A URL sanitization function that blocks dangerous protocols (javascript:, data:, vbscript:) and handles encoded bypasses (e.g., javascript:). It is a self-contained, reusable utility that can be extracted into any web project to prevent XSS via user-supplied URLs. Demonstrates thorough security awareness with multiple bypass mitigations.

A JSON-LD serializer that escapes `<` characters to prevent script tag breakout in structured data injection. It is a small, isolated utility that solves a common security issue in SEO metadata generation. Can be reused in any Astro or Node.js project that outputs JSON-LD inline in HTML.

A client-side script that renders an animated ASCII aurora effect on the homepage hero using a canvas element. It respects `prefers-reduced-motion` and includes a fallback for non-animated display. The animation logic is self-contained and could be extracted as a reusable visual effect for other landing pages.

A comprehensive interactive installer script for macOS/Linux that uses `gum` for UI, supports npm and git installation methods, and includes error handling, PATH updates, and shell integration. It is a standalone, well-documented script that demonstrates a robust pattern for distributing CLI tools via shell installers.

A Windows PowerShell installer that bootstraps Node.js and Git (portable versions) if missing, then installs the OpenClaw npm package. It handles PATH updates, error handling, and supports both npm and pnpm. This is a self-contained, reusable pattern for distributing Node.js-based tools on Windows without requiring pre-installed dependencies.