Search

Ensure secure and effective form submission with this comprehensive form validation library. Simplifying the validation process for common fields like passwords, emails and text areas.

Free, local pre-flight security check for AI-built apps — finds exposed secrets and open Supabase databases in seconds. Nothing leaves your machine.

Pre-publish security gate for packages. Scans 10 ecosystems (npm, PyPI, Docker, Maven, etc.) for source maps, credentials, and sensitive files before they ship.

AI-powered security scanner with 33 agents including AI-generated code detection. STRIDE/DREAD scoring, adversarial review, professional PDF reports.

A powerful and advanced manager for AWS, Oracle, Microsoft Azure, Docker, and ClowdIE with feature-rich capabilities for super-speed connectivity, enhanced security, and optimized performance.

A tiny, tree-shakeable ID toolkit for TypeScript apps. Secure core with optional subpath exports for prefixed IDs, typed IDs, validation, and custom alphabets.

Zero-configuration cryptographic secret manager with automatic key generation, simplified API, and secure authentication. No hardcoded keys, no complex setup - just install and use!

Unity Shield - Active security protection for Express/Next.js. Blocks SQL injection, XSS, path traversal attacks in real-time. No Redis required.

High-performance Koa middleware for serving static files with Apache-like directory listing, HTTP caching, template engine support, and comprehensive security fixes

Risk-adaptive multi-agent PR review for Claude Code & Cursor — 7 specialized agents catch bugs, security flaws, and AI hallucinations in parallel

CLI security scanner for AI Agent Skills (Multi-language support: JavaScript, TypeScript, Python, Java, Go, Ruby, PHP, C/C++, Rust)

Security-first, self-defending token library for Node.js. Powered by Rust, Ed25519, ChaCha20-Poly1305, CBOR, context binding. Zero JS dependencies.

An AST-free, LLM-free zero-trust static analysis engine for mapping architectural risk, securing CI/CD pipelines, and modernizing legacy monoliths.

Security-maintained drop-in fork of expr-eval. Patches CVE-2025-12735 and CVE-2025-13204 by restricting member access. Original API unchanged.

Type-safe, secure cross-window communication with built-in origin validation, JSON Schema message validation, robust heartbeat monitoring, and defensive error handling

AI governance guardrails for coding agents. Framework-aligned security and compliance patterns from NIST AI RMF, OWASP Top 10 for LLMs, and ISO/IEC 42001.

`dworshak-secret` is a light-weight library for local credential access. By adding `dworshak-secret` as a dependency to your Python project, you enable your program or script to leverage secure credentials.

Complete developer toolkit for building, testing, and deploying Clarity smart contracts on the Stacks blockchain. Includes contract generation, testing framework, deployment pipeline, and security scanning.

Improved Anthropic Sandbox Runtime (ASRT) - A general-purpose tool for wrapping security boundaries around arbitrary processes (sysid fork with several improvements and bug fixes)

Solidity smart contract security auditing plugin for OpenCode — 4 specialized agents, 12 tools (11 core + optional Solodit), and a curated vulnerability knowledge base