Owner

ericcornelissen

20 indexed repositories · View on GitHub

shescape
Simple shell escape library for JavaScript

JavaScript · 9 stars
js-regex-security-scanner
A static analyzer to scan JavaScript code for problematic regular expressions.

JavaScript · 8 stars
tool-versions-update-action
A GitHub Action to automatically update the tools in your .tool-versions file

Shell · 7 stars
ades
Find dangerous uses of GitHub Actions Workflow expressions.

Go · 6 stars
reproducing-actions
Insight into the reproducibility of the GitHub Actions ecosystem

Shell · 3 stars
pp-runtime-gadgets
Gadgets in the JavaScript runtime based on the ECMAScript specification

HTML · 1 star
grammar2arbitrary
Generate fast-check arbitraries from a grammar

JavaScript · 1 star
lregexp
Transparent linear-time (non-backtracking) regular expressions for libraries

JavaScript · 1 star
gofunchecks
A collection of static analysis tool to analyze functions in Go.

Go · 0 stars
prototype-pollution-mitigation-tests

JavaScript · 0 stars
trusted-types-tests
A test suite to find what APIs are covered by Trusted Types

JavaScript · 0 stars
odgen-action
A GitHub Action for ODGen

Shell · 0 stars
npmaargh
The npm audit assistant

JavaScript · 0 stars
domc-challenge

HTML · 0 stars
asdf-yamllint
An asdf plugin for yamllint

Shell · 0 stars
node-assert-time
Assert the duration of a (blocking or async) function under test

JavaScript · 0 stars
asdf-diffoci
An asdf plugin for diffoci

Shell · 0 stars
psychic-doodle
A lightweight JavaScript code processor

JavaScript · 0 stars
depreman
Manage npm deprecations

JavaScript · 0 stars
strip-comments-js
Strip comments from JavaScript and TypeScript code.

JavaScript · 0 stars

Open All

135 open issues indexed

Interactive testing Open

enhancement

ericcornelissen/trusted-types-tests#2 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Export data Open

enhancement

ericcornelissen/trusted-types-tests#5 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Test location changing use of `history.pushState` and `history.replaceState` APIs Open

ericcornelissen/trusted-types-tests#6 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Render output as a table instead of a bunch of `<p>`s Open

enhancement

ericcornelissen/trusted-types-tests#7 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
`"HTMLIFrameElement.src=javascript:.` result is incorrect Open

bug

ericcornelissen/trusted-types-tests#10 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Dynamic `import()` not covered by trusted types Open

ericcornelissen/trusted-types-tests#11 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Ensure parity with WPT Open

ericcornelissen/trusted-types-tests#12 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Using ECMAScript Debugger to find runtime gadgets Open

ericcornelissen/pp-runtime-gadgets#2 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
`SharedArrayBuffer` is "unsupported" in browsers because of COOP? Open

help wanted

ericcornelissen/pp-runtime-gadgets#3 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Include `with-@@unscopables.PoC.cjs` in the browser tests Open

ericcornelissen/pp-runtime-gadgets#7 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Errors when rewriting the `tc39/test262` suite Open

ericcornelissen/pp-runtime-gadgets#8 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Create PoCs for those deemed "unaffected" Open

ericcornelissen/pp-runtime-gadgets#9 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
`delete arr[i]` leaves a hole/gap in the array Open

ericcornelissen/pp-runtime-gadgets#11 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Support non-Node.js scan Open

enhancement

ericcornelissen/odgen-action#6 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Improve build reliability Open

ericcornelissen/odgen-action#13 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Drop `ericcornelissen/odgen-action/all` in next major version Open

breaking change

ericcornelissen/odgen-action#20 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Use a pre-built container Open

ericcornelissen/odgen-action#24 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Check for and skip generated files Open

enhancement

ericcornelissen/gofunchecks#4 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Create CLI tests Open

test

ericcornelissen/gofunchecks#5 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
New tool to disallow having two parameters of the same type in a row Open

enhancement

ericcornelissen/gofunchecks#6 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
this but for deprecation warnings Open

ericcornelissen/npmaargh#1 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Support assisting with auditing a specific vulnerability Open

ericcornelissen/npmaargh#4 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Include `Object.freeze(Object.prototype)` in results Open

ericcornelissen/prototype-pollution-mitigation-tests#1 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Include `Proxy`-less use of `Object.hasOwn` as a mitigation Open

ericcornelissen/prototype-pollution-mitigation-tests#5 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
syntax highlighting Open

ericcornelissen/domc-challenge#1 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Test mitigations for non-Objects Open

ericcornelissen/prototype-pollution-mitigation-tests#6 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Enable automated updates for `Containerfile.dev` using Dependabot Open

dependencies meta pending

ericcornelissen/asdf-yamllint#85 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Find strategy to keep `asdf` in the develop environment up-to-date Open

dependencies help wanted meta

ericcornelissen/asdf-yamllint#88 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Set up known-vulnerability scanning for container images Open

help wanted security

ericcornelissen/asdf-yamllint#98 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Replace `ncipollo/release-action` by `gh release create` Open

ci/cd dependencies

ericcornelissen/asdf-yamllint#233 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Find strategy to keep `asdf` in the develop environment up-to-date Open

help wanted meta

ericcornelissen/tool-versions-update-action#135 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Enable automated updates for Containerfile using Dependabot Open

meta pending

ericcornelissen/tool-versions-update-action#136 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Support `open-pull-requests-limit`-like option for the `/pr` action variant Open

action:pr enhancement help wanted

ericcornelissen/tool-versions-update-action#182 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Set up known-vulnerability scanning for container images Open

help wanted security

ericcornelissen/tool-versions-update-action#184 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add job summaries Open

enhancement

ericcornelissen/tool-versions-update-action#204 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add tool links to Pull Requests Open

action:pr enhancement

ericcornelissen/tool-versions-update-action#289 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Support chatops-style release skipping with PRs Open

action:pr

ericcornelissen/tool-versions-update-action#312 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Offer reusable workflows Open

enhancement

ericcornelissen/tool-versions-update-action#373 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Add cooldown period for new tools update Open

enhancement

ericcornelissen/tool-versions-update-action#412 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Make it convenient to use this locally/offline Open

enhancement help wanted

ericcornelissen/tool-versions-update-action#418 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Disable tool installation by default Open

breaking change enhancement

ericcornelissen/tool-versions-update-action#422 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Commit message supports render table of changed tools Open

enhancement

ericcornelissen/tool-versions-update-action#427 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add feature to give approve automatically for newly created PR Open

action:pr enhancement

ericcornelissen/tool-versions-update-action#435 · 6 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Replace `ncipollo/release-action` by `gh release create` Open

ci/cd dependencies

ericcornelissen/tool-versions-update-action#471 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Implement retry logic to reduce runtime errors due to network/API errors Open

enhancement

ericcornelissen/tool-versions-update-action#530 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Automatically determine cron schedule for `new.sh` monitor Open

help wanted meta

ericcornelissen/reproducing-actions#2 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Remove (legacy) checksum-based reproducability check Open

good first issue

ericcornelissen/reproducing-actions#28 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Create a tool to verify that the actions a project is using have all been reproduced by this project Open

help wanted

ericcornelissen/reproducing-actions#73 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Historical testing Open

help wanted

ericcornelissen/reproducing-actions#153 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Automatically detect immutable actions Open

ericcornelissen/reproducing-actions#194 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026

ericcornelissen

Get new issues in your inbox