Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
@howiefh/ant-path-matcher
Advanced tools
An implementation for Ant-style path patterns.
Part of this mapping code has been kindly borrowed from Apache Ant and Spring Framework AntPathMatcher.
The mapping matches URLs using the following rules:
?
matches one character*
matches zero or more characters**
matches zero or more directories in a path{spring:[a-z]+}
matches the regexp [a-z]+
as a path variable named "spring"Examples
com/t?st.jsp
— matches com/test.jsp but also com/tast.jsp or com/txst.jspcom/*.jsp
— matches all .jsp files in the com directorycom/**/test.jsp
— matches all test.jsp files underneath the com pathorg/springframework/**/*.jsp
— matches all .jsp files underneath the org/springframework pathorg/**/servlet/bla.jsp
— matches org/springframework/servlet/bla.jsp but also org/springframework/testing/servlet/bla.jsp and org/servlet/bla.jspcom/{filename:\\w+}.jsp
will match com/test.jsp and assign the value test to the filename variableNote: a pattern and a path must both be absolute or must both be relative in order for the two to match. Therefore it is recommended that users of this implementation to sanitize patterns in order to prefix them with "/" as it makes sense in the context in which they're used.
npm install @howiefh/ant-path-matcher --save
import AntPathMatcher from '@howiefh/ant-path-matcher';
var pathMatcher = new AntPathMatcher();
pathMatcher.match("/?", "/a");
pathMatcher.match("test/*", "test/t");
pathMatcher.match("/**", "/testing/testing");
pathMatcher.match("/{bla}.*", "/testing.html");
FAQs
Ant Path Matcher
The npm package @howiefh/ant-path-matcher receives a total of 3,881 weekly downloads. As such, @howiefh/ant-path-matcher popularity was classified as popular.
We found that @howiefh/ant-path-matcher demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.