Zero-config security scanner for React Native & Expo apps. Find vulnerabilities with 68 security rules covering Android, iOS, and React Native specific issues.

TSLint security rules

matbot core runtime: agentic loop, hook dispatch, plugin loader, config, security, and knowledge. Exposes ./providers-base and ./storage-base for plugin authors.

Security rules for eslint

A collection of eslint rules that favour security best practices when coding for the browser

Zero‑config security scanner for Node.js/TypeScript with Sigstore signing

Runtime API security that catches vulnerabilities as they happen. Zero-config security proxy for developers.

Utilities for working with htmlparser2's dom

ES Math-related intrinsics and helpers, robustly cached.

AWS SDK for JavaScript Sts Client for Node.js, Browser and React Native

ESLint plugin focused on common security issues and misconfigurations discoverable during static testing as part of Microsoft Security Development Lifecycle (SDL)

tar for node

a glob matcher in javascript

MCP config security scanner — find cross-server attack paths in 10 seconds

This is the TOFU (trust-on-first-use) static analysis tool used by LavaMoat to automatically generate useable config

Security hardening and validation for LLM Config Manager with input validation, rate limiting, and threat protection

help secure Express/Connect apps with various HTTP headers

parse argument options

ESLint plugin and parser for Firebase Security Rules.

The worker which is used by the worker-timers package.