Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
compose-validators
Advanced tools
Composable JavaScript validators
with npm:
npm install compose-validators
or yarn:
yarn add compose-validators
npm contains several popular packages that perform different kinds of validations. But none of them provides clean and composable functions that can be used as validators. Some of them invent their own domain-specific languages, forcing you to learn custom syntax. Others require you to dive deep into JSON schemas and don't give you clean output.
This library is an attempt to solve these problems. It is focused on
compose-validators
everything is a validator, so you can compose your validators to get more complex ones while having the same API everywhere.Every validator is a function that accepts a value to be validated and returns a validation result.
Validation result is always a plain object with collected validation errors. If the object is empty it means the value is valid.
Having validation result as an object allows us to combine results from composed validators like object
or arrayOf
. This way you can nest your objects and arrays and therefore validate deep structures, like the following example:
import { object, string, required, compose } from "compose-validators";
const validator = object({
name: compose(string, required),
address: object({
city: compose(string, required),
}),
});
validator({
name: "John Doe",
address: {
city: "",
},
});
Applying this validator to an object with address.city
being an empty string,
you will get the following validation result:
{
"address": {
"city": {
"required: true
}
}
}
This validation result is non deterministic about your actual error messages, it does not deal with any sort of i18n, though provides enough information for you to display a clean error message.
FAQs
Composable JavaScript validators
The npm package compose-validators receives a total of 1 weekly downloads. As such, compose-validators popularity was classified as not popular.
We found that compose-validators demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.