No alias directive for graphql mutation and query types. It can limit the amount of alias fields that can be used for queries and mutations. Preventing batch attacks.

Limit the number of tokens allowed in a GraphQL document.

Limit the number of directives allowed in a GraphQL query.

MIDI-like instruments from webaudio

Create a security plugin for node.js

Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist

An graphical interactive in-browser GraphQL IDE.

Educational demo: a deliberately vulnerable npm package showing how GitHub Actions cache poisoning can produce a malicious release without stealing any credential. Do NOT use in production.

Utility kit for a safe string encoding/decoding

http benchmark by nodejs

Require scripts and styles to use Subresource Integrity

A TypeScript API for the MITRE ATT&CK data model

Attack, decay, sustain, release envelope for automating Web Audio API AudioParams.

Digital Signal Processing for Javascript

This package helps to filter the input text that is malicious and intended to attack the server.

Audited & minimal JS implementation of elliptic curve cryptography

Build and manage the AJV instances for the fastify framework

Check if a string contains a potential SSRF attack

Set of stateless request methods to create, check, reset, refresh, and delete user access tokens for OAuth and GitHub Apps

OMEGA MASTER v10.0 — Ultimate Autonomous Pentest Engine by @c4ccz. 8 Collaborative AI Agents, 5000+ Paths, 3000+ Payloads, Deep Correlation, Attack Chains, Browser Automation.