Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
iana-tz-data
Advanced tools
Unofficial JSON distribution of zdumped IANA timezone data.
It should be noted that a tabular text file (not JSON) is the "official" format for the IANA timezone data. The JSON data contained in this package is provided as a convenience for the development community, and is programatically generated from the corresponding text files using the JSON conversion utility provided here.
No code other than the conversion utility is included.
The official data has additional information and has a different structure than what's distributed here. The official data has Zones and Rules
A JSON representation of the timezone transitions (actually, the output of zdump -v
) for every timezone ids, which is what moment-timezone, globalize, and perhaps other JavaScript library use to calculate a date in a specific timezone ids. The structure looks like the below.
{
"zoneData": {
...
"America": {
...
"New_York": {
abbrs: [],
untils: [],
offsets: [],
isdsts: []
}
...
}
}
}
Latest official release is version 2017c, published on 2017-10-23.
Installation using NPM:
npm install --save iana-tz-data
We follow a semver corresponding version based on the official version. The major version corresponds to the year and the minor corresponds to the letter. The patch version is independent and used for any necessary package fixes.
Official version | Our corresponding semver version |
---|---|
2017c | 2017.2 |
2017b | 2017.1 |
2017a | 2017.0 |
On your application, you can access IANA timezone JSON data by importing the "iana-tz-data"
module.
import IANATimezoneData from "iana-tz-data";
MIT © Rafael Xavier de Souza
FAQs
Npm module for IANA unofficial JSON data
The npm package iana-tz-data receives a total of 2,136 weekly downloads. As such, iana-tz-data popularity was classified as popular.
We found that iana-tz-data demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.