npm98Exceptionalhealth index

cure53/DOMPurifyDOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
JavaScript · TypeScript★ 17.4K↓ 227M/moSep 16, 2026
crates.io96Exceptionalhealth index

AFLplusplus/LibAFLAdvanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...
Rust★ 2,640↓ 45.3K/moSep 17, 2026
NuGet91Excellenthealth index
C#★ 12KOct 13, 2026
PyPI90Excellenthealth index

tox-dev/turbohtmlA fast, fully typed HTML toolkit for Python. Escape, unescape, parse, select, and serialize HTML from one library, powered by a C-accelerated core.
C · Python★ 20↓ 30.3K/moOct 1, 2026
npm · RubyGems88Excellenthealth index
TypeScript · C#★ 112↓ 14.2K/moSep 12, 2026
RubyGems87Excellenthealth index
Ruby · Shell★ 15Sep 5, 2026
npm86Excellenthealth index
TypeScript★ 595↓ 23.1M/moAug 27, 2026
PyPI84Excellenthealth index
Python · JavaScript · CSS★ 48↓ 12.7K/moOct 19, 2026
crates.io83Excellenthealth index
Rust★ 1,768↓ 1.2M/moSep 6, 2026
NuGet83Excellenthealth index
C#★ 1,708Sep 11, 2026
Packagist78Goodhealth index
PHP★ 34↓ 2,849/moSep 5, 2026
crates.io77Goodhealth index

null8626/decancerA library that removes common unicode confusables/homoglyphs from strings.
Rust · C★ 131↓ 127.3K/moSep 18, 2026
npm · PyPI73Goodhealth index
JavaScript · Python★ 10↓ 126.9K/moSep 5, 2026

ExorTek/nosql-sanitizenosql-sanitize is a lightweight and blazing-fast suite of tools designed to prevent NoSQL Injection attacks in Node.js applications. It recursively sanitizes user-supplied data to remove characters and patterns (like $ and control characters) used in malicious MongoDB queries.
JavaScript★ 7↓ 8,516/moSep 15, 2026
crates.io67Goodhealth index
Rust★ 433↓ 31.2K/moSep 17, 2026
crates.io65Goodhealth index
Rust · Shell★ 502↓ 215.6K/moSep 17, 2026
crates.io65Goodhealth index

sebastienrousseau/mdx-genAST-first Markdown → HTML library for Rust. Ships with custom blocks, class-based syntax highlighting, a hardened sanitizer, table of contents, streaming output, plain-text extraction, and client-side mermaid diagrams.
Rust★ 3↓ 2,850/moSep 13, 2026
Packagist63Moderatehealth index

symfony/html-sanitizerProvides an object-oriented API to sanitize untrusted HTML input for safe insertion into a document's DOM.
PHP★ 281↓ 4.9M/moAug 27, 2026
Hex60Moderatehealth index

mishka-group/guarded_structGuardedStruct macro allows to build Structs that provide you with a number of important options Validation, Sanitizing, Constructor
Elixir★ 33↓ 5,983/moSep 9, 2026
RubyGems56Moderatehealth index
Ruby★ 10Oct 12, 2026
npm51Moderatehealth index

NaturalIntelligence/is-unsafeZero-dependency, DOM-free, pure predicate for detecting unsafe strings across HTML, XML, SVG, SQL, SHELL, NOSQL, and REGEX contexts
JavaScript★ 1↓ 66.7M/moAug 27, 2026
NuGet50Moderatehealth index
C#★ 69Sep 16, 2026
Go · npm50Moderatehealth index

d3rty/jsonFlexible JSON decoding for Go — gracefully handling schema variations and forgiving mistakes.
Go★ 0Oct 20, 2026
crates.io44Weakhealth index
Rust★ 21↓ 2,850/moSep 18, 2026
crates.io35Weakhealth index
Rust★ 38↓ 833.6K/moOct 13, 2026
Go★ 0Sep 19, 2026