Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
adaptive-expressions
Advanced tools
Bots, like any other application, require use of expressions to evaluate outcome of a condition based on runtime information available in memory or to the dialog or the language generation system.
Common expression language was put together to address this core need as well as to rationalize and snap to a common expression language that will be used across Bot Framework SDK and other conversational AI components that need an expression language.
See API reference for Expression for API reference.
See Here for a complete list of prebuilt functions supported by the common expression language library.
yarn
yarn build
yarn test
If you changed the g4 file, please use antlr-build-expression
and antlr-build-commonregex
to generate latest lexer/parser. By the way, You will need to have a modern version of Java (>= JRE 1.6) to use it.
FAQs
Common Expression Language
The npm package adaptive-expressions receives a total of 68,201 weekly downloads. As such, adaptive-expressions popularity was classified as popular.
We found that adaptive-expressions demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.