# Administracion-Abierta/AutoFirme

> Client-side TypeScript SPA for signing and verifying documents with X.509 certificates entirely in the browser, with no backend and no key material leaving the client. Supports CAdES, XAdES, PAdES and OOXML, plus a Chrome extension and PWA.

- Magnitude: 0.9 out of 10 — Cooling
- Stars: 89 total · +1 star measured 2026-10-18, 00:26–11:53 UTC, ≈ 2 by evening
- Star trust: star growth looks organic
- Category: Security · Language: TypeScript · Created: 2026-10-15 · Last push: 2026-10-18
- GitHub: https://github.com/Administracion-Abierta/AutoFirme · Page: https://gitnova.dev/en/r/Administracion-Abierta/AutoFirme

## Useful for

- Sign a PDF or XML with an X.509 certificate without sending the key to a server
- Verify a CAdES, XAdES or PAdES signature and see a per-check report
- Build a batch ZIP of signed documents via the BatchQueue

## Why it’s here

- Star-counter measurements on 2026-10-18 (UTC), 00:26–11:53: 88 → 89 stars (+1). This is the change over that interval.
- Estimated end-of-day forecast: about +2 stars, using observed gains and the previous day.
- The repository is 3 days old and already has 89 stars. With less than two weeks of history, there's no usual pace to compare the spike against yet.

## Star trust

Star growth looks organic.

Star-trust labels are heuristics based on the repository’s behavior, not a check of every stargazer.

## Numbers

- Forks: 5
- Issues and pull requests: 18
- Watchers: 0
- Average over the last week: 22 per day
- Usual pace: too little history (under two weeks)
- Stars in the last hour (measured): 0
- Latest release: dev-0311ca5 (2026-10-18)

## Stars per day, last 4 days (oldest → newest, today is partial)

2026-10-15 … 2026-10-18: 74, 13, 1, 1

## Magnitude by day, last 2 days

10-17 2.8, 10-18 0.9

## More in this category

1. **valimised/ivxv** — 6.6 · Early signal · Security · Go · +69 stars measured 2026-10-18, 00:21–11:45 UTC, ≈ 141 by evening
   Source code of the Estonian IVXV online voting system, published for public review. It is used in elections and development is supervised by the State Electoral Office of Estonia.
   Full card: https://gitnova.dev/en/r/valimised/ivxv.md
2. **sakidekin/CVE-2026-41940-PoC** — 6.2 · Early signal · Security · Python · +94 stars measured 2026-10-18, 00:21–11:45 UTC, ≈ 186 by evening
   PoC exploit for CVE-2026-41940, an authentication bypass in cPanel & WHM (CVSS 10.0) that grants unauthenticated root-level WHM access via CRLF injection into server-side sessions. The tool scans targets and performs post-exploitation…
   Full card: https://gitnova.dev/en/r/sakidekin/CVE-2026-41940-PoC.md
3. **gichirimaku/wp2shell-PoC** — 6.0 · Early signal · Security · Python · +76 stars measured 2026-10-18, 00:21–11:45 UTC, ≈ 155 by evening
   Proof-of-concept exploit for the wp2shell vulnerability chain in WordPress Core (CVE-2026-63030 and CVE-2026-60137), leading from a pre-auth SQL injection to RCE. Intended for testing your own or authorized sites.
   Full card: https://gitnova.dev/en/r/gichirimaku/wp2shell-PoC.md
4. **PolygonOceanNote/SketchUp-Pro** — 5.4 · Early signal · Security · +72 stars measured 2026-10-18, 00:21–11:45 UTC, ≈ 172 by evening
   The repository poses as a pre-activated SketchUp Pro 2026 installer, but actually distributes a malicious PowerShell script via the irm | Invoke-Expression command. It is not an open-source project but an attempt to infect systems.
   Full card: https://gitnova.dev/en/r/PolygonOceanNote/SketchUp-Pro.md
5. **lineclericcode/Microsoft-365** — 5.4 · Early signal · Security · +70 stars measured 2026-10-18, 00:21–11:45 UTC, ≈ 170 by evening
   Repository offers a "pre-activated" Microsoft 365 build for Windows, distributed via a PowerShell script that disables security checks and executes third-party code.
   Full card: https://gitnova.dev/en/r/lineclericcode/Microsoft-365.md

---

Magnitude (0–10) measures how fast and how unusually interest in a repository is growing right now. It is not a quality score.
Days are UTC. “So far today” is a fact; “expected by the end of the day” is a forecast.
Summaries and use cases are written by an LLM (DeepSeek V4.1 Flash) from the README and may be inaccurate: verify specific claims (benchmarks, speed, hardware) in the repository itself.
Data as of 2026-10-18 11:55 UTC, updated every 30 minutes.