Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Mixin for checking if value is inside or outside of bounds You can use Bounds
for any objects for
which you can define compare function (dates, vectors etc.)
In addition to regular range checking Bounds
supports reversed ranges: if
min is bigger than max it considers values outside ot the max, min range as valid.
$ npm install bounds
Sets comparison function. fn
should take 2 arguments and behave like sort comparison function i.e.
return 0 if items are equal, -1 if the first is smaller than the second, 1 is the first is bigger
than the second.
Set lower bound (inclusive) to v
Set upper bound (inclusive) to v
Return true
if v
is in bounds i.e. min <= v <= max
Return true
if v
is outside of bounds i.e. v < min
OR max < v
Return true
if v < min
Return true
if v > max
For regular ranges it's the same as in
. For reversed ranges it considers as valid values that are
outside of the range (it's still inclusive so min
and max
are still considered valid)
Returns the passed value for valid
values. For invalid values returns the closest boundary (min
or max
). restrict
only works for reverse ranges if distance
function is defined.
Optional distance function: it's only used when calculating proper restriction for reversed ranges.
If restricted value is closed to min
than to max
, then the min
is returned.
MIT
FAQs
Mixin for checking if value is inside or outside of bounds
The npm package bounds receives a total of 6 weekly downloads. As such, bounds popularity was classified as not popular.
We found that bounds demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.