Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@metacorp/trie
Advanced tools
Blazing fast 1kb search
https://jsperf.com/metacorp-trie-search https://jsperf.com/metacorp-trie-init
NPM
npm install wade
CDN
<script src="https://unpkg.com/wade"></script>
Initialize Wade with an array of data.
const search = Wade(["Apple", "Lemon", "Orange", "Tomato"]);
Now you can search for a query within the data, and Wade will return results. Each result will include the index of the item in the data it corresponds to along with a score depending on the relevance of the query to the result.
search("App");
/*
[{
index: 0,
score: 1.25
}]
*/
Combined with libraries like Moon, you can create a real-time search.
To save data as an object, use Wade.save
on your search function, and then use these later when initializing Wade.
For example:
// Create the initial search function
const search = Wade(["Apple", "Lemon", "Orange", "Tomato"]);
const instance = Wade.save(search);
// Save `instance`
Later, you can get the same search function without having Wade recreate an index every time by doing:
// Retrieve `instance`, then
const search = Wade(instance);
instance
can be saved to a file using using JSON.stringify()
and loaded with JSON.parse()
.
Wade uses a set of processors to preprocess data and search queries. By default, these will:
A process consists of different functions that process a string and modify it in some way, and return the transformed string.
You can easily modify the processors as they are available in Wade.config.processors
, for example:
// Don't preprocess at all
Wade.config.processors = [];
// Add custom processor to remove periods
Wade.config.processors.push(function(str) {
return str.replace(/\./g, "");
});
All functions will be executed in the order of the array (0-n) and they will be used on each document in the data.
The stop words can be configured to include any words you like, and you can access the array of stop words by using:
Wade.config.stopWords = [/* array of stop words */];
The punctuation regular expression used to remove punctuation can be configured with:
Wade.config.punctuationRE = /[.!]/g; // should contain punctuation to remove
First, an index is generated from the data. When performing a search, the following happens:
In-depth explanations of the algorithm are available on the blog post and pdf.
Support Wade on Patreon to help sustain the development of the project. The maker of the project works on open source for free. If you or your company depend on this project, then it makes sense to donate to ensure that the project is maintained.
Licensed under the MIT License by Kabir Shah
FAQs
Blazing fast, <1kb search library
The npm package @metacorp/trie receives a total of 0 weekly downloads. As such, @metacorp/trie popularity was classified as not popular.
We found that @metacorp/trie demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.