Helps you call untrusted contracts safely

Safer Node.js Buffer API

detect possibly catastrophic, exponential-time regular expressions

Give a regex, get a robust predicate function that tests it against a string.

tar for node

Like JSON.stringify, but doesn't blow up on circular refs.

`Array.prototype.concat`, but made safe by ignoring Symbol.isConcatSpreadable

Push an array of items into an array, while being robust against prototype modification

URL and cookie safe UIDs

Parse JSON safely without throwing

Use node's fs.realpath, but fall back to the JS implementation if the native one fails

detect possibly catastrophic, exponential-time regular expressions

Constant-time comparison algorithm to prevent timing attacks.

Prevent defined property getters from throwing errors

A flexible way to handle safe area, also works on Android and web.

Sanitize strings for use as JavaScript identifiers & property names

Deterministic and safely JSON.stringify to quickly serialize JavaScript objects

Robust call-bound JavaScript intrinsics, using `call-bind` and `get-intrinsic`.

Timing safe string compare using double HMAC

Robustly `.call.bind()` a function