tools

twenty-three small command line tools.

Each one does a single job and is published on npm under the @v0idd0 scope, with its source on GitHub. Most have no dependencies. They run with npx, so there is nothing to install first.

try onebash

npx @v0idd0/jsonyo --help
npx @v0idd0/sslcheck example.com
npm install -g @v0idd0/secscan

see them run

Real output, captured on 2026-10-20 by running the published packages. Not mock-ups: where it says live, the answer was live that minute.

@v0idd0/cronwtfexit 0 · 2026-10-20

npx @v0idd0/cronwtf "*/15 9-17 * * 1-5"  */15 9-17 * * 1-5

  → At minute */15 of hour 9-17, on weekdays

  Next 5 runs:
    2026-10-20 11:45:00  in 14m
    2026-10-20 12:00:00  in 29m
    2026-10-20 12:15:00  in 44m
    2026-10-20 12:30:00  in 59m
    2026-10-20 12:45:00  in 1h

The next runs are computed from the moment of capture.

@v0idd0/timecheckexit 0 · 2026-10-20

npx @v0idd0/timecheck 1700000000input:   1700000000  (unix_seconds)
iso:     2023-11-14T22:13:20.000Z
local:   2023-11-14 22:13:20 UTC  (use --tz <name> for local)
unix s:  1700000000
unix ms: 1700000000000
rfc:     Tue, 14 Nov 2023 22:13:20 GMT
rel:     3 years ago
day:     Tuesday

@v0idd0/slugmintexit 0 · 2026-10-20

npx @v0idd0/slugmint "Привет, мир! Crème brûlée & Straße"privet-mir-creme-brulee-strasse

@v0idd0/regexlabexit 0 · 2026-10-20

npx @v0idd0/regexlab '^(?<year>\d{4})-(\d{2})$'pattern: ^(?<year>\d{4})-(\d{2})$

^            → match the start of the string
(?<year>\d{4}) → named capturing group "year" containing: \d
  \d         ↳ a digit (0–9) exactly 4 times
-            → the literal character "-"
(\d{2})      → capturing group containing: \d
  \d         ↳ a digit (0–9) exactly 2 times
$            → match the end of the string

@v0idd0/secscanexit 1 · 2026-10-20

npx @v0idd0/secscan .[critical]  aws_access_key         AKIA...(12 chars)...MPLE
            ./.env:1:19
[critical]  aws_access_key         AKIA...(12 chars)...MPLE
            ./app.js:1:12

2 findings (2 critical)

Run on a folder holding the AWS documentation example key. Paths shortened, keys are redacted by default.

@v0idd0/jsonyoexit 0 · 2026-10-20

npx @v0idd0/jsonyo query in.json -p '$.user.langs'[
  "py",
  "js"
]

in.json: {"user":{"name":"Ada","langs":["py","js"]},"n":3}

@v0idd0/dotdigexit 0 · 2026-10-20

npx @v0idd0/dotdig example.comdotdig: example.com
A      172.66.147.243
A      104.20.23.154
AAAA   2606:4700:10::ac42:93f3
AAAA   2606:4700:10::6814:179a
MX        0
TXT    "v=spf1 -all"
TXT    "_k2n1y4vw3qtb4skdx9e7dxt97qrmmq9"
NS     hera.ns.cloudflare.com
NS     elliott.ns.cloudflare.com

Live DNS answers at the moment of capture.

@v0idd0/sslcheckexit 0 · 2026-10-20

npx @v0idd0/sslcheck example.comexample.com:443  [ok]
  cn       example.com
  sans     example.com, *.example.com
  issuer   Cloudflare TLS Issuing ECC CA 3
  valid    Sep 26 22:49:11 2026 GMT  →  Dec 25 22:56:35 2026 GMT
  expires  67 days (lifetime 90 days)
  key      prime256v1 256 bits
  conn     TLSv1.3  TLS_AES_256_GCM_SHA384 (TLSv1.3)  37ms
  chain    4 cert(s)

Live certificate at the moment of capture, so the expiry will move.

