enforces dual-contro… | 32 | 1272 | maintenance |
| developers-against-repressions/case-212 An open letter from IT industry professionals demanding an end to political persecution of the defendants of the 'Moscow case' in Russia. P… | 32 | 1270 | maintenance |
| LiuHC0428/LAW-GPT A Chinese-language legal conversational model (LawGPT_zh / 獬豸) fine-tuned from ChatGLM-6B with LoRA on legal Q&A datasets, including answer… | 30 | 1194 | maintenance |
| licensee/licensed Licensed is a Ruby gem and CLI tool that caches the licenses of a project's dependencies and verifies their status against configured rules… | 87 | 1043 | maintenance |
| CSHaitao/LexiLaw LexiLaw is a fine-tuned Chinese legal large language model based on ChatGLM-6B, providing legal consultation and Q&A capabilities. It inclu… | 61 | 1041 | maintenance |
| ffii/FFII.org The source for the FFII.org website of the Foundation for a Free Information Infrastructure, a European advocacy group focused on software … | 32 | 1003 | maintenance |
| Klotzkette/claude-fuer-deutsches-recht An experimental collection of Claude skills, sub-agents, and workflows adapted for German legal practice, covering areas like employment, c… | 76 | 1507 | experimental |
| docusealco/docuseal DocuSeal is an open-source, self-hostable web application for creating, filling, and electronically signing PDF documents, positioned as a … | 91 | 18386 | active |
| Wazuh Wazuh is a free, open source security platform that unifies XDR and SIEM capabilities for threat prevention, detection, and response across… | 98 | 16691 | stable |
| documenso/documenso Documenso is an open-source, self-hostable alternative to DocuSign for digitally signing documents, built with Next.js, TypeScript, and Pos… | 97 | 14770 | active |
| aidlearning/AidLearning-FrameWork AidLux (originally AidLearning) is an AIoT development platform that runs a native Ubuntu Linux environment with GUI, deep learning tooling… | 70 | 5797 | active |
| orestbida/cookieconsent CookieConsent is a lightweight, GDPR and CCPA compliant cookie consent management plugin written in vanilla JavaScript with no dependencies… | 65 | 5642 | active |
| mikepenz/AboutLibraries AboutLibraries is a Kotlin Multiplatform library and Gradle plugin that automatically collects all dependencies and their licenses of a Gra… | 99 | 4415 | active |
| aquasecurity/cloudsploit CloudSploit by Aqua is an open-source Cloud Security Posture Management (CSPM) tool that scans cloud infrastructure accounts for misconfigu… | 72 | 3768 | active |
| Bearer/bearer Bearer CLI is an open-source static application security testing (SAST) tool written in Go that scans source code and analyzes data flows t… | 95 | 2739 | active |
| tractorjuice/arc-kit ArcKit is an AI governance harness and plugin toolkit for enterprise architects that works with AI coding assistants like Claude Code, Gemi… | 79 | 2204 | active |
| c15t/c15t c15t is an open-source, developer-first consent management platform (CMP) for cookie banners, privacy preferences, consent storage, and con… | 83 | 1866 | active |
| valqore/valqore Valqore is a deterministic infrastructure governance engine that scans Kubernetes manifests, Terraform, Helm, and cloud resources against 1… | 81 | 1831 | active |
| globaleaks/globaleaks-whistleblowing-software GlobaLeaks is a free, open-source whistleblowing platform that lets any organization set up and maintain a secure, anonymous reporting syst… | 94 | 1514 | stable |
| securitybunker/databunker Databunker is a self-hosted, Go-based secure vault for tokenizing and storing personal records such as PII, PHI, KYC, and PCI data. It expo… | 75 | 1482 | active |
| Open-Source-Legal/OpenContracts OpenContracts is a self-hosted, MIT-licensed document intelligence platform that turns document repositories into a programmable citation g… | 94 | 1451 | active |
| aws-cloudformation/cloudformation-guard AWS CloudFormation Guard (cfn-guard) is a general-purpose policy-as-code evaluation tool with an expressive DSL for defining rules. It vali… | 88 | 1385 | active |
| stenolabs/stenoai Steno is a privacy-first desktop AI notepad and meeting notetaker that records, transcribes, summarizes, and lets you query meetings entire… | 84 | 1299 | active |
| Ricky-7-Yan/intelligent-audit-system AuditPilot is an enterprise AI agent workbench for audit delivery, combining evidence-grounded agentic RAG, governed tool execution, evalua… | 60 | 1166 | active |
| TongchengOpenSource/AppScan AppScan is a free, enterprise-grade automated privacy compliance detection tool for Android apps, based on dynamic analysis. It identifies … | 26 | 1128 | active |
| AmauriC/tarteaucitron.js tarteaucitron.js is an open-source, accessible GDPR consent management platform (CMP) that displays a cookie banner and per-service consent… | 92 | 1052 | stable |
| esig/dss DSS (Digital Signature Service) is an open-source Java library from the European Commission for creating, extending, and validating advance… | 85 | 1025 | stable |
| microsoft/agent-governance-toolkit A Microsoft open-source toolkit providing policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for au… | 78 | 6128 | experimental |
| charlesXu86/Chatbot_CN Chatbot_CN is a Chinese multi-turn, task-oriented chatbot platform targeting the finance and legal domains (with chitchat support), combini… | 32 | 1289 | maintenance |
page 1 / 1