Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@santi100/bisect-lib
Advanced tools
This is a lightweight, fast library for doing binary search.
Binary search is a search algorithm that finds the position of a target value within a sorted array or list. It works by repeatedly dividing the search interval in half. At each step, the algorithm compares the target value with the middle element of the array or list. If the target value matches the middle element, its position is returned. If the target value is less than the middle element, the search is narrowed to the lower half of the array. If the target value is greater than the middle element, the search is narrowed to the upper half of the array. This process is repeated until the target value is found or the search interval is empty. Binary search has a time complexity of $O(\log{n})$, making it much faster than linear search for large arrays or lists.
"Deep equality" refers to the concept of comparing two values for equality not just on a shallow level, but on a deep level as well. When checking for deep equality, not only are the top-level values of the two objects being compared checked, but also their nested values. This can be particularly useful when comparing complex data structures like objects or arrays. For example, if two objects have the same keys but their values are objects themselves, checking for shallow equality would only compare the reference to those objects, not their internal properties. Checking for deep equality would compare those properties as well. JavaScript compares objects with referential equality by default.
"Referential equality" is a type of equality that compares if two variables refer to the exact same object in memory. In other words, it checks if the two variables point to the same memory address. This is often used when checking if two variables are the same instance of an object. If two variables have referential equality, any change made to one of them will also affect the other. In JavaScript, referential equality can be checked using the ===
operator.
Wanna contribute? File an issue or pull request! Make sure you follow the contribution Code of Conduct.
npm install @santi100/bisect-lib
yarn add @santi100/bisect-lib
pnpm install @santi100/bisect-lib
All functions support deep equality.
function bisect<T = unknown>(array: T[], target: T): number;
Searches for target
through array
with a recursive binary-search algorithm (designed for sorted arrays). Returns the index of the first ocurrence of target
, or -1 if it's not present.Tests show it doesn't work correctly for unsorted arrays, so you shouldn't pass them to this function:
bisectLib.bisect([5, 7, 3], 3) // Outputs -1 (not present)
Keep in mind this is NOT a bug in my code, it's just how binary search algorithms work.
function bisectMultiple<T extends C, C = T>(array: T[], target: T, opts?: BisectOptions<C>): number;
Searches for target
through array
with an iterative binary-search algorithm
(designed for sorted arrays) and returns an array of indices. See bisect
for details.*Hasn't been tested in an actual ES3 environment. Feel free to open an issue or pull request if you find any non-ES3 thing.
^The source code is about 3 kilobytes.
FAQs
Santi's Bisect Library: Binary search in a lightweight package.
The npm package @santi100/bisect-lib receives a total of 3 weekly downloads. As such, @santi100/bisect-lib popularity was classified as not popular.
We found that @santi100/bisect-lib demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.