JsonWebToken implementation for node.js http://self-issued.info/docs/draft-ietf-oauth-json-web-token.html
Repository Index
47,133 repositories indexed
1–19 of 19 · Most stars
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
All parts of Claude Code's system prompt, 27 builtin tool descriptions, sub agent prompts (Plan/Explore/Task), utility prompts (CLAUDE.md, compact, statusline, magic docs, WebFetch, Bash cmd, security review, agent creation). Updated for each Claude Code version.
- claude-code
- claude-code-system-prompts
- system-prompts
Sandstorm is a self-hostable web productivity suite. It's implemented as a security-hardened web app package manager.
- capnproto
- decentralized
- sandstorm
- seccomp
Strategies to Gekko trading bot with backtests results and some useful tools.
- gekko
- strategies
- gekko-strategies
- gekko-backtest
Excel XLSX parser/generator written in JavaScript with Node.js and browser support, jQuery/d3-style method chaining, encryption, and a focus on keeping existing workbook features and styles in tact.
Lint an npm or yarn lockfile to analyze and detect security issues
- npm
- yarn
- lockfile
- lockfiles
FTP client for Node.js, supports FTPS over TLS, passive mode over IPv6, async/await, and Typescript.
- ftp
- ftps
- async-await
- promise
Fast and dependency-free cryptographic hashing library for node.js and browsers (supports MD5, SHA1, SHA256, SHA512, RIPEMD, HMAC)
- hashing-algorithm
- javascript
- hmac
- hexadecimal
Multi-agent orchestration platform for Gemini CLI, Claude Code, Codex, and Qwen Code — 39 specialists, parallel subagents, persistent sessions, and built-in code review, debugging, security, SEO, accessibility, and compliance tools
Investigate suspicious activity by visualizing Sysmon's event log
- security
- kibana
- elasticsearch
- sysmon
Hashcat web interface
- hashcat
- cracking
- analytics
- pentesting
Slider captcha support mobile
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
A minimal home screen for Samsung Tizen TVs: rotating nature photos, a glass dock of your apps, and a photo website served by the TV.
Web interface to explore Suricata EVE outputs
- attack-defense-ctf
- ctf
- network-monitor
- suricata
Mitigate security concerns of Dependency Confusion supply chain security risks
Native Supabase authentication, JWT access, and basic database helpers for Capacitor.
A secure, client-side tool to broadcast a signed Bitcoin (BTC) transaction from an air-gapped wallet. Fetch UTXOs, regenerate QR codes, and submit raw hex transactions safely.
- air-gapped
- airgap
- bitcoin
- btc