
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
@rollingversions/version-number-canary
Advanced tools
Utilities for manipulating versoin numbers in Rolling Versions. This package is designed to support a super-set of semver.
Utilities for manipulating versoin numbers in Rolling Versions. This package is designed to support a super-set of semver.
<version core> being in the form <major> "." <minor> "." <patch>, it is an arbitrary length array of numeric identifiers.<numeric identifier>s are allowed to have leading 0s. These leading 0s are always ignored.999999999999999, which is approximately 10x smaller than the maximum allowed by the node semver package). This allows us to perform the check on the string, rather than having to parse it firstThe Backus–Naur Form Grammar deviates from SemVer 2.0.0 as follows:
- <version core> ::= <major> "." <minor> "." <patch>
- <major> ::= <numeric identifier>
- <minor> ::= <numeric identifier>
- <patch> ::= <numeric identifier>
+ <version core> ::= <dot separated version identifiers>
+
+ <dot-separated version identifiers> ::= <version identifier>
+ | <version identifier> "." + <dot-separated version identifiers>
+
+ <version identifier> ::= <numeric identifier>
- <numeric identifier> ::= "0"
- | <positive digit>
- | <positive digit> <digits>
+ <numeric identifier> ::= <digits>
A version number consists of three parts:
interface VersionNumber {
numerical: number[];
prerelease: string[];
build: string[];
}
numerical part is the main part of the version number. It is a list of integers ordered from most significant to least significant. In SemVer this will have 3 values: [major, minor, patch]prerelease part is an array of strings that can be added to denote arbitrary pre-releases. When comparing, we treat any values in the prerelease array that are valid integers as being integers, and compare them numerically. Versions that do not have any prerelease strings are always considered "greater" (i.e. to be a more recent release) than versions that have prerelease strings.build part is an additional arbitrary array of strings. Unlike the prelease, the build is completely ignored when comparing version numbers.export declare function parseString(str: string): VersionNumber | null;
export declare function printString(version: VersionNumber): string;
export declare function normalize(
version: VersionNumber,
numericalLength: number,
): VersionNumber;
export declare function increment(
version: VersionNumber,
index: number,
): VersionNumber;
/**
* Compare two version numbers (e.g. for sorting)
* N.B. as per the "semver" spec, build metadata is always ignored
* when comparing version numbers. This means that two version numbers
* can be considered "equal" even if they have different build metadata
*/
export declare function compare(a: VersionNumber, b: VersionNumber): number;
export declare const eq: (a: VersionNumber, b: VersionNumber) => boolean;
export declare const neq: (a: VersionNumber, b: VersionNumber) => boolean;
export declare const gt: (a: VersionNumber, b: VersionNumber) => boolean;
export declare const gte: (a: VersionNumber, b: VersionNumber) => boolean;
export declare const lt: (a: VersionNumber, b: VersionNumber) => boolean;
export declare const lte: (a: VersionNumber, b: VersionNumber) => boolean;
export declare function isPrerelease(a: VersionNumber): boolean;
export declare const sortAscending: {
(versions: readonly VersionNumber[]): VersionNumber[];
<T>(
versions: readonly T[],
getVersionNumber: (value: T) => VersionNumber,
): T[];
};
export declare const sortDescending: {
(versions: readonly VersionNumber[]): VersionNumber[];
<T>(
versions: readonly T[],
getVersionNumber: (value: T) => VersionNumber,
): T[];
};
FAQs
Utilities for manipulating versoin numbers in Rolling Versions. This package is designed to support a super-set of semver.
We found that @rollingversions/version-number-canary demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.