
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
@daun/analytics
Advanced tools
Easy way to get up and running with Google Analytics.
Personalized version of the original Analytics.js Boilerplate, with a few additions.
analytics.js
scriptSee this article for an in-depth explanation of the features used.
npm install @daun/analytics
This package automatically loads the Google Analytics library.
Recommended: load the tracking code lazily so it's non-blocking.
import('@daun/analytics').then(analytics => {
analytics.init({ /* options */ })
})
Synchronous import is possible, but only recommended for separate entrypoints.
import { init } from '@daun/analytics'
init({ /* options */ })
Setup the tracker and set initial values.
init({
trackingId: 'UA-X-XXXXXX',
timeZone: 'Europe/London'
})
Options
trackingId
→ Google Analytics tracking ID, requiredtimeZone
→ Time zone (default: Europe/London)anonymizeIp
→ Anonymize last IP octet? (default: true)removeTrailingSlash
→ Remove trailing slash (default: true)Track a custom event.
trackEvent({
eventCategory: 'Video',
eventAction: 'play',
eventLabel: 'Video title'
})
Track a page view. This should only be required in rare cases where autotracking URL changes is not sufficient.
trackPageview('/some/page')
This setup includes a few useful autotrack plugins:
The boilerplate scripts use several custom dimensions and metrics that you'll need to set up within Google Analytics.
These can be set up on Google Analytics by going to the Admin
section, clicking on Custom Definitions
in the PROPERTY
column will reveal a link to Custom Dimensions
.
Make sure the dimension index number in the admin panel matches up with the number appended to dimension
for the corresponding key in the dimensions
object in the script you use; i.e. if when you set up the Hit Source
dimension it ends up with an index of 12
, then the dimensions
object should include HIT_SOURCE: 'dimension12'
.
Name | Script reference | Scope |
---|---|---|
Tracking Version | TRACKING_VERSION | Hit |
Client ID | CLIENT_ID | User |
Window ID | WINDOW_ID | Hit |
Hit ID | HIT_ID | Hit |
Hit Time | HIT_TIME | Hit |
Hit Type | HIT_TYPE | Hit |
Hit Source | HIT_SOURCE | Hit |
Visibility State | VISIBILITY_STATE | Hit |
Url Query Params | URL_QUERY_PARAMS | Hit |
These can be set up on Google Analytics by going to the Admin
section, clicking on Custom Definitions
in the PROPERTY
column will reveal a link to Custom Metrics
.
Make sure the metric index number in the admin panel matches up with the number appended to metric
in the metrics
object in the script you use; i.e. if when you set up the Max Scroll Percentage
metric it ends up with an index of 9
, then the metrics
object should include MAX_SCROLL_PERCENTAGE: 'metric9'
.
Name | Script reference | Scope | Formatting Type |
---|---|---|---|
Response End Time | RESPONSE_END_TIME | Hit | Integer |
DOM Load Time | DOM_LOAD_TIME | Hit | Integer |
Window Load Time | WINDOW_LOAD_TIME | Hit | Integer |
Page Visible | PAGE_VISIBLE | Hit | Integer |
Max Scroll Percentage | MAX_SCROLL_PERCENTAGE | Hit | Integer |
Page Loads | PAGE_LOADS | Hit | Integer |
analytics.js boilerplate uses webpack to compile the source and webpack-dev-server to run it locally.
To install the dependencies and load the boilerplate in a browser, run the following commands:
npm install
npm start
Then visit localhost:8080 in your browser and open the developer console to see the analytics.js debug output.
The boilerplate index.js
JavaScript file imports the base boilerplate by default. To run a different version, replace the URL imported via import('./analytics/base.js')
with the version you want to load.
FAQs
Best practice analytics.js implementation
We found that @daun/analytics demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.