Open-source alternatives to Secure Json Parse

Your users download a 4GB AI model, the connection drops at 3.8GB, verifyfetch resumes from 3.8GB and verifies every byte. Drop-in integrity verification for Transformers.js, WebLLM, and any large file in the browser.

JSON.parse() drop-in replacement with prototype poisoning protection

tools for sandboxing your dependency graph

Detect Glassworm & trojan source attacks that employ unicode bidi attacks to inject malicious code

ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.

package that checks if your Node.js installation is vulnerable to known security vulnerabilities

The authentication CLI & Proxy for AI agents. Give agents access, not your credentials.

Tiny helper to protect against Prototype Pollution vulnerabilities in your application regardless if they introduced in your own code or in 3rd-party code

Mitigate security concerns of Dependency Confusion supply chain security risks

Tor detect middleware for express

Open-source, invisible CAPTCHA that detects AI agents, bots, and headless browsers via 40+ behavioral signals, device & TLS fingerprinting, and SHA-256 proof of work. Self-hosted and privacy-first.