README

Fast, offline burner / disposable email detection. Same three-list model (blacklist / whitelist / graylist) and two modes (normal / strict) across seven languages.

Packages

Every package ships the same bundled domain data and exposes the same API shape.

Shared features

• Offline. Domain lists are bundled at package-build time. No network calls at runtime.
• Zero runtime dependencies in every language.
• Three lists.
  • blacklist — burners (always blocked)
  • whitelist — always allowed; overrides everything else
  • graylist — email alias / forwarding services (SimpleLogin, DuckDuckGo, Firefox Relay); blocked only in strict mode
• Two modes. normal (blacklist only) or strict (blacklist + graylist)
• CLI in every language — burner <email> with the same flags and exit codes
• Refreshed weekly, reviewed before release — a cron rebuilds the aggregated blacklist from upstream sources and opens a PR with the diff; a maintainer reviews and merges it, then cuts a patch release. No upstream change reaches a published package unattended.

Data model

All four packages read the same canonical files in data/:

scripts/build-lists.ts fetches, merges, and syncs these files into the language packages that need local copies (Go for go:embed, PHP for runtime reads, Python for editable installs, C# for EmbeddedResource, Kotlin for JVM classpath resources, Rust for include_str!). The JS package reads root data/ directly via tsup's text loader.

Monorepo layout

/
├── data/                               # Canonical data (single source of truth)
├── packages/
│   ├── js/                             # npm package
│   ├── py/                             # PyPI package
│   ├── go/                             # Go module
│   ├── php/                            # Composer package
│   ├── csharp/                         # NuGet package
│   ├── kotlin/                         # Maven Central package
│   └── rust/                           # crates.io package
├── scripts/
│   └── build-lists.ts                  # Fetches sources, rebuilds blacklist, syncs copies
└── .github/workflows/                  # CI + release pipelines

Sources

The blacklist aggregates and deduplicates domains from:

• disposable-email-domains/disposable-email-domains
• tompec/disposable-email-domains
• FGRibreau/mailchecker
• 7c/fakefilter
• martenson/disposable-email-domains

Community

• CONTRIBUTING.md — dev setup, adding domains, PR process
• SECURITY.md — reporting vulnerabilities
• ACKNOWLEDGMENTS.md — upstream list credits

License

MIT