{"id":49333582,"url":"https://github.com/daviderez4/nodatachat-core","last_synced_at":"2026-04-27T00:01:11.737Z","repository":{"id":342851302,"uuid":"1175362521","full_name":"daviderez4/nodatachat-core","owner":"daviderez4","description":"Secure, zero-trace secret sharing library. Encrypt and share secrets via CLI without servers ever seeing your data.","archived":false,"fork":false,"pushed_at":"2026-04-20T13:19:05.000Z","size":24139,"stargazers_count":13,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-04-20T15:31:36.850Z","etag":null,"topics":["burn-after-reading","cli","encryption","privacy","secret-sharing","security","typescript","zero-knowledge"],"latest_commit_sha":null,"homepage":"https://www.nodatachat.com","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/daviderez4.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2026-03-07T15:58:01.000Z","updated_at":"2026-04-20T13:19:37.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/daviderez4/nodatachat-core","commit_stats":null,"previous_names":["daviderez4/nodatachat-core"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/daviderez4/nodatachat-core","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/daviderez4%2Fnodatachat-core","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/daviderez4%2Fnodatachat-core/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/daviderez4%2Fnodatachat-core/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/daviderez4%2Fnodatachat-core/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/daviderez4","download_url":"https://codeload.github.com/daviderez4/nodatachat-core/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/daviderez4%2Fnodatachat-core/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32262818,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-25T09:15:33.318Z","status":"ssl_error","status_checked_at":"2026-04-25T09:15:31.997Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["burn-after-reading","cli","encryption","privacy","secret-sharing","security","typescript","zero-knowledge"],"created_at":"2026-04-27T00:00:34.583Z","updated_at":"2026-04-27T00:01:11.725Z","avatar_url":"https://github.com/daviderez4.png","language":"TypeScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003cdiv align=\"center\"\u003e\n\n\u003cimg src=\"assets/banner.svg\" alt=\"NoData — Local-first security for developers\" width=\"100%\"/\u003e\n\n\u003cbr/\u003e\n\n**Your code stays on your machine. Your secrets stay encrypted. Every access is proven.**\n\n---\n\n\u003e **We encourage you not to pay.**\n\u003e Developers — let's make a deal.\n\u003e **If you encrypt, you don't pay. Ever.**\n\u003e *(We only block abusive bots and unfair automation — never you.)*\n\u003e\n\u003e When you grow, you'll want [Capsule](https://www.nodatacapsule.com/pricing) — a personal vault, and a whole world of security, privacy, and ease of use.\n\n[![npm](https://img.shields.io/npm/v/@nodatachat/protect?color=%2300ffa3\u0026label=%40nodatachat%2Fprotect)](https://www.npmjs.com/package/@nodatachat/protect)\n[![TypeScript](https://img.shields.io/badge/TypeScript-5.0-blue)](https://typescriptlang.org)\n[![Encryption](https://img.shields.io/badge/encryption-AES--256--GCM-green)](https://en.wikipedia.org/wiki/Galois/Counter_Mode)\n[![License: MIT](https://img.shields.io/badge/license-MIT-yellow)](LICENSE)\n\n\u003c/div\u003e\n\n---\n\n## The Problem\n\nYour `.env` file contains your database password, your API keys, your cloud credentials — **in plain text**.\n\nOne poisoned npm package. One `git push` mistake. One stolen laptop. **Game over.**\n\n```\nOPENAI_API_KEY=sk-proj-Ax7Q...        ← anyone can read this\nDATABASE_URL=postgres://prod:pass@...  ← and this\nSTRIPE_KEY=sk_live_4eC39...            ← and this\n```\n\n## The Fix: One Command\n\n```bash\nnpx @nodatachat/protect encrypt\n```\n\n```\nOPENAI_API_KEY=ndc_enc_7f3a8b...      ← useless if stolen\nDATABASE_URL=ndc_enc_4c1d7a...         ← useless if stolen\nSTRIPE_KEY=ndc_enc_c3d9a0...           ← useless if stolen\n```\n\nYour app still works. Secrets are decrypted **in memory only** at runtime:\n\n```bash\nnpx @nodatachat/protect run -- npm start\n# Secrets exist only in RAM. Never on disk.\n```\n\n---\n\n## Quick Start\n\n```bash\n# 1. Setup (creates free API key — no signup, no credit card)\nnpx @nodatachat/protect init\n\n# 2. Encrypt all secrets in .env\nnpx @nodatachat/protect encrypt\n\n# 3. Run your app with decrypted secrets (memory only)\nnpx @nodatachat/protect run -- npm run dev\n\n# 4. Check status\nnpx @nodatachat/protect status\n```\n\nWorks with **any stack**: Node.js, Python, Go, Ruby, Docker, docker-compose.