BitsExplorer finds what people are building with AI, every day. See today's picks →

Tarslip Guard

Detect unsafe tar/zip extractall() calls (CWE-22 tar-slip / zip-slip) and extract archives safely at runtime, with no dependencies.

Description excerpted from the original listing, which is linked below.

Open it Source code

Facts

Published: 5 Oct 2026 (14d ago)
Medium: web
Language: English (the page says so itself)
First seen: 5 Oct 2026, 08:15 UTC

Built with

Claude Code: confirmed
the agent's own trailer in the repository's commit history

What we can see

91 hygiene score

Certificate issued by GlobalSign Atlas R3 DV TLS CA 2025 Q4, 115 days remaining
Cookie attributes 1 cookies, 1 without the secure flag
Credentials and payment does not ask for either
Strict transport security set
Served over HTTPS
Mail authentication sender policy and authentication published
No insecure resources
Redirects none
Security headers 3 of 5 set
Third-party origins none
Transport security TLS 1.3

Observed 5 Oct 2026 by fetching the page as a browser would. This describes hygiene and transparency, not safety: a missing header does not make a site dangerous, and a complete set does not make it trustworthy.

Made this?

Show it on your own site or README. It links back to this page.

Get the badge

For a web page

<a href="https://bitsexplorer.com/i/1820246/tarslip-guard"><img src="https://bitsexplorer.com/badge/1820246.svg" alt="Featured on BitsExplorer" height="22"></a>

For a README (Markdown)

[![Featured on BitsExplorer](https://bitsexplorer.com/badge/1820246.svg)](https://bitsexplorer.com/i/1820246/tarslip-guard)

Changes we have seen

5 Oct 2026 first indexed

Tarslip Guard

More built with Claude Code

Today's picks

The week in AI-built software