Inspect Sigstore bundles, DSSE envelopes, SLSA provenance, SD-JWTs and SSH signatures in the browser - each tool runs the open-source PHP package it demonstrates.
k2gl.com now has a tools section: eight small pages where you paste a
signature artifact and get it decoded — and, where it's meaningful, actually
verified, not just pretty-printed. One design decision drives all of them: the
tool output is the package output. Each page calls the same open-source PHP
packages this site documents, so what you see in the browser is exactly what
Every developer needs quick tools — JSON formatter, Base64 encoder, JWT decoder, regex tester, PDF...
1. Crypto & Security Tools Crucial for authentication setup, payload verification, and...
Every developer has a list of "quick task" sites they visit ten times a week. Compress a PDF. Format...
Two weeks of shipping single-file browser tools. What the shape forces you to get right, what it forces you to leave out, and…
Stolen credentials produced valid Sigstore certificates, clearing 633 malicious npm packages — one of seven developer tool attack…
'## What I Built Eight developer tools that run entirely in your browser — no files uploaded, no...
