
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
@types/d3-format
Advanced tools
TypeScript definitions for D3JS d3-format module
npm install --save @types/d3-format
This package contains type definitions for D3JS d3-format module ( https://github.com/d3/d3-format/ ).
Files were exported from https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/d3-format
Additional Details
These definitions were written by Tom Wanzek https://github.com/tomwanzek, Alex Ford https://github.com/gustavderdrache, Boris Yankov https://github.com/borisyankov, denisname https://github.com/denisname.
Numeral is a standalone library for formatting and manipulating numbers. It offers a wide range of formatting options and is similar to d3-format in its purpose. However, it does not require D3 and has its own syntax for specifying formats.
Accounting.js is a tiny JavaScript library for number, money and currency formatting, which also offers some basic arithmetic and utility functions. It is similar to d3-format in terms of currency formatting but is more focused on accounting and financial operations.
Globalize provides number formatting and parsing, currency formatting, and date and time formatting that are culture-aware. It is based on the Unicode Consortium's Common Locale Data Repository (CLDR). It is more comprehensive than d3-format in terms of internationalization support.
FAQs
TypeScript definitions for d3-format
We found that @types/d3-format demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.