
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Markup language and parser for weightlifting logs. A superset of Markdown.
The idea is to be able to derive structured data from concise workout notes taken on a smartphone.
Here's an example of a workout log in the WeightliftingML format:
Workout September 16, 2020
Snatch
Up to technique bar + 35lb each side
Clean and Jerk
Up to 145lb
Squat
3x5@165
Bench
3x5@170
Deadlift
5@185
5@255 TOUGH
The following elements are parsed:
Example:
Workout September 16, 2020
It triggers on the term "Workout", and requires this very specific date format.
All exercises that follow a workout date line have that data associated with it.
Example:
Deadlift
5@185
5@255
This notation allows you to track a specific exercise and its sets and reps (repititions) with poundages.
The first line of the group specifies the exercise, e.g. Deadlift.
Subsequent lines indicate one set each, where the structure is ${reps}@${poundage}. For example 5@185 means 5 reps at 185 pounds. This triggers on the @ symbol.
Example:
5@185 Deadlift
You can also define an entire exercise on a single line. The above example is equivalent to:
Deadlift
5@185
However, be careful to include an empty line before the single line exercise, otherwise it will be grouped with the previous exercise.
Example:
Squat
3x5@165
You can use a multiplier like 3x or 4x as a concise alternative to repeating the same sets. It triggers on x or X.
The above example is equivalent to:
Squat
5@165
5@165
5@165
Example:
Deadlift
5@185
5@255 TOUGH
You can add any text after a set to add notes to it. In this case the notes TOUGH are associated to the second Deadlift set.
Examples:
Snatch
Up to technique bar + 35lb each side
Clean and Jerk
Up to 145lb
It triggers on "lb". Exercise and poundage are parsed, and the entire line that includes "lb" is treated as notes.
Many thanks to Justin Curry for the sample notes, notation ideas, and collaboration on this!
FAQs
Markup language and parser for weightlifting logs.
The npm package fitdown receives a total of 3 weekly downloads. As such, fitdown popularity was classified as not popular.
We found that fitdown demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.