@v0idd0/tzdiffexit 0 · 2026-10-20

npx @v0idd0/tzdiff UTC Asia/Jerusalem America/New_Yorkutc      tue 08:30  oct 20  +0
asia/jerusalem tue 11:30  oct 20  +3
america/new_york tue 04:30  oct 20  -4

@v0idd0/passgenexit 0 · 2026-10-20

npx @v0idd0/passgen --passphraseinto-knee-custom-high-apply
  entropy 50.0 bits  reasonable  · cracking time 2 hours

Random on every run.

the whole shelf

23 of 23

cronwtfExplain cron expressions in plain English, preview the next runs and catch gotchas such as Feb 31, day-of-month plus day-of-week, and every-minute schedules.npm github
ctxstuffPack a code directory into one context file for LLM prompts. Count tokens, compare models, split, optimize to a token limit, estimate cost, watch for changes. Model prices are a 2026-04 snapshot.npm github
depcheckDependency scanner for npm and Python projects: unused and missing dependencies, plus a small offline list of 47 known vulnerabilities. It does not replace npm audit.npm github
dotdigDNS lookup CLI. Queries A, AAAA, MX, TXT, NS, CNAME, SOA, PTR, SRV and CAA records, optionally through a chosen public resolver, with JSON output.npm github
envguardValidate a .env file against a schema with 21 types and min and max constraints, scan for leaked secrets and check .gitignore. Works in pre-commit hooks and CI.npm github
gitstatsLocal git statistics: lines of code, commits over time, contributors, activity heatmap, hotspots, bus factor, streaks, release cadence and additions versus deletions.npm github
gitwhenFind when a string, line or file changed in git history. Wraps git log -S, git blame and git log --diff-filter=A with sensible defaults. No dependencies.npm github
httpwutHTTP request debugger. Shows DNS, TCP and TLS timing, follows redirects, compares two endpoints, retries on 5xx and prints the equivalent curl command or JSON.npm github
jsonyoJSON command line tool with 18 commands: validate, format, query, diff, merge, flatten, convert (YAML, TOML, CSV, XML), generate types, batch and watch.npm github
licensemeGenerate a LICENSE file from 18 licenses (MIT, Apache-2.0, GPL-3.0, AGPL-3.0, MPL-2.0, BSD and more), detect an existing license, bump the year and add source file headers.npm github
logparseParse, filter and aggregate logs. Detects JSON, plain text, nginx, apache, syslog and Python logging formats. Top-N templates, per-bucket stats, stdin and tail -f.npm github
passgenGenerate random passwords and diceware passphrases with crypto.randomBytes and unbiased sampling. Reports entropy in bits and an estimated cracking time. No dependencies.npm github
portcheckList local listening TCP and UDP ports with the owning process (PID and command). Filter by port or range, table or JSON output. Reads /proc on Linux, uses lsof elsewhere.npm github
promptdiffCompare versions of an LLM prompt: word, character and line diff, word frequency change, token impact and cost per model. Markdown output for pull requests.npm github
randumbLocale-consistent random test data: 58 locales and 5000+ real names tied to country, phone prefix, currency and city. Seeded generator, Luhn-valid cards, CLI and library.npm github
regexlabExplain regex patterns in plain English, token by token: anchors, character classes, quantifiers, groups, lookarounds and flags. CLI and library.npm github
secscanFind accidentally committed credentials in a source tree: GitHub tokens, AWS keys, Stripe, OpenAI, Anthropic, Slack, Google and SendGrid keys, JWTs and PEM private keys. No dependencies, redacts output by default.npm github
slugmintURL slug generator for Latin diacritics, Cyrillic, Greek, Hebrew, Arabic and German ß. No dependencies.npm github
sslcheckInspect the TLS certificate of any host and port: issuer, SANs, validity window, days until expiry, key strength and chain depth. Severity-based exit codes for CI and cron. No dependencies.npm github
tabsnapFormat a browser tab list as markdown, plain text, JSON or a readme. CLI and library with optional tracking parameter stripping. Same formatters as the tabsnap browser extension. No dependencies.npm github
timecheckUnix timestamp converter for seconds, milliseconds, ISO 8601, RFC 2822 and readable dates. Auto-detects input and can rewrite unix timestamps in log streams. No dependencies.npm github
tokcountCount tokens for LLM prompts and estimate cost across 60+ models. The model list and prices are a 2026-04-22 snapshot.npm github
tzdiffCompare the current time in several time zones side by side, or show a given moment in each zone. IANA names and common abbreviations, DST aware.npm github

On 2026-10-20 we went through every package under the scope, rebuilt the ones that earn their place and retired the rest. Two caveats worth knowing: the model prices inside tokcount, ctxstuff and promptdiff are a 2026 spring snapshot, and depcheck carries a small offline vulnerability list, which is not a replacement for npm audit. Source and issues for all of them: github.com/voidd0.