Alternatives and similar repositories for vuln-regex-detector

Users that are interested in vuln-regex-detector are comparing it to the libraries listed below

• google / csp-evaluator
  ☆359Updated 2 months ago
• fuzzitdev / jsfuzz
  coverage guided fuzz testing for javascript
  ☆606Updated 4 years ago
• NodeSecure / js-x-ray
  JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.
  ☆242Updated this week
• davisjam / safe-regex
  Detect possibly catastrophic, exponential-time regular expressions
  ☆181Updated 2 years ago
• w3c / trusted-types
  A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.
  ☆621Updated 2 months ago
• snyk / vulncost
  Find security vulnerabilities in open source npm packages while you code
  ☆205Updated 3 years ago
• nodejs / security-wg
  Node.js Ecosystem Security Working Group
  ☆524Updated this week
• NodeSecure / cli
  JavaScript security CLI that allow you to deeply analyze the dependency tree of a given package or local Node.js project.
  ☆372Updated this week
• lirantal / lockfile-lint
  Lint an npm or yarn lockfile to analyze and detect security issues
  ☆792Updated 2 weeks ago
• gkouziik / eslint-plugin-security-node
  ESLint security plugin for Node.js
  ☆103Updated last year
• google / node-sec-roadmap
  Some thoughts on how Node.js might respond to a changing security environment
  ☆173Updated 6 years ago
• mozilla / eslint-plugin-no-unsanitized
  Custom ESLint rule to disallows unsafe innerHTML, outerHTML, insertAdjacentHTML and alike
  ☆236Updated 5 months ago
• jagracey / RegEx-DoS
  RegEx Denial of Service (ReDos) Scanner
  ☆163Updated 7 years ago
• lirantal / npq
  🎖safely* install packages with npm or yarn by auditing them as part of your install process
  ☆985Updated 8 months ago
• ESAPI / node-esapi
  A minimal port of the old, publicly archived "owasp-esapi-js" (Enterprise Security API for JavaScript) encoder.
  ☆136Updated 2 years ago
• fastify / secure-json-parse
  JSON.parse() drop-in replacement with prototype poisoning protection
  ☆231Updated this week
• ossf / package-manager-best-practices
  Collection of security best practices for package managers.
  ☆162Updated 2 years ago
• sonatype-nexus-community / auditjs
  Audits an NPM package.json file to identify known vulnerabilities.
  ☆227Updated 6 months ago
• brannondorsey / host-validation
  Express.js middleware for "Host" and "Referer" header validation to protect against DNS rebinding attacks.
  ☆191Updated 2 years ago
• sola-da / ReDoS-vulnerabilities
  A list of ReDoS vulnerabilities in npm modules found by the Software Lab at TU Darmstadt. For each vulnerability, there is a proof-of-con…
  ☆59Updated 7 years ago
• spaceraccoon / npm-scan
  An extensible, heuristic-based vulnerability scanning tool for installed npm packages
  ☆50Updated 3 years ago
• w3c / webappsec-csp
  WebAppSec Content Security Policy
  ☆220Updated 2 weeks ago
• webschik / tslint-config-security
  TSLint security rules
  ☆69Updated 4 years ago
• JacksonGL / NPM-Vuln-PoC
  Vulnerabilities discovered in npm packages [Berkeley PL & Security Research]
  ☆42Updated 10 months ago
• mikesamuel / node-sec-patterns
  Security design pattern support for Node.js
  ☆24Updated 6 years ago
• dpnishant / jsprime
  a javascript static security analysis tool
  ☆590Updated 10 years ago
• isaacs / minipass
  A stream implementation that does more by doing less
  ☆252Updated 11 months ago
• lirantal / detect-secrets
  A developer-friendly secrets detection tool for CI and pre-commit hooks based on Yelp's detect-secrets
  ☆50Updated 3 years ago
• hapijs / bourne
  JSON.parse() drop-in replacement with prototype poisoning protection
  ☆172Updated 6 months ago
• uhop / node-re2
  node.js bindings for RE2: fast, safe alternative to backtracking regular expression engines.
  ☆516Updated last week