Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
ilib-tree-node
Advanced tools
A package to build, construct, and deconstruct an arbitrary tree of nodes.
Simple class to build, construct, and deconstruct an arbitrary tree structure.
A node in the tree may have an arbitrary number of children. Each node must have a type property and can optionally have any number of other properties. There will also be a "children" property which will contain any possible children, as well as a "use" and a "parent" property, so the properties "children" and "use" and "parent" are reserved.
There is no tree structure per-se, only nodes. Any node can be considered to be the root of a tree. Even a single node is a tree of size 1.
To build a tree from scratch, you can use the following methods:
node.add() - add a child node to the current node
To create a tree, create a new Node instance and then add it as a child to another Node instance.
Example of building a tree from scratch:
import Node from 'ilib-tree-node';
let parent = new Node({
type: 'x'
});
let child = new Node({
type: 'text',
value: "this is a string"
});
parent.add(child);
// add an anonymous node
parent.add(new Node({
type: 'text',
value: "another string"
}));
To deconstruct (flatten) the tree into an array of nodes, simply use:
node.toArray() - deconstruct the tree into an array of nodes
If a node has children, the toArray method will add a start node with the "use" property set to "start", followed by the children within that node, followed finally by an end node with the "use" property set to "end". This happens recursively for all the children such that the entire tree underneath the node is flattened as well.
The array can be reconstructed back into a tree using the information in the "use" property. Any node that does not have children will get added to the array as-is.
To reconstruct a tree from an array of nodes, use the following static method:
Node.fromArray(array) - reconstruct the tree from an array of nodes
This method will use the "use" property to rebuild a tree of varying depths.
You may add a "use" property to any nodes in your array, as long as the start and end nodes for any node type are balanced and well-formed. (ie. they are properly nested like XML open and closing tags.). If they are not well-formed, this method will create a tree with an unexpected structure. Any array that is a result of a toArray call is guaranteed to be well-formed.
Note that this type of tree follows the unist interface for a tree, and therefore any of the unist utilities may be used to manipulate the tree.
To convert a regular unist tree into a ilib-tree-node tree, simply do the following:
import Node from 'ilib-tree-node';
import map from 'unist-utils-map';
let ast = X; // some unist tree, probably from a parser
let treeNode = map(ast, node => new Node(node));
addChildren
methodFAQs
A package to build, construct, and deconstruct an arbitrary tree of nodes.
The npm package ilib-tree-node receives a total of 4,354 weekly downloads. As such, ilib-tree-node popularity was classified as popular.
We found that ilib-tree-node demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.