Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
deckardcain
Advanced tools
"As a token of my gratitude, I will identify items for you at no charge."
Deckard Cain library identifies (media) type of API description files.
text/vnd.apiblueprint
text/vnd.legacyblueprint
application/swagger+json
(according to swagger-api/swagger-spec#110) and application/swagger+yaml
application/vnd.refract.api-description+json
and application/vnd.refract.api-description+yaml
npm install deckardcain
import {identify} from 'deckardcain';
identify(`
HOST: http://example.com
--- API Name ---
All Messages
GET /messages
< 200
`) // 'text/vnd.legacyblueprint'
identify(`
FORMAT: 1A
HOST: http://example.com
# API Name
## Group Messages
### All Messages [/messages]
#### Read [GET]
+ Response 200 (text/plain)
`) // 'text/vnd.apiblueprint'
Please mind the library is written in ECMAScript 6.
git clone https://github.com/apiaryio/deckardcain
cd deckardcain
npm install
npm test
See also the .travis.yml
file.
Source code is located in the ./src
folder and gets automatically transpiled into ./lib
folder when npm install
or npm publish
is invoked. However, should you need to transpile it manually, use npm run compile
.
Deckard Cain library pays tribute to a fictional character from Diablo video game series. In Diablo II, Deckard Cain provides his wisdom and identifies items for free after being rescued by the player.
FAQs
Identifies (media) type of API description files
The npm package deckardcain receives a total of 2,469 weekly downloads. As such, deckardcain popularity was classified as popular.
We found that deckardcain demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.