help secure Express/Connect apps with various HTTP headers

QMetriX — build & quality tooling (coverage merge, quality dashboard, image budget, security scan, structural duplication audit, e2e server guard, codebase bundler). Operates on the consuming repo via its cwd.

parse argument options

Vite plugin for scanning security risks in frontend code

LLM-enhanced SAST analysis built on circle-ir

The worker which is used by the worker-timers package.

Scan HAR files for security issues and generate a clean HTML report

Embedded JavaScript templates

CLI for Socket.dev, includes Sentry error handling, otherwise identical to the regular `socket` package

Security scanner for PostHog's agentic flows

AI-powered static analysis CLI with LLM-enhanced vulnerability detection

Zero-config security scanner for React Native & Expo apps. Find vulnerabilities with 68 security rules covering Android, iOS, and React Native specific issues.

Packs ECMAScript/CommonJs/AMD modules for the browser. Allows you to split your codebase into multiple bundles, which can be loaded on demand. Supports loaders to preprocess files, i.e. json, jsx, es7, css, less, ... and your custom stuff.

Base UI is a library of headless ('unstyled') React components and low-level hooks. You gain complete control over your app's CSS and accessibility features.

New Relic Security Agent for Node.js

Use Node JS to scan files on your server with ClamAV's clamscan/clamdscan binary or via TCP to a remote server or local UNIX Domain socket. This is especially useful for scanning uploaded files provided by un-trusted sources.

60-second security scanning CLI tool / 60 秒資安健檢工具

SonarQube/SonarCloud Scanner for the JavaScript world

Secretlint CLI that scan secret/credential data.

Imagemin plugin for mozjpeg