Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@zlooun/exceljs
Advanced tools
Fixes the problem with writing a file using streams and not using RAM based on 'exeljs'
This is a fork of the "exceljs" package, which fixes the problem with writing a file using streams and not using RAM. It solves the problem of writing large exel files Original repo
npm install @zlooun/exceljs
To use streams corractly just write:
import * as fs from 'fs';
import { stream } from 'exceljs';
const output_file_name = "/test.xlsx";
const writeStream = fs.createWriteStream(output_file_name, { flags: 'w' });
const wb = new stream.xlsx.WorkbookWriter({ stream: writeStream });
const worksheet = wb.addWorksheet("test");
const headers = Array.from({length: 256}, (_, i) => i + 1).map((i) => 'test' + i);
for (let i = 0; i < 100000; i++) {
const row = headers.map((header) => header + '|' + i);
await worksheet.addRow(row).commit(); // This raw will be immediately written to disk and will not clog RAM.
}
await worksheet.commit(); // This is not necessary because await wb.commit() is used, but you can also write to disk not raw by raw, but worksheet by worksheet.
await wb.commit();
FAQs
Fixes the problem with writing a file using streams and not using RAM based on 'exeljs'
The npm package @zlooun/exceljs receives a total of 548 weekly downloads. As such, @zlooun/exceljs popularity was classified as not popular.
We found that @zlooun/exceljs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.