lockfile-lint
Supply chain security
Creator & maintainer
Lint lockfiles for trusted registries and protect against lockfile injection.
Projects & resources
A selection of the tools I build and help maintain, and the practices I share. Start with the problem you want to solve; each repository has its own documentation and contribution process.
Project metrics captured November 7, 2026. Sources & definitions
Security tools
Tools for checking package installs, lockfiles, website dependencies, and source code.
npq
Developer tooling
Creator & maintainer
Check package health and security signals before installing npm dependencies.
anti-trojan-source
Code security
Creator & maintainer
Detect bidirectional Unicode characters used to disguise malicious source code.
is-website-vulnerable
Web security
Creator & maintainer
Find publicly known vulnerabilities in the frontend JavaScript libraries a website loads.
ESLint plugin for anti-trojan-source
Editor & CI integration
Creator & maintainer
Bring bidirectional Unicode checks into ESLint so disguised code can be caught during development and review.
Developer tools & infrastructure
Tools for Docker, FreeRADIUS deployments, terminal dashboards, and MCP configuration.
dockly
Developer tooling
Creator & maintainer
An interactive terminal interface for managing Docker containers and services.
daloRADIUS
Network management
- GitHub stars
- 920
Original creator
A web management application for FreeRADIUS deployments, covering users, accounting, reporting, and billing.
blessed-contrib
Terminal dashboards
Contributor & maintainer
Charts, maps, tables, and other terminal widgets for Node.js dashboards. Originally created by Yaron Naveh.
ls-mcp
AI developer tooling
Creator & maintainer
Discover MCP server configurations used by applications such as Cursor, Claude Desktop, and VS Code.
Security guides & CLI best practices
Community guides covering Node.js command-line apps, npm security, and MCP servers and clients.
Node.js CLI Apps Best Practices
Community guide
- GitHub stars
- 4,144
Creator & maintainer
A practical guide to building thoughtful, accessible, and reliable command-line applications.
npm Security Best Practices
Supply chain guidance
- GitHub stars
- 1,265
Co-author with Juan Picado
Practical npm security guidance that became the original basis of OWASP’s NPM Security Cheat Sheet.
Awesome Node.js Security
Curated resources
- GitHub stars
- 3,056
Creator & maintainer
Security resources, tools, and learning material for the Node.js ecosystem.
Awesome MCP Best Practices
MCP guidance
- GitHub stars
- 87
Creator & maintainer
A shared collection of practices for building MCP servers and clients.
How to contribute
Try the project first, then check its README, open issues, and contribution guidelines. A reproducible bug report, a clearer example, or a documentation improvement can be a valuable first contribution.