Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
github.com/zanmato/cal
This library augments the Go time package to provide easy handling of holidays and work days (business days).
Holiday instances can be exact days, floating days such as the 3rd Monday of the month, yearly offsets such as the 100th day of the year, or the result of custom function executions for complex rules.
The Calendar type provides functions for calculating workdays and dealing with holidays that are observed on alternate days when they fall on weekends.
Here is a simple usage example of a cron job that runs once per day:
package main
import (
"time"
"github.com/rickar/cal"
)
func main() {
c := cal.NewCalendar()
// add holidays for the business
c.AddHoliday(
cal.USIndependence,
cal.USThanksgiving,
cal.USChristmas,
)
// optionally change the default of a Mon - Fri work week
c.SetWorkday(time.Saturday, true)
// optionally change the holiday calculation behavior
// (the default is US-style where weekend holidays are
// observed on the closest weekday)
c.Observed = cal.ObservedExact
t := time.Now()
// run different batch processing jobs based on the day
if c.IsWorkday(t) {
// create daily activity reports
}
if cal.IsWeekend(t) {
// validate employee time submissions
}
if c.WorkdaysRemain(t) == 10 {
// 10 business days before the end of month
// send account statements to customers
}
if c.WorkdaysRemain(t) == 0 {
// last business day of the month
// execute auto billing transfers
}
}
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.