Tiny, type-safe deep merge — immutable, prototype-pollution safe, with configurable array strategy. Zero dependencies.

Compact fetch-handler server for edge and serverless runtimes (Cloudflare Workers, Vercel Edge, Deno Deploy, Bun). Keeps the server().get().post() DX and the full request trust boundary - bounded body read, Content-Length pre-reject, prototype-pollution g

Pinelight Labs' open-source AST security scanner + CLI. Run `pinelight scan .` to find SQL injection, XSS, secrets, path traversal, command injection, weak crypto, race conditions, vulnerable dependencies, prototype pollution, and prompt injection in your

Fastest way for creating null-prototype objects in JavaScript

Inside-the-app security middleware for Node.js. Express and NestJS run the full sanitizer pipeline (XSS, SQL, NoSQL, SSTI, XXE, path, command, prompt injection, prototype pollution, LDAP, XPath, header injection, plus 20+ more attack types). Fastify, Koa,

traverse and transform objects by visiting every node on a recursive walk

Rewrite of the https://www.npmjs.com/package/jsonpath library fixing prototype pollution CVE

Patched utils-extend with deny-list for prototype pollution in utils-extend

Prevent prototype pollution by sanitizing all string inputs to the JSON parser

parse argument options

Unofficial security-hardened fork of exceljs, patching known unpatched vulnerabilities in the upstream (unmaintained) project. Not affiliated with the original exceljs maintainers.

Compile-time Kotlin extension functions (let/apply/run/also/takeIf/takeUnless) for Vite — zero prototype pollution.

CLI tool to analyze npm packages for network API usage, prototype pollution, and security vulnerabilities

A security‑hardened JSON loader with prototype‑pollution protection, depth limits, safe parsing, and optional validation layers.

Parse untrusted JSON, avoiding potential prototype pollution/bad type issues.

A secure and simple query string parser and stringifier for Node.js and TypeScript. Prevents prototype pollution.

SheetJS Spreadsheet data parser and writer

Validate, type-check, and secure your environment variables — with prototype pollution detection, secret masking, and a CI-ready CLI.

Adds a static `extend` method to a class, to simplify inheritance. Extends the static properties, prototype properties, and descriptors from a `Parent` constructor onto `Child` constructors.

Tiny, type-safe deep get/set by dot-path — immutable set/unset, prototype-pollution safe, array-index syntax. Zero dependencies.