Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
hash-brown-router
Advanced tools
A router that is only concerned with single-page apps that want to change state based on the bits of the url after the hash.
var makeRouter = require('hash-brown-router')
var router = makeRouter()
router.add('/page/:pageName', function(parameters) {
console.log(parameters.pageName)
})
Parses express-style route paths, using a fork of path-to-regexp.
router.setDefault(function(path) {
console.log("you went to", path, "but that doesn't go anywhere, I guess I'll send you somewhere else")
})
To force the routing library to evaluate the current route once your JavaScript is done loading (probably once the [dom is ready](https://www.npmjs.org/package/domready)), call `router.go()`.
If for some reason you want the router to start ignoring hash change events. you can call `route.stop()`.
FAQs
A client-side router that only cares about the bits after the #
The npm package hash-brown-router receives a total of 150 weekly downloads. As such, hash-brown-router popularity was classified as not popular.
We found that hash-brown-router demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.