Safer Node.js Buffer API

detect possibly catastrophic, exponential-time regular expressions

Parse JSON safely without throwing

Helps you call untrusted contracts safely

Prevent defined property getters from throwing errors

Sanitize strings for use as JavaScript identifiers & property names

Like JSON.stringify, but doesn't blow up on circular refs.

`Array.prototype.concat`, but made safe by ignoring Symbol.isConcatSpreadable

Give a regex, get a robust predicate function that tests it against a string.

Push an array of items into an array, while being robust against prototype modification

URL and cookie safe UIDs

Constant-time comparison algorithm to prevent timing attacks.

detect possibly catastrophic, exponential-time regular expressions

A flexible way to handle safe area, also works on Android and web.

Modern Buffer API polyfill without footguns

Better call is a tiny web framework for creating endpoints that can be invoked as a normal function or mounted to a router to be served by any web standard compatible server (like Bun, node, nextjs, sveltekit...) and also includes a typed RPC client for t

Fault-tolerant CSS parser for PostCSS

C++ utility class to perform callbacks into JavaScript from any thread

Capability-style filesystem roots for Node.js apps that handle untrusted relative paths.

A deep deletion module for node (like `rm -rf`)