Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@dtinsight/dt-utils
Advanced tools
工具库
npm install @dtinsight/dt-utils
yarn add @dtinsight/dt-utils
pnpm install @dtinsight/dt-utils
import { Utils, Cookie, DateTime, Layout, CopyUtils, LocalIndexedDB, LocalDB } from '@dtinsight/dt-utils';
欢迎大家参与贡献,本文将指导你如何贡献一份自己的力量,在提 issue 或者 pull request 之前,请花几分钟来阅读这篇指南。
我们长期维护 master 分支,在创建分支前,请先了解一下分支规范。
master: 主干分支,用于发包
feat: 新特性分支
fix: 常规 bug 修复分支
如需开发功能,请遵循以下流程:
1、请 fork
本项目,clone
自己的仓库,按照上述分支定义从 master
分支新建 feat
分支进行开发,分支命名用下划线加上版本号,如:feat_1.x_xxx
2、feat
分支开发完毕后请向相应人员提 PR,期望合入 master
分支,待相应人员 review 代码后合入
我们使用 GitHub issues 来做 bug 追踪。
如果你在使用中发现了 bug,请给我们提 issue。如果你想自行修复这个问题,请遵循以下流程:
1、请从 master 分支中新建 fix 分支进行修复,分支命名用下划线加上版本号,如:hotfix_1.x_xxx
2、相关问题修复完毕后请向相应人员提 PR,期望合入master 分支,待相应人员 review 代码后合入
如果你还不清楚怎么在 GitHub 上提 Pull Request ,可以阅读下面这篇文章来学习:
如果你打算开始处理一个 issue,请先检查一下 issue 下面的留言以确保没有别人正在处理这个 issue。如果当前没有人在处理的话你可以留言告知其他人你将会处理这个 issue,以免别人重复劳动。
FAQs
The npm package @dtinsight/dt-utils receives a total of 28 weekly downloads. As such, @dtinsight/dt-utils popularity was classified as not popular.
We found that @dtinsight/dt-utils demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.