# dreamers-laboratory/good-door > A Python CLI for secure secret management: encrypts keys, tokens and .env files with age while keeping the master key in the OS vault (Keychain, TPM, DPAPI). Lets you run commands with secrets in the environment without exposing them to agents or shell history. - Magnitude: 4.4 out of 10 — Early signal - Stars: 195 total · +3 stars measured 2026-11-09, 00:02–02:09 UTC, ≈ 45 by evening - Star trust: star growth looks organic - Category: Security · Language: Python · License: MIT · Created: 2026-11-04 · Last push: 2026-11-06 - GitHub: https://github.com/dreamers-laboratory/good-door · Page: https://gitnova.dev/en/r/dreamers-laboratory/good-door ## Useful for - Run an app with an API key from the vault without writing it to a file - Encrypt ~/.aws/credentials and feed AWS keys via credential_process - Protect an SSH key with a random passphrase and load it into ssh-agent ## Why it’s here - Star-counter measurements on 2026-11-09 (UTC), 00:02–02:09: 192 → 195 stars (+3). This is the change over that interval. - Estimated end-of-day forecast: about +45 stars, using observed gains and the previous day. - The repository is 5 days old and already has 195 stars. With less than two weeks of history, there's no usual pace to compare the spike against yet. - About 31 forks a day — people are taking the code. ## Star trust Star growth looks organic. Star-trust labels are heuristics based on the repository’s behavior, not a check of every stargazer. ## Numbers - Forks: 26 - Issues and pull requests: 0 - Watchers: 0 - Average over the last week: 40 per day - Usual pace: too little history (under two weeks) - Stars in the last hour (measured): 1 ## Stars per day, last 6 days (oldest → newest, today is partial) 2026-11-04 … 2026-11-09: 0, 0, 67, 80, 48, 3 ## Magnitude by day, last 2 days 11-08 5.5, 11-09 4.4 ## More in this category 1. **sherlock-project/sherlock** — 9.2 · Breakout · Security · Python · +387 stars measured 2026-11-09, 00:02–02:08 UTC, ≈ 2,900 by evening Python CLI tool that hunts down accounts by one or more usernames across 400+ social networks. Used in OSINT and reconnaissance to check a user's online presence. Full card: https://gitnova.dev/en/r/sherlock-project/sherlock.md 2. **reacher-z/Awesome-REA** — 6.6 · Breakout · Security · Python · +23 stars measured 2026-11-09, 00:02–02:09 UTC, ≈ 308 by evening An independent curated collection of reverse-engineering tools, case studies and research papers covering websites, games, apps, native binaries, firmware and protocols. It indexes 3,300+ resources and organizes them by target and task. Full card: https://gitnova.dev/en/r/reacher-z/Awesome-REA.md 3. **Torquatoatkins/Drainer-Tool-Solana** — 5.9 · Early signal · Security · Python · +0 stars measured 2026-11-09, 00:02–02:09 UTC, ≈ 130 by evening A tool that automatically drains SOL and SPL tokens from Solana wallets: it monitors balances via RPC websocket and transfers funds to a specified address. The author states it is for educational and research purposes only. Full card: https://gitnova.dev/en/r/Torquatoatkins/Drainer-Tool-Solana.md 4. **vsmutok/FuckCaptcha** — 5.6 · Early signal · Security · HTML · +6 stars measured 2026-11-09, 00:04–02:09 UTC, ≈ 78 by evening Open field guide to 39 CAPTCHA types: identification signals, free and open-source bypass methods, and paid alternatives, with a searchable web version. Intended for education and authorized research. Full card: https://gitnova.dev/en/r/vsmutok/FuckCaptcha.md 5. **qybaihe/bla** — 5.3 · Breakout · Security · TypeScript · +55 stars measured 2026-11-09, 00:02–02:09 UTC, ≈ 738 by evening BLA (Blind LLM Agents) is a defensive tool that poisons release artifacts (binaries, Electron/ASAR, JS bundles, Python, WASM, models, SQLite) so AI reverse-engineering agents hit resource budgets, follow decoys, and burn tokens while… Full card: https://gitnova.dev/en/r/qybaihe/bla.md --- Magnitude (0–10) measures how fast and how unusually interest in a repository is growing right now. It is not a quality score. Days are UTC. “So far today” is a fact; “expected by the end of the day” is a forecast. Summaries and use cases are written by an LLM (DeepSeek V4.1 Flash) from the README and may be inaccurate: verify specific claims (benchmarks, speed, hardware) in the repository itself. Data as of 2026-11-09 02:18 UTC, updated every 30 minutes.