
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@the-collab-lab/shopping-list-utils
Advanced tools
A collection of utility methods used for the shopping list project
This is an NPM package used to share common methods between the shopping list applications for The Collab Lab!
To use this package, you can run the following in your project:
npm i @the-collab-lab/shopping-list-utils
and use it in your projects like so:
import { generateToken, words, calculateEstimate } from '@the-collab-lab/shopping-list-utils
Current features include:
Function | Description |
---|---|
words | An array of words available for use when generating a token. |
generateToken | Creates a random token string that is 3 words long based on a random calculation. |
calculateEsimate | This is used to calculate when someone will want to purchase another item based on their purchasing habits. |
All the code is hosted in the src
folder and organized into directories by functionality. If you would like to add a new feature, you can create a directory for it, and then add an export from that directory in the src/index.ts
file.
This repository is currently set up with ESLint and Prettier for formatting, and you can run npm run lintfix
and npm run format
to clean up the codebase.
Tests are also set up with Jest and can be run with npm run test
Before creating a release, make sure to increment the version number in
package.json
Releases are automatically built with a Github Workflow Action when a new release is published in Github.
FAQs
A collection of utility methods used for the shopping list project
The npm package @the-collab-lab/shopping-list-utils receives a total of 43 weekly downloads. As such, @the-collab-lab/shopping-list-utils popularity was classified as not popular.
We found that @the-collab-lab/shopping-list-utils demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.