Open source we maintain ourselves
50 projects we build, ship and support in the open. Every entry names its OSI license, its primary stack and the specific part we own, so you can check the claim against the repository before you depend on it.
The catalogue
50 projects, one license field
The license sits in the slot Google One gives the price, because it is the fact that decides whether you can adopt a dependency. Filter by category or by release status.
Showing 50 of 50 open-source projects.
DSI Secrets Broker
Apache-2.0
A sidecar that rotates secrets into running containers without a redeploy, using a KMS-backed lease per process.
Maintained by DEV SEC IT. Leases, rotation backoff and the OPA policy bundle.
DSI Policy Engine
Apache-2.0
A Rego-compatible evaluator that resolves authorization decisions at the edge and emits a signed audit record per decision.
Maintained by DEV SEC IT. Decision-log signing and the edge cache.
DSI VAPT Scanner
MIT
A SAST and dependency-audit scanner that emits SARIF, so findings land in the same pipeline as lint.
Maintained by DEV SEC IT. Rule packs mapped to OWASP ASVS.
DSI SBOM CLI
Apache-2.0
Generates CycloneDX and SPDX SBOMs from a container image or a lockfile, with a diff mode for release gates.
Maintained by DEV SEC IT. CycloneDX writer and the CI diff gate.
DSI OTel Collector Contrib
Apache-2.0
OpenTelemetry collector processors for multi-tenant trace routing and per-tenant sampling budgets.
Maintained by DEV SEC IT. Tenant routing and sampling-budget processors.
DSI Multitenant Operator
Apache-2.0
A Kubernetes operator that provisions isolated tenant namespaces with per-tenant quotas and network policies.
Maintained by DEV SEC IT. Quota reconciler and default-deny policy synthesis.
DSI Safe Migrations
MIT
A schema migration runner that refuses to drop a column until the code that reads it has been removed, checked against the deploy history.
Maintained by DEV SEC IT. Deploy-history analyser and the expand/contract checker.
DSI Durable Queue
Apache-2.0
A Postgres-backed queue with exactly-once delivery, visibility timeouts and a replayable dead-letter table.
Maintained by DEV SEC IT. Replay tooling and the backpressure controller.
DSI Feature Flags
MIT
Flag evaluation with percentage rollouts, per-tenant overrides and an audit trail of every evaluation.
Maintained by DEV SEC IT. Evaluation cache and the tenant override API.
DSI RAG Gateway
Apache-2.0
A retrieval gateway that redaction-logs every chunk leaving the trust boundary, so a prompt-injection probe is attributable.
Maintained by DEV SEC IT. Redaction log and the retrieval allowlist.
DSI Prompt Registry
Apache-2.0
Versioned prompts stored with their eval set, so a prompt change is reviewed like a code change.
Maintained by DEV SEC IT. Diff view and the regression runner.
DSI Compact Vector Index
Apache-2.0
An on-disk vector index with product quantization, sized so a single-node deployment handles a few million vectors.
Maintained by DEV SEC IT. The quantization codec and the mmap reader.
DSI LLM Proxy
Apache-2.0
A routing proxy in front of multiple model providers with per-tenant spend caps and a hard PII redaction stage.
Maintained by DEV SEC IT. Spend caps, redaction stage and the fallback router.
DSI Steady ETL
Apache-2.0
A batch orchestrator that resumes from the last committed checkpoint instead of reprocessing a partition.
Maintained by DEV SEC IT. Checkpoint store and the idempotency guard.
DSI Accessible Charts
MIT
SVG chart primitives that ship a table fallback and keyboard navigation, so a chart is readable without a mouse.
Maintained by DEV SEC IT. Keyboard model and the table-fallback generator.
DSI Schema Forms
MIT
Renders a form from a JSON Schema, with server-side validation reusing the same schema so client and server cannot disagree.
Maintained by DEV SEC IT. Shared validator and the conditional-field resolver.
DSI Token Pipeline
Apache-2.0
Compiles design tokens into CSS, Tailwind and iOS/Android assets from one source, and fails the build on an orphaned token.
Maintained by DEV SEC IT. Orphan detection and the contrast audit step.
DSI Locale Kit
MIT
Message catalogues with per-locale length budgets, so a German string cannot silently break a fixed-width button.
Maintained by DEV SEC IT. Length budgets and the pseudo-locale fuzzer.
DSI Chunked Upload
MIT
Resumable uploads that survive a dropped connection by checkpointing each part server-side, with client-side hashing.
Maintained by DEV SEC IT. Part checkpointing and the hash verifier.
DSI Signed Webhooks
Apache-2.0
Webhook delivery with HMAC signatures, a monotonic event id and an at-least-once retry contract the receiver can dedupe against.
Maintained by DEV SEC IT. Signature scheme and the replay-window check.
DSI Edge Gateway
Apache-2.0
An API gateway that terminates mTLS, enforces per-client scopes and records every call for replay.
Maintained by DEV SEC IT. mTLS termination and the scope matcher.
DSI Verified Backup
Apache-2.0
Backups that are restored into a scratch namespace on a schedule, because an untested backup is not a backup.
Maintained by DEV SEC IT. Restore verification job and the integrity report.
DSI Spend CLI
MIT
Reads a cloud bill and attributes each line to a service and owner tag, then flags the week-over-week outliers.
Maintained by DEV SEC IT. Bill parser and the anomaly detector.
DSI Structured Logs
Apache-2.0
A logging sidecar that normalises fields across languages and drops anything matching a PII pattern before it leaves the host.
Maintained by DEV SEC IT. Field normaliser and the redaction filter.
