# lirantal/awesome-nodejs-security

Awesome Node.js Security resources

Repository: https://github.com/lirantal/awesome-nodejs-security
Canonical: https://ross.abutalabs.com/products/awesome-nodejs-security
License Family: other
Topics: nodejs, security, cybersecurity, web-security, owasp, vulnerabilities, pentest, infosec, hacktoberfest, awesome, awesome-list
Last push: 2026-08-14T17:07:08+00:00

## Health v2 (maintenance only)
Score: 76/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 97, release rhythm 35, longevity 100
- inputs: {"age_days": 2871, "days_push": 19, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 3027, forks 302 (observed 2026-08-28T04:07:38.834120+00:00)

## What it is
A curated awesome-list of Node.js security resources, including tools for framework hardening, static and dynamic analysis, vulnerability advisories, and educational material. It aggregates links to security tools, data sources, incident writeups, articles, books, and hacking playgrounds.

## Use cases
- find nodejs security tools for hardening express apps
- learn about npm supply chain vulnerabilities and incidents
- discover static analysis and SAST tools for javascript
- find resources to learn nodejs secure coding
- look up owasp guidance for nodejs applications
- find csrf and security header middleware options

## When to choose
- you want a curated starting point for securing Node.js applications
- you are researching Node.js security incidents or supply chain attacks
- you need to discover security tooling across the Node.js ecosystem

## When to avoid
- you need a runnable security tool rather than a list of links
- you need security resources for languages other than JavaScript/Node.js

## Facets
- artifact type: learning-resource
- maturity: active
- function: security, developer-tools, vulnerability-scanning, penetration-testing
- domain: security, developer-tools, web-development, awesome-lists
- platform: -
- tags: awesome-list, nodejs-security, owasp, curated-resources, infosec, nodejs

## Member repositories
- lirantal/awesome-nodejs-security (main) score 76

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:38.834120+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:29:52.375689+00:00, confidence not recorded.
  - readme: https://github.com/lirantal/awesome-nodejs-security (fetched 2026-08-28T04:07:38.834120+00:00, sha 94277f90870e)
- Data as of 2026-08-30T08:39:29.467469+00:00.