Search

Compile a config into a shareable, backend-free repo-triage dashboard — one self-contained HTML file.

Defend against LLM-based web scrapers in Next.js applications

The CI gate for Next.js auth mistakes. Fails your build when a server secret is exposed via NEXT_PUBLIC_*, and warns on mutating routes with no auth check and webhooks with no signature verification. No build required.

Job scheduling for Node.js with overlap prevention, distributed coordination, and background tasks. Zero dependencies, written in TypeScript. (with updated dependencies)

Standard Webcomponents for AIR projects

Prose as Code — governance for AI-generated Terraform (AWS, Azure, GCP).

CRA compliance automation - SBOM generation, CVE monitoring, and vulnerability reporting for the EU Cyber Resilience Act.

Prevent secrets (API keys, passwords) and console.log in commits. Zero-config pre-commit hooks with Husky auto-install. Blocks Stripe, GitHub, AWS credentials out-of-the-box. 357+ teams protected.

Detect and sanitize dangerous Unicode in user-supplied text: bidi spoofing (Trojan Source), invisible characters, and Unicode Tag prompt-injection payloads, without breaking real RTL text or emoji.

Fast and efficient in-memory rate-limit for Node, used to alleviate DOS attacks.