
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@gasbuddy/interaction-composer
Advanced tools
A command line tool to build interaction models (for Alexa for now) based on an intermediate format that is easier to maintain in source control and across deployment environments.
A command line tool to build interaction models (for Alexa for now) based on an intermediate format that is easier to maintain in source control and across deployment environments.
npx @gasbuddy/interaction-composer <path to json file>
See the test/model directory for a simple example that illustrates environment aware naming and intent inclusion.
One of the major goals of this module is to reduce the verbosity of intent expression. This includes centralizing relevant data in a single config (as opposed to spreading it around the intents, dialog and slot specifications), it includes support for YAML instead of JSON, and it includes expansion capabilities.
Samples and slot samples support combinations. There are two main features, the bracket-pipe usage:
this is a test
this was a test
this will be a test
Can be expressed as
this [is|was|will be] a test
These combinations can include slots, and can also be empty. For example:
is [it|this {station}] open [|now|right now]
Will expand to:
is it open
is it open now
is it open right now
is this {station} open
is this {station} open now
is this {station} open right now
Additionally, you can use nested arrays (they're weird in YAML) to have common root patterns:
- [|more] [|{details}]
- -
- about this [|{station}]
Which expands to:
more
more {details}
more about this
more about this {station}
more {details} about this
more {details} about this station
details
{details}
about this
about this {station}
{details} about this
{details} about this station
FAQs
A command line tool to build interaction models (for Alexa for now) based on an intermediate format that is easier to maintain in source control and across deployment environments.
We found that @gasbuddy/interaction-composer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.