Scaffold Node security baseline: husky + gitleaks pre-commit, Semgrep SAST, secrets CI, npm audit

Run Node Security as a grunt task

A gulp module that runs Node Security check

Node.js module wrapper for the Node Security Project API

Grunt plugin for Node Security Project npm-shrinkwrap.json validation

node-security

ESLint plugin for Node.js security — detects command injection, path traversal, SSRF, zip slip, and weak crypto (MD5/SHA-1, ECB, static IV) in fs, child_process, vm, and crypto.

Track Node security alerts.

audits a shrinkwrap file or a stream of shrinkwraps agains the Node Security Project module vulnerability database

Node Security

tar for node

Node Security Project test package

Embedded JavaScript templates

parse argument options

A bcrypt library for NodeJS.

Summary-style formatter for the Node Security Project, using Remarkup syntax

New Relic Security Agent for Node.js

Packs ECMAScript/CommonJs/AMD modules for the browser. Allows you to split your codebase into multiple bundles, which can be loaded on demand. Supports loaders to preprocess files, i.e. json, jsx, es7, css, less, ... and your custom stuff.

node security module

evaluate statically-analyzable expressions