Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@gliff-ai/audit
Advanced tools
👋 Welcome in! 👋
This repository contains the Open Source code for gliff.ai’s AUDIT product.
AUDIT aims to allow users and regulatory bodies to easily and efficiently explore a fully documented audit trail of dataset development for the purposes of regulating imaging AI products. AUDIT is just one part of gliff.ai’s growing privacy-preserving MLOps (Machine Learning Operations) platform. When the full gliff.ai platform platform is used, AUDIT provides just one step in developing high-quality and auditable datasets that satisfy any relevant regulatory frameworks which enables our users to build world-changing and trustworthy AI models and products.
A preview build of the current main
branch is here.
✅ We welcome contributions on this repository! ✅
Looking for something specific? 🔍
Run npm install @gliff-ai/audit
in your command line to install the package from the npm registry.
Frontend code should always be written in Typescript and transpiled using the options in tsconfig.json
in this repository. npm should always be used for package management.
npm run serve
will run a local webpack developer server for quick access.
As a standard, all code contributions should be linted with ESLint using .eslintrc.js
and formatted with Prettier. Note: HTML + CSS, mark-up and mark-down code are exemptions and should be formatted using Prettier but do not need to be linted.
npm run lint
will lint the codebase.
Our GitHub Actions will also lint any pull requests before they're merged.
All code contributions should be tested using both the Jest and React Testing Library.
npm run test
will run any existing tests in our codebase.
Our GitHub Actions will also test any pull requests before they're merged! These all must pass and have 2 reviewers approval before a pull request can merge. If one or a few fail and your troubleshooting is not giving an answer, please check out the gliff.ai Contribution Guide 👋 for further guidance.
GitHub Actions should only be included under the .github/workflows
path.
We welcome all contributors and any contributions on this project through the likes of feedback on or suggesting features and enhancements, raising bug problems, reporting on security vulnerabilities, reviewing code, requesting or creating tests, user testing etc. to ensure gliff.ai can help enable the best and biggest positive impact possible.
Sounds good and want to contribute to the project? 🧑💻
Please check the gliff.ai Contribution Guide 👋 before you get started. Don’t forget the gliff.ai Code of Conduct ⚠️ and gliff.ai Security Policy 🔒 too!
A big thank you from the entire gliff.ai team to these fellow contributors (emoji key):
{{Contributor List - coming soon}}
Need some help? 🤔 Have a question? 🧠
Reach out to the gliff.ai team at community@gliff.ai or on our GitHub discussions.
This code is licensed under a GNU AGPLv3 license 📝
Curious about our reasoning for this? Read about them here!
FAQs
gliff.ai AUDIT
The npm package @gliff-ai/audit receives a total of 5 weekly downloads. As such, @gliff-ai/audit popularity was classified as not popular.
We found that @gliff-ai/audit demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.