
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
@okiba/core
Advanced tools
Sharp collection of tools for front-end development, created with performance in mind. đź—ˇ
Our primary concerns are: maximum FPS and minimum bundle size 🚀
You can visualize it as a bag full of ninja tools for you to pick and use to tackle your front-end challenges.
It is meant to level-up and ease-in your web-development routines.
It's designed so that you can drop-in as much or as less you want, by importing just what you actually use, up to a single function level, so that your final bundle will stay slim.
It is always evolving and open to contributons from OSS peers.
It is not meant to replace the tools you already have, but rather offer battle-tested solutions to common routine tasks; sometimes it offers a cheaper alternative.
It does not impose choiches and integrates smoothly with frameworks you already use.
We strive to achieve affidability and affordability.
export single units that you can import separately. ✨This way tree-shake and uglification can work at their best.
Being dependency-free you always know what you're using and can look it up in our API, no surpises.
We don't put something in until it is actually needed.
We strictly check for duplication and complexity, and take charge of some development pain in order to keep bundle size small.
Metrics matter, so our CI tools help us by enforcing 100% coverage and A maintainability.
No line makes it into master if the overall code quality gets degraded.
We could state that our API is 100% documented, but we still have no tests in place to back this metric up... so we don't 🤡
Okiba is transpiled for browser usage only. If you use it in production, don't forget to transpile it with your bundler.
You can grab all okiba core packages as an unique npm package
npm i --save @okiba/core
Array utils for okiba js
arrayOrOne, castArray, spliceOneUtilities that operate on classes
mixinManages a DOM component, binds UI and recursively binds child components. Can be extended or instantiated
constructor, onDestroy, destroyUtilities to work with dom elements and selectors
byId, qs, qsa, on, off, eventCoords, offset, getElements, matches, isChildOf, delegate, createCustomEventEmits drag events for all common pointers kinds (touch & mouse)
constructor, destroyCollection of easings to alter a value
Emits events that can be listened and unlistened to
on, off, emit, hasListeners, destroyA component that has events. Extends Component and composes with EventEmitter, inerithing both's method sets.
on, off, emit, destroyA collection of contextless utility functions
debounceCollection of math functions
lerp, map, cap, distance, roundManages a dinamically grown pool of DOM Elements import PoolSystem from '@okiba/pool-system'
constructor, ensure, get, free, destroyManages loading of resources trough fetch to boost caching. Transparently relies on a WebWorker if possible to load on a separate thread.
loadSearch utilities
binarySearchMaps progress ovrer time, normalized between 0 and 1
constructor, update, reset, setProgress, setDirection, reverseSet of useful functions to ease WebWorkers development
createWorkerFAQs
A complete collection of Okiba core features
The npm package @okiba/core receives a total of 12 weekly downloads. As such, @okiba/core popularity was classified as not popular.
We found that @okiba/core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.