Alternatives and similar repositories for vuln-regex-detector

Users that are interested in vuln-regex-detector are comparing it to the libraries listed below

• ajinabraham / njsscan
  njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.
  ☆406Updated 8 months ago
• fuzzitdev / jsfuzz
  coverage guided fuzz testing for javascript
  ☆606Updated 4 years ago
• mozilla / eslint-plugin-no-unsanitized
  Custom ESLint rule to disallows unsafe innerHTML, outerHTML, insertAdjacentHTML and alike
  ☆238Updated 2 months ago
• snyk / vulncost
  Find security vulnerabilities in open source npm packages while you code
  ☆208Updated 3 years ago
• sonatype-nexus-community / auditjs
  Audits an NPM package.json file to identify known vulnerabilities.
  ☆228Updated 3 weeks ago
• NodeSecure / js-x-ray
  JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.
  ☆253Updated this week
• davisjam / safe-regex
  Detect possibly catastrophic, exponential-time regular expressions
  ☆184Updated 2 years ago
• superhuman / rxxr2
  ☆146Updated 2 years ago
• ESAPI / node-esapi
  A minimal port of the old, publicly archived "owasp-esapi-js" (Enterprise Security API for JavaScript) encoder.
  ☆139Updated 2 years ago
• gkouziik / eslint-plugin-security-node
  ESLint security plugin for Node.js
  ☆104Updated last year
• NodeSecure / cli
  JavaScript security CLI that allow you to deeply analyze the dependency tree of a given package or local Node.js project.
  ☆374Updated this week
• lirantal / npq
  safely install npm packages by auditing them pre-install stage
  ☆1,015Updated last week
• lirantal / lockfile-lint
  Lint an npm or yarn lockfile to analyze and detect security issues
  ☆807Updated 2 months ago
• webschik / tslint-config-security
  TSLint security rules
  ☆69Updated 4 years ago
• google / node-sec-roadmap
  Some thoughts on how Node.js might respond to a changing security environment
  ☆173Updated 6 years ago
• jagracey / RegEx-DoS
  RegEx Denial of Service (ReDos) Scanner
  ☆164Updated 7 years ago
• fastify / secure-json-parse
  JSON.parse() drop-in replacement with prototype poisoning protection
  ☆237Updated 3 weeks ago
• snyk-labs / snync
  Mitigate security concerns of Dependency Confusion supply chain security risks
  ☆48Updated 2 weeks ago
• yaakov123 / hagana
  NodeJS runtime protection for supply chain attacks
  ☆141Updated 3 years ago
• mikewest / http-state-tokens
  Incrementally better HTTP state management.
  ☆300Updated 2 years ago
• nodejs / security-advisories
  Security advisories for Node.js and the JavaScript ecosystem.
  ☆41Updated 4 years ago
• brannondorsey / host-validation
  Express.js middleware for "Host" and "Referer" header validation to protect against DNS rebinding attacks.
  ☆192Updated 2 years ago
• papandreou / seespee
  Create a Content-Security-Policy for a website based on the statically detectable relations
  ☆77Updated last month
• mikesamuel / attack-review-testbed
  Make it easy to probe the strengths and weaknesses of a hardened Node.js stack
  ☆19Updated 6 years ago
• jesusprubio / awesome-nodejs-pentest
  Delightful Node.js packages useful for penetration testing, exploiting, reverse engineer, cryptography ...
  ☆426Updated 4 years ago
• lovell / highwayhash
  Node.js implementation of HighwayHash, Google's fast and strong hash function
  ☆220Updated 3 years ago
• hapijs / bourne
  JSON.parse() drop-in replacement with prototype poisoning protection
  ☆173Updated 8 months ago
• myndzi / wtfnode
  Utility to help find out why Node isn't exiting
  ☆585Updated 6 months ago
• spaceraccoon / npm-scan
  An extensible, heuristic-based vulnerability scanning tool for installed npm packages
  ☆50Updated 3 years ago
• tjenkinson / redos-detector
  A CLI and library which tests helps score how vulnerable a regex pattern is to ReDoS attacks. Supported in the browser, Node and Deno.
  ☆49Updated last week