npm
Moderate Security Advisories in npm Clear Filters
Moderate
about 2 hours ago
Backstage catalog rules can be bypassed for URL locations using encoded path segments
npm
@backstage/plugin-catalog-backend
Moderate
about 3 hours ago
Waline login accepts a non-string email as a match-all MongoDB query
npm
@waline/vercel
Moderate
about 3 hours ago
Seroval: Code injection through a typed array's own constructor property
npm
seroval
Moderate
about 3 hours ago
Seroval: Script injection through RegExp sources in serialized output
npm
seroval
Moderate
about 3 hours ago
Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)
npm, pypi
mem0ai
Moderate
about 3 hours ago
systeminformation has prototype pollution in `networkStats()` via the interface name
npm
systeminformation
Moderate
about 3 hours ago
Happy DOM has cookie scope forgery: no DNS-label boundary on Domain= matching , attacker origin sets victim cookies
npm
happy-dom
Moderate
about 3 hours ago
GraphQL Tools: Shared legacy executor routes one subscription's results to a different caller
npm
@graphql-tools/executor-legacy-ws
Moderate
about 3 hours ago
@hono/node-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths
npm
@hono/node-server
Moderate
about 4 hours ago
Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column.
npm
@highcharts/grid-pro, @highcharts/dashboards
Moderate
about 4 hours ago
Highcharts Dashboards: `__proto__` data table id writes sync listeners to `Object.prototype`
npm
@highcharts/dashboards
Moderate
1 day ago
undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering
npm
undici
Moderate
1 day ago
undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor
npm
undici
Moderate
1 day ago
Nodemailer: Quadratic backtracking in SMTP AUTH mechanism detection regexes allows pre-auth remote denial of service
npm
nodemailer
Moderate
1 day ago
Nodemailer: RFC 5322 comment inside an angle-bracket address is never stripped
npm
nodemailer
Moderate
1 day ago
Nodemailer: Quadratic (O(n^2)) SMTP client reply parsing lets a malicious server or MITM cause a pre-auth remote denial of service
npm
nodemailer
Moderate
5 days ago
undici vulnerable to Denial of Service via unbounded memory in the EventSource parser
npm
undici
Moderate
5 days ago
undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens
npm
undici
Moderate
5 days ago
Nodemailer: A nested comment ends early in addressparser, releasing the rest of the comment as a recipient
npm
nodemailer
Moderate
5 days ago
Nodemailer: A ";" inside a quoted string or comment ends an address group early in addressparser, turning display text into a recipient
npm
nodemailer
Moderate
5 days ago
Nodemailer: A ">" inside a quoted local part ends an angle-addr early in addressparser, delivering to a domain the header does not name
npm
nodemailer
Moderate
5 days ago
fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding
npm
fast-uri
Moderate
5 days ago
fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization
npm
fast-uri
Moderate
5 days ago
odf-kit has HTML injection leading to XSS in odsToHtml() via unescaped style attribute values
npm
odf-kit
Moderate
5 days ago
obsidian-tc Bridge tools leak denied-note data via unfiltered sibling fields
npm
obsidian-tc
Moderate
5 days ago
obsidian-tc: Default folder ACL is fail-open; .obsidian plugin secrets are readable by default
npm
obsidian-tc
Moderate
5 days ago
obsidian-tc : Symlink read-ACL scope bypass via lexical path checks
npm
obsidian-tc
Moderate
6 days ago
Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitive
npm
@nuxt/nitro-server, nuxt
Moderate
6 days ago
Electron: SameSite cookie restrictions are not applied to windows opened from links
npm
electron
Moderate
6 days ago
