Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Fork of cld with pre-built binaries. Language detection for Javascript. Based on the CLD2 (Compact Language Detector) library from Google. Highly optimized for space and speed. Runs about 10x faster than other libraries. Detects over 160 languages. Full t
Language detection for Javascript. Based on the CLD2 (Compact Language Detector) library from Google.
Highly optimized for space and speed. Runs about 10x faster than other libraries. Detects over 160 languages. Full test coverage. Runs on Linux, OS X, and Windows.
$ npm install cld
Linux users, make sure you have g++ >= 4.8. If this is not an option, you should be able to install node-cld 2.4.4 even with an older g++ build.
const cld = require('cld');
// As a promise
cld.detect('This is a language recognition example').then((result) => {
console.log(result);
});
// In an async function
async function testCld() {
const result = await cld.detect('This is a language recognition example');
console.log(result);
}
const cld = require('cld');
const text = 'Това е пример за разпознаване на Български език';
const options = {
isHTML : false,
languageHint : 'BULGARIAN',
encodingHint : 'ISO_8859_5',
tldHint : 'bg',
httpHint : 'bg'
};
// As a promise
cld.detect(text, options).then((result) => {
console.log(result);
});
// In an async function
async function testCld() {
const result = await cld.detect(text, options);
console.log(result);
}
Detect can be called leveraging the node callback pattern. If options are provided, the third parameter should be the callback.
const cld = require('cld');
cld.detect('This is a language recognition example', (err, result) => {
console.log(result);
});
Set to true if the string contains HTML tags
Pass a LANGUAGES key or value as a hint
Pass an ENCODINGS value as a hint
Pass top level domain as a hint
Pass an HTTP "Content-Encoding" value as a hint
Once the module has been installed, the underlying C sources will remain in the deps/cld
folder and continue to occupy considerable space. This is because they will be required if you ever need to run npm rebuild
. If you are under severe constraints you can delete this folder and reclam >100M
In this fork, I'm working on getting some pre-built binaries using the prebuildify
and prebuildify-cross
tools.
After installing these modules as dev dependencies, here's how I built pre-built binaries for Mac OS X and Linux (from a MacBook):
prebuildify --napi --strip
to get a prebuilds/darwin-x86
binary.prebuildify-cross -i centos7-devtoolset7 -t 16.13.2 --napi --strip
to get a prebuilds/linux-x86
binary. I don't know if specifying the -t
target it needed, but I set it to match my local version of node.After generating these binaries I made the recommended changes for loading a prebuilt binary using node-gyp-build
.
For testing locally, what I've done so far is run npm pack
inside the project folder to generate a tarball, then extracted the tarball to see what it contains and make sure it's got the pre-built binaries in it. Then I used the tarball to install cld as a dependency in another project npm install ../cld-2.8.1.tgz
and tested with both OS X and Linux. So far so good.
Copyright 2011-2015, Blagovest Dachev.
Apache 2
FAQs
Fork of cld with pre-built binaries for OS X and Linux. Language detection for Javascript. Based on the CLD2 (Compact Language Detector) library from Google. Highly optimized for space and speed. Runs about 10x faster than other libraries. Detects over 16
We found that cldpre demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.