DSI Trace CLI
MIT
Reads an OpenTelemetry trace file and prints the critical path, so a slow request is explained without a dashboard.
Maintained by DEV SEC IT. Critical-path extraction and the span filter.
DSI SLO Calculator
MIT
Turns a target availability into a monthly error budget and an allowed downtime figure, with the arithmetic shown.
Maintained by DEV SEC IT. Multi-window burn-rate evaluation.
DSI Contract Harness
Apache-2.0
Runs consumer-driven contract tests in CI against a provider stub, so a breaking change fails the build that introduced it.
Maintained by DEV SEC IT. Provider stub generator and the diff report.
DSI Devcontainer Toolkit
MIT
Pinned devcontainer definitions per stack, so onboarding is a clone and a make target rather than a wiki page.
Maintained by DEV SEC IT. Image pinning and the cache layer.
DSI OpenAPI Mock
Apache-2.0
Generates a stateful mock server from an OpenAPI document, so front-end work is not blocked on a backend that is not built yet.
Maintained by DEV SEC IT. State machine inference and the fault-injection mode.
DSI Secrets Sync
Apache-2.0
One-way sync of secrets from Vault into a Kubernetes External Secrets store, with drift detection and an alert.
Maintained by DEV SEC IT. Drift detector and the rotation watcher.
DSI CDN Purge
MIT
Purges a tagged URL set across every CDN edge after a deploy, with a signed purge request and a retry queue.
Maintained by DEV SEC IT. Tag expansion and the multi-CDN retry queue.
DSI A11y Audit
MIT
Runs axe-core plus a keyboard-trap check and reports the failing selector, not just the rule name.
Maintained by DEV SEC IT. Selector reporting and the keyboard-trap detector.
DSI Perf Budget
MIT
Fails CI when a bundle or a Core Web Vital budget regresses, and prints the diff against the base branch.
Maintained by DEV SEC IT. Base-branch diff and the budget config schema.
DSI Docgen
Apache-2.0
Reads an OpenAPI document and emits reference docs plus runnable examples in five languages, checked in CI so they cannot rot.
Maintained by DEV SEC IT. Example runner and the drift check.
DSI Feature Store
Apache-2.0
An offline and online feature store that guarantees a feature computed offline equals the one served online, checked per value.
Maintained by DEV SEC IT. Training/serving skew detector.
DSI dbt Contract Tests
Apache-2.0
Asserts column types, nullability and freshness as data contracts, so a schema break fails before a dashboard does.
Maintained by DEV SEC IT. Contract schema and the freshness gate.
DSI Doc OCR
Apache-2.0
A PaddleOCR-based pipeline for Indian documents that keeps the bounding boxes, so a field can be traced to its region of the image.
Maintained by DEV SEC IT. Layout model for Indian forms and the box exporter.
DSI License Scan
Apache-2.0
Resolves every transitive dependency to an SPDX identifier and fails the build on a copyleft dependency in a proprietary product.
Maintained by DEV SEC IT. Transitive resolver and the policy gate.
DSI Consent Ledger
Apache-2.0
An append-only log of consent grants and revocations, hash-chained so a gap in the chain is detectable.
Maintained by DEV SEC IT. Hash chaining and the retention policy engine.
DSI Audit Logger
Apache-2.0
Tamper-evident audit logging for regulated workloads, with the hash chain exported in a format an auditor can verify offline.
Maintained by DEV SEC IT. Chain export and the offline verifier.
DSI Consent Kit
MIT
A DPDP 2023 notice-and-consent flow with purpose limitation enforced at the API layer, not just in the UI.
Maintained by DEV SEC IT. Purpose registry and the API-layer guard.
DSI SLSA Provenance
Apache-2.0
Emits SLSA v1.0 provenance for every build, signed with Sigstore, so a released artifact can be traced to its source commit.
Maintained by DEV SEC IT. Sigstore signing and the provenance attestor.
DSI Data Grid
MIT
A virtualised grid for very large client datasets with server-side sort and a keyboard-first cell navigation model.
Maintained by DEV SEC IT. Virtualisation and the cell navigation model.
DSI Store
MIT
A small state container with selector subscriptions and a devtools time-travel panel, scoped per tenant.
Maintained by DEV SEC IT. Selector memoisation and the time-travel panel.
DSI Model Serving
Apache-2.0
A model server with canary rollouts, shadow traffic and a rollback that is one manifest edit rather than a redeploy.
Maintained by DEV SEC IT. Shadow-traffic mirror and the canary controller.
DSI RAG Eval
Apache-2.0
Measures retrieval recall and answer faithfulness against a labelled set, and fails the pipeline when either regresses.
Maintained by DEV SEC IT. Faithfulness scorer and the regression gate.
DSI Envelope Encryption
Apache-2.0
Envelope encryption with per-tenant data keys and an external KMS, so a database leak does not expose plaintext.
Maintained by DEV SEC IT. Key-rotation path and the tenant data-key cache.
DSI Cache Stampede Guard
MIT
Collapses a thundering herd into a single upstream call using a lease, so a hot key expiry does not become an outage.
Maintained by DEV SEC IT. Lease protocol and the stale-while-revalidate path.
DSI Sync Engine
Apache-2.0
Offline-first sync with a last-writer-wins register per field and a CRDT option for collaborative documents.
Maintained by DEV SEC IT. Field-level merge and the CRDT adapter.
DSI Schema Guard
MIT
Blocks a breaking GraphQL schema change at CI by diffing against the deployed schema and classifying each field removal.
Maintained by DEV SEC IT. Breaking-change classifier and the deprecation planner.