Search awesome repositories

Important security headers for Fastify

JavaScript security CLI that allow you to deeply analyze the dependency tree of a given package or local Node.js project.

package that checks if your Node.js installation is vulnerable to known security vulnerabilities

Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration

The authentication CLI & Proxy for AI agents. Give agents access, not your credentials.

JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.

JSON.parse() drop-in replacement with prototype poisoning protection

Audits an NPM package.json file to identify known vulnerabilities.

Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.

Enforces SSL for Node.js ExpressJS projects

JSON.parse() drop-in replacement with prototype poisoning protection

ECMAScript extensions (with respect to upcoming ECMAScript features)

A fastify csrf plugin

CSRF crumb generation and validation for hapi

Your users download a 4GB AI model, the connection drops at 3.8GB, verifyfetch resumes from 3.8GB and verifies every byte. Drop-in integrity verification for Transformers.js, WebLLM, and any large file in the browser.

Small tool to inform you about potential risks in project dependencies list

eslint-scope: ECMAScript scope analyzer

Node.js vulnerability scanner

A CLI tool for signing and verifying npm and yarn packages.

Detect Glassworm & trojan source attacks that employ unicode bidi attacks to inject malicious code

ESLint plugin to detect and stop Trojan Source attacks

No description.

A server-side TypeScript and JavaScript library immune to Regular Expression Denial of Service (ReDoS) attacks by using Rust and linear RegEx under the hood. Regolith has a linear worst case time complexity, compared to the default RegExp found in TypeScript and JavaScript, which has an exponential worst case.

Checks filenames to be committed against a library of filename rules to prevent sensitive files in Git

Package verification for npm

Analyze a git source code repository for health signals and project vitals

a hapi CSP plugin

Mitigate security concerns of Dependency Confusion supply chain security risks

An extensible, heuristic-based vulnerability scanning tool for installed npm packages

Fast and simple way to check any HTTP Headers