JSPM

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It's written in JavaScript and works in all modern browsers (Safari, Opera (15+), Internet Explorer (10+), Firefox and Chrome - as well as almost anything else usin

Generate a cryptographically strong random string

Encrypt/Decrypt the values of a given object

A tiny (130B to 205B) and fast utility to randomize unique IDs of fixed length

SSH2 client and server modules written in pure JavaScript for node.js

A ready to use http and https agent for working with proxies that keeps connections alive!

Browser Compatible Object Hashing

Securely compare two strings, copied from cryptiles

A tiny (230B) and fast UUID (v4) generator for Node and the browser

Provides a way to encrypt and securely store key-value pairs locally on the device.

Secure, stateless, and cookie-based session library for JavaScript

HTTP State Management Utilities

SSH2 and SFTP(v3) client/server protocol streams for node.js

Check if a filename is safe to use in a path join operation

RustCrypto: Argon2 binding for Node.js

RustCrypto: Argon2 binding for Node.js

RustCrypto: Argon2 binding for Node.js

For managing certificates when developing Office Add-ins.

An eslint rule that searches for potential secrets/keys in code

A secure, high-performance expression evaluator for dynamic chart rendering

Secure, zero-dependency utilities for generating passwords, passphrases, pins, and more

A tiny, tree-shakeable ID toolkit for TypeScript apps. Secure core with optional subpath exports for prefixed IDs, typed IDs, validation, and custom alphabets.

Normalize the creation of cryptographically strong random values.

Fastest way for creating null-prototype objects in JavaScript

Create a secure stateless cookie session for Fastify

Library for work with Uploadcare image shrink

Helpers for working with Uploadcare CNAME-prefixed URLs in browser environments.

Angular 2 / TypeScript crypto-secure UUID generator

Key management and cryptographically protected messages

A performant zero-dependency utility to clean UTF-8 text, fix mojibake from latin1, verify string length, and sanitize input

Arcjet runtime security SDK — bot protection, rate limiting, prompt injection detection, PII blocking, and WAF for JavaScript and TypeScript apps

Arcjet runtime security SDK for Next.js — bot protection, rate limiting, prompt injection detection, PII blocking, and WAF

Generate passwords using a cryptographically-strong source of randomness

A powerful, simple, promise-based postMessage library

Zero dependency module - Secure random passphrase

Quickly get self signed ssl certificates for development

RustCrypto: Argon2 binding for Node.js

A Cryptographically Secure Pseudo-Random Number Generator for NodeJS

RustCrypto: Argon2 binding for Node.js

RustCrypto: Argon2 binding for Node.js

Checks filenames to be committed against a library of filename rules to prevent sensitive files in Git

RustCrypto: Argon2 binding for Node.js

RustCrypto: Argon2 binding for Node.js

RustCrypto: Argon2 binding for Node.js

RustCrypto: Argon2 binding for Node.js

Session plugin for fastify written in TypeScript supporting both stateless and stateful sessions

RustCrypto: Argon2 binding for Node.js

Node.JS Argon2 password hashing algorithm following the PHC string format

RustCrypto: Argon2 binding for Node.js

RustCrypto: Argon2 binding for Node.js

RustCrypto: Argon2 binding for Node.js

Library for work with Uploadcare Signed Uploads

RustCrypto: Argon2 binding for Node.js

Arcjet runtime security SDK for Node.js — bot protection, rate limiting, prompt injection detection, PII blocking, and WAF

Unified API for password hashing algorithms

A React Native library for preventing your app from screenshots and screen recordings, with powerful event detection capabilities.

Log redaction plugin for loglayer.

Generate a cryptographically strong random string

🔐 Make protected .ENVs variables

A tiny memorable password generator for Node.js and browsers

Making Password storage safer for all

SOPS Decoder for JavaScript (Node)

Redact sensitive information from JSON for logging

Generates a secure random string with a given length

Node.JS Argon2 password hashing algorithm following the PHC string format

Efficiently generate cryptographically strong random strings of specified entropy from various character sets.

SSH2 client and server modules written in pure JavaScript for node.js

Secure storage plugin for iOS & Android

SDK for interfacing with WhatsApp Business Platform in Typescript or Node.js using the Cloud API, hosted by Meta.

