
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
@keystonehq/alias-sampling
Advanced tools
A Node.js module for efficient sampling from a discrete probability distribution using the alias method.
A JavaScript library for efficient sampling of random values from a discrete probability distribution using the Walker-Vose alias method, provided by KeystoneHQ.
Install the library using yarn:
yarn add @keystonehq/alias-sampling
Or npm:
npm install @keystonehq/alias-sampling
To use the library, first import the sample
function and then create a sampler with a given probability distribution and optionally an array of outcomes. You can then generate random samples using the .next()
method.
import sample from '@keystonehq/alias-sampling';
// Create a sampler with specified probabilities and outcomes
var s = sample([0.5, 0.25, 0.25], ['A', 'B', 'C']);
// Generate a single random outcome
console.log(s.next()); // => 'A', 'B', or 'C' according to specified probabilities
import sample from '@keystonehq/alias-sampling';
// Create a sampler with specified probabilities
var s = sample([0.5, 0.25, 0.25], [10, 20, 30]);
// Generate multiple random samples
console.log(s.next(1000)); // => an array of 1000 random samples
import sample from '@keystonehq/alias-sampling';
// Create a sampler without specifying outcomes (defaults to indices)
var s = sample([0.5, 0.25, 0.25]);
// Generate a single random index
console.log(s.next()); // => 0, 1, or 2 with the specified probabilities
import sample from '@keystonehq/alias-sampling';
// Custom random generator function
var rand = Math.random;
// Create a sampler with specified probabilities and custom random generator
var s = sample([0.5, 0.25, 0.25], null, rand);
// Generate a random index using the custom random generator
console.log(s.next()); // => 0, 1, or 2 with the specified probabilities
FAQs
A Node.js module for efficient sampling from a discrete probability distribution using the alias method.
We found that @keystonehq/alias-sampling demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.