
Research
/Security News
DuckDB npm Account Compromised in Continuing Supply Chain Attack
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
@thinkmill/fta-tariff-formula
Advanced tools
Library for representing and reasoning about tariff formulas.
A utility library for formalising and working with various types of tariff formulas. To use:
const formula = TariffFormula.parse('...');
console.log(formula.signature);
console.log(formula.quantity);
console.log(formula.unit);
console.log(formula.friendly);
console.log(formula.variables);
console.log(formula.evaluate(...));
This is an example JavaScript library for parsing tariff formulas and quantities served in DFAT Free Trade Agreements Portal Data.
This example module and grammar solves the problem of representation and reasoning about tariff formulas by machine in a consistent manner. The grammar is intended to be context-free and described in later section.
This is intended for engineers who have to encode and use tariff rates and quantities associated with trade data.
All tariff rates and quantity data served in FTA Portal API will be able to be parsed and worked with using this module.
People in this domain use a variety of notations to often refer to the same information. Even the most common and simple case of a tariff percentage. E.g. a 5% tariff may be represented as percentage, i.e. "5%," or as a fraction, "0.005," or sometimes there won't be any units associated with it and it will need to be decoded based on context or implicit or non-expressed knowledge. This is not very helpful for machine use of the data and was a problem that needed to solved to accurately represent tariff commitments.
In terms of applicability, existence and conformance is more important than specifics of the representation.
This particular example implementation will facilitate JavaScript and Nodejs users. This is developed to support the examples and use cases we had to implement to support our services.
Practitioners using other technologies and platforms are encouraged to treat this as one example implementation and develop their own implementations as necessary.
The MIT License (MIT)
Copyright (c) 2015-2016 National ICT Australia
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
npm install @thinkmill/fta-tariff-formula
Browserified code is checked into the repository as formula.js
Use ASCII characters.
e
: e '+' e
| e '-' e
| e '*' e
| e '/' e
| e '^' e
| e '%' e
| '-' e %prec UMINUS
| NUMBER
| VARIABLE
| e 'u' TEXT
| FUNCTION '(' e ',' e ')'
| '(' e ')'
| 'error'
| e 'friendly' TEXT
e
All whitespace characters between terminals are ignored.
Jison is used for implementation. See src/grammar.jison for more details.
sudo npm install -g babel-cli
sudo npm install -g browserify
sudo npm install -g jison
sudo npm install -g nodemon
In src folder.
Run
npm run grammar
to compile jison grammar file into js. I.e. grammar.js
Run
npm run workDev
to automatically compile files in src folder into es6 commonjs modules in root folder. I.e. index.js and test.js
Run
npm run browserify
to prepare commonjs files for browser. I.e. formula.js
FAQs
Library for representing and reasoning about tariff formulas.
We found that @thinkmill/fta-tariff-formula demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 16 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
Security News
The MCP Steering Committee has launched the official MCP Registry in preview, a central hub for discovering and publishing MCP servers.
Product
Socket’s new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.