Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
bpmn-in-color-moddle
Advanced tools
Read and write BPMN 2.0 diagram files with BPMN in Color extension in NodeJS and the browser.
import BpmnModdle from 'bpmn-moddle';
import BpmnInColorSchema from 'bpmn-in-color-moddle/resources/bpmn-in-color.json';
const moddle = new BpmnModdle({ color: BpmnInColorSchema });
// import XML with color namespace
To run the test suite that includes XSD schema validation you must have a Java JDK installed and properly exposed through the JAVA_HOME
variable.
Execute the test via
npm test
Perform a complete build of the application via
npm run all
Use under the terms of the MIT license.
0.2.0
CHORE
: turn into ES moduleDEPS
: update dependenciesFAQs
A moddle schema for BPMN in Color
The npm package bpmn-in-color-moddle receives a total of 649 weekly downloads. As such, bpmn-in-color-moddle popularity was classified as not popular.
We found that bpmn-in-color-moddle demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.