Credits
VoidBox Cyberverse and the VoidBox Discord bot are built on work other people gave away. This page lists it. Where a project’s ideas shaped how something here works — not just its code — that is said plainly, because an idea is the part that is easiest to take without saying so.
Anti-scam
Techniques adapted into VoidBox’s own moderation stack.
D5 Spam Guard Bot — DH-555
MIT
Three of its detection ideas are reimplemented in VoidBox. The code here is our own — that project is ESM, VoidBox’s bot is CommonJS — but the approaches are theirs, and each one closed a real hole we could reproduce in our own filters:
- Resolving an invite to its destination server. Scam
servers mint a new invite code the moment one is reported, so the
code is worthless to block — but the server ID behind it is
stable. Our filter matched domains only, which cannot work when
every invite is served from
discord.gg. - Normalising hidden characters before matching. A single zero-width space inside a domain defeated our invite filter outright and made our domain extractor return the wrong domain, so the blocklist stopped matching too.
- Fingerprinting one payload across many channels. Our rate limiter counted messages per second, so the same phishing line dropped into ten channels nine seconds apart never tripped anything.
Migration
How servers bring their levels over from other bots.
SomeAspy & Xezjk
The Arcane export in VoidBox’s docs uses SomeAspy’s method (extractArcaneData.js, write-up): Arcane’s web leaderboard carries each member’s Discord ID in their avatar link, so a short script in the owner’s own browser can export exact levels and XP. Xezjk (Discord ID 985520795126206464) brought it to us. The script we host is our own implementation of that method.
Software
NSFWJS & TensorFlow.js — Infinite Red & Google TensorFlow
MIT Apache-2.0
Image moderation, running on our own hardware. This is the reason nudity screening is free on every plan rather than a paid feature: nothing about those pictures leaves our server.
Llama Prompt Guard 2 (22M) — Meta, via Gravitee's ONNX build & Transformers.js
Llama 4 Community License Apache-2.0
Built with Llama. Spots attempts to trick the AI into ignoring its instructions (jailbreaks and prompt injection) before a reply is written. It runs on our own server, so nothing you say is sent anywhere for this check.
Express, ws, Multer — the Express team (created by TJ Holowaychuk) & Einar Otto Stangvik and the ws team
MIT
The website, its live game connections, and file uploads.
Model Context Protocol SDK — Anthropic & MCP contributors
MIT
Lets an admin configure their server from their own AI client.
ALTCHA, altcha-lib — Daniel Regeci & ALTCHA
MIT
The privacy-friendly, self-hosted proof-of-work check on daily rewards. No tracking and no third-party captcha.
discord-youtube-notifications — KartikeSingh (shisui)
MIT
Shaped how YouTube alerts work. VoidBox’s code is its own, but these ideas are theirs:
- Rich video cards. Uploader, title, link and thumbnail, plus
{author}in custom messages. - A publish-date guard. When a creator deletes their newest video, an older upload is not announced again as new.
- An optional YouTube Data API path. Used here to turn an @handle into the channel ID.
Typefaces
From Google Fonts, under the SIL Open Font License 1.1 or Apache 2.0 — both of which permit redistribution.
Google Fonts
OFL-1.1 Apache-2.0
Services
OpenRouter
Routes every AI feature to a model provider. What each tier uses, and how your data is handled on each, is set out in the Bot Terms.
Whop
Handles payments. Card details never reach us.
top.gg
Where you can vote for the bot, and where the vote rewards come from.
Every project above is someone’s unpaid work. If you build on them too, credit them.