PyPI92Excellenthealth index

EmilStenstrom/justhtmlA pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.
Python★ 1,156↓ 75.6K/moSep 11, 2026
npm88Excellenthealth index
JavaScript★ 23.7K↓ 97.7M/moSep 17, 2026
npm86Excellenthealth index

humanspeak/svelte-markdown📝 Markdown and HTML renderer for Svelte 5 — built for streaming AI agent output from Claude Code, ChatGPT, and agentic workflows. XSS-safe defaults, token caching, TypeScript types.
TypeScript · Svelte★ 135↓ 124.3K/moSep 10, 2026
PyPI · npm · crates.io84Excellenthealth index

redact-secret/redact-secretDetect and redact secrets before they reach logs, storage, or LLM context. Deterministic Rust core for JavaScript, Python, Rust, and WebAssembly.
Rust · Python · JavaScript★ 7↓ 16.7K/moOct 10, 2026
crates.io83Excellenthealth index
Rust★ 1,768↓ 1.2M/moSep 6, 2026
crates.io80Excellenthealth index
Rust★ 676↓ 1.2M/moSep 13, 2026
NuGet · npm75Goodhealth index

AlbusKavaliro/AntiXssInofficial port of https://web.archive.org/web/20180126072328/http://wpl.codeplex.com/ to .NET Standard 2.0
C#★ 13Sep 18, 2026

httptape/httptapeHTTP traffic recording, sanitization, and replay library for Go. Record real API interactions, automatically redact secrets and PII, replay as mock server. Embeddable, zero dependencies, sanitize-on-write.
Go★ 2Oct 19, 2026
crates.io75Goodhealth index

valkyoth/sanitizationA dependency-free, no_std Rust crate for secure in-memory secret handling, constant-time checks, and automated clear-on-drop zeroization.
Rust · Python★ 1↓ 8,660/moSep 11, 2026
Packagist · PyPI73Goodhealth index

infocyph/ReqShieldFast, modern PHP request validation and sanitization. Schema-based rules, fail-fast execution, intelligent batching, and 100+ built-in validation rules.
PHP★ 1↓ 2,788/moAug 25, 2026

cplieger/runesafeRune-safety policy for untrusted text bound for logs, JSON, or rendered output. Stdlib-only Go.
Go★ 0Sep 13, 2026

Arakiss/vestigLeave your mark. A modern, runtime-agnostic structured logging library with automatic PII sanitization and context propagation.
TypeScript · MDX★ 8↓ 1,457/moSep 18, 2026

ExorTek/nosql-sanitizenosql-sanitize is a lightweight and blazing-fast suite of tools designed to prevent NoSQL Injection attacks in Node.js applications. It recursively sanitizes user-supplied data to remove characters and patterns (like $ and control characters) used in malicious MongoDB queries.
JavaScript★ 7↓ 8,516/moSep 15, 2026
RubyGems67Goodhealth index
Ruby★ 2,057Sep 12, 2026

flare-collection/flare-redactZero-dependency TypeScript secret and PII redaction for any SDK, logs, HTTP, LLM prompts, and scoped MCP tool boundaries.
TypeScript · JavaScript · Python★ 48↓ 5,615/moSep 18, 2026
Python★ 0↓ 5,108/moOct 21, 2026
Packagist62Moderatehealth index
PHP★ 157↓ 6,385/moSep 8, 2026
npm59Moderatehealth index

leizongmin/js-xssSanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
HTML · JavaScript★ 5,311↓ 21.6M/moSep 17, 2026
crates.io57Moderatehealth index

Govcraft/mtiGenerates human-readable, prefixed, and globally unique identifiers (based on the TypeID spec) for Rust. Improves clarity, type-safety, debugging, and identifier management in your applications.
Rust★ 19↓ 455K/moOct 21, 2026
Shell · PowerShell★ 3,912Sep 13, 2026
Packagist54Moderatehealth index

TYPO3/html-sanitizerHTML sanitizer, written in PHP, aiming to provide XSS-safe markup based on explicitly allowed tags, attributes and values.
PHP★ 29↓ 356.5K/moSep 12, 2026
PyPI51Moderatehealth index
Python★ 296Sep 10, 2026
Go★ 6,201Oct 21, 2026
JavaScript · TypeScript★ 552↓ 53.6M/moSep 15, 2026
Packagist · crates.io44Weakhealth index
Rust★ 1↓ 0/moSep 14, 2026
Go★ 2Sep 20, 2026

microcosm-cc/bluemondaybluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
Go★ 3,719Sep 14, 2026
NuGet29At Riskhealth index
C#★ 0Oct 10, 2026