pkg-nec
Security-focused maintainers of abandoned npm packages.
We fork unmaintained Node.js packages, ship security patches, and keep the ecosystem safe — without introducing new features or breaking changes.
| 🔒 | Patch CVEs and security vulnerabilities in unmaintained packages |
| ♻️ | Drop-in replacements — same API, same CLI, stricter Node.js engine targets |
| 📦 | Published under @pkg-nec/* on npm with full provenance attestation |
| 🚫 | No new features — stability and security only |
| Package | Replaces | npm |
|---|---|---|
| pkg-nec/http-server | http-party/http-server (unmaintained since 2022) | |
| pkg-nec/babel-plugin-istanbul | istanbuljs/babel-plugin-istanbul |
Switching is a one-line change. No code changes required.
# Remove the unmaintained package
npm uninstall http-server
# Install the maintained fork
npm install @pkg-nec/http-server
# Or run on-demand with no install
npx @pkg-nec/http-server [path] [options]The binary name (http-server) stays the same.
Switching is a one-line dependency and configuration change.
# Remove the unmaintained package
npm uninstall babel-plugin-istanbul
# Install the maintained fork as a development dependency
npm install --save-dev @pkg-nec/babel-plugin-istanbulUpdate the Babel plugin reference in the test environment:
{
"env": {
"test": {
"plugins": ["@pkg-nec/babel-plugin-istanbul"]
}
}
}Existing plugin options and nyc configuration stay the same.
- We only merge security patches and critical bug fixes from upstream
- We track the Node.js Active LTS and Current release lines
- Every release is published with npm provenance for supply-chain transparency
- See each repo's FORK_POLICY.md for full details
Find this work useful? Buy me a coffee ☕
Pinned Loading
Repositories
-
- jest-pnp-resolver Public Forked from arcanis/jest-pnp-resolver
Transparently adds support for Plug'n'Play to Jest
- jest-silent-reporter Public Forked from rickhanlonii/jest-silent-reporter
A silent reporter for Jest
- jest-watch-typeahead Public Forked from jest-community/jest-watch-typeahead
Jest watch plugin for filtering test by file name or test name
- http-server Public Forked from http-party/http-server
A simple, zero-configuration, command-line http server
- babel-plugin-istanbul Public Forked from istanbuljs/babel-plugin-istanbul
A babel plugin that adds istanbul instrumentation to ES6 code
- fast-check Public Forked from dubzzz/fast-check
Property based testing framework for JavaScript (like QuickCheck) written in TypeScript
- .github Public
People
This organization has no public members. You must be a member to see who’s a part of this organization.
Top languages
Loading…
Most used topics
Loading…