
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
$ npm install -g doccy
Automatic generation of documentation READMEs.
(Still very much under development).
You can see a full example of generated documentation in the docs
folder.
Given a test file:
/*
* @object thing
* @description a module of things
*/
var thing = {
/*
* @name foo
* @description a cool function
* @param x does something
* @returns a number
*/
foo: function(x) {
return 42;
}
}
Running:
$ doccy test.js -o docs
Will create docs/test.md
that looks like so:
## `thing`
_a module of things_
### `foo`
_a cool function_
Parameters:
- `x`: does something
**Returns:** a number
If you'd like a full example, the Doccy documentation is generated from Doccy itself.
Rather than specify each file individually, the more common use of Doccy's small CLI tool is to pass in a glob:
$ doccy "src/*.js"
Will create a Markdown documentation file for each JS file within the src
directory. By default doccy will put these into a docs
folder, that it will create if needed, but you can specify the output directory with the -o
flag:
$ doccy "src/*.js" -o documentation
Order is not important, and things within []
are optional.
@name function_name
@description function_description
@param name [{Type}] description
@returns description
@object name
- denotes a "containing" object (see above example, which is much clearer)Thanks to the following people for their help :)
### Contributing
Please follow the existing style of code - recommend using EditorConfig to help you out with this.
To generate documentation, run npm run doccy
.
0.0.5
@param
0.0.4
0.0.3
object
key for denoting a "containing" object0.0.2
description
key0.0.1
FAQs
Generate Markdown documentation
We found that doccy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.