
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
gobbledygook
Advanced tools
A localization debugging tool that translates strings into legible gobbledygook. In javascript.
This project contains a node.js implementation of "fake translation", which makes it easier to debug the internationalization of software.
This project was inspired by the Translate Toolkit.
npm install gobbledygook
$ node
> require('gobbledygook')('Hello World!');
'¡pʅɹoM oʅʅǝH'
This library can algorithmically "translate" your software. The translation can be visually scanned to ensure that all user facing strings are properly substituted with translations.
Our fake translation is a right-to-left, inverted representation of english. It uses several unicode characters which resemble 180 degree rotated versions of their counterparts, and make it look like all the strings are upside down and backwards - you can still read it, but is is very clear what text is properly translated and what is not (suggesting an i18n bug).
Concretely, we test a couple different things at once here:
This implementation supports basic HTML markup, HTML entities, and substitution markers.
Because we directly use very simple html in strings we expose to translators, this thing has to understand very basic html. Here's a concrete example:
notice that the text within the full sentence must be inverted, however HTML tags must not be.
This implementation handles substitution markers such as %s
and
%(name)
in translatable strings as placeholders where dynamically
generated content (links, email addresses, website names, etc) will be
placed. Needless to say, if %(cookieLink)
is translated to
)ʞuı⅂ǝıʞooɔ(%
, substitution will be broken. This implementation
respects these types of markers, and is currently hardcoded to only
this style of substitution marker, but could be generalized.
FAQs
A localization debugging tool that translates strings into legible gobbledygook. In javascript.
The npm package gobbledygook receives a total of 2 weekly downloads. As such, gobbledygook popularity was classified as not popular.
We found that gobbledygook demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.