Skip to content

Yubikey-backed password store with token swap semantics to prevent passwords leaking to command line history or AI agents.

active 2026-02-082026-07-28 (UTC)

Complete coverage26,761 / 26,761 hourly files (100%) · 2 absent upstream2023-08-152026-09-03 (UTC)
Events
189
Pushes
80
Pull requests
17
Issues
20
Stars
0
Forks
0

Activity over time

Daily event counts in the loaded window

Line chart, 171 days from 2026-02-08 to 2026-07-28. Pushes: 80 total, peak 19 in a day. Pull requests: 17 total, peak 8 in a day. Issues: 20 total, peak 5 in a day. Comments: 43 total, peak 8 in a day. Stars: 0 total, peak 0 in a day.

  • Pushes
  • Pull requests
  • Issues
  • Comments
  • Stars

Stars, PRs, issues and forks are under-captured in the later part of this window. GH Archive progressively stopped capturing non-push events during 2026 — −95% or worse by the end of the window. Every series here except Pushes fades for that reason, so a decline above reflects the archive, not this repository. Pushes stay reliable throughout, so read them, and the contributor counts derived from them, as the real signal. Data health has the measurements.

Top contributors

Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity

ContributorContributionsPushesPRsComments
stevedcc1056858
Copilot70121235

Recent activity

Latest issues, pull requests and releases

  • Pull request#82stevedcc2026-03-29 17:13
  • Pull request#82stevedcc2026-03-29 11:32
  • Issue#70stevedcc2026-03-02 12:10
    tswap run: redact known secret values from subprocess output
  • Issue#68stevedcc2026-02-27 11:18
    export exits 0 when user cancels overwrite (answered 'no')
  • Issue#67stevedcc2026-02-27 11:18
    export prompts (passphrase, overwrite confirmation) written to stdout instead of stderr
  • Issue#67stevedcc2026-02-27 11:18
    export prompts (passphrase, overwrite confirmation) written to stdout instead of stderr
  • Pull request#66Copilot2026-02-26 18:33
  • Pull request#60Copilot2026-02-26 15:27
  • Pull request#59Copilot2026-02-26 15:16
  • Issue#57stevedcc2026-02-26 15:07
    Add windows supprt
  • Issue#33stevedcc2026-02-25 17:21
    Secret names not validated: empty, whitespace, zero-length, unbounded length
  • Issue#46stevedcc2026-02-23 16:00
    Test coverage gap: tswap migrate interactive flow not fully tested
  • Issue#43stevedcc2026-02-23 15:57
    export and import commands missing from tswap prompt AI agent instructions
  • Issue#44stevedcc2026-02-23 15:57
    tswap migrate writes to config.json even for no-op entropy mode selection
  • Issue#38stevedcc2026-02-23 15:56
    tswap import prompts "Export passphrase:" — wrong label
  • Issue#36stevedcc2026-02-23 15:56
    tswap with no arguments exits with code 1 instead of 0
  • Issue#27stevedcc2026-02-22 11:43
    Investigate using Yubikey as entropy source for tswap create
  • Issue#13stevedcc2026-02-22 11:02
    Add documentation: Threat model, non-goals, agent permissions, and burn/rotate playbook
  • Pull request#25stevedcc2026-02-21 18:38
  • Issue#21stevedcc2026-02-21 15:49
    tocomment: leaves trailing garbage when replacing large base64 blob values
  • Issue#22stevedcc2026-02-21 14:54
    tocomment: short secret values over-match in non-secret fields, producing fabricated secret names
  • Pull request#23Copilot2026-02-21 13:13
  • Pull request#23Copilot2026-02-21 13:13
  • Pull request#23Copilot2026-02-21 13:13
  • Pull request#20Copilot2026-02-21 12:52

Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 0 stars here means stars gained during the window, not the repo's star count.