Layered workspace attention filter, machine subtrees, junk denylist, and accumulated .gitignore

tools/pre-execute permission gate for web and browser tools (allowlist / denylist / ask).

Mechanical enforcement of LOOP.md/docs/safety.md's path denylist and auto-merge allowlist — evaluate a proposed change against static policy and block or allow it.

Drop-in replacement for ESLint's rule id-denylist with support for RegExp

Der Sicherheitsgurt für Claude Code. Secret-Blocker, Command-Denylist, PII-Erkennung, Audit-Log.

Block usernames during registration via a configurable denylist of literals and regex patterns

Geo-restrict your Vendure storefront by country, UK region or curated region presets (EU, EEA, British Isles, Europe, North America, Oceania, Worldwide-with-denylist). Per-channel settings exposed as Channel custom fields plus a dedicated admin page with

Redux middleware to execute a callback on action types using a allowlist or denylist approach

Model Context Protocol (MCP) Server for interacting with GCP APIs

Denylist + entropy secret scanner for Glide. Catches JWT, AWS/Stripe/GitHub/Slack/GCP/Anthropic/OpenAI keys, OAuth codes, PEM blocks, EVM/Solana private keys, and bearer tokens before they leak to logs or audit streams.

persist and rehydrate redux stores

Foam's browser telemetry companion: a thin, never-throw enrichment layer over the HyperDX browser SDK — automatic web instrumentation (fetch/XHR/WebSocket/socket.io/connectivity/document-load/errors), page & landing analytics, always-on session stitching

One predicate for one question: does this npm dependency specifier install from the registry? Asserted by the property, never by a denylist of notations.

TxShield offline registry — program allowlist, drainer denylist, trusted-mint registry. Ships without a network dependency.

Use whatlang-rs in your NodeJS applications.

Task — agentic CLI for working through CLI-eligible tickets locally with Claude Code

`ember-template-lint` plugin for setting attribute denylists

Harness-agnostic git shim for CLEO agent branch-protection (T1118)

Humanities-aware citation verification for CSL-JSON bibliographies. Canonical-edition URL verification, Pandoc-citeproc-style linkage check, structured human-triage worklist generation, and an opt-in project-supplied phrase denylist.

GraphQL operation guard for a supplied AST: fragment-aware depth limit with cycle guard, per-field complexity scoring, operation allowlist/denylist, and introspection blocking. graphql-js is optional — accepts its document shape structurally, zero hard de