A simple way to serve either secure or non-secure files on any port. Just run nodeServer [port] [cert file] [key file]. If no ports are included files will be served on port 80 for http and port 443 for https. To use https, just include a cert and key file.

Secure-by-default MCP server with 5-layer validation for defense-in-depth protection

Client that pulls env from Env-Secure server and injects into process.env

HTTP/2 secure server.

A secure, server-side HTTP client with built-in API key validation, rate limiting, and security features

The official UniDir SDK for Next.js applications. This SDK provides secure, server-side OpenID Connect (OIDC) authentication using encrypted `httpOnly` cookies.

JSON parse with prototype poisoning protection

TODO

Better Auth integration for Expo and React Native applications.

A tiny (130B to 205B) and fast utility to randomize unique IDs of fixed length

A security-focused rehype plugin that filters URLs based on allowed prefixes

A tiny (230B) and fast UUID (v4) generator for Node and the browser

simple persistent cookiejar system

Mona Attest Backend SDK - Secure server-side verification for cryptographic attestations and digital signatures. Provides robust signature validation, user verification, and enterprise-grade security for Node.js applications.

## Authentication

Makes it possible to use DOMPurify on server and client in the same way.

Provides functions for detecting if the host environment supports the WebCrypto API

Secure, zero-dependency utilities for generating passwords, passphrases, pins, and more

hint for best practices related to the usage of the Set-Cookie response header.

A Vite plugin to generate untrusted certificates for HTTPS dev servers