
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
DefiantJS provides the ability for you to build smart templates applicable on JSON structures, based upon proven & standardized technologies such as XSLT and XPath.
DefiantJS also extends the global object JSON with the method "search", which enables searches on JSON structures with XPath expressions and returns matches as an array-like object.
For detailed information, please visit defiantjs.com and try out the XPath Evaluator or...
var data = {
// ...biiig JSON structure...
};
// this way has a non-blocking effect on the UI-thread
Defiant.getSnapshot(data, function(snapshot) {
// executed when the snapshot is created
found = JSON.search(snapshot, '//item');
});
var data = {
// ...large JSON structure...
};
// Regular search
found = JSON.search(data, '//item');
var snapshot = Defiant.getSnapshot(data);
// Snapshot search - this is more than 100 times faster than 'regular search'
found = JSON.search(snapshot, '//item');
var data = [
{ "x": 2, "y": 0 },
{ "x": 3, "y": 1 },
{ "x": 4, "y": 1 },
{ "x": 2, "y": 1 }
],
res = JSON.search( data, '//*[ y > 0 ]' );
console.log( res );
// [{ x=3, y=1}, { x=4, y=1}, { x=2, y=1}]
<!-- Defiant template -->
<script type="defiant/xsl-template">
<xsl:template name="books_template">
<xsl:for-each select="//movie">
<xsl:value-of select="title"/><br/>
</xsl:for-each>
</xsl:template>
</script>
<script type="text/javascript">
var data = {
"movie": [{"title": "The Usual Suspects"},
{"title": "Pulp Fiction"},
{"title": "Independence Day"}]
},
htm = Defiant.render('books_template', data);
console.log(htm);
// The Usual Suspects<br>Pulp Fiction<br>Independence Day<br>
</script>
v1.2.6 As of this version, snapshots can be created with web workers - consequently the UI thread is not blocked when creating snapshots of large JSON structures.
v1.2.0 As of version 1.2.0, the snapshot feature was added. Using this feature, the performance of the search is increased by more than 100 times. Use 'snapshot search' when you are certain that the JSON structure hasn't been changed. If the structure changes, create a new snapshot and always make searches on the latest snapshot. The example below shows how it can be used.
1.3.8
Handling null value in arrays1.3.7
Safari / VueJS related bugfix1.3.6
Fixed bug in gulp file1.3.5
Handling special occasion of 'null' in array1.3.4
Syncing up package version with release version1.3.3
Safari handles "XSLTProcessor" - adapting1.3.2
Throws error if "transformNode" is not supported1.3.1
Fixing MSIE11 detection1.3.0
Zero values threw error in "match tracer"1.2.9
Handling '\r\n' in string (throws error)1.2.8
Automatically case insensitive - global regular expression1.2.7
JSON data containing functions will throw error1.2.6
Snapshot can be created with web worker (x10.js)1.2.5
Bugfix related to not() preceding 'contains'-method1.2.4
UI-related bugg fix1.2.2
The XPath method 'contains' is automatically case insensitive1.2.0
Added snapshot search featureFAQs
Search JSON structures plus smart templating with XSLT and XPath.
We found that defiant demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.