Electron: Pointer lock permission requests can be attributed to the wrong frame
npm
electron
Moderate
6 days ago
Electron: openExternal permission requests can be attributed to the wrong origin
npm
electron
Moderate
6 days ago
Astro: Reflected/Stored XSS via unescaped <script>/<style> tag content in JSX/MDX rendering
npm
astro
Moderate
6 days ago
next.js cache leak across root param values in nested 'use cache' functions
npm
next
Moderate
6 days ago
Nodemailer: Quadratic (O(n^2)) DKIM header unfolding lets a large folded header cause remote denial of service during signing
npm
nodemailer
Moderate
6 days ago
stream-json: FlexAssembler string/RegExp path filters join the full key stack per container start, giving O(depth^2) CPU denial of service
npm
stream-json
Moderate
7 days ago
Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file
npm
vite-plus, @vitest/browser, @vitest/ui
Moderate
7 days ago
Vitest: Code injection via unauthenticated manual mock registration
npm
@vitest/mocker
Moderate
7 days ago
Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix
npm
@vitest/mocker
Moderate
7 days ago
ApostropheCMS: Exposure of Sensitive Information via predictable export filenames
npm
@apostrophecms/import-export
Moderate
7 days ago
OpenClaw: Browser CDP discovery could accept blocked WebSocket URLs
npm
openclaw
Moderate
7 days ago
Electron: HID and USB permission checks can be attributed to the wrong origin
npm
electron
Moderate
7 days ago
ApostropheCMS: POST /api/v1/@apostrophecms/doc/slugTaken discloses existence of private/admin-only content to any authenticated user
npm
apostrophe
Moderate
7 days ago
ApostropheCMS: Stored XSS via Unescaped Widget Style Attribute Serialization
npm
apostrophe
Moderate
7 days ago
ApostropheCMS: Unauthenticated publicApiProjection bypass via search and sort query builders in the public REST API
npm
apostrophe
Moderate
7 days ago
ApostropheCMS: Color field validation bypass allows stored XSS via HTML appended after rgb()/hsl() prefix
npm
apostrophe
Moderate
7 days ago
ApostropheCMS sanitize-html: unbounded recursion when re-sanitizing the fallback of a discarded iframe (stack overflow, nestingLimit not enforced)
npm
sanitize-html
Moderate
7 days ago
ApostropheCMS: Import API bypasses publication roles for protected content
npm
apostrophe, @apostrophecms/import-export
Moderate
7 days ago
ApostropheCMS: Archive duplicate continuation lets contributors overwrite published content
npm
@apostrophecms/import-export
Moderate
7 days ago
ApostropheCMS: Import archives can exhaust server storage and deny service
npm
@apostrophecms/import-export
Moderate
7 days ago
Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine
npm
vite-plus, vite
Moderate
7 days ago
Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance`
npm
vite-plus, vite
Moderate
8 days ago
@angular/common: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)
npm
@angular/common
Moderate
8 days ago
launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors
npm
vite-plus, vite, launch-editor
Moderate
8 days ago
MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service
npm
@modelcontextprotocol/server-legacy, @modelcontextprotocol/express, @modelcontextprotocol/server, @modelcontextprotocol/sdk
Moderate
8 days ago
launch-editor: escapeCmdArgs() omits % escaping on Windows
npm
vite-plus, vite, launch-editor
Moderate
8 days ago
MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies
npm
@modelcontextprotocol/client, @modelcontextprotocol/sdk
Moderate
8 days ago
ApostropheCMS: The general public can access @apostrophecms/user objects via a relationship (viewRole is not applied to the general public)
npm
apostrophe
Moderate
8 days ago
ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring test
npm
@apostrophecms/import-export
Moderate
8 days ago
ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true)
npm
uploadfs
Moderate
8 days ago
ApostropheCMS: Authenticated Object-Level Authorization Bypass in exist-in-locale Reveals Restricted Localized Draft Identifiers
npm
apostrophe
Moderate
8 days ago
ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified document
npm
@apostrophecms/import-export
Moderate
8 days ago
ApostropheCMS: Client-side Prototype Pollution in apos.http.parseQuery leading to DOM-based XSS against authenticated users
npm
apostrophe
Moderate
8 days ago
ApostropheCMS: No Attempt Throttling on Authenticated Password-Change Endpoint Enables Unlimited Current-Password Guessing
npm
apostrophe
Moderate
8 days ago
ApostropheCMS: Incomplete CVE-2026-53606: `meta http-equiv=refresh` `content` still ships `javascript:` / `data:` URLs
npm
sanitize-html
Moderate
8 days ago
ApostropheCMS: Host header controls server-side image fetch origin in @apostrophecms/ai-helper, enabling authenticated SSRF
npm
@apostrophecms/ai-helper
Moderate
8 days ago
ApostropheCMS: Cross-domain session token in URL confers session takeover
npm
@apostrophecms/passport-bridge, apostrophe
Moderate
8 days ago
ApostropheCMS: Unauthenticated unbounded multipart upload → disk-exhaustion DoS
npm
@apostrophecms/form
Moderate
8 days ago
ApostropheCMS: CAPTCHA response token not URL-encoded
npm
@apostrophecms/login-hcaptcha, @apostrophecms/login-recaptcha, @apostrophecms/form
Moderate
8 days ago
ApostropheCMS: Same-parent page reorder in @apostrophecms/page move() re-ranks a restricted parent's children without create authorization
npm
apostrophe
Moderate
8 days ago
ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting <noscript> content render
npm
sanitize-html
Moderate
8 days ago
Hono: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths
npm
hono
Moderate
8 days ago
@angular/platform-server: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)
npm
@angular/platform-server
Moderate
13 days ago
Backstage: Improper access control in backend action invocation
npm
@backstage/backend-defaults
Moderate
13 days ago
Appium: Symlink based Zip Slip in @appium/support ZIP extraction
npm
@appium/support
Moderate
13 days ago
Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes
npm
nuxt-og-image
Moderate
13 days ago
AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity
npm
@adonisjs/http-server
Moderate
20 days ago
AdonisJS: Unencoded route parameters can produce open redirects
npm
@adonisjs/http-server
Moderate
20 days ago
fast-jwt clockTolerance: Infinity silently bypasses both exp and nbf validation (and persists in the verifier cache)
npm
fast-jwt
Moderate
20 days ago
music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master
npm
music-metadata
Moderate
20 days ago
music-metadata: Uncontrolled memory allocation in APEv2 parser
npm
music-metadata
Moderate
20 days ago
music-metadata: ID3v2 tag size not validated before allocation, causing memory exhaustion DoS
npm
music-metadata
Moderate
20 days ago
music-metadata: EBML parser trusts element lengths, allowing memory exhaustion or process abort
npm
music-metadata
Moderate
20 days ago
MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS
npm
mariadb
Moderate
20 days ago
music-metadata: uncatchable process crash parsing a crafted `.dsf` (residual of GHSA-v6c2-xwv6-8xf7)
npm
music-metadata
Moderate
20 days ago
Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates
npm
handlebars
Moderate
20 days ago
LangChain: MongoDBChatMessageHistory query injection can allow cross-session access
npm
@langchain/mongodb
Filter by Severity
Filter by Package
openclaw
