Limit the depth allowed in a GraphQL query.

A TypeScript API for the MITRE ATT&CK data model

Limit the number of aliases allowed in a GraphQL query.

Limit the number of directives allowed in a GraphQL query.

No alias directive for graphql mutation and query types. It can limit the amount of alias fields that can be used for queries and mutations. Preventing batch attacks.

Limit the number of tokens allowed in a GraphQL document.

MIDI-like instruments from webaudio

Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist

OpenAI-compatible API gateway for Grok CLI — with Admin panel, safe mode, and gctoac CLI

Create a security plugin for node.js

Attack Logger & Awareness Display for BonkLM

An graphical interactive in-browser GraphQL IDE.

Simple representation of MITRE ATT&CK data

A monkey testing library written in JavaScript, for Node.js and the browser. Use it to check the robustness of web applications by unleashing a horde of undisciplined gremlins.

Third project of Hexlet

Educational demo: a deliberately vulnerable npm package showing how GitHub Actions cache poisoning can produce a malicious release without stealing any credential. Do NOT use in production.

Zen by Aikido is an embedded Application Firewall that autonomously protects Node.js apps against common and critical attacks, provides rate limiting, detects malicious traffic (including bots), and more.

Require scripts and styles to use Subresource Integrity

Utility kit for a safe string encoding/decoding

Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan via MCP. STDIO or Streamable HTTP.