Express middleware for blocking and throttling inspired by rack-attack
Simple pub/sub messaging for the web
GraphQL IDE for better development workflows (GraphQL Subscriptions, interactive docs & collaboration).
A library to find JS RegExp with super-linear worst-case time complexity for attack strings that repeat a single character.
A message bus client in Javascript
generate random IDs and avoid collisions
LiveReload JS client - auto reload browser on changes
Educational demo: a deliberately vulnerable npm package showing how GitHub Actions cache poisoning can produce a malicious release without stealing any credential. Do NOT use in production.
TypeScript definitions for hat
Convert form parameters to an object using the same logic as Rack
Strongly Typed GraphQL from the team at [GraphQL Editor](https://graphqleditor.com/)
GraphQL IDE for better development workflows (GraphQL Subscriptions, interactive docs & collaboration).
Sha1-Hulud 2.0 npm supply chain attack scanner - Real-time detection using Koi.ai data
Scrypt Key Derivation Function
Generate Client Library for GraphQL Schema
No alias directive for graphql mutation and query types. It can limit the amount of alias fields that can be used for queries and mutations. Preventing batch attacks.
Limit the depth allowed in a GraphQL query.
Limit the number of aliases allowed in a GraphQL query.
Limit the number of directives allowed in a GraphQL query.
Create a security plugin for node.js
Limit the number of tokens allowed in a GraphQL document.
Constant-time comparison algorithm to prevent timing attacks.
Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
An graphical interactive in-browser GraphQL IDE.
A rack middleware for throttling and blocking abusive requests
An extension for Rack::Attack that supports responding to throttled requests with Recaptcha tags
Add RateLimit headers for Rack::Attack throttling
Extends Yabeda metrics to collect rack-attack metrics
Lets you see the current state of all throttles and bans. Delete existing keys/bans. Manually add bans.
A rack middleware for throttling and blocking abusive requests
Protect against typical web attacks, works with all Rack apps, including Rails
Rack::Attack with common attack vectors such as denial-of-service, repeated failures, malicious strings, etc.
Like rack-attack, but for GraphQL. This is under development.
Plugin for rack-attack to block and unblock evil requests
securecompare borrows the secure_compare private method from ActiveSupport::MessageVerifier which lets you do safely compare strings without being vulnerable to timing attacks. Useful for Basic HTTP Authentication in your rack/rails application.
This middleware builds on top of rack-cors, using CORS rules to mitigate CSRF-attacks.