GitHub

🔬 Low-level React Native components for responsive, accessible, cross-platform app development.

Rust raw bindings for cr.h: A Simple C Hot Reload Header-only Library

Node.js module to support blanket.js code coverage when injecting dependencies via sandboxed-module

I have come-up with a POC for Payara Micro Community 5.2021.6 - Directory Traversal, Please refer above reference field.

Information disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and below allows attackers to view the password to access and arbitrarily submit surveys.

Simple implementation of Object.assign

A metapak module for my open source projects.

Neat deepEqual

A streams2 duplexer.

:package: Meta package for devDependencies.

object tree manipulation with flat structures

Provides an easy method for outputting inline images in the buildkite output log.

Why is there no grunt plugin for doctoc yet?

Tiny but complete

Moved to https://github.com/christophehurpeau/nightingale

ESLint config for my projects.

MISP API wrapper for Ruby

PoC repository for CVE-2025-68147: Stored Cross-Site Scripting (XSS) in OpenSourcePOS. Vulnerability allows privilege escalation via malicious JavaScript injection in the Store Config module. Includes payload details and patch verification (v3.4.0). Security Researcher: Aditya Singh (Nixon-H).

🚫 **DEPRECATED** React component template scaffold

A customizable documentation generator for github projects

Use `trace` and `clarify` if supported by the current node version

Babel plugins preset for the latest node

pretty logger with the ability to update lines in place

NodeJS mixin to add one-time ready event

JavaScript-compatible Unicode data. Arrays of code points, arrays of symbols, and regular expressions for Unicode v5.2.0’s categories, scripts, blocks, bidi, and other properties.

asciinema is a terminal screen recorder.

Fetch HTTP URL contents for nodemailer attachments

NodeSecure security flags 🚩 (configuration and documentation)

Returns native Promise if available, otherwise lie

Polyfill of spawnSync and execSync for Node-0.10.x

Script for automatically generating releases

aqua is a load testing tool for benchmarking solana nodes over RPC and gRPC

Fast network scanner for device discovery and service enumeration

A simple promise-based wrapper for file operations that treats files as objects.

test

A mini colors tools

A simple command-line tool to confirm

Suzuki connect app is used to get the car information like Fuel, Ignition status, Current location, Seat buckle status etc. In Ignis, Zeta variant car if the Fuel CAN messages and Seat buckle status is spoofed via OBD 2 port with the crafted value (e.g. zero percent fuel and Car seat is buckled ), then the same value is reflected on Suzuki connect app, which can mislead the user.

A denial-of-service vulnerability in the AuntyFey BLE smart padlock allows unauthenticated connection floods to lock out legitimate users. CVE-2025-34462.

Compare byte and datetime units

Redis based remote command executor.