Loading
Web App
Verified
Updated Jul 2026RepoFabric
RepoFabric is a self-hosted WinGet source platform for Microsoft-managed fleets. It provides Entra ID sign-in, one-click Intune policy export (DesktopAppInstaller CSP) to point endpoints to a private source, Azure Arc readiness, and a GUI admin console. It also offers a REST API and a 48-cmdlet PowerShell module, GitOps manifests, scheduled sync, and LAN peer-caching to reduce bandwidth.
Security Analysis
6of 6
All Checks Passed
50 files scanned on Sep 20, 2026
No Obfuscated Code
No Remote Execution
No Credential Theft
No Data Exfiltration
No Malicious Patterns
No Hardcoded Secrets
AI Analysis
RepoFabric.Client appears to be a legitimate endpoint-management module intended for use with Intune/Microsoft Graph workflows. The primary security considerations are: (1) optional CA trust and intranet-zone mappings that could reduce prompts and widen trust for self-hosted sources; (2) machine-wide profile modifications to add silent Winget wrappers, which could act as persistence vectors if misused; and (3) deployment templates containing placeholder secrets that must be replaced securely before production. No evidence of remote code download/execution, credential theft, or data exfiltration beyond health checks.
You might also like
Web App
James Robinson
OIB Deployer
OIB Deployer automates the deployment of OpenIntuneBaseline configurations within Microsoft Intune, enabling rapid, repeatable rollouts of baseline security policies and device configurations. It supports policy templating, script deployment, and integration with community-provided baseline content, with built-in logging and error reporting for auditability. Ideal for IT admins seeking consistent, scalable endpoint security across devices.
James RobinsonWeb App
Windows LAPS Self‑Service Portal
Windows LAPS Self-Service Portal lets users securely retrieve the LAPS password for their own device without helpdesk tickets. Built on Azure Static Web Apps + Azure Functions and Entra ID, it enforces an only-my-device rule, requires a justification, and auto-hides the password after 60 seconds. Every access is auditable in Azure Table Storage, with a zero-stored-secrets design and Graph access via a Managed Identity.
D
Daniel FraubaumDesktop App
Daniel Petri
DUDE Manager
DUDE Manager is a Windows PowerShell WPF GUI that configures, deploys, and monitors the DUDE automation engine, which dynamically synchronizes Intune device groups with Entra ID user groups. The sync runs in Azure Functions with a Managed Identity, supports transitive membership and nested groups, and includes safety rails (no shared credentials, prefix allowlists, blast-radius limiter, debug mode). The GUI handles deployment and monitoring, with ARM64 browser login for devices lacking WAM, and supports delegation features via Administrative Units and Defender tags.
Daniel PetriOther
Niklas Bruhn
Intune Adaptive Engine
The Intune Adaptive Engine is a PowerShell automation tool that keeps Entra ID group membership in sync with live Intune device inventory through YAML-driven rules. It queries Graph API for Intune devices and detectedApps, evaluates per-rule conditions, and performs the minimal add/remove actions to keep groups in sync—no agents, no P1/P2 licensing, and no custom code; WhatIf/dry-run, per-rule dry runs, auto group creation, platform filtering, and CI/CD-ready rule sets are supported.
Niklas Bruhn