Dev Tools · 2h ago
New npm package fails builds on PHI leaks from LLMs
Developer Selva Kumar released phi-leak-guard, a zero-dependency TypeScript library that detects PHI/PII in text and fails test suites in Vitest/Jest. It runs locally with no network calls, using validation checks like NHS number checksums to reduce false positives. The package covers HIPAA's 18 identifiers and reports coverage gaps honestly.
Meridian48 take
A practical tool for a real compliance gap, but deterministic detection alone won't catch paraphrased re-identification—users should pair it with NER models for higher recall.
Read the full reporting
I shipped an npm package that fails your build when an LLM leaks PHI →
DEV Community
npm-packagephi-detection