{"_id":"@blackhat955/ultimate-security-pack","name":"@blackhat955/ultimate-security-pack","dist-tags":{"latest":"1.0.0"},"versions":{"1.0.0":{"name":"@blackhat955/ultimate-security-pack","version":"1.0.0","description":"A comprehensive security package for Node.js applications, aggregating best-in-class security features.","main":"src/index.js","scripts":{"test":"node test.js"},"keywords":["security","helmet","xss","rate-limit","csrf","cors","validation","ssrf"],"author":{"name":"blackhat955"},"license":"ISC","repository":{"type":"git","url":"git+https://github.com/blackhat955/security.git"},"dependencies":{"cors":"^2.8.5","csrf-csrf":"^3.0.6","express":"^4.21.2","file-type":"^16.5.4","helmet":"^8.0.0","ipaddr.js":"^2.2.0","jsonwebtoken":"^9.0.2","rate-limiter-flexible":"^5.0.4","uuid":"^11.0.5","validator":"^13.12.0","xss":"^1.0.15"},"_id":"@blackhat955/ultimate-security-pack@1.0.0","gitHead":"8b6558479f54ed33b6957cd6910c7ebbf44c5dcb","bugs":{"url":"https://github.com/blackhat955/security/issues"},"homepage":"https://github.com/blackhat955/security#readme","_nodeVersion":"24.3.0","_npmVersion":"11.4.2","dist":{"integrity":"sha512-a8jj4MOYRf1pL45aMVSg+lmJcfWcP+sjQ+qZSAwrVajNb9azTeg/GG1SHT1Cgmq6YtRTf94lGhCCJssrwMFOFw==","shasum":"5c68797c26f3956241d0a43b03c7d9bb1120f5e4","tarball":"https://registry.npmjs.org/@blackhat955/ultimate-security-pack/-/ultimate-security-pack-1.0.0.tgz","fileCount":19,"unpackedSize":21005,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIQDw1B1qE9GbeUDIm2DEZUyNKjIH/MyP+IQEr56NMH3DOgIgTxvFt8iEIDl4XZeIRkLK48gj22IMVcv8SKBMkB4UCIs="}]},"_npmUser":{"name":"blackhat955","email":"earthh17@gmail.com"},"directories":{},"maintainers":[{"name":"blackhat955","email":"earthh17@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/ultimate-security-pack_1.0.0_1770275896394_0.46835510021243953"},"_hasShrinkwrap":false}},"time":{"created":"2026-02-05T07:18:16.313Z","1.0.0":"2026-02-05T07:18:16.545Z","modified":"2026-02-05T07:18:16.757Z"},"maintainers":[{"name":"blackhat955","email":"earthh17@gmail.com"}],"description":"A comprehensive security package for Node.js applications, aggregating best-in-class security features.","homepage":"https://github.com/blackhat955/security#readme","keywords":["security","helmet","xss","rate-limit","csrf","cors","validation","ssrf"],"repository":{"type":"git","url":"git+https://github.com/blackhat955/security.git"},"author":{"name":"blackhat955"},"bugs":{"url":"https://github.com/blackhat955/security/issues"},"license":"ISC","readme":"# Ultimate Security Pack\n\nA comprehensive security package for Node.js applications, aggregating best-in-class security features.\n\n## Installation\n\n```bash\nnpm install @blackhat955/ultimate-security-pack\n```\n\n## Features\n\n- **Security Headers**: Wrapper around `helmet`.\n- **XSS Protection**: Input sanitization and middleware using `xss`.\n- **Rate Limiting**: Configurable rate limiter using `rate-limiter-flexible`.\n- **Input Validation**: Common validators (email, strong password, etc.) using `validator`.\n- **Injection Protection**: SQL and NoSQL sanitization helpers.\n- **CSRF Protection**: Token generation and validation using `csrf-csrf`.\n- **CORS Hardening**: Allowlist support and strict defaults.\n- **Auth Hardening**: Cookie and JWT helpers.\n- **Request Limits**: Strict body parsing limits.\n- **File Upload Security**: MIME sniffing and extension validation.\n- **Logging/Audit**: Security-focused logger with redaction.