Skip to content
View i6moons's full-sized avatar
🎯
Focusing
🎯
Focusing
5 followers · 5 following

Achievements

Achievement: Galaxy BrainAchievement: Pair Extraordinairex3Achievement: Pull Sharkx3Achievement: QuickdrawAchievement: YOLO

Achievements

Achievement: Galaxy BrainAchievement: Pair Extraordinairex3Achievement: Pull Sharkx3Achievement: QuickdrawAchievement: YOLO

Highlights

Block or report i6moons

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
i6moons/README.md
Del Prudence, full-stack developer, Next.js and TypeScript, web security

Cybersecurity & Full-Stack Engineer · UI/UX Designer · DevSecOps & Secure Architectures

I build secure Next.js apps, and open-source tools that help developers avoid the most common security mistakes.

Profile views

🚀 Open source

server-action-audit

npm CI GitHub Marketplace

The problem: in Next.js, every Server Action is a public endpoint, and the auth check is easy to forget.

The tool: it lists every action in a project and flags the ones that don't check who is calling.

  • CLI, ESLint plugin, GitHub Action, SARIF and pull request comments
  • Auth.js, Clerk, Supabase, Better Auth, next-safe-action…
  • Tested on 5 open-source apps: 456 actions analyzed

feexpay-server

npm CI Zero dependencies

The problem: FeexPay's web SDKs take the secret key in the browser, and the webhook is not signed.

The tool: a server-side SDK to accept Mobile Money and card payments without ever exposing the key.

  • 17 networks across 6 countries: MTN, Moov, Wave, Orange…
  • Every webhook re-checked against the status API
  • Zero dependencies, sandbox simulator, Next.js and Edge

Feedback, issues and contributions are welcome on both projects.

🤝 Contributions

  • poweradmin/poweradmin#1836 · merged: OIDC and SAML logins are admitted only when the configured claims match. Poweradmin is a web UI and REST API for PowerDNS.

🛠️ Stack

Area Tools
Front-end Next.js, React, TypeScript, JavaScript, Tailwind CSS
Back-end Node.js, Express, Python
Tools Git, GitHub, GitHub Actions, Docker, Linux, Bash, Vercel, VS Code, Figma

📈 Activity

GitHub contribution streak for i6moons



Snake eating the contribution graph

Popular repositories Loading

  1. feexpay-server feexpay-server Public

    Server-side FeexPay SDK, typed and dependency-free: Mobile Money (MTN, Moov, Wave, Orange…), cards, verified webhooks, sandbox simulator. Node, Next.js, Edge, Bun, Deno.

    TypeScript 3

  2. i6moons i6moons Public

    2

  3. server-action-audit server-action-audit Public

    Find Next.js Server Actions that anyone can call. CLI + ESLint plugin that flags "use server" functions without an auth check or input validation.

    TypeScript 2

  4. poweradmin poweradmin Public

    Forked from poweradmin/poweradmin

    Web UI and REST API for PowerDNS: zones, records, DNSSEC, users, with Terraform and Kubernetes integrations

    PHP