flare-redact library scans log values in 24 languages to prevent credential leaks
A developer has released flare-redact, an open-source TypeScript library designed to prevent sensitive data from leaking through application logs and LLM prompts. Unlike traditional redaction tools that rely on blocklists of field names, flare-redact scans the actual content of values, catching secrets even when stored in unusually named or non-English fields. The library ships with 75 detectors that use checksum validation — such as Luhn for credit cards and Verhoeff for India's Aadhaar — to minimise false positives. It also includes an LLM wrapper that redacts secrets before they leave a process and restores real values in the model's reply using HMAC-based placeholder tokens. The MIT-licensed library has zero runtime dependencies and is available on npm for Node 20+, browser, and edge environments.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Discussion (0)
Log in to join the discussion and vote.
Log in