
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
@stdlib/utils-tabulate-by
Advanced tools
Generate a frequency table according to an indicator function.
We believe in a future in which the web is a preferred environment for numerical computation. To help realize this future, we've built stdlib. stdlib is a standard library, with an emphasis on numerical and scientific computation, written in JavaScript (and C) for execution in browsers and in Node.js.
The library is fully decomposable, being architected in such a way that you can swap out and mix and match APIs and functionality to cater to your exact preferences and use cases.
When you use stdlib, you can be absolutely certain that you are using the most thorough, rigorous, well-written, studied, documented, tested, measured, and high-quality code out there.
To join us in bringing numerical computing to the web, get started by checking us out on GitHub, and please consider financially supporting stdlib. We greatly appreciate your continued support!
Generate a frequency table according to an indicator function.
npm install @stdlib/utils-tabulate-by
var tabulateBy = require( '@stdlib/utils-tabulate-by' );
Generates a frequency table according to an indicator function, i.e., a function which specifies how to categorize an element in the input collection.
function indicator( v ) {
return v[ 0 ];
}
var arr = [ 'beep', 'boop', 'foo', 'beep' ];
var out = tabulateBy( arr, indicator );
// returns [ [ 'b', 3, 0.75 ], [ 'f', 1, 0.25 ] ]
An indicator function is provided two arguments:
value: collection element.index: collection index.function indicator( v, i ) {
console.log( '%d: %s', i, v );
return v[ 0 ];
}
var arr = [ 'beep', 'boop', 'foo', 'bar' ];
var out = tabulateBy( arr, indicator );
// returns [ [ 'b', 3, 0.75 ], [ 'f', 1, 0.25 ] ]
The function accepts the following options:
thisArg: execution context.To set the indicator execution context, provide a thisArg.
function indicator( v ) {
this.count += 1;
return v[ 0 ];
}
var context = {
'count': 0
};
var opts = {
'thisArg': context
};
var arr = [ 'beep', 'boop', 'foo', 'bar' ];
var out = tabulateBy( arr, opts, indicator );
// returns [ [ 'b', 3, 0.75 ], [ 'f', 1, 0.25 ] ]
console.log( context.count );
// => 4
The returned frequency table is an array of arrays. Each sub-array corresponds to a unique value in the input collection and is structured as follows:
0: unique value.1: value count.2: frequency percentage.collection may be either an Array, Typed Array, or an array-like Object (excluding strings and functions).var randu = require( '@stdlib/random-base-randu' );
var floor = require( '@stdlib/math-base-special-floor' );
var tabulateBy = require( '@stdlib/utils-tabulate-by' );
var vals;
var arr;
var out;
var i;
var j;
function indicator( value ) {
return value[ 0 ];
}
vals = [ 'beep', 'boop', 'foo', 'bar', 'woot', 'woot' ];
// Generate a random collection...
arr = new Array( 100 );
for ( i = 0; i < arr.length; i++ ) {
j = floor( randu()*vals.length );
arr[ i ] = vals[ j ];
}
// Generate a frequency table:
out = tabulateBy( arr, indicator );
console.log( out );
@stdlib/utils-count-by: group values according to an indicator function and return group counts.@stdlib/utils-group-by: group values according to an indicator function.@stdlib/utils-tabulate: generate a frequency table.This package is part of stdlib, a standard library for JavaScript and Node.js, with an emphasis on numerical and scientific computing. The library provides a collection of robust, high performance libraries for mathematics, statistics, streams, utilities, and more.
For more information on the project, filing bug reports and feature requests, and guidance on how to develop stdlib, see the main project repository.
See LICENSE.
Copyright © 2016-2026. The Stdlib Authors.
FAQs
Generate a frequency table according to an indicator function.
The npm package @stdlib/utils-tabulate-by receives a total of 2 weekly downloads. As such, @stdlib/utils-tabulate-by popularity was classified as not popular.
We found that @stdlib/utils-tabulate-by demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.