🥇 A small JavaScript library to lazy-load almost anything. Defer.js is dependency-free, efficient, and optimized for Web Vitals.

OpenBSD unveil(2) like function in Linux using Landlock

Cross-browser ShowMore component for React with sensible defaults.

Nomad task driver capable of blocking unwanted syscall and filesystem access. Based on the pledge utility for Linux by Justine Tunney

unveil(2) a read-only view of the filesystem hierarchy (EXPERIMENTAL)

Python wrapper for some OpenBSD-specific APIs

An interface to the OpenBSD unveil(2) syscall.

oki applies pledge(2) and unveil(2) restrictions to target-program, reducing the blast radius of a security vulnerability in target-program.

Lightweight, secure, single-file HTTP/HTTPS proxy in C with zero dependencies

simple clipboard manager for X11

pledge(2) and unveil(2) system calls on Nanos unikernel

calm terminal-editor

Pavo wraps other programs with unveil & pledge

Lynx is a simple unveil & pledge wrapper

Crash-safe archive and compression tool for Linux and OpenBSD. Integrated Deflate, per-member hashes, atomic writes, sandboxing, and standalone C11 recovery reader

Shim for OpenBSD pledge and unveil syscalls using cgo. (Deprecated)

Shims for the OpenBSD pledge and unveil syscalls.

Unmask the abstract structure of complex nested JSON objects.