Node.JS bcrypt password hashing algorithm following the PHC string format

Advanced unique ID generation utility with multi-layer encoding, collision detection, and context-aware features

🔒 Secure & modern Quill.js module for resizing images, videos, and iframes with zero vulnerabilities and automatic releases

Protobuf definitions for Waku

Contains various discovery mechanisms: DNS Discovery (EIP-1459, Peer Exchange, Local Peer Cache Discovery.

Definition of Waku interfaces

A powerful, simple, promise-based postMessage library

Secure and size-limited in-memory cache for Node.js and browsers

A unified SDK for easy creation and management of js-waku nodes.

ENR (EIP-778) for Waku

A cryptographically secure pin code generator with string support

Different utilities for Waku

Scalable Data Sync implementation for the browser. Based on https://github.com/vacp2p/rfc-index/blob/main/vac/raw/sds.md

SSH2 client and server modules written in pure JavaScript for node.js

A powerful, simple, promise-based postMessage library

Environment Variable Loader

Callback-based api behind ssh2 to open an SSH connection

A powerful, simple, promise-based postMessage library

Making Password storage safer for all

SDK for interfacing with WhatsApp Business Platform in Typescript or Node.js using the Cloud API, hosted by Meta.

A TypeScript compatible, zero dependency React component to avoid security exploits when opening a link in a new tab.

Arcjet runtime security SDK for NestJS — bot protection, rate limiting, prompt injection detection, PII blocking, and WAF

A simple library to add HTTPS support to your HTTP NestJS application for local develoment, debugging, and testing.

Secure PDF viewer plugin for NodeBB - prevents downloading, enables canvas-only rendering with Premium group support

Cryptographically secure shuffle using the Fisher-Yates algorithm. The browser's (or NodeJS) crypto services are used to generate strong random numbers.

Manage CLI application encrypted preferences.

Node.JS PBKDF2 password hashing algorithm following the PHC string format

Foundational React components for the Stoplight ecosystem. Stable version with all critical security vulnerabilities patched.

Modern, fetch-compatible web request library with intelligent HTTP caching, retry strategies, and fault tolerance.

Arcjet runtime security SDK for SvelteKit — bot protection, rate limiting, prompt injection detection, PII blocking, and WAF

A polyfill for the Sanitizer API with various sanitizer configs

Simple XOR and base_64 encryption decryption for react-native

A CLI and GitHub Action that securely centralizes your environment variables from AWS SSM or Azure Key Vault as a single source of truth

Small visualization components for ink CLI framework

SSH2 client and server modules written in pure JavaScript for node.js

Dead simple login processor for express.js

Great pincode input component for Vue.js applications.

Class-based sanitization in TypeScript using decorators

Easy and secure configuration management. JSON based - AES encrypted secrets - HMAC validation - env var export

A simple flexible javascript library that creates random alpha-numeric strings. Works in both NodeJS and the browser.

React Native plugin for Nevis Mobile Authentication SDK. Supports only mobile.

Hide a view in screenshots

11ty plugin for automatically adding a rel='noopener' or rel='noreferrer' attribute to all unsafe external links.

Auth made easy and secure via JWT cookies, CSRF tokens, and password hashing helpers.

Generate secure and unique short IDs in JavaScript, tested for reliability and compatibility with browsers

Cashflows Client Library for JavaScript

YBD Project fork of ytdl-core.

Arcjet runtime security SDK for Bun — bot protection, rate limiting, prompt injection detection, PII blocking, and WAF

Encrypt and transfer secrets via QR code

A NodeJS password vault.

Intuitive cookie manipulation library for the front-end

Code-Ready Dependency Analytics JavaScript API.

Node.js kafka client, consumer, producer polite out of the box

Ensure your express connections only run over HTTPS.

🔑 Generate silly passwords that are secure and easy to use. Inspired by xkcd.

A minimal, secure TypeScript interpreter for AI agents — Node.js bindings

A minimal, secure TypeScript interpreter for AI agents — Node.js bindings

A minimal, secure TypeScript interpreter for AI agents — Node.js bindings

Git tags with higher level of security

A fast, secure, modern, light-weight, and simple JS library for creating web components and more!

Simple, secure token authentication for jQuery.

A minimal, secure TypeScript interpreter for AI agents — Node.js bindings

LacertaDB! The Easy JS DB. IndexedDB for data and LocalStorage for metadata and top document.

Storage engine for redux-persist, which can store sensitive data on the iOS/Android Keychain/Keystore, by wrapping react-native-keychain

User Interface for RTSP capable cameras with HSV support.

