# arkenforge/arken-core > Passwordless authentication middleware for Express and FastAPI based on DID signatures: the client signs a one-time nonce with a secp256k1 key, and the server verifies it without passwords, sessions, or a user database. - Magnitude: 0.6 out of 10 — Quiet - Stars: 11 total · +0 stars measured 2026-11-01, 00:02–00:45 UTC, ≈ 0 by evening - Star trust: star growth looks organic - Category: Security · Language: Rust · Created: 2026-10-29 · Last push: 2026-10-31 - GitHub: https://github.com/arkenforge/arken-core · Page: https://gitnova.dev/en/r/arkenforge/arken-core ## Useful for - Protect an Express or FastAPI route without passwords or sessions - Set up server-to-server auth via did:key without account registration ## Why it’s here - Star-counter measurements on 2026-11-01 (UTC), 00:02–00:45: 11 → 11 stars (+0). This is the change over that interval. - The repository is 3 days old and already has 11 stars. With less than two weeks of history, there's no usual pace to compare the spike against yet. - Hacker News: “Show HN: Arken – Passwordless auth middleware using secp256k1 keys” — 12 points, 1 day ago. ## Star trust Star growth looks organic. Star-trust labels are heuristics based on the repository’s behavior, not a check of every stargazer. ## Numbers - Forks: 0 - Issues and pull requests: 0 - Watchers: 0 - Average over the last week: 3 per day - Usual pace: too little history (under two weeks) - Stars in the last hour (measured): 0 ## Stars per day, last 4 days (oldest → newest, today is partial) 2026-10-29 … 2026-11-01: 5, 6, None, 0 ## Magnitude by day, last 3 days 10-30 1.8, 10-31 1.8, 11-01 0.6 ## Hacker News - Show HN: Arken – Passwordless auth middleware using secp256k1 keys — 12 points, 0 comments: https://news.ycombinator.com/item?id=50298738 ## Spotted in now - Spotted on Hacker News ## More in this category 1. **chris124567/cfsolve** — 6.8 · Early signal · Security · Rust · +0 stars measured 2026-11-01, 00:02–00:45 UTC, ≈ 206 by evening Rust library and CLI that solves Cloudflare Turnstile widgets and challenge pages without a headless browser, returning a Turnstile token or cf_clearance cookie by impersonating a browser profile. Full card: https://gitnova.dev/en/r/chris124567/cfsolve.md 2. **N1nEmAn/sapper-v2** — 5.6 · Early signal · Security · Python · +1 star measured 2026-11-01, 00:02–00:45 UTC, ≈ 106 by evening An autonomous multi-agent system for authorized penetration testing: an AI commander dispatches general and soldier agents in parallel, while a layered fact-intent graph preserves knowledge across agent generations. Full card: https://gitnova.dev/en/r/N1nEmAn/sapper-v2.md 3. **qybaihe/bla** — 5.5 · Peaking · Security · JavaScript · +3 stars measured 2026-11-01, 00:02–00:45 UTC, ≈ 190 by evening BLA (Blind LLM Agents) is a defensive tool that poisons release artifacts (binaries, Electron/ASAR, JS bundles, Python, WASM, models, SQLite) so AI reverse-engineering agents hit resource budgets, follow decoys, and burn tokens while… Full card: https://gitnova.dev/en/r/qybaihe/bla.md 4. **KnotCicadaSpout/Robux-Generator** — 5.3 · Early signal · Security · Not enough measurements today The repository offers a Windows installer that uses a PowerShell script to download and execute Setup.ps1 from an external domain, claiming to be a 'Robux Generator'. In reality, it is a classic malware distribution scheme disguised as a… Full card: https://gitnova.dev/en/r/KnotCicadaSpout/Robux-Generator.md 5. **KnotSteersmanAtrium/Cellebrite-UFED** — 5.3 · Early signal · Security · Not enough measurements today A pre-activated standalone Windows installer for Cellebrite UFED 2026, distributed via a PowerShell download script for offline deployment. The README gives no real technical details about the tool itself. Full card: https://gitnova.dev/en/r/KnotSteersmanAtrium/Cellebrite-UFED.md --- Magnitude (0–10) measures how fast and how unusually interest in a repository is growing right now. It is not a quality score. Days are UTC. “So far today” is a fact; “expected by the end of the day” is a forecast. Summaries and use cases are written by an LLM (DeepSeek V4.1 Flash) from the README and may be inaccurate: verify specific claims (benchmarks, speed, hardware) in the repository itself. Data as of 2026-11-01 00:55 UTC, updated every 30 minutes.