
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
certlogic-validation
Advanced tools
CertLogic is a standard for expressing logic, such as the kind you find in business/validation rules, in plain JSON format. It is a specified subset of JsonLogic, extended with necessary custom operations - e.g. for working with dates. It's part of the efforts surrounding the Digital COVID Certificate, and as such serves as the basis for defining interchangeable validation rules on top of the DCC.
This NPM package consists of a validator for CertLogic, conforming to version 1.1.0 of the specification, implemented in JavaScript(/TypeScript).
This NPM package exposes the following top-level things:
ValidationError
: a TypeScript type for reporting validation errors on (sub) expressions.validateFormat
: a function that validates CertLogic expressions purely based on the CertLogic format, without regarding types.validate
: a function that validates CertLogic expressions, and returns any violations as validation errors.
Currently, this is effectively an alias for validateFormat
, but that might change in the future.dataAccesses
: a function that computes all data accesses that may be performed by the given CertLogic expression.Note that documentation is...sparse outside of the overall documentation for CertLogic. In particular, code-level documentation is largely absent. On the other hand: the TypeScript source code is likely easy enough to understand.
This NPM package exposes a CLI command, which can be used as follows:
$ npx certlogic-validate <path of JSON file containing CertLogic expression>
or as
$ ./node_modules/.bin/certlogic-validate <path of JSON file containing CertLogic expression>
inside any NPM package that has certlogic-validation
installed as dependency.
Executing the tests requires the test suite, located directly next to this directory.
Copyright (c) 2021 Meinte Boersma (as working for the Dutch Ministry of Health, Science, and Sports, and on behalf of/in support of the European Health Network), and all other contributors
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License.
You may obtain a copy of the License at https://www.apache.org/licenses/LICENSE-2.0.
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the LICENSE for the specific language governing permissions and limitations under the License.
FAQs
Validators for CertLogic
We found that certlogic-validation demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.