A secure AsyncStorage partial implementation

SSH2 client and server modules written in pure JavaScript for node.js

Secure container.

A simple wrapper to encrypt and decrypt data stored in Redis

A minimal, secure TypeScript interpreter for AI agents — Node.js bindings

Password generator (CSPRNG)

SDK for integrating your ExpressJS application with Wristband. Handles user authentication, session management, and token management.

A minimal, secure TypeScript interpreter for AI agents — Node.js bindings

Ember addon to help purify DOM content

🛡️ A Secure, Performant, and Feature-Rich OAuth 2.0 Integration for Microsoft Entra ID — Fully Abstracted and Production-Ready.

A minimal, secure TypeScript interpreter for AI agents — Node.js bindings

A minimal, secure TypeScript interpreter for AI agents — Node.js bindings

Generate a cryptographically random password from EFF's improved Diceware word list

Secure, sequential (n, N) sampling without replacement

An AWS CDK construct that defines an S3 bucket with security-focused defaults. It wraps the standard s3.Bucket and applies settings that follow AWS best practices, so you can create buckets without accidentally leaving them open or unencrypted. You can st

Break out of localhost. Connect to any device from anywhere over any tcp port or securely in a browser. A secure tunnel. A poor man's reverse VPN.

The same framework which is designed to build bulletproof frontends.

The official Wickr IO Bot API Framework

Secure, EU-hosted coding agent for TextCortex customers that runs in your terminal, edits files, runs scripts, and more.

This is a simple HTTPS proxy to be used with Next.js in local development.

Safe URL parsing/escaping via JS tagged templates

Generate secure, random, uniform integers, compensating for modulo bias

The plugin transform `.jay-html` files and jay component files as part of a vite build.

Shuffle an array using secure-random-uniform as the RNG

Nativescript plugin for https requests

Basic https server that hosts a simple html page.

An 'unlimited' secure store engine for expo projects, also compatible with redux-persist. (Expo's SecureStore was limited to 2KB in SDK v33)

Nexus-FCA 3.4.0 – Ultra-Fast, Secure & Stable Facebook Messenger API with Parallel Messaging.

The fastest way to run untrusted JavaScript safely. Zero-config, Bun-first.

Secure encrypted configuration loader for Node.js that replaces .env files with a single master key and runtime decryption

An authentication and authorization library for express applications and clients

Obscure passwords and other sensitive personal information when a react-native app transitions to the background

Arcjet runtime security SDK for Fastify — bot protection, rate limiting, prompt injection detection, PII blocking, and WAF

Safe JSON <-> TOON encoder/decoder with strict validation.

Arcjet runtime security SDK for Deno — bot protection, rate limiting, prompt injection detection, PII blocking, and WAF

Automatically generate tls credentials using letsencrypt.

Production-ready Node.js + Express API boilerplate with JWT auth, RBAC, rate limiting, and database support (MongoDB/PostgreSQL)

TypeScript library built for Node backends to create ZIP files with password protection

The same framework which is designed to build bulletproof frontends (CLI tool for Web)

Arcjet runtime security SDK for Remix — bot protection, rate limiting, prompt injection detection, PII blocking, and WAF

ChaCha20-Poly1305 encryption/decryption for React Native. Native implementations make sure it has the fastest performance.

Remote isolated browser platform by Dosyago

Create cryptographically random strings.

QuarkDash - pure typescript hybrid cryptographic protocol that provides post-quantum security, high performance, and attack resistance.

Trustify :: Dependency Analytics :: API

The bundle includes Bitmovin Player and Cloud Video Kit integration software. It allows you to stream content created in Cloud Video Kit using one of the best video players on the market. To use the bundle, you need a Cloud Video Kit account and a Player

Secure parent-child iframe communication with signed JWT authentication

Node API library for Barion Smart Gateway electronic payment system.

Unified secure color library with pluggable output backends - zero runtime dependencies

Waku Message Payload Encryption

Create beautiful SVG maps filled with dots for the world or countries - Enhanced with security fixes, performance improvements, and modern tooling

Encrypt and decrypt individual lines inside a .env file. Supports multiple encryption keys. Keys and dotenv files can be read text file or read from the environment.

SSH2 client and server modules written in pure JavaScript for node.js

SSH2 prebuilt

Simple abstraction of AES to ensure no silly mistakes

Test if a HTTP Request is secure, taking into account x-fowarded-proto and related.

