Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@howiefh/ant-path-matcher
Advanced tools
An implementation for Ant-style path patterns.
Part of this mapping code has been kindly borrowed from Apache Ant and Spring Framework AntPathMatcher.
The mapping matches URLs using the following rules:
?
matches one character*
matches zero or more characters**
matches zero or more directories in a path{spring:[a-z]+}
matches the regexp [a-z]+
as a path variable named "spring"Examples
com/t?st.jsp
— matches com/test.jsp but also com/tast.jsp or com/txst.jspcom/*.jsp
— matches all .jsp files in the com directorycom/**/test.jsp
— matches all test.jsp files underneath the com pathorg/springframework/**/*.jsp
— matches all .jsp files underneath the org/springframework pathorg/**/servlet/bla.jsp
— matches org/springframework/servlet/bla.jsp but also org/springframework/testing/servlet/bla.jsp and org/servlet/bla.jspcom/{filename:\\w+}.jsp
will match com/test.jsp and assign the value test to the filename variableNote: a pattern and a path must both be absolute or must both be relative in order for the two to match. Therefore it is recommended that users of this implementation to sanitize patterns in order to prefix them with "/" as it makes sense in the context in which they're used.
npm install @howiefh/ant-path-matcher --save
import AntPathMatcher from '@howiefh/ant-path-matcher';
var pathMatcher = new AntPathMatcher();
pathMatcher.match("/?", "/a");
pathMatcher.match("test/*", "test/t");
pathMatcher.match("/**", "/testing/testing");
pathMatcher.match("/{bla}.*", "/testing.html");
FAQs
Ant Path Matcher
The npm package @howiefh/ant-path-matcher receives a total of 3,740 weekly downloads. As such, @howiefh/ant-path-matcher popularity was classified as popular.
We found that @howiefh/ant-path-matcher demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.