Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
core.lambda
Advanced tools
Core combinators and higher-order functions
λ = require('core.lambda')
function add2(a, b) { return a + b }
var add = λ.curry(add2)
λ.compose(add(1), λ.compose( λ.uncurry(add2)
, λ.constant([2, 3])))()
// => 6
The easiest way is to grab it from NPM. If you're running in a Browser environment, you can use Browserify
$ npm install core.lambda
If you're not using NPM, Download the latest release, and require
the core.lambda.umd.js
file:
var Lambda = require('core.lambda')
Download the latest release, and require the core.lambda.umd.js
file:
require(['core.lambda'], function(Lambda) {
( ... )
})
Download the latest release, and load the core.lambda.umd.js
file. The properties are exposed in the global folktale.core.lambda
object:
<script src="/path/to/core.lambda.umd.js"></script>
If you want to compile this library from the source, you'll need Git, Make, Node.js, and run the following commands:
$ git clone git://github.com/folktale/core.lambda.git
$ cd core.lambda
$ npm install
$ make bundle
This will generate the dist/core.lambda.umd.js
file, which you can load in
any JavaScript environment.
You can read the documentation online or build it yourself:
$ git clone git://github.com/folktale/core.lambda.git
$ cd core.lambda
$ npm install
$ make documentation
Then open the file docs/index.html
in your browser.
This library assumes an ES5 environment, but can be easily supported in ES3 platforms by the use of shims. Just include es5-shim :)
Copyright (c) 2013 Quildreen Motta.
Released under the MIT licence.
FAQs
Core combinators and higher-order functions
We found that core.lambda demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.