reporting-api

Self-hosted collector for browser security reports: CSP, NEL, COOP, COEP and other Reporting API reports.

Strict CSP (Content-Security-Policy) for Next.js hybrid apps https://web.dev/strict-csp/

Open-source, self-hosted report designer and rendering engine. JSON templates, embeddable designer, PDF/API output, and a JRXML importer that creates reviewable drafts.

Express middleware to collect Reporting API reports - CSP, COOP, COEP, Permissions-Policy, Document-Policy, NEL, crash, deprecation and intervention reports

Google Analytics GA4 Reporting API for GatsbyJS

Sample application experimenting with Report-To header and receiving reports (Report API)

Privacy-first Matomo analytics for Laravel with cookieless tracking, reports, Web Vitals, batching and bot filtering.

CSP report collector with Slack/Discord aggregated reports.

Report Relay accepts the security reports browsers and mail servers send — Reporting API batches, legacy CSP report-uri bodies, network error logs and SMTP TLS reports — and emits one OpenTelemetry log record per report, so they land in the existing Loki, Tempo and Grafana stack instead of a separate collector per report type.

Collect network reports and print them to file

A browser library that lets readers report a typo by selecting it and pressing Ctrl+Enter (Cmd+Enter on macOS). The report, with the text around the selection, goes to a report-relay endpoint, a webhook, or a function of your own.

HTTP service that receives browser reporting API payloads, validates each report entry, and streams accepted entries to stdout for logging collection.

JSON Type Definition for Reporting API report

Zero-dependency TypeScript client for the tsreport print API (OAuth 2.0 client credentials, print job submission, status polling, PDF download) with a preview endpoint helper and browser connector

HTTP reporting middleware

Dependency-free Reporting API / CSP violation collector with a live triage dashboard