osohq/oso

Health v2 · maintenance only

Adoption not part of the score

3491 stars · 193 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Oso is an embedded authorization framework with a declarative policy language (Polar) for building RBAC, relationships, and collection filtering into applications. It ships libraries for Python, Node.js, Go, Rust, Ruby, and Java, though the open-source library is now deprecated with only critical bug fixes provided.

Use cases

• add role-based access control to my app
• embed a policy engine for authorization
• filter query results by what a user can see
• write declarative permission rules instead of hardcoded checks
• centralize authorization logic for unit testing

When to choose

• you already use Oso and need continued support with critical fixes
• you want a batteries-included authorization library with RBAC primitives and a policy language
• you need authorization filtering over collections, not just yes/no checks

When to avoid

• you are starting a new project - the library is deprecated and future development is elsewhere
• you need a fully managed or actively developed authorization service
• you want long-term community-driven open-source maintenance

Facets

library · maturity maintenance

authorization security security backend web-development developer-tools python go rust ruby jvm cross-platform policy-engine rbac access-control polar-language deprecated nodejs

Member repositories

For agents

markdown · JSON · MCP: product_card(name="osohq/oso")