UI-independent command policy contracts and analyzer entry points

Configurable auto-reviewer Pi extension for parsed, structural command policy

Decide whether a shell command may run: enumerate every command in the line, its redirections and every construct that cannot be decided statically, then match it against an allow/deny policy that fails closed.

ESLint plugin about ECMAScript syntactic features.

Additional ESLint rules for ESLint directive comments.

Sanity CLI core package

Node-oriented process lifecycle, command policy, log buffer, and process manager helpers for local-first ZVK applications.

Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies

OpenCode plugin that routes bash tool invocations through Fence for command-policy enforcement.

An AST-based pattern checker for JavaScript.

help secure Express/Connect apps with various HTTP headers

Email authentication library for Node.js

Sandbox-consuming implementation of the DeepSeek Harness PowerShell executor seam (confines every command via ctx.sandbox, reports denial/enforcement result facts)

Parse repository URLs to extract, SCM platform, domain, user, and project information.

Official ESLint plugin for Vue.js

Parse Content Security Policy directives.

Plan-mode composer control: the conversation.input.plan seat over the plan projection and the /plan command channel

Abstract spill storage seam (ctx.spillStore) for the DeepSeek Harness — save oversized tool text and return a retrieval locator

Command-line interface for all things Cloudflare Workers

Fast 0-deps bash parser written in TypeScript