Developer Security Tools

Decode a JSON Web Token and read its header, claims and expiry.

Check a decoded token against the weaknesses that show up in real audits.

Format, validate and measure JSON, with errors located by line and column.

Test a pattern against sample text with a hard execution timeout.

Produce SHA-1, SHA-256, SHA-384 and SHA-512 digests of text or a file.

Generate cryptographically random v4 UUIDs in bulk.

Convert between Unix time and readable dates in UTC or local time.

Read a cron expression in plain English and see when it next fires.

Split a URL into scheme, host, path, query and fragment.

Convert between 755 and rwxr-xr-x, special bits included, in both directions.

Decode a SAMLResponse and read its issuer, subject, conditions and attributes.

Compare two JSON documents and see what actually changed, independent of formatting.

Infer a TypeScript interface from a JSON example, with optional fields worked out from an array.

Infer a runtime-checkable Zod schema from a JSON example.

Infer a JSON Schema (2020-12) document from a JSON example.

Convert CSV to a JSON array of objects, or back, with proper quoted-field parsing.

Validate JSON Lines file by line and convert it to a single JSON array.

Convert between .env, JSON and YAML — the same config in three syntaxes.

Check a .env file for duplicate keys, invalid names and unterminated quotes.

Compare two versions of a config file line by line.

Convert INI to JSON and back, with sections becoming nested objects.

Parse a TOML document — tables, arrays of tables and all — into JSON.

Generate a .gitignore for common stacks, or check whether a path is actually ignored.

Break a git remote URL into protocol, host, owner and repository.

Break a github.com URL into owner, repo, ref, path and line range.

Validate a Conventional Commits message, or build one from separate fields.

Compare two versions using SemVer 2.0.0 precedence, not string sort.

Check whether a version satisfies a range like ^1.2.0 or ~2.0.0.

Group Conventional Commits into a Keep a Changelog-style breakdown.

Render git diff output as a readable, colour-coded diff.

Parse git format-patch output into author, subject and diff.

Check a CSV file for ragged rows and detect its delimiter, without converting it to anything.

Reflow a SQL query onto readable lines, one clause per line.

Turn a pasted curl command into a fetch call or Python requests snippet.

Turn a regular expression into a plain-English, line-by-line breakdown.

Convert a date and time between IANA time zones, or find the gap between two instants.

Validate a JSON document against a JSON Schema and see exactly which rule failed, and where.

Check a Compose file for the mistakes that stop it loading — before you find out with docker compose up.

Check one or more Kubernetes manifests for the fields each kind cannot function without.

Check an OpenAPI document for the fields it needs to describe a real API — not full spec compliance.