New in this version: Added Sanitizer — A high-performance, strict HTML and XSS sanitizer for scrubbing untrusted user input.

New in v0.5.14: Added createRaspMiddleware — runtime application self-protection middleware for Express.

🚀 Overview

@typepurify/security offers zero-dependency tools for preventing sensitive data leaks, neutralizing payload risks, and validating high-security tokens directly in your application boundary.

📦 Installation

npm install @typepurify/security

🛠 Features & Utility Functions

1. In-Memory Secret Detection

Scans nested JSON payloads or strings for sensitive patterns before sending over the network.

import { detectSecrets } from '@typepurify/security';

const payload = { user: 'Alice', token: 'sample-token' };
const leaks = detectSecrets(payload);

2. Input Sanitization

import { sanitizeUrl, sanitizeFilename, escapeHtml, stripHtmlTags } from '@typepurify/security';

const url = sanitizeUrl('https://example.com');
const filename = sanitizeFilename('user_upload.png');
const safeHtml = escapeHtml('<div>');
const stripped = stripHtmlTags('<p><b>Hi</b></p>', { allowedTags: ['b'] }); // (v0.5.11 🚀)

3. JWT Inspection

Inspect payloads and expiration times securely on the client-side.

import { inspectJwt, isJwtExpired } from '@typepurify/security';

const token = inspectJwt(myJwtString);
const expired = isJwtExpired(myJwtString);

4. Data Masking & Validation

• maskIPAddress('192.168.1.10') => 192.168.1.***
• maskEmail('[email protected]') => us***@example.com
• isStrongPassword('Password123!', { minLength: 8 })
• isSqlInjectionAttempt("SELECT * FROM users")
• enforceCsrfToken(reqToken, sessionToken)

5. Secure Random String Generation

import { generateRandomString } from '@typepurify/security';

const token = generateRandomString(32);

🆕 New in v0.5.10

JwtKeyRotator — JWT Signing Key Rotation

Manages JWT signing key lifecycle with previous-key tracking for zero-downtime rotation.

import { JwtKeyRotator } from '@typepurify/security';

const rotator = new JwtKeyRotator('secret-v1');
rotator.rotate('secret-v2');
rotator.getActiveKey(); // "secret-v2"
rotator.getPreviousKey(); // "secret-v1" (still valid for in-flight tokens)

createRaspMiddleware() — Runtime Application Self-Protection

HTTP middleware that scans requests for SQL injection and XSS attack patterns.

import { createRaspMiddleware } from '@typepurify/security';

app.use(createRaspMiddleware()); // Express-compatible
// Blocks requests with DROP TABLE, <script>, etc.

🛡️ License

MIT © Vallarasu Kanthasamy

0.5.10 Updates

Includes new features.