
Research
/Security News
DuckDB npm Account Compromised in Continuing Supply Chain Attack
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
@keystonehq/alias-sampling
Advanced tools
A Node.js module for efficient sampling from a discrete probability distribution using the alias method.
A JavaScript library for efficient sampling of random values from a discrete probability distribution using the Walker-Vose alias method, provided by KeystoneHQ.
Install the library using yarn:
yarn add @keystonehq/alias-sampling
Or npm:
npm install @keystonehq/alias-sampling
To use the library, first import the sample
function and then create a sampler with a given probability distribution and optionally an array of outcomes. You can then generate random samples using the .next()
method.
import sample from '@keystonehq/alias-sampling';
// Create a sampler with specified probabilities and outcomes
var s = sample([0.5, 0.25, 0.25], ['A', 'B', 'C']);
// Generate a single random outcome
console.log(s.next()); // => 'A', 'B', or 'C' according to specified probabilities
import sample from '@keystonehq/alias-sampling';
// Create a sampler with specified probabilities
var s = sample([0.5, 0.25, 0.25], [10, 20, 30]);
// Generate multiple random samples
console.log(s.next(1000)); // => an array of 1000 random samples
import sample from '@keystonehq/alias-sampling';
// Create a sampler without specifying outcomes (defaults to indices)
var s = sample([0.5, 0.25, 0.25]);
// Generate a single random index
console.log(s.next()); // => 0, 1, or 2 with the specified probabilities
import sample from '@keystonehq/alias-sampling';
// Custom random generator function
var rand = Math.random;
// Create a sampler with specified probabilities and custom random generator
var s = sample([0.5, 0.25, 0.25], null, rand);
// Generate a random index using the custom random generator
console.log(s.next()); // => 0, 1, or 2 with the specified probabilities
FAQs
A Node.js module for efficient sampling from a discrete probability distribution using the alias method.
We found that @keystonehq/alias-sampling demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
Security News
The MCP Steering Committee has launched the official MCP Registry in preview, a central hub for discovering and publishing MCP servers.
Product
Socket’s new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.