\n- **Bot Protection**: Basic user-agent blocking.\n- **SSRF Protection**: URL validation and private IP blocking.\n- **Open Redirect Guard**: Safe redirect middleware.\n- **Cache Control**: Strict headers for sensitive routes.\n- **Security.txt**: Serve well-known security files.\n\n## Usage\n\n### 1. Security Headers (Helmet)\n\n```javascript\nconst express = require('express');\nconst { headers } = require('@blackhat955/ultimate-security-pack');\nconst app = express();\n\napp.use(headers());\n```\n\n### 2. XSS Protection\n\n```javascript\nconst { xss } = require('@blackhat955/ultimate-security-pack');\napp.use(xss.xssMiddleware());\n```\n\n### 3. Rate Limiting\n\n```javascript\nconst { ratelimit } = require('@blackhat955/ultimate-security-pack');\napp.use(ratelimit({ points: 10, duration: 1 }));\n```\n\n### 4. CORS Hardening\n\n```javascript\nconst { cors } = require('@blackhat955/ultimate-security-pack');\n\napp.use(cors({\n  allowedOrigins: ['https://example.com'],\n  onBlock: (origin) => console.log(`Blocked origin: ${origin}`)\n}));\n```\n\n### 5. Auth Hardening\n\n```javascript\nconst { auth } = require('@blackhat955/ultimate-security-pack');\n\n// Cookie options\nres.cookie('session', 'value', auth.secureCookieOptions());\n\n// JWT Validation\ntry {\n  const decoded = auth.validateToken(token, 'secret');\n} catch (err) {\n  // invalid token\n}\n```\n\n### 6. Request Limits\n\n```javascript\nconst { requestLimits } = require('@blackhat955/ultimate-security-pack');\n\n// Applies strict json/urlencoded limits\napp.use(requestLimits({ jsonLimit: '10kb' }));\n```\n\n### 7. File Upload Security\n\n```javascript\nconst { fileUpload } = require('@blackhat955/ultimate-security-pack');\n\n// Check buffer mime type\nconst isValid = await fileUpload.validateFileContent(fileBuffer);\n\n// Check extension\nconst isExtValid = fileUpload.validateExtension('image.jpg');\n```\n\n### 8. Logging (Audit)\n\n```javascript\nconst { logging } = require('@blackhat955/ultimate-security-pack');\n\napp.use(logging.middleware()); // Adds correlation ID\n\nlogging.log('login-failed', 'Invalid password for user', { \n  user: 'admin', \n  password: 'secret_password_redacted' \n});\n```\n\n### 9. Bot Protection\n\n```javascript\nconst { botProtection } = require('@blackhat955/ultimate-security-pack');\n\napp.use(botProtection({ \n  blockUserAgents: ['curl', 'python'],\n  onBlock: (ip, ua) => console.log(`Blocked bot ${ua} from ${ip}`)\n}));\n```\n\n### 10. SSRF Protection\n\n```javascript\nconst { ssrf } = require('@blackhat955/ultimate-security-pack');\n\nif (ssrf.validateUrl(userInputUrl)) {\n  // Safe to fetch\n}\n```\n\n### 11. Open Redirect Guard\n\n```javascript\nconst { openRedirect } = require('@blackhat955/ultimate-security-pack');\n\napp.use(openRedirect.safeRedirect({ allowedHosts: ['example.com'] }));\n\n// Now res.redirect() checks the URL\nres.redirect(userInputUrl);\n```\n\n### 12. Cache Control (Sensitive Routes)\n\n```javascript\nconst { cacheControl } = require('@blackhat955/ultimate-security-pack');\n\napp.get('/profile', cacheControl(), (req, res) => {\n  res.json({ user: 'data' });\n});\n```\n\n### 13. Security.txt & Robots.txt\n\n```javascript\nconst { securityTxt } = require('@blackhat955/ultimate-security-pack');\n\napp.use(securityTxt.securityTxt({ contact: 'mailto:sec@example.com' }));\napp.use(securityTxt.robotsTxt());\n```\n\n## License\n\nISC\n","readmeFilename":"README.md","_rev":"1-051f53aebfa4dc4d96eb8d356b29f03d"}