Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
awesome-code-frame
Advanced tools
Fork of @babel/code-frame with modern dependencies and exports
This is a fork of @babel/code-frame with the latest dependencies (e.g of chalk) and exported as a pure ESM package. It uses the latest chalk, which means it requires support for package imports. If this causes problems in Jest for you, see this issue for help.
The package exports a function codeFrameColumns()
which works just like @babel/code-frame
although all dependent types are exported too.
codeFrameColumns( rawLines: string, loc: NodeLocation, opts?: Options ): string;
where NodeLocation
is defined as:
interface NodeLocation {
start: Location;
end?: Location;
}
Location
as:
interface Location {
column: number;
line: number;
};
and Options
as:
export interface Options {
/**
* Syntax highlight the code as JavaScript for terminals. default: false
* */
highlightCode?: boolean;
/**
* The number of lines to show above the error. default: 2
* */
linesAbove?: number;
/**
* The number of lines to show below the error. default: 3
* */
linesBelow?: number;
/**
* Forcibly syntax highlight the code as JavaScript (for non-terminals);
* overrides highlightCode.
* default: false
*/
forceColor?: boolean;
/**
* Pass in a string to be displayed inline (if possible) next to the
* highlighted location in the code. If it can't be positioned inline,
* it will be placed above the code frame.
* default: nothing
*/
message?: string;
}
FAQs
Fork of @babel/code-frame with modern dependencies and exports
We found that awesome-code-frame demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.