\n\n---\n\n## Claude Code Skill\n\nInstall once — ask your AI to encrypt your secrets when you need it:\n\n```bash\nmkdir -p ~/.claude/skills/nodata-protect \u0026\u0026 \\\ncurl -sL https://raw.githubusercontent.com/daviderez4/nodatachat-core/main/skill/nodata-protect/SKILL.md \\\n  -o ~/.claude/skills/nodata-protect/SKILL.md\n```\n\n**What happens after install:**\n- Ask Claude to encrypt your `.env` — it knows how\n- Encryption is local (AES-256-GCM, on your machine)\n- Adds `dev:safe` to `package.json`\n- Verifies `.gitignore` covers sensitive files\n- Works with Claude Code, Cursor, Windsurf\n\n\u003e **The skill does NOT activate automatically.** It only runs when you ask. You're in control — the AI executes.\n\n---\n\n## Cryptographic Proof\n\nEvery encryption and decryption generates **HMAC-SHA256 proof**:\n\n| What | Proof |\n|------|-------|\n| Secret encrypted | Timestamp + device ID + field hash |\n| Secret accessed | When, from where, which device |\n| Secret destroyed | Proof of deletion with hash chain |\n\n**You don't trust your secrets are safe. You prove it.**\n\n---\n\n## Security Model\n\n| State | Without NoData | With NoData |\n|-------|---------------|-------------|\n| On disk (.env) | Plaintext | Encrypted (`ndc_enc_`) |\n| In Git (accident) | Catastrophic | Harmless |\n| In CI/CD logs | Can leak | `ndc_enc_` only |\n| In memory (runtime) | Plaintext | Plaintext (same) |\n| Stolen by malware | Full access | Nothing useful |\n\n**Design principles:**\n- **100% local encryption** — AES-256-GCM runs on your machine. No secret ever leaves your computer.\n- **Open source** — full code on npm. Read it, audit it, verify every line before running.\n- **`run` is not a proxy** — decrypts to process memory only. No server, no network call. Values die with the process.\n- **What IS sent:** only metadata (field name + timestamp + hash). Never the actual value. Disconnect internet and verify.\n- **Audit-ready** — cryptographic proof chain for compliance (SOC 2)\n\n---\n\n## How We're Different\n\n| | NoData | HashiCorp Vault | AWS Secrets Manager | SOPS | GitGuardian |\n|---|---|---|---|---|---|\n| Setup time | **10 seconds** | Hours | 30 min | 15 min | 10 min |\n| Free tier | **Unlimited encrypt + decrypt, forever** | Self-host | Paid | Self | Free (scan) |\n| Access proof | **HMAC-SHA256** | Audit log | CloudTrail | No | No |\n| AI-native skill | **Yes** | No | No | No | No |\n| Zero knowledge | **Yes** | No | No | Partially | No |\n| Fixes issues | **Yes** | No | No | No | No |\n\n---\n\n## Packages\n\n```\nnodatachat-core/\n  packages/\n    crypto/      Low-level encryption (AES-256-GCM, RSA-OAEP, PBKDF2)\n    core/        Identity, seed phrases, zero-data drops\n    cli/         CLI tools — nodata-send, nodata-proof\n  skill/\n    nodata-protect/   Claude Code Skill for automatic .env protection\n```\n\n## Full Protection: NoData Agent\n\nThis repo is the **open-source core** — encryption, basic scanning, CLI tools.\n\n**For full protection:**\n- 46+ SOC controls deep scan\n- Automatic vulnerability fixes\n- Continuous monitoring daemon\n- Slack/Telegram alerts\n- Compliance certificates\n\n**[Run NoData Agent](https://www.nodatachat.com/protect)**\n\n---\n\n## Links\n\n- **Website:** [nodatachat.com](https://www.nodatachat.com)\n- **Protect page:** [nodatachat.com/protect](https://www.nodatachat.com/protect)\n- **npm:** [@nodatachat/protect](https://www.npmjs.com/package/@nodatachat/protect)\n- **Claude Code Skill:** [Install instructions](#claude-code-skill-ai-native-security)\n- **SOC Scanner:** [nodatachat.com/soc-scanner](https://www.nodatachat.com/soc-scanner)\n\n---\n\n\u003cdiv align=\"center\"\u003e\n\n**Open code builds trust. Closed logic builds advantage.**\n\nYour secrets encrypted. Your control. Your proof.\n\n[Get Started](https://www.nodatachat.com/protect) · [npm](https://www.npmjs.com/package/@nodatachat/protect) · [Docs](packages/core/src/README.md) · [Examples](packages/core/examples/)\n\n\u003c/div\u003e\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdaviderez4%2Fnodatachat-core","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdaviderez4%2Fnodatachat-core","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdaviderez4%2Fnodatachat-core/lists"}