Gatehouse-TS – TypeScript port of Rust's authorization policy framework
TL;DR Gatehouse-TS is a zero-dependencies authorization policy library written in TypeScript, ported from Rust. It allows you to combine different access control policies to check before allowing someone to access a resource. A few weeks ago, I saw a post on HN about Gatehouse, an authorization library written in Rust. Here's the original HN thread: https://news.ycombinator.com/item?id=43466221 I looked at their GitHub page, and started reading the source code. I do this for anything posted here that catches my attention, even if it's written in a language I don't understand.…
In plain words
Gatehouse-TS is a TypeScript authorization library with zero dependencies that enables developers to combine multiple access control policies to verify resource access permissions. Ported from the Rust original, it allows for flexible policy composition in TypeScript applications. The library is designed for developers building systems that need granular permission management and access control enforcement.
written from the facts on this page · September 2026
From the sources
In the maker’s words, at launch
TL;DR Gatehouse-TS is a zero-dependencies authorization policy library written in TypeScript, ported from Rust. It allows you to combine different access control policies to check before allowing someone to access a resource. A few weeks ago, I saw a post on HN about Gatehouse, an authorization library written in Rust. Here's the original HN thread: https://news.ycombinator.com/item?id=43466221 I looked at their GitHub page, and started reading the source code. I do this for anything posted here that catches my attention, even if it's written in a language I don't understand. The code was relatively easy to follow, even though I'm not a Rust programmer. Why did I decide to try rewriting it in TypeScript? For fun, of course! That was basically the only reason. I had nothing to do on a weekend and wanted to write code. It _did_ help with some challenges I was facing at $day_job, but that came afterwards. I emailed the authors of the Rust version, telling them that I was working in a TypeScript version, and they kindly blessed me to publish it with a similar name. Overall I'm very happy with it. The original authors provided an amazing foundation for a port, I had fun rewriting it and trying to adapt their APIs from Rust to TypeScript. As a bonus, it was immediately useful at work as well. I appreciate any feedback or thoughts on it. Please check out the original project as well, since most of the hard work was done by them: https://github.com/thepartly/gatehouse Documentation: https://9morello.github.io/gatehouse-ts/
Does the same job
all alternatives →
Typebase – A single-folder back end you write in TypeScript11d ago · typebase.io · ▲118Hey HN! I built Typebase, a library that gives you Convex's DX with Supabase's openness. After trying Supabase I liked how fast it is to spin up a DB and auth, but really didn't like using RLS and SQL for authorization. With Convex I loved how your server "lives" in your code, but disliked the DB model and the realtime-first defaults. With Typebase you just write TS files inside a typebase/ folder in your existing repo. You can define your DB tables inside a schema.ts file and export server functions that your frontend calls like local functions, fully typed. Auth is built in. Then one…
- AMA minimal TS library that generates prompt injection attacks2025 · prompt-injector.blueprintlab.io · ▲33
I made an open source, MIT license Typescript library based on some of the latest research that generates prompt injection attacks. It is a super minimal/lightweight and designed to be super easy to use. Keen to hear your thoughts and please be responsible and only pen test systems where you have permission to pen test!
- SUSandboxing untrusted code using WebAssemblyFeb 2026 · github.com · ▲76
Hi everyone, I built a runtime to isolate untrusted code using wasm sandboxes. Basically, it protects your host system from problems that untrusted code can cause. We’ve had a great discussion about sandboxing in Python lately that elaborates a bit more on the problem [1]. In TypeScript, wasm integration is even more natural thanks to the close proximity between both ecosystems. The core is built in Rust. On top of that, I use WASI 0.2 via wasmtime and the component model, along with custom SDKs that keep things as idiomatic as possible. For example, in Python we have a simple decorator:…
- SOSyncKit – Offline-first sync engine (Rust/WASM and TypeScript)Nov 2025 · github.com · ▲87
- RRRegolith – Regex library that prevents ReDoS CVEs in TypeScript2025 · github.com · ▲27
I wanted a safer alternative to RegExp for TypeScript that uses a linear-time engine, so I built Regolith. Why: Many CVEs happen because TypeScript libraries are vulnerable to Regular Expression Denial of Service attacks. I learned about this problem while doing undergraduate research and found that languages like Rust have built-in protection but languages like JavaScript, TypeScript, and Python do not. This library attempts to mitigate these vulnerabilities for TypeScript and JavaScript. How: Regolith uses Rust's Regex library under the hood to prevent ReDoS attacks. The Rust Regex library…
- TJTitan – JavaScript-first framework that compiles into a Rust serverDec 2025 · npmjs.com · ▲49
Hi HN, I built Titan, a backend framework where you write routes and logic in JavaScript, and the CLI compiles everything into a single Rust + Axum binary using the Boa JS engine. No Node.js is required in production. The idea is to keep JS developer experience while getting Rust performance and a self-contained deployable server. Current features: JS route DSL Action system mapped to Rust esbuild bundling Generated Rust server with Axum Hot-reload dev server Single-binary output Repo: https://github.com/ezet-galaxy/-ezetgalaxy-titan Would love feedback on the…
More dev tools this month
the category →
Open-source GTM skills for technical founders
Dev tools · 29d ago · gtmcofounder.com
OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.
Dev tools · 2d ago · opentrailpaper.com
Launched alongside, April 2025
the whole month →- IB
Hi everyone, I built PyXL — a hardware processor that executes a custom assembly generated from Python programs, without using a traditional interpreter or virtual machine. It compiles Python -> CPython Bytecode -> Instruction set designed for direct hardware execution. I’m sharing an early benchmark: a GPIO test where PyXL achieves a 480ns round-trip toggle — compared to 14-25 micro seconds on a MicroPython Pyboard - even though PyXL runs at a lower clock (100MHz vs. 168MHz). The design is stack-based, fully pipelined, and preserves Python's dynamic typing without static type restrictions.…
Dev tools · 2025 · runpyxl.com
- UC
Life & fun · 2025 · filiph.github.io
- IB
https://the-pocket.github.io/Tutorial-Codebase-Knowledge/
AI · 2025 · github.com
