Liran Tal (@lirantal)
github

lirantal

Twitter logo Share LinkedIn logo Share Facebook logo Share

Top repositories

1

dockly

Immersive terminal interface for managing docker containers and services
JavaScript
3,787
star
2

nodejs-cli-apps-best-practices

The largest Node.js CLI Apps best practices list โœจ
3,502
star
3

awesome-nodejs-security

Awesome Node.js Security resources
2,723
star
4

is-website-vulnerable

finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
JavaScript
1,933
star
5

npq

๐ŸŽ–safely* install packages with npm or yarn by auditing them as part of your install process
JavaScript
917
star
6

lockfile-lint

Lint an npm or yarn lockfile to analyze and detect security issues
JavaScript
784
star
7

daloradius

daloRADIUS is an advanced RADIUS web management application for managing hotspots and general-purpose ISP deployments. It features user management, graphical reporting, accounting, a billing engine, and integrates with OpenStreetMap for geolocation. The system is based on FreeRADIUS with which it shares access to the backend database.
PHP
649
star
8

awesome-opensource-israel

A curated list of Israeli-made projects, events, and individuals
367
star
9

cypress-social-logins

Cypress authentication flows using social network providers
JavaScript
232
star
10

express-version-route

A Node.js express middleware that implements API versioning for route controllers
JavaScript
91
star
11

essential-nodejs-security-book

Documentation for Essential Node.js Security
JavaScript
79
star
12

awesome-contract-testing

Awesome resources for Consumer-Driven Contract Testing
76
star
13

eslint-plugin-anti-trojan-source

ESLint plugin to detect and stop Trojan Source attacks
JavaScript
69
star
14

detect-secrets

A developer-friendly secrets detection tool for CI and pre-commit hooks based on Yelp's detect-secrets
JavaScript
45
star
15

anti-trojan-source

Detect trojan source attacks that employ unicode bidi attacks to inject malicious code
JavaScript
40
star
16

licenseye

Node.js CLI tool to visualize an aggregate list of your dependencies' licenses
JavaScript
38
star
17

create-node-lib

Scaffold a batteries-included Node.js library project with docs, tests, semantic releases and more
JavaScript
31
star
18

pie-my-vulns

Visualize your project security vulnerabilities as a pie chart in the terminal
JavaScript
24
star
19

codeigniter-menu

Menu Navigation extension for CodeIgniter PHP framework
PHP
19
star
20

women-of-open-source-israel

WOSI - Women of Open Source Israel ๐Ÿ‡ฎ๐Ÿ‡ฑ
19
star
21

learning-http-security-headers-book

Hands-on practical use of HTTP security headers as browser security controls to help secure web applications
18
star
22

express-security-txt

A Node.js middleware for Express that implements Security.txt - A Method for Web Security Policies
JavaScript
18
star
23

enterprise-applications-patterns

Collection of enterprise application patterns
17
star
24

twiks

Twitter awesomeness browser extension
JavaScript
17
star
25

cron-to-quartz

Node.js library to convert unix or linux CRON syntax to Quartz Scheduler
JavaScript
16
star
26

organising-awesome-meetups

Do you want to start a meetup group but you don't know exactly where to start? You're in the right place!
16
star
27

Riess.js

Riess.js is a de-coupled full stack JavaScript application framework
JavaScript
16
star
28

typeform-client

A friendlier Typeform Node.js API client
JavaScript
16
star
29

agilemanager-api

HPE's Agile Manager client API module for NodeJS
JavaScript
14
star
30

docker-travis-cli

Travis CLI in a docker container (encrypt, lint, env, monitor)
Dockerfile
12
star
31

asciidoc-book-starter

A template repository that is ready to author and publish books written in AsciiDoc format
TypeScript
12
star
32

express-version-request

versions an incoming request to Express based on header or URL
JavaScript
11
star
33

smtp-pipe

Pipe any mail envelope input and output forward as SMTP client
JavaScript
10
star
34

nodepulse

NodePulse is a live Node.js dashboard
Vue
9
star
35

js-vulns-detector

Inject JS to the DOM to find vulnerable JavaScript libraries
JavaScript
9
star
36

github-actions-best-practices-for-node.js

GitHub Actions Best Practices for Node.js applications
9
star
37

docker-images-security-workshop

Docker Image Security Workshop for Best Practices
Dockerfile
9
star
38

cwe-sdk

A Common Weakness Enumeration (CWE) Node.js SDK compliant with MITRE / CAPEC
JavaScript
9
star
39

public-speaking

Liran Tal's portfolio of public speaking engagements
9
star
40

nodejs-docker-image-best-practices

Best practices for building and maintaining Node.js docker images
Dockerfile
8
star
41

