Mathematical expression evaluator fork with exports map, prototype pollution and code injection security fixes

NoPP (No Prototype Pollution) – tiny helper to protect against Prototype Pollution vulnerabilities in your application

Detect the use of vulnerable features within some libraries from https://github.com/HoLyVieR/prototype-pollution-nsec18/ that are not yet fixed

Detect the use of prototype pollution vulnerabilities

A test kit for detecting prototype pollution and gadgets

Mathematical expression evaluator fork with exports map, prototype pollution and code injection security fixes

Secure YAML parser — duplicate key detection, alias depth limiting, prototype pollution prevention

Security-maintained drop-in fork of xlsx. Back-ports SheetJS's fixes for CVE-2023-30533 (prototype pollution) and CVE-2024-22363 (ReDoS) onto the frozen npm 0.18.5 baseline. Original API unchanged.

Prototype pollution finder tool for javascript. pp-finder lets you find prototype pollution candidates in your code. The main purpose of this tool is to help hackers in there prototype pollution researchs by highlighting potential candidate in the source

TypeScript library for safe and efficient JSON data manipulation with RFC 6901 (JSON Pointer) and RFC 6902 (JSON Patch) compliance, featuring prototype pollution protection and immutable operations

A production-grade, security-first TypeScript library for Node.js. Defends against XSS, Prototype Pollution, Path Traversal, SQL/NoSQL Injection, and more. Includes adaptive rate limiting, WebAuthn/Passkeys, AES-256-GCM sessions, and post-quantum cryptogr

Decorators and utilities for creating immutable, tamper-proof object APIs with built-in prototype pollution defense.

Request-level defence in depth for Axiomify — XSS sanitisation, HPP normalisation, prototype-pollution + null-byte filtering, bot UA detection.

A service which detects prototype pollution in libraries

Provide secure alternatives for functions that can be effected by prototype pollution

Secure fork of SheetJS with security fixes for prototype pollution and ReDoS vulnerabilities

Deep merge that keeps your TypeScript types exact: the result is typed as the defaults, and overrides are checked at every depth. Cycle-safe, prototype-pollution-safe, zero dependencies.

Fork isvalid 1.6.7 - Patch merge 1.2.2 CVE (Prototype Pollution) The Unkillable Fork

Parse/stringify URL query strings: nested bracket notation, arrays, type coercion, prototype-pollution guard

Access deep object properties using a path