
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
@skuhnow/directus-format-title
Advanced tools
Custom string formatter that converts any string into [Title Case](http://www.grammar-monster.com/lessons/capital_letters_title_case.htm)
Custom string formatter that converts any string into Title Case
This package converts any string into title case. This means only using capital letters for the principal words. Articles, conjunctions, and prepositions do not get capital letters unless they start or end the title
| input | output |
|---|---|
snowWhiteAndTheSevenDwarfs | Snow White and the Seven Dwarfs |
NewcastleUponTyne | Newcastle upon Tyne |
brighton_on_sea | Brighton on Sea |
apple_releases_new_ipad | Apple Releases New iPad |
7-food-trends | 7 Food Trends |
The package contains a list of words that use some sort of special casing, for example: McDonalds, iPhone, and YouTube.
$ npm install @skuhnow/directus-format-title
The package by default converts camelCase, PascalCase, underscore, and "regular" sentences to Title Case
formatTitle(string, [separator]);
formatTitle('snowWhiteAndTheSevenDwarfs');
// => Snow White and the Seven Dwarfs
You can provide an optional separator regex as a second parameter to support splitting the string on different
characters. By default, this regex is set to /\s|-|_/g.
If your favorite specially cased word isn't being capitalized properly, please open an issue or submit a pull request!
FAQs
Custom string formatter that converts any string into [Title Case](http://www.grammar-monster.com/lessons/capital_letters_title_case.htm)
We found that @skuhnow/directus-format-title demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.