Manager-README

Liran Tal Manager README
7
star
42

opn-shell

cross-platform execution of command line programs in shells
JavaScript
6
star
43

dependency-confusion-demo

Demo for practicing Dependency Confusion supply chain attacks
JavaScript
6
star
44

vault

A Node.js API service that fetches files and checks for virus or malware
JavaScript
6
star
45

public-speaking-archive

Liran Tal's repository for public speaking
Liquid
6
star
46

slides-react-security-lightning-talk-2022

Slides for talk: How React Applications Get Hacked in the Real World
HTML
6
star
47

typeform-export-excel

Export a Typeform survey questionnaire to an Excel format
JavaScript
6
star
48

gulp-mraudit

Mr Audit is a Gulp plugin to audit JavaScript code for security related static code analysis
JavaScript
6
star
49

docker-detect-secrets

A docker image for Yelp's docker-secrets python application
Dockerfile
5
star
50

nodejssecurity-headers-hsts

Exercise resources about HTTP security headers in Node.js and Express applications
JavaScript
5
star
51

snykcon

A CLI for Snyk's SnykCon 2020 DevSecOps and Developer-first security conference
JavaScript
5
star
52

radiusense

RADIUS monitoring and statistics reporting for FreeRADIUS-based deployments (it's a pingdom for RADUIS servers)
JavaScript
5
star
53

react-suspended-vulnerable-application

React Suspended is an educational frontend application riddled with security vulnerabilities
CSS
5
star
54

nodejssecurity-mixed-content

Exercise resources about browser security controls
JavaScript
5
star
55

slides-react-security-2022

Slides for talk: How React Applications Get Hacked in the Real World
Vue
5
star
56

pact-workshop-consumer-nodejs

Pact Workshop - Consumer in Node.js
JavaScript
5
star
57

security-report

Report a security vulnerability
JavaScript
5
star
58

Proactive-Controls-for-JavaScript-Supply-Chain-Security

Proactive NPM Controls for Supply Chain Security
5
star
59

operations-orchestration-api

HPE's Operations Orchestration client API module for NodeJS
JavaScript
5
star
60

Dependency-Frost

Dependency Frost is an educational platform game to promote awareness of security in open source dependencies
JavaScript
5
star
61

snyk-vs-npm-audit

This repository will contain benchmark comparison between Snyk and npm audit, based on personal observation, as objective as possible
4
star
62

public-speaking-jekyll

A starter template for Public Speaking templates ๐ŸŽค ๐Ÿ’ซ
Ruby
4
star
63

lockfile-prune

Lockfiles have needs too and this package takes care of them
JavaScript
4
star
64

nodejssecurity-headers-xframe-innocent

Exercise resources about HTTP security headers in Node.js and Express applications
JavaScript
4
star
65

pp-minimist-poc

Prototype Pollution in minimist
JavaScript
4
star
66

aws-s3-utils

Node.js library providing high-level wrapper for convenient AWS S3 capabilities
JavaScript
4
star
67

lirantaldotcom

Liran Tal's lirantal.com website v2
Astro
4
star
68

bazz

๐Ÿš€๐Ÿ“ฉ effortless remote push notifications for the CLI
JavaScript
4
star
69

serverless-goof-azure

Oreilly's Serverless security example application - serverless-goof todo app
JavaScript
4
star
70

no-secrets-env-vars-website

SAY NO TO SECRETS IN ENVIRONMENT VARIABLES
Vue
4
star
71

eslint-plugin-security

ESLint collection of curated security rules for static code analysis linter
JavaScript
3
star
72

swagger-lint-api

Linter for a Swagger JSON API spec
JavaScript
3
star
73

picture-tuber

render images on the terminal (forked from substack/picture-tube)
JavaScript
3
star
74

bazz-serverless-firebase

JavaScript
3
star
75

presentation-terminal-great-again

JavaScript
3
star
76

licensewatch

Recurses a given node_modules directory to fetch all npm package licenses
JavaScript
3
star
77

githubs

CLI to manage GitHub repositories in bulk
JavaScript
3
star
78

smtp-watch

smtp-watch will create an smtp server for incoming mail connections, and display these e-mails on a web page
JavaScript
3
star
79

fastify-dotenv-envschema-example

A Fastify example codebase for using dotenv with env-schema wrapper
JavaScript
3
star
80

terminal-detect

CLI to detect terminal support for properties like color, unicode and others
JavaScript
3
star
81

cwe-tool

A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.
JavaScript
3
star
82

fastify-supertokens-example

A Node.js Fastify microservice that uses SuperTokens for authentication
JavaScript
3
star
83

techies

A web app that shows and compares technology stacks and trends around the world
JavaScript
3
star
84

goof-container-breaking-in

A Snyk-based goof application to demonstrate breaking into containers
JavaScript
3
star
85

012cable

A QT-based PPTP dialer for Linux users of the 012 Israel ISP
Makefile
2
star
86

operations-orchestration-backup

NodeJS Backup Tool (Import/Export) for HPE's Operations Orchestration
JavaScript
2
star
87

atombundles

Easily install all packages required to create an Atom Bundle for a Language or Platform
TypeScript
2
star
88

speak-easy

The source-code for the speak|easy website which promotes inspirational and information public speaking tips
Vue
2
star
89

daloradius-web

daloRADIUS official website
CSS
2
star
90

bazz-frontend

JavaScript
2
star
91

php-sdk

PHP SDK for the Facebook API
PHP
2
star
92

snyk-or-snick

Race your friend to the Snyk palace
JavaScript
2
star
93

slides-supply-chain-security

Vue
2
star
94

create-node-sandbox

Spin-off an isolated Node.js environment using Docker containers
JavaScript
2
star
95

lirantal

2
star
96

ecosystem-lockfiles

An up to date list of ecosystem, their package managers and traits of theirs with regards to software security
2
star
97

vulnerable-c-and-cpp

A reference Git repository to demonstrate vulnerable C and C++ patterns in code
C
2
star
98

github-action-pr-title-update-branch

A GitHub Action that updates the PR title with information about the base branch it wants to merge to
JavaScript
1
star
99

pkg-probe

Vue
1
star
100

techies-meetup-crawler

Crawling meetup.com to retrieve data
JavaScript
1
star