SecureEventEmitter is a tiny javascript package that uses restrict rules and mechanisms to build safer and protected event-driven architecture. It's similar to nodejs EventEmitter, but dictates stricter rules to prevent misuse.

BuckleScript/ReasonML Bindings for secure-random-string

Cordova Custom Config Parameters Plugin

Ultra-Fast, Secure & Stable Facebook Messenger API with Parallel Messaging.

SSH2 client and server modules written in pure JavaScript for node.js

Arcjet runtime security SDK for Astro — bot protection, rate limiting, prompt injection detection, PII blocking, and WAF

AES-encrypted values on top of AsyncStorage for React Native (JavaScript layer).

PrivMX Web Endpoint library

DNS Peer Discovery (EIP-1459)

Niceware-TS is a TypeScript implementation of Niceware, a method for generating or converting random bytes into English language passphrases.

Store a file in the npm cache directory

Base component using `@aegisjsproject/core` & `@aegisjsproject/styles`

A library for securely handling sensitive configuration values like connection strings, URLs, and secrets.

A utility function to generate secure random passwords of a specified length, including uppercase, lowercase, numbers, and special characters.

Arcjet runtime security SDK for React Router — bot protection, rate limiting, prompt injection detection, PII blocking, and WAF

Lightweight wrapper around IndexedDB for secure and structured client-side data storage.

Peer Exchange (https://rfc.vac.dev/spec/34/) protocol for Waku

Lightweight AES and DES encryption library for Node.js, featuring flexible encoding, multiple cipher modes, and TypeScript support.

This is a file transfer tool written in Node.js and built using WebRTC.

CLI tool for the Zation framework.

Managing certificates on nodejs http server

Google Calendar MCP server for Claude Desktop integration with enhanced security

Completely erases files by making recovery impossible.

A powerful, simple, promise-based postMessage library

Proxy-based wrapper for encrypting and decrypting data over any storage object

Monkey SDK for web

Next Generation of Fast Api

Generate customizable random strings (tokens) using secure charsets with validation – zero dependencies.

React Native Keystore wrapper for creating cryptographic key pair for signing payloads

TrustClaw — secure cloud agent plugin for CMDOP with OAuth and sandboxing

Library collection for password hashing, HMAC-based signature generation, and symmetric encryption. Build on top of Node's crypto module

JavaScript API library for the ADAMANT Blockchain

A SaltyRTC WebRTC task v1 implementation.

This is a webpack plugin (`webpack >= 5`) that creates an encrypted bundle nodejs module that will be decrypted at runtime on server using an environment variable as the desencryption key.

One schema, every config source. Load from .env, env vars, CLI, AWS SSM, Vault - typed, validated, documented.

JihyunLab Web secure storage.

Zation Client (TypeScript)

Secure, fast, drop-in replacement for Axios — same API, built on fetch, zero dependencies

TypeBox validators with lazy compilation, custom error messages, safe error handling, discriminated and heterogeneous unions

Reasonably validate file and folder names

Zero-dependency TLS 1.3/1.2 implementation for Node.js — full control over cryptographic keys, record layer, and handshake. Drop-in replacement for node:tls with advanced options impossible in OpenSSL.

Load .env files and environment variables

Provides easy and secure websocket communication mechanisms, including server and client implementation, function call routing, connection management, and tagging.

Markdown parser for `@aegisjsproject/core`

this is my opinion on koa and stuff

User Interface for RTSP capable cameras with HSV support.

The #1 HTML sanitizer - 100% security success rate AND fastest performance. Outperforms DOMPurify, js-xss, bleach-js and all competitors in comprehensive testing.

Secure PDF viewer plugin for NodeBB - prevents downloading, enables canvas-only rendering with Premium group support

The same framework which is designed to build bulletproof frontends. (SSG alternative library)

Secure, ephemeral file handoff CLI — push and pull files with client-side encryption

Easy ssh2 tunneling

An HTTP Server

An authentication and authorization library for express applications and clients

Constant-time safe comparison using Node.js native crypto.timingSafeEqual

A Bookshelf.js plugin for handling secure passwords

Methods to read/write secure containers to files.

Check if a given value is array-like.

A SaltyRTC Relayed Data task implementation.

Arcjet runtime security SDK for Nuxt — bot protection, rate limiting, prompt injection detection, PII blocking, and WAF