A simple and secure WebAuthn/Passkey authentication library for Rust. Passki lets you add passwordless, phishing-resistant login to your app without reimplementing the FIDO2 protocol yourself.

It follows a two-step, challenge-response model and covers the full passkey lifecycle: the server issues a challenge, the client signs it with the authenticator, and Passki validates the result for both registration and authentication flows.

• Multiple algorithms: EdDSA, ES256/ES384, and RS256/RS384.
• Accepts credential.toJSON() exactly as the browser produces it.
• Extensions: credProps, PRF, largeBlob, credProtect, and minPinLength.
• Attestation verification for packed, tpm, android-key, and fido-u2f, with optional trust path validation.
• Hints, related origins, cross-origin iframes, and the Signal API.
• Signature-counter replay protection against cloned authenticators.
• Implements WebAuthn Levels 1 and 2 in full, and nearly all of Level 3.
• Framework-agnostic - works with any HTTP server (Actix, Axum, Poem, Rocket, Warp, and more).
• Pure, memory-safe Rust with no unsafe code.

CLImate lets you run containerized command-line tools as if they were installed natively. Think of it as Flatpak, but for the terminal - a seamless way to use tools without polluting your host system.

It is a self-contained container engine that pulls images and runs them in-process, with no Docker, Podman, or other daemon to install. When an app shares a directory with your host, CLImate runs the tool as you, at the same path, so the files it creates stay yours.

• Single binary: No dependency on heavy container runtimes.
• Rootless and locked down: Read-only image, no capabilities, and a seccomp filter by default.
• Per-app networking and resource limits for memory, CPU, and processes.
• Symlink shortcuts: climate link lets you call tools directly by name from your PATH.
• Ready-made app definitions in simple TOML files, synced from a shared repository.
• Optional systemd timer that keeps your images up to date.