Transactional Outbound Webhook delivery for Node.js/TypeScript, backed by your existing PostgreSQL.
Security and trust primitives for AgentPlugins: integrity hashing, SSRF-safe fetch, lifecycle script policy, and wrappers for osv-scanner, OpenSSF Scorecard, and npm provenance.
SSRF-safe URL validation library for Node.js
Pi extension: web_search and web_fetch with 8-stage prompt-injection sanitization and SSRF protection. Zero dependencies.