WorkTumull Shield · Open-source security · 2026
Protection thatdrops into the stack.
An open-source package for API rate limiting and DDoS protection in Node.js and Next.js applications.
View repository
The brief
Give application teams a focused protection layer they can inspect and adopt.
The approach
The project is maintained in public with source, tests, benchmarks, examples, documentation, releases, and automated dependency checks. That makes the security claim reviewable instead of hiding it behind a marketing page.
- Role
- Architecture · package development · documentation
- Built with
- TypeScript · Node.js · Next.js · Vitest
A versioned open-source security package with documented integration paths for common Node.js frameworks.