Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
fuzzaldrin
Advanced tools
Fuzzy filtering and string scoring.
This library is used by Atom and so its focus will be on
scoring and filtering paths, methods, and other things common when writing code.
It therefore will specialize in handling common patterns in these types of
strings such as characters like /
, -
, and _
, and also handling of
camel cased text.
npm install fuzzaldrin
Sort and filter the given candidates by matching them against the given query.
candidates
- An array of strings or objects.query
- A string query to match each candidate against.options
- An optional object with the following keys:
key
- The property to use for scoring if the candidates are objects.maxResults
- The maximum numbers of results to return.Returns an array of candidates sorted by best match against the query.
{filter} = require 'fuzzaldrin'
# With an array of strings
candidates = ['Call', 'Me', 'Maybe']
results = filter(candidates, 'me')
console.log(results) # ['Me', 'Maybe']
# With an array of objects
candidates = [
{name: 'Call', id: 1}
{name: 'Me', id: 2}
{name: 'Maybe', id: 3}
]
results = filter(candidates, 'me', key: 'name')
console.log(results) # [{name: 'Me', id: 2}, {name: 'Maybe', id: 3}]
Score the given string against the given query.
string
- The string the score.query
- The query to score the string against.{score} = require 'fuzzaldrin'
score('Me', 'me') # 0.17099999999999999
score('Maybe', 'me') # 0.0693
git clone https://github.com/atom/fuzzaldrin.git
cd fuzzaldrin
npm install
npm test
You can run the benchmarks using:
npm run benchmark
FAQs
Fuzzy filtering and string scoring
The npm package fuzzaldrin receives a total of 53,798 weekly downloads. As such, fuzzaldrin popularity was classified as popular.
We found that fuzzaldrin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.