Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
elm-tigershark
Advanced tools
WIP/Exploratory project for generating TypeScript type declarations for Elm
programs. Based off of elm-typescript-interop
.
elm-syntax
to parse main module source and extract relivent ASTslet's generate a type declaration file!
|
v
run `tigershark src/Main.elm --output=src/main.d.ts`
| |
| `----> Fail, malformed CLI args
v
locate and parse Elm project file -----> Fail, project file not found
| unsupported Elm version
v
collect all project file paths and
source code, pass over to Elm
|
v
initialize module cache
|
v
parse module with `elm-syntax` -----> Fail, unable to find module in cache
| unable to parse module source
v
collect module name, main function -----> Fail, no main or no signature
|
v
extract flags type AST from main sig -----> Fail, main is not a `Program`
|
v
if ports module, search module -----> Fail, unable to find import in cache
cache and collect port definitions unable to parse module source
|
v
convert flags/ports to Typescript -----> Fail, type is not interoperable
type strings, resolve local and alias type not found
imported aliases unable to find import
| unable to parse module source
v
stringify module name, flags, ports
|
v
generate declaration file
|
v
write output file -----> Fail, error writing output
Things I'm thinking about now, but should be done later.
elm make
executable.*.elm
, or specific modules.elm-program-test
to test the worker program end-to-end.elm-typescript-interop
by generating
and diffing files.This isn't a useful tool yet so it doesn't have a useful tool name. TypeScript and Tigershark sound a bit similar. That's all I've got.
FAQs
conversations between a tree and a fish
The npm package elm-tigershark receives a total of 0 weekly downloads. As such, elm-tigershark popularity was classified as not popular.
We found that elm-tigershark demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.