
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
All heroes have sidekicks and as Dora the Explorer, Intelimetrica has its own sidekick Botas!
Botas is a javascript utilities library to be used in products across the firm.
$ npm install --save botas
// To use utilities from Formatters, General, String or Time
const { separateThousands } = require('botas');
// or using ES6
import { separateThousands } from 'botas';
// then use it
separateThousands(12000); //=>'12,000'
separateThousands('1250000'); //=> '1,250,000'
// To use a random script
const { uploadToS3 } = require('botas/scripts');
// or using ES6
const { uploadToS3 } from 'botas/scripts';
Checkout the docs here
Botas has utilities and random scripts
Utilities is divided in 4 areas. Formatters, General, String, Time.
Random scripts are just that, random scripts.
Scripts are not exposed in the root of the libraryFor bug fixes and extending the library, submit your Pull Request with a description of your change and adding the prefix feature, fix or refactor to the name of your branch.
Please, follow the library convention by addering to the following guides:
Worry about writing the documentation. Don't worry about updating docs branch
FAQs
Intelimetrica's sidekick for Js development. A helpers library
We found that botas demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.