
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
gerber-parser
Advanced tools
Work in progress.
A printed circuit board Gerber and drill file parser. Implemented as a Node transform stream that takes a Gerber text stream and emits objects to be consumed by some sort of PCB plotter.
$ npm install gerber-parser
var fs = require('fs')
var gerberParser = require('gerber-parser')
var parser = gerberParser()
parser.on('warning', function(w) {
console.warn('warning at line ' + w.line + ': ' + w.message)
})
fs.createReadStream('/path/to/gerber/file.gbr', {encoding: 'utf8'})
.pipe(parser)
.on('data', function(obj) {
console.log(obj)
})
To run in the browser, this module should be bundled with a tool like browserify or webpack.
See API.md
Tests are written in Mocha and run in Node, PhantomJS, and a variety of browsers with Zuul and Open Sauce. All PRs should be accompanied by unit tests, with ideally one feature / bugfix per PR. Code linting happens with ESLint automatically post-test and pre-commit.
Code is deployed on tags via TravisCI and code coverage is tracked with Coveralls.
$ npm run lint
- lints code$ npm run test
- runs Node unit tests$ npm run test-watch
- runs unit tests and re-runs on changes$ npm run browser
- runs tests in a local browser$ npm run browser-phantom
- runs tests in PhantomJS$ npm run browser-sauce
- runs tests in Sauce Labs on multiple browsers
$ npm run ci
- Script for CI server to run
npm test
and sends coverage report to CoverallsFAQs
Streaming Gerber/drill file parser
The npm package gerber-parser receives a total of 186 weekly downloads. As such, gerber-parser popularity was classified as not popular.
We found that gerber-parser demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.