OSS Builder. Building tools.
Focused on Security, Privacy, LLMs, Primitive, lightweight, and zero-dependency TypeScript libraries.
A blazing-fast CLI tool powered by a Rust core that scans your codebase, detects your tech stack, and generates rich AI agent SKILL docs, so tools like Claude Code, Cursor, and GitHub Copilot actually understand your project.
A small primitive for protecting sensitive state (tokens, PII) at the runtime level. Uses sealed values to eliminate accidental leaks across logs, error tracking, and SSR
Token masking library, for masking API keys, secrets, and tokens. Follow NIST SP 800-122, PCI-DSS, and OWASP A02 compliant. Entropy-Safe: Fixed-length masking prevents length-based attacks. Auto-detects 43+ token types (NPM, GitHub, Stripe, AWS, etc.)
Problem space: AI agents can silently burn through your API credits if they enter infinite loops or receive malicious prompts designed to trigger excessive token consumption. LLM Gate wraps every LLM call with a stateful circuit breaker that tracks token usage, cost, and request frequency, then trips before the damage is done.
A small utility for safely displaying email addresses by masking sensitive parts. Offers flexible control, custom mask character, domain and sub-domain masking
TypeScript utility for masking credit card numbers, handles formatting, partial visibility, supports flexible masking rules, grouping, and formatting
Measures randomness density, best used for generated tokens, secrets, and API keys. Not intended for judging human-chosen passwords
OTP utility built on Node's crypto, designed for code generation, includes batch generation, custom charset, verify option an OTP using constant-time comparison to prevent timing attacks
A utility to mask phone numbers for privacy protection. Follows GDPR and data protection standards, extensive customization options: Character used for masking, Number of digits to show at the beginning/end, Alias for showFirst/showLast
TypeScript rounding library for financial use cases. Handles half-up, banker's rounding, cash rounding, and ISO 4217 currency precision with float-safe logic and null-safe APIs
A utility to mask personal names for privacy protection. Supports Latin, Chinese, and Japanese scripts with fully customizable options