Developer-focused npm packages for security, compression, and server utilities.
TypeScript-first. Minimal dependencies. Production-ready.

Packages 📦

cipher-kit 🔐

Cross-platform cryptography for Node.js, browsers, Deno, Bun, and Cloudflare Workers.

• Zero dependencies — fully self-contained
• AES-256-GCM encryption with HKDF key derivation
• PBKDF2 password hashing with 320K iterations and constant-time verification
• Type-safe with throwing and Result<T> variants for every function
• Tree-shakable — import from cipher-kit/node or cipher-kit/web-api

npm install cipher-kit

View docs

---

compress-kit 🔬

Cross-platform string compression using DEFLATE. 30-90% size reduction on typical text and JSON.

• Lossless DEFLATE via pako
• Automatic passthrough — skips compression when it isn't beneficial
• Decompression bomb protection via maxOutputSize with streaming abort
• Type-safe with throwing and Result<T> variants

npm install compress-kit

View docs

---

get-client-ip 📍

Extract the real client IP from HTTP requests behind any proxy or CDN.

• 12+ proxy headers checked in priority order (Cloudflare, Fastly, Akamai, AWS)
• Standalone function or Express/NestJS middleware
• Auto-populates req.clientIp and req.clientIps with TypeScript support
• Zero config — validates IPs using Node.js net.isIP()

npm install get-client-ip

View docs

---

generate-certs 🗝️

Self-signed HTTPS certificates for local development. No OpenSSL required.

• Auto-generates and validates — checks expiry, permissions, and key/cert pairing
• Smart reuse — reuses existing certs when they're still valid
• Framework-ready — Express, NestJS, Hono, Fastify
• Secure file permissions enforced (Unix: 600 on private key)

npm install -D generate-certs

View docs

---

modern-cookies 🍪

Type-safe cookie management for Express and NestJS with automatic security enforcement.

• setCookie, getCookie, deleteCookie — complete cookie API
• Auto-enforces __Secure- and __Host- prefix rules
• sameSite: "none" forces secure: true — prevents silent browser rejection
• Graceful error handling — returns boolean, never throws

npm install modern-cookies

View docs

---

Tooling ⚒️

Tool	Purpose
TypeScript 5.9	Strict types with verbatimModuleSyntax and nodenext resolution
pnpm	Workspace management and dependency resolution
Turborepo	Cached, dependency-aware builds across packages
Just	Handy way to save and run project-specific commands
tsup	Dual ESM/CJS output for every package
Biome	Linting and formatting (replaces ESLint + Prettier)
Vitest	Testing with TypeScript type checking

Contributing 🤝

• Open an issue or feature request
• Submit a PR to improve the packages or add new ones
• Star the repo if you find it useful

Crafted carefully by WolfieLeader

This project is licensed under the MIT License.