Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
@shopify/predicates
Advanced tools
@shopify/predicates
A set of common JavaScript predicates. The functions in this library either take one input and return true
/false
, or return a customized function that does so.
yarn add @shopify/predicates
isPositiveNumericString
Returns true
when its input is a positive numeric string and false
otherwise.isNumericString
Returns true
when its input is a numeric string and false
otherwise.isEmpty
Returns true
when its input is null
, undefined
, or has length
0.isEmptyString
Returns true
when it's input is an empty string or contains only whitespace.notEmpty
Returns true
when its input is not null
, undefined
or has length
0.notNumericString
Returns true
when its input is not a numeric string and false
otherwise.lengthMoreThan
Given a number, returns a function that returns true when that input has length more than that number and false otherwise.lengthLessThan
Given a number, returns a function that returns true when that input has length less than that number and false otherwise.not
Given a function that returns a boolean, returns a function that returns a boolean in the opposite cases.FAQs
A set of common JavaScript predicates
The npm package @shopify/predicates receives a total of 9,797 weekly downloads. As such, @shopify/predicates popularity was classified as popular.
We found that @shopify/predicates demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 24 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.