Repository Index

Some public notes

• nodejs
• security
• npm
• travis-ci

npm package for OpenID Connect, OAuth Code Flow with PKCE, Refresh tokens, Implicit Flow

• openid
• angular
• implicit-flow
• npm

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code

ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.

• clamscan
• file-scanner
• virus-scan
• docker-compose

Tiny hashing module that uses the native crypto API in Node.js and the browser

• hashing
• hash-functions
• sha256
• crypto

Catch risky npm dependency changes before they merge.

• dependency-analysis
• devsecops
• github-actions
• malware

Creates a readable stream producing cryptographically strong pseudo-random data using `crypto.randomBytes()`

• random-bytes
• random
• crypto
• pseudo-random-generator

End-to-end encryption for the browser and Node: a JavaScript library (npm: libves) with recoverable keys, post-quantum (ML-KEM) key exchange, and user-to-user sharing

• encryption-api
• webcrypto
• ecdh
• elliptic-curve-cryptography

Encrypted .env files with TOTP unsealing for production deploys. Cross-stack (Node + Java). Zero deps. Defends against npm supply-chain attacks.

• 2fa
• aes-gcm
• dotenv
• encryption

Detect the Shai Hulud 2.0 npm supply chain attack (796+ packages). Scans for malicious files, hashes, and compromised ecosystems. Fast, accurate scanner.

• cdn
• cve
• polyfill
• polyfill-io