
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
credit-roles
Advanced tools
Enumeration and normalization of CRT Contributor Roles (https://credit.niso.org/)
CRediT (Contributor Roles Taxonomy) is a high-level taxonomy, including 14 roles, that can be used to represent the roles typically played by contributors to research outputs. The roles describe each contributor’s specific contribution to the scholarly output. (https://credit.niso.org/)
A utility for validating CRT Contributor Roles in your application, building canonical URLs, and showing descriptions.
npm install credit-roles
The library has no dependencies, and is helpful in validating, normalizing and showing descriptions of CRediT roles.
import { credit, CreditRole, CreditDescriptions } from 'credit-roles';
// Validate that a string is a role
credit.validate('contributor'); // true
// Handles British spelling and capitalizations
credit.normalize('conceptualiSation'); // "Conceptualization"
// Handles different punctuation
credit.normalize('writing: original draft'); // "Writing – original draft"
// Show the descriptions in your application
CreditDescriptions['Supervision']; // Oversight and leadership responsibility...
// An enum for easy access to the roles
CreditRole.WritingOriginalDraft;
validate - Validates if a string to a CRediT role if it is valid, will take URLs and unformatted stringsnormalize - Normalizes a CRediT string into the canonical string (including hyphens, capitalization and punctuation)buildUrl - Builds a URL to https://credit.niso.org, includes normalizationCreditRole - an enum of the CRediT rolesCreditDescriptions - Official descriptions of the CRediT roles by NISOstrict: only accept normalized CRediT roles when validating or building URLsIn addition to british english, incorrect case or punctuation, there are also a number of aliases that can be used for various roles:
| Alias | Official CRediT Role |
|---|---|
| writing | Writing – original draft |
| editing | Writing – review & editing |
| review | Writing – review & editing |
| analysis | Formal analysis |
| funding | Funding acquisition |
| admin | Project administration |
| administration | Project administration |
As of v2.0.0 this package is ESM only.
Made with love by
Curvenote
FAQs
Enumeration and normalization of CRT Contributor Roles (https://credit.niso.org/)
We found that credit-roles demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.