301
n8n
74
nocodb
41
hono
41
parse-server
40
ghost
39
electron
35
directus
34
next
33
axios
28
undici
25
flowise
24
apostrophe
20
dompurify
19
nodemailer
19
vite
18
astro
16
sanitize-html
14
tinymce
14
pnpm
14
svelte
13
vm2
12
@openzeppelin/contracts
12
@openzeppelin/contracts-upgradeable
12
mermaid
12
renovate
11
tinymce/tinymce
11
ckeditor4
11
TinyMCE
11
nuxt
11
payload
11
joplin
10
protobufjs
9
angular
9
swagger-ui
9
bootstrap
9
editor.md
8
ip-address
8
@directus/api
8
@sveltejs/kit
8
validator
8
uptime-kuma
8
@backstage/plugin-scaffolder-backend
8
react-router
8
fastify
7
liquidjs
7
org.webjars.npm:jquery-ui
7
trix
7
@apostrophecms/import-export
7
nodebb
7
jquery-ui
7
vite-plus
7
tarteaucitronjs
7
org.webjars.npm:jquery
7
@budibase/server
7
jquery-ui-rails
7
@astrojs/node
7
jQuery.UI.Combined
7
marked
7
jquery
7
@lobehub/chat
6
signalk-server
6
jQuery
6
bootstrap
6
bootstrap
6
webpack-dev-server
6
@asymmetric-effort/specifyjs
6
twbs/bootstrap
6
@evershop/evershop
6
jquery-rails
6
js-yaml
6
matrix-js-sdk
6
jodit
6
org.webjars:bootstrap
6
vega
6
urijs
6
snyk-broker
6
url-parse
6
h3
6
fast-jwt
6
katex
5
@sync-in/server
5
matrix-appservice-irc
5
vditor
5
nuxt-og-image
5
bootstrap-sass
5
bootstrap-sass
5
msgpack5
5
@hono/node-server
5
handlebars
5
qs
5
music-metadata
5
postcss
5
next-auth
5
@aborruso/ckan-mcp-server
5
froala-editor
5
tar
5
lodash
5
markdown-it
4
shescape
4
trigger.dev
4
studiocms
4
apollo-server-core
4
yui
4
lodash-es
4
follow-redirects
4
@haxtheweb/haxcms-nodejs
4
serve
4
@angular/core
4
stream-json
4
jspdf
4
@auth0/nextjs-auth0
4
sillytavern
4
systeminformation
4
bootstrap.sass
4
devalue
4
vega-functions
4
ep_etherpad-lite
4
xmldom
4
@saltcorn/server
4
unleash-server
4
@steipete/summarize
4
clawdbot
4
rsshub
4
@actual-app/sync-server
4
materialize-css
4
network-ai
4
@anthropic-ai/claude-code
4
adm-zip
4
re2
4
fast-uri
4
@builder.io/qwik-city
4
glance
4
n8n-mcp
4
matrix-react-sdk
4
@angular/ssr
4
9router
3
@fastify/static
3
@adonisjs/http-server
3
@vitest/mocker
3
node-forge
3
petite-vue-i18n
3
brace-expansion
3
strapi
3
@excalidraw/excalidraw
3
http-proxy-middleware
3
@backstage/plugin-techdocs-backend
3
statics-server
3
action_text-trix
3
public
3
@nyariv/sandboxjs
3
@nuxt/webpack-builder
3
xlsx
3
mattermost-desktop
3
m-server
3
lodash-rails
3
@angular/compiler
3
express
3
fuxa-server
3
dojo
3
@strapi/strapi
3
langsmith
3
@xmldom/xmldom
3
@cyclonedx/cdxgen
3
showdown
3
valine
3
@jmondi/url-to-png
3
jose-node-esm-runtime
3
sequelize
3
org.webjars.npm:xlsx
3
@materializecss/materialize
3
@ckeditor/ckeditor5-markdown-gfm
3
parse
3
yapi-vendor
3
@perfood/couch-auth
3
mppx
3
flowise-components
3
@pdfme/schemas
3
@payloadcms/next
3
smol-toml
3
serialize-javascript
3
magicmirror
3
lodash-amd
3
moodle/moodle
3
hapi
3
better-auth
3
mysql
3
fast-xml-parser
3
obsidian-tc
3
@backstage/plugin-techdocs-node
3
jose
3
jose-node-cjs-runtime
3
layui
3
@intlify/vue-i18n-core
3
mysql2
3
docsify
3
agents
3
django-tinymce
3
mariadb
3
launch-editor
3
Filter by Repository
https://github.com/directus/directus
24
https://github.com/tinymce/tinymce
14
https://github.com/strapi/strapi
13
https://github.com/OpenZeppelin/openzeppelin-contracts
12
https://github.com/vitejs/vite
11
https://github.com/electron/electron
11
https://github.com/TryGhost/Ghost
10
https://github.com/vercel/next.js
10
https://github.com/ckeditor/ckeditor4
10
https://github.com/laurent22/joplin
10
https://github.com/backstage/backstage
10
https://github.com/jquery/jquery
9
https://github.com/parse-community/parse-server
8
https://github.com/pandao/editor.md
8
https://github.com/FlowiseAI/Flowise
8
https://github.com/swagger-api/swagger-ui
8
https://github.com/vega/vega
7
