Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
A vaguely Lispy language in the context of JavaScript.
The Evan language is implemented by means of an evaluator, which transforms any JSON into a JavaScript value. Often, this is again JSON but it can also be React DOM elements which are then rendered into a browser.
The evaluation is in principle functional, in the sense that evaluating the same piece of JSON leads to the same result.
Also, the evaluation is wired to happen incremental (using mobx), so (small) changes to the JSON input should only require a partial re-evaluation for better performance.
The main goal of the Evan programming language is to bootstrap a working, functional-style general purpose programming language which nestles comfortably in the JavaScript-world, complete with tools like an IDE.
It also ports selected virtues of a number of existing languages (most notably: Lisp) to the context of JavaScript.
The IDE should (eventually) be implemented as an Evan program itself, making it meta-circular.
To get started with development, clone this repository and run npm install
or yarn
, or whatever :)
Type npm run NAME
to execute any of the commands below:
name | description |
---|---|
test | run evaluator & meta-model generation tests |
test-watch | run evaluator & meta-model generation tests in watch-mode |
clean | clean build artifacts |
build | transpile ts(x) 's to lib/ dir |
watch | transpile ts(x) 's to lib/ in watch-mode |
karma | run browser tests in jsdom |
karma-watch | run browser tests in watch-mode |
build-ide | build ide browser bundle |
watch-ide | build ide browser bundle in watch-mode |
ide | start a development server at http://localhost:8070 and run watch-ide in parallel |
evan FILE OPTIONS
Options:
--semantics Print TypeScript semantics.
-v, --version Show meta-model version.
-h, --help Show this message.
As you've probably already noticed, the "Evan" acronym is awkward. That's because is retrofitted to the name of Meinte's first-born :)
MIT
FAQs
a vaguely lispy language in the context of javascript
The npm package evanup receives a total of 0 weekly downloads. As such, evanup popularity was classified as not popular.
We found that evanup demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.