Pinned Loading

1. provekit provekit Public

   Attack-tested security scanning for AI-generated code. Catches leaked secrets + OWASP-mapped insecure patterns. Zero deps. npx provekit

   JavaScript

2. recall recall Public

   Transparent cross-chat memory for AI coding. Saves each session as a readable markdown note you own, scrubs secrets, loads it back into new chats. npx recall-memory install

   JavaScript

3. security-assessments security-assessments Public

   Application-security assessments of self-hosted open-source tools: one confirmed SSRF (fixed + verified, disclosure in progress) and three documented judgment calls. AI-assisted method, human-verif…

4. tenant-isolation-postgres tenant-isolation-postgres Public

   Multi-tenant isolation in PostgreSQL: RLS row scope + a privileged-column trigger that closes the gap RLS cannot express + security-definer metering. 15 integration tests execute the attacks and as…

   JavaScript 1

5. rollout rollout Public

   Multi-tenant SaaS: Postgres + row-level security, Stripe subscriptions with database-enforced plan gating, FastAPI + React 19. Music release platform with a real ML pipeline (calibrated CLAP, force…

   TypeScript 1