https://github.com/n8n-io/n8n
7
https://github.com/nocodb/nocodb
7
https://github.com/louislam/uptime-kuma
7
https://github.com/panva/jose
6
https://github.com/nodejs/undici
6
https://github.com/withastro/astro
6
https://github.com/twbs/bootstrap
6
https://github.com/jquery/jquery-ui
6
https://github.com/NodeBB/NodeBB
6
https://github.com/matrix-org/matrix-js-sdk
6
https://github.com/ckeditor/ckeditor5
5
https://github.com/apostrophecms/sanitize-html
5
https://github.com/KaTeX/KaTeX
5
https://github.com/lobehub/lobe-chat
5
https://github.com/matrix-org/matrix-appservice-irc
5
https://github.com/nextauthjs/next-auth
5
https://github.com/unshiftio/url-parse
5
https://github.com/honojs/hono
5
https://github.com/evershopcommerce/evershop
5
https://github.com/matrix-org/matrix-react-sdk
4
https://github.com/markedjs/marked
4
https://github.com/mermaid-js/mermaid
4
https://github.com/DIYgod/RSSHub
4
https://github.com/AmauriC/tarteaucitron.js
4
https://github.com/keystonejs/keystone
4
https://github.com/apollographql/apollo-server
4
https://github.com/basecamp/trix
4
https://github.com/Dogfalo/materialize
4
https://github.com/aws/aws-cdk
4
https://github.com/cure53/DOMPurify
3
https://github.com/haxtheweb/issues
3
https://github.com/postcss/postcss
3
https://github.com/nuxt/nuxt
3
https://github.com/validatorjs/validator.js
3
https://github.com/medialize/uri.js
3
https://github.com/vanessa219/vditor
3
https://github.com/follow-redirects/follow-redirects
3
https://github.com/docsifyjs/docsify
3
https://github.com/nodemailer/nodemailer
3
https://github.com/sequelize/sequelize
3
https://github.com/cloudflare/workers-sdk
3
https://github.com/intlify/vue-i18n
3
https://github.com/jarofghosts/glance
3
https://github.com/sebhildebrandt/systeminformation
3
https://github.com/jasonraimondi/url-to-png
3
https://github.com/hapijs/hapi
3
https://github.com/froala/wysiwyg-editor
3
https://github.com/YMFE/yapi
3
https://github.com/ionicabizau/parse-url
3
https://github.com/angular/angular.js
3
https://github.com/xCss/Valine
3
https://github.com/medialize/URI.js
3
https://github.com/saltcorn/saltcorn
3
https://github.com/Escape-Technologies/graphql-armor
3
https://github.com/renovatebot/renovate
3
https://github.com/lodash/lodash
3
https://github.com/eclipse-theia/theia
3
https://github.com/mde/ejs
2
https://github.com/caolan/forms
2
https://github.com/sidorares/node-mysql2
2
https://github.com/karma-runner/karma
2
https://github.com/josdejong/jsoneditor
2
https://github.com/expressjs/express
2
https://github.com/Vanessa219/vditor
2
https://github.com/MrRio/jsPDF
2
https://github.com/i18next/i18next
2
https://github.com/better-auth/better-auth
2
https://github.com/OpenC3/cosmos
2
https://github.com/ai/nanoid
2
https://github.com/matrix-org/matrix-appservice-bridge
2
https://github.com/highlightjs/highlight.js
2
https://github.com/Finastra/finastra-nodejs-libs
2
https://github.com/koajs/koa
2
https://github.com/vriteio/vrite
2
https://github.com/guardian/html-janitor
2
https://github.com/psi-4ward/psitransfer
2
https://github.com/jameswlane/status-board
2
https://github.com/erxes/erxes
2
https://github.com/pnpm/pnpm
2
https://github.com/socketio/socket.io
2
https://github.com/summernote/summernote
2
https://github.com/koush/scrypted
2
https://github.com/pugjs/pug
2
https://github.com/auth0/nextjs-auth0
2
https://github.com/apostrophecms/apostrophe
2
https://github.com/sass/node-sass
2
https://github.com/manuelstofer/json-pointer
2
https://github.com/rvagg/bl
2
https://github.com/ua-parser/uap-core
2
https://github.com/yahoo/serialize-javascript
2
https://github.com/gatsbyjs/gatsby
2
https://github.com/webpack/webpack-dev-server
2
https://github.com/mozilla/nunjucks
