Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
c4-string-regex
Advanced tools
Fairly judge C4 Bot Reports by using Regex
Auto-Judge all duplicates
Auto-Judge folders
Count scores
Count and store in CSV
Declare your Keys and Scores
First Parse the Reports with Pharaoh (get a title and a score, on separate lines)
Then use the tool
## Commands
All commands are bodged, you have to open each respective file and change the CONSTANTS
"auto": "ts-node src/auto_judge_folder.ts",
"start": "ts-node src/index.ts",
"dev": "ts-node src/index.ts",
"count": "ts-node src/count.ts",
"folder": "ts-node src/count_folder.ts",
Compares one file at a time
Counts Results in one File
Counts Results in one Folder (and stores in a csv)
Given a list of reports (regex selector), applies the judging to the other reports (another regex selector)
In case of multiple differente judgments it adds a TODO with all possible judging results
NOTE: Conflict resolution is nunanced, you should consider whether you would want a revert (add a Throw) or if you prefer a TODO as part of your workflow
FAQs
A simple Typescript template to start your package
The npm package c4-string-regex receives a total of 0 weekly downloads. As such, c4-string-regex popularity was classified as not popular.
We found that c4-string-regex demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.