Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
alphabetize-object-keys
Advanced tools
Deeply sort an object keys alphabetically. This will also iterate over array values to find deep objects and sort those without altering the value array indexes.
var alphabetize = require('alphabetize-object-keys');
var obj = {
some: 1,
unsorted: 2,
object: 3,
with: {
deep: 1,
and: [{
complex: 1,
values: 2,
and: 3,
keys: 4
},{
even: 1,
more: 2,
keys: 3
}]
}
};
var sorted = alphabetize(obj);
sorted is now:
{
"object": 3,
"some": 1,
"unsorted": 2,
"with": {
"and": [
{
"and": 3,
"complex": 1,
"keys": 4,
"values": 2
},
{
"even": 1,
"keys": 3,
"more": 2
}
],
"deep": 1
}
}
Even though objects are dynamically arranged in memory and accessible by key, when you JSON.stringify an object, you may want the output to be alphabetically organized. In my case, I built this library to validate automated gamut tests against an API where I bombarded an API with fuzzy variations from a JSON data file. My tests were then able to determine that the right output was achieved by generating the expected response and comparing the stringified API output vs the spec. Additionally, the output of these tests get committed to the repo in an output folder full of JSON files. This library eliminated ugly commits where nothing changed but the ordering of the object keys, while we maintained visibility into changes to spec adherance.
FAQs
deeply alphabetize object keys
We found that alphabetize-object-keys demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.