2
https://github.com/sveltejs/svelte
2
https://github.com/cloudflare/workers-oauth-provider
2
https://github.com/axios/axios
2
https://github.com/Urigo/graphql-mesh
2
https://github.com/zcaceres/markdownify-mcp
2
https://github.com/VulnSageAgent/PoCs
2
https://github.com/braintree/sanitize-url
2
https://github.com/vendure-ecommerce/vendure
2
https://github.com/getsentry/sentry-javascript
2
https://github.com/xmldom/xmldom
2
https://github.com/AhmedAdelFahim/express-xss-sanitizer
2
https://github.com/auth0/node-jsonwebtoken
2
https://github.com/excalidraw/excalidraw
2
https://github.com/chimurai/http-proxy-middleware
2
https://github.com/socketio/engine.io
2
https://github.com/moxiecode/plupload
2
https://github.com/umbraco/Umbraco-CMS
2
https://github.com/freshfish-hust/my-cves
2
https://github.com/Stuk/jszip
2
https://github.com/firebase/firebase-js-sdk
2
https://github.com/request/request
2
https://github.com/dahlia/fedify
2
https://github.com/zeit/next.js
2
https://github.com/facebook/react
2
https://github.com/openpgpjs/openpgpjs
2
https://github.com/nasa/openmct
2
https://github.com/keycloak/keycloak-nodejs-connect
2
https://github.com/GoogleChrome/rendertron
2
https://github.com/payloadcms/payload
2
https://github.com/parse-community/Parse-SDK-JS
2
https://github.com/nearform/fast-jwt
2
https://github.com/chocobozzz/peertube
2
https://github.com/jellyfin/jellyfin-web
2
https://github.com/punkave/sanitize-html
2
https://github.com/auth0/lock
2
https://github.com/isaacs/node-tar
2
https://github.com/mysqljs/mysql
2
https://github.com/nestjs/nest
2
https://github.com/givanz/VvvebJs
2
https://github.com/kjur/jsrsasign
2
https://github.com/digitalbazaar/forge
2
https://github.com/quilljs/quill
2
https://github.com/google/closure-library
2
https://github.com/fastify/fastify
2
https://github.com/salesforce/tough-cookie
2
https://github.com/adobe/css-tools
2
https://github.com/node-red/node-red-dashboard
1
https://github.com/readthedocs/readthedocs.org
1
https://github.com/decaporg/decap-cms
1
https://github.com/PrismJS/prism
1
https://github.com/ericnorris/striptags
1
https://github.com/Lumieducation/H5P-Nodejs-library
1
https://github.com/nhn/tui.grid
1
https://github.com/mongodb/js-bson
1
https://github.com/meteor/meteor
1
https://github.com/layui/layui
1
https://github.com/diegohaz/querymen
1
https://github.com/epeli/underscore.string
1
https://github.com/fastify/fastify-reply-from
1
https://github.com/node-fetch/node-fetch
1
https://github.com/surveyjs/survey-creator
1
https://github.com/unjs/ipx
1
https://github.com/antfu/utils
1
https://github.com/monsterkodi/sds
1
https://github.com/sparksuite/simplemde-markdown-editor
1
https://github.com/jquery-validation/jquery-validation
1
https://github.com/diegohaz/bodymen
1
https://github.com/ethanent/phin
1
https://github.com/alchemyplatform/aa-sdk
1
https://github.com/snyk/broker
1
https://github.com/duzun/URL.js
1
https://github.com/highlight/highlight
1
https://github.com/vercel/ms
1
https://github.com/brianloveswords/base64url
1
https://github.com/jaredly/hexo-admin
1
https://github.com/morrisjs/morris.js
1
https://github.com/danang-id/simple-crypto-js
1
https://github.com/matthewmueller/dom-iterator
1
https://github.com/jonschlinkert/remarkable
1
https://github.com/ibmdb/node-ibm_db
1
https://github.com/quasarframework/quasar-ui-qmarkdown
1
https://github.com/junosuarez/url-relative
1
https://github.com/visjs/vis-timeline
1
https://github.com/claviska/jquery-minicolors
1
https://github.com/PebbleRoad/glossarizer
1
https://github.com/vitaly-t/pg-promise
1
https://github.com/mbloch/mapshaper
1
https://github.com/microlinkhq/metascraper
1
https://github.com/Formstone/Formstone
1