
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
alphabetize-object-keys
Advanced tools
Deeply sort an object keys alphabetically. This will also iterate over array values to find deep objects and sort those without altering the value array indexes.
var alphabetize = require('alphabetize-object-keys');
var obj = {
some: 1,
unsorted: 2,
object: 3,
with: {
deep: 1,
and: [{
complex: 1,
values: 2,
and: 3,
keys: 4
},{
even: 1,
more: 2,
keys: 3
}]
}
};
var sorted = alphabetize(obj);
sorted is now:
{
"object": 3,
"some": 1,
"unsorted": 2,
"with": {
"and": [
{
"and": 3,
"complex": 1,
"keys": 4,
"values": 2
},
{
"even": 1,
"keys": 3,
"more": 2
}
],
"deep": 1
}
}
Even though objects are dynamically arranged in memory and accessible by key, when you JSON.stringify an object, you may want the output to be alphabetically organized. In my case, I built this library to validate automated gamut tests against an API where I bombarded an API with fuzzy variations from a JSON data file. My tests were then able to determine that the right output was achieved by generating the expected response and comparing the stringified API output vs the spec. Additionally, the output of these tests get committed to the repo in an output folder full of JSON files. This library eliminated ugly commits where nothing changed but the ordering of the object keys, while we maintained visibility into changes to spec adherance.
FAQs
deeply alphabetize object keys
The npm package alphabetize-object-keys receives a total of 455 weekly downloads. As such, alphabetize-object-keys popularity was classified as not popular.
We found that alphabetize-object-keys demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.