GraphCanon updated Oct 6, 2026 · GitHub synced Oct 6, 2026
33views this month
Decision brief
Rebuff is a detector for prompt injection attacks on large language models and operates in TypeScript under an Apache-2.0 license.
Good fit when
- Use Rebuff when you need precise detection of prompt injection vulnerabilities specific to your deployment, especially if it relies heavily on interactions with large language models.
Avoid when
- Do not use Rebuff if setting up and managing multiple provider services like Supabase, OpenAI, Pinecone, or Chroma is inconvenient or infeasible for your project requirements.
Observed Jul 16, 2026 · Source: enrich:decision_facts
Verify the decision
Adoption
Package downloads where a registry match exists. GitHub stars (1,526) are secondary evidence.
- npm downloads (30d)
- 115·npm downloads API·Oct 6, 2026
Maintenance and security
Full trust report- Maintenance
- Archived (789d since push)
- As of Oct 6, 2026
- Provenance
- Not a fork · Organization account
- As of Oct 6, 2026
- Security (OSV)
- No lockfile
- As of Jul 11, 2026
Public GitHub metadata and optional OSV scans. Signals, not a guarantee. Trust methodology.
Install
npm install rebuff npmSimilar tools
Same-category neighbours. No typed graph edges are catalogued for this tool yet.
Evidence and technical details
Sourced facts, taxonomy, compatibility claims, README excerpt, and machine-readable endpoints.
Overview
Rebuff is a tool for detecting and preventing prompt injection attacks on large language models.
Capability facts
- Languages
- typescript
Source: github.language · Oct 6, 2026
Categories
Compatibility
Sourced claims from the README excerpt - not unsourced marketing copy.
Tags
README
Installation Self hosting To self host Rebuff Playground, you need to set up the necessary providers like Supabase, OpenAI, and a vector database, either Pinecone or Chroma. Here we'll assume you're using Pinecone. Follow the links below to set up each provider: Pinecone Supabase...
For agents
This page has a .md twin and JSON over the API.