
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
github.com/philandstuff/dhall-golang/v6
Go bindings for the dhall configuration language.
Here's a minimal example of how you might use dhall-golang to load a Dhall file into your own struct:
package main
import (
"fmt"
"github.com/philandstuff/dhall-golang/v6"
)
// Config can be a fairly arbitrary Go datatype. You would put your
// application configuration in this struct.
type Config struct {
Port int
Name string
}
func main() {
var config Config
err = dhall.UnmarshalFile("/path/to/config.dhall", &config)
if err != nil {
panic(err)
}
fmt.Printf("Loaded config: %#v\n", config)
}
You can find more documentation in the dhall-golang godoc.
This is a fairly standard Go project. It uses go modules, so no vendoring of dependencies is required.
git submodule update --init --recursive
go test ./...
go test -short ./... # skips long-running tests
Dhall-golang uses pigeon to generate the parser source file
parser/internal/dhall.go
from the PEG grammar at
parser/internal/dhall.peg
. If you change the PEG grammar, you need
to first install the pigeon binary if you don't already have it:
# either outside a module directory, or with GO111MODULE=off
go get github.com/mna/pigeon
Then, to regenerate the parser:
go generate ./parser
Issues and pull requests are welcome on this repository. If you have a question, you can ask it on the Dhall discourse.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.