Tiny, CSP-safe expression language for JavaScript. No eval, no new Function.

Tiny, CSP-safe RFC 9535 JSONPath engine. No eval, no new Function.

Pactor expression: controlled AST expression engine (no eval, no global access)

Transparent, unobfuscated interactive-buttons helper for wolfsocket / Baileys. No eval, no string-table obfuscation.

Tiny, CSP-safe template engine for JavaScript, powered by xprsn expressions. No eval, no new Function.

A custom version of the handlebars package which, to improve security, does not use 'eval' or 'new Function'

Transparent, unobfuscated interactive-buttons helper for blacklord-socket / Baileys. No eval, no string-table obfuscation.

Transparent, unobfuscated interactive-buttons helper for blacklord-socket / Baileys. No eval, no string-table obfuscation.

Transparent, unobfuscated interactive-buttons helper for blacklord-socket / Baileys. No eval, no string-table obfuscation.

Voodoo.js: the HTML-first JavaScript framework. Build reactive applications directly in HTML: fine-grained reactivity, components, HTTP, forms, validation, router and UI. No mandatory build step, no runtime dependencies, no Virtual DOM, no eval.

Reactive DOM binding via Recursive Proxy — zero dependencies, CSP-safe, no eval/new Function

evaluate statically-analyzable expressions

Sandboxed expression evaluator — one grammar, three runtimes. Paths, literals, logic, comparisons, ternaries, object/array literals. No eval, no host reach, no calls.

RQL for js array with no eval.

Mathematical expression evaluator fork with exports map, prototype pollution and code injection security fixes

Evaluate node require() module content directly

Simple JavaScript expression evaluator

A flexible math expression evaluator

CLI for Vally — the evaluation platform for AI agents

JavaScript expression parsing and evaluation.