Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@georges-tech/tardis
Advanced tools
Temporal property implementation for reading historized data.
npm install @georges-tech/tardis
You create a Tardis service through createHistoryService
by providing an array of documents that must contain
the following properties :
/**
* Date at which the configuration starts to be valid
*/
effective_date: Date;
/**
* Date at which the new configuration has been created
*/
known_at: Date;
/**
* Optional end date for limited time configurations
*/
end_date?: Date;
You can add as much properties as you like, depending on your use case, that will be returned by services.
Documents may contain a computed end_date
, being the next effective document date if it exists. Otherwise, it
is undefined
.
import tardis from '@georges-tech/tardis';
const documents = [{
effective_date: new Date('2020-01-01'),
known_at: new Date('2020-05-01'),
data: {
value: 'old',
}
}, {
effective_date: new Date('2020-03-01'),
known_at: new Date('2020-10-01'),
data: {
value: 'new',
}
}]
const historyService = tardis.createHistoryService({ documents });
const januaryConfiguration = historyService.getConfigurationAtDate({ date: new Date('2020-01-03') });
// januaryConfiguration.data.value = 'old'
// januaryConfiguration.end_date = new Date('2020-03-01')
const mayConfiguration = historyService.getConfigurationAtDate({ date: new Date('2020-05-03') });
// mayConfiguration.data.value = 'new'
// mayConfiguration.end_date = undefined
FAQs
Temporal property implementation for reading historized data
The npm package @georges-tech/tardis receives a total of 8,352 weekly downloads. As such, @georges-tech/tardis popularity was classified as popular.
We found that @georges-tech/tardis demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.