# Projects & resources

Security tools, terminal applications, network infrastructure, and community guides created, maintained, or contributed to by Liran Tal.

Canonical: https://lirantal.com/open-source/projects

A selection of the tools I build and help maintain, and the practices I share. Start with the problem you want to solve; each repository has its own documentation and contribution process.

Project metrics captured November 7, 2026. [Sources & definitions](/open-source/impact#project-metrics)

## Security tools

Tools for checking package installs, lockfiles, website dependencies, and source code.

Creator & maintainer

Lint lockfiles for trusted registries and protect against lockfile injection.

Creator & maintainer

Check package health and security signals before installing npm dependencies.

Creator & maintainer

Detect bidirectional Unicode characters used to disguise malicious source code.

Creator & maintainer

Find publicly known vulnerabilities in the frontend JavaScript libraries a website loads.

Creator & maintainer

Bring bidirectional Unicode checks into ESLint so disguised code can be caught during development and review.

## Developer tools & infrastructure

Tools for Docker, FreeRADIUS deployments, terminal dashboards, and MCP configuration.

Creator & maintainer

An interactive terminal interface for managing Docker containers and services.

Original creator

A web management application for FreeRADIUS deployments, covering users, accounting, reporting, and billing.

Contributor & maintainer

Charts, maps, tables, and other terminal widgets for Node.js dashboards. Originally created by Yaron Naveh.

Creator & maintainer

Discover MCP server configurations used by applications such as Cursor, Claude Desktop, and VS Code.

## Security guides & CLI best practices

Community guides covering Node.js command-line apps, npm security, and MCP servers and clients.

Creator & maintainer

A practical guide to building thoughtful, accessible, and reliable command-line applications.

Co-author with Juan Picado

Practical npm security guidance that became the original basis of OWASP’s NPM Security Cheat Sheet.

Creator & maintainer

Security resources, tools, and learning material for the Node.js ecosystem.

Creator & maintainer

A shared collection of practices for building MCP servers and clients.

## How to contribute

Try the project first, then check its README, open issues, and contribution guidelines. A reproducible bug report, a clearer example, or a documentation improvement can be a valuable first contribution.

[Browse all repositories on GitHub](https://github.com/lirantal?tab=repositories)[Explore my upstream contributions](/open-source/contributions)

## An open invitation to contribute

Join my open-source projects: try a tool, improve a guide, or help shape what comes next.

[How to contribute](#start-title)