ROSH™ Company Labs

Building developer tools for AI applications. Creator of llm-stream-guardrails — streaming PII & secret redaction for LLM output.

Morocco Joined on Sep 22, 2026 https://roshcompanylabs.com/llm-stream-guardrails

ROSH™ Company Labs

Oct 28

npm provenance names the tree and the artifact. The thing that decides a rebuild isn't in it.

#security #supplychain #javascript #opensource

3 min read

Want to connect with ROSH™ Company Labs?

Create an account to connect with ROSH™ Company Labs. You can also sign in below to proceed if you already have an account.

Create Account

Already have an account? Sign in

ROSH™ Company Labs

Oct 23

Your PII redactor is not a secrets filter — and your LLM prompts are full of secrets

#security #ai #machinelearning #opensource

3 min read

ROSH™ Company Labs

Oct 19

The CRA reporting clock is running. Generating an SBOM was never the hard part.

#security #compliance #opensource #supplychain

4 min read

ROSH™ Company Labs

Oct 18

I shipped a redaction library, then found it leaking a private key

#testing #javascript #security #llm

3 min read

ROSH™ Company Labs

Sep 30

GitHub said one commit. The two builds differed by a major release.

#testing #opensource #ai #javascript

7 min read

ROSH™ Company Labs

Sep 28

I cut six streaming SDKs at every point. Nothing I found was new.

#testing #javascript #typescript #ai

7 min read

ROSH™ Company Labs

Sep 22

Two bugs my green test suite could not see

#javascript #typescript #testing #i18n

7 min read

DEV Community

ROSH™ Company Labs

Badges

1 Week Community Wellness Streak

Writing Debut

npm provenance names the tree and the artifact. The thing that decides a rebuild isn't in it.

Want to connect with ROSH™ Company Labs?

Your PII redactor is not a secrets filter — and your LLM prompts are full of secrets

The CRA reporting clock is running. Generating an SBOM was never the hard part.

I shipped a redaction library, then found it leaking a private key

GitHub said one commit. The two builds differed by a major release.

I cut six streaming SDKs at every point. Nothing I found was new.

Two bugs my green test suite could not see