Repository Index

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

• osint
• social-media
• analyzer
• username

Loads environment variables from .env for nodejs projects.

• dotenv
• environment-variables
• javascript
• node

A powerful obfuscator for JavaScript and Node.js

• javascript-obfuscator
• obfuscation
• uglify
• javascript

Cross-platform desktop GUI app to clean image metadata

• exif
• exiftool
• electron
• javascript

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

• nodejs
• owasp-top-ten
• javascript
• docker

finds publicly known security vulnerabilities in a website's frontend JavaScript libraries

• security-vulnerabilities
• security
• vulnerabilities
• lighthouse

📗 How to write cross-platform Node.js code

• windows
• unix
• linux
• macos

Some public notes

• nodejs
• security
• npm
• travis-ci

Lint an npm or yarn lockfile to analyze and detect security issues

• npm
• yarn
• lockfile
• lockfiles

ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.

• clamscan
• file-scanner
• virus-scan
• docker-compose

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

• sast
• security-tools
• security-scanner
• security-automation

The Ultimate Boilerplate for Products.

• boilerplate
• meteor
• meteorjs
• nodejs

🔒Unified API for password hashing algorithms

• credential
• nodejs
• hash-functions
• security

Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.

• anti-bot
• behavioral-analysis
• bot-detection
• captcha

Your users download a 4GB AI model, the connection drops at 3.8GB, verifyfetch resumes from 3.8GB and verifies every byte. Drop-in integrity verification for Transformers.js, WebLLM, and any large file in the browser.

• ai-models
• browser
• fetch
• integrity

Gulp.js command execution for humans

• gulp
• execa
• gulp-plugin
• gulpjs

Secure terminal-based IDE for local JS development

• neovim
• neovim-dotfiles
• nodejs
• rootless-containers

Open-source PocketBase security auditor: detects empty rules, the @request.auth.id != trap, true literals. Active probe confirms leaks live.

• audit
• auditor
• cli
• devsecops