Meridian
Know your blast radius before the attacker does
What it does
Paste a compromised npm/PyPI package, get a verdict and fix command in seconds. Six Cypher queries against HydraDB. No LLM. Graph-only answers. Free. Open source.
Paste one compromised package name. Get one English sentence and a fix command. Built on HydraDB.
Paste a package name. Meridian walks your dependency graph six hops deep and tells you which services are exposed, in plain English, in seconds. Paste a package name, get a plain-English verdict and a copy-paste fix command. No log diving, no CVE databases, no graph theory. Six deterministic queries walk your actual dependency tree — transitive exposure, lockfile snapshots, typosquat neighbours. Answers in seconds. Apache-2.0 source on GitHub. Run it on your laptop behind your firewall. No seat counts, no cloud dependency, no tracking. Type any npm or PyPI package name. e.g. tanstack/react-virtual or ua-parser-js. Six tiles light up: exposed services, compromised lockfiles, typosquat…from meridian.sithunyein.com
Does the same job
all alternatives →
Cynative Security Research AgentJul 2026 · github.com · ▲97Ask your cloud anything without breaking prod. Read-only.
OpenLIT's Zero-code LLM ObservabilityOct 2025 · ▲136Trace LLM requests + costs with OpenTelemetry monitoring
- AAAt a Glance ESM Support for NPM Packages2022 · ▲9
We've rolled out a feature for openbase.com that we think is a DX game changer for Node devs. Since the emergence of ECMA Script modules, it's been a continuous guessing game as to what kind of exports a package has. That's never really been discoverable without using a site like unpkg, or installing the package and inspecting package.json. Openbase now displays the ES Module support level (e.g. type of exports) on all of their package pages. We added this feature because our devs are some of the folks continually caught off guard by installing an NPM dependency only to find out it's…
More dev tools this month
the category →
Open-source GTM skills for technical founders
Dev tools · 29d ago · gtmcofounder.com
OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.
Dev tools · 1d ago · opentrailpaper.com
Launched alongside, August 2026
the whole month →- TL
Life & fun · 10d ago · louisabraham.github.io
- SA
Hello HN! I found that picking out plausible but diverse skin tones for my digital art and game development projects was kind of difficult, and I got curious about if there was a way to define a color space that made it easy. I've built a color picker and procedural generation algorithm based on the space as well as a bunch of other fun js features and demos throughout the page that use the equations. If you find it interesting, I have lots of explanations of how I built it and what properties the space has. The methodology might be a bit shaky, but hopefully the result is as helpful for…
Life & fun · Aug 2026 · toneyalexander.github.io
I trained a 125M-parameter transformer to autocomplete piano performances in real time (~108 notes/sec on an iPhone 15). The idea is basically GitHub Copilot or Tabnine, except instead of prompting it with code, you prompt it by playing a few notes on a MIDI piano. The model then continues what you played, entirely on-device. The app is free if anyone wants to try it. Happy to answer questions about the model, training, Core ML, or the many things that didn't work.
AI · 17d ago · simedw.com