
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
mapexplorer-core
Advanced tools
Core library for building Map Explorer components
<!-- Polyfill for browser compatibility -->
<script src="https://libs.stratumn.com/babel-polyfill.min.js"></script>
<!-- Actual Library -->
<script src="https://libs.stratumn.com/mapexplorer-core.min.js"></script>
If you want a specific version, include https://libs.stratumn.com/mapexplorer-core-{version}.min.js
instead (for instance https://libs.stratumn.com/mapexplorer-core-0.4.1.min.js
).
$ npm install mapexplorer-core
var MapexplorerCore = require('mapexplorer-core');
const builder = new MapexplorerCore.ChainTreeBuilder(element);
// with an agent URL and a mapId
builder.build({
id: myMapId,
agentUrl: myAgentUrl,
process: myProcess
}, options);
// with a chainscript (JSON string of array or segment as POJO)
builder.build({
chainscript: myChainscript
}), options;
Default: false
Display action arguments on the paths between segments.
Default: 750
Transition duration
Default: 1.2
Vertical space factor between segment polygon
Default:
{
width: 78,
height: 91
}
Object with width and height properties that gives the size (in pixels) of the polygon representing a segment.
Default: () => this.polygonSize.width
Function that returns the length (in pixels) of the transition arrow.
Default:
() => return {
width: this.polygonSize.width,
height: 25
}
Function that return an object with width and height properties that gives the size (in pixels) of the box containing the segment text.
Default: node => compactHash(node.data.meta.linkHash)
Function that returns the text displayed on a segment.
Default:
function(node) {
return node.target.data.link.meta.action +
(this.withArgs ? `(${node.target.data.link.meta.arguments.join(', ')})` : '');
}
Function that return the text displayed on a path between segments.
Default: noop
Default: noop
Hook that is called when a segment is tagged
Event handler called when the user clicks on a segment.
const merklePathTree = new MapexplorerCore.MerklePathTree(element);
merklePathTree.display(merklePath);
where merklePath
looks like:
[
{
"left": "14b9468d3b8ca51b45e27ecddc5875a48902a74d1182fed9693c1531dfcfd56c",
"right": "d15e1460234292852400271530be35cabe822eae5a4ed3376728d5acbbf04f27",
"parent": "3bfbc00bfe7aa149e17029e8bb08671636c1c1c16aa5addfc307d6c937134620"
},
{
"left": "3bfbc00bfe7aa149e17029e8bb08671636c1c1c16aa5addfc307d6c937134620",
"right": "9fd68d3335eabcad5777b4c717af6de3c51f4aa0af72c26aaf866cde176c96f1",
"parent": "8f16bfbe247be6ca881f3d9e462bc154f099298e26cd53662ef7119e1e60a887"
},
...
]
new MapexplorerCore.ChainValidator(JSON.parse(chainscript)).validate()
Returns a Promise that resolves to an error object such as:
{
linkHash: [Promise, ...],
stateHash: [Promise, ...],
merklePath: [Promise, ...],
fossil: [Promise, ...]
}
Each promise, in each array of each category resolves to an error string if an inconsistency has been detected. It resolves to null otherwise.
Errors can be retrieved with (for instance):
Promise.all(errors.linkHash).
then(err => err.filter(Boolean));
Install dependencies:
$ npm install
Build:
$ npm run build:all
Test:
$ npm test
The integration tests use a build version of the library. Make sure you've run npm run build
if you want your changes to be taken into account.
Lint:
$ npm run lint
Lint and test:
$ npm run check
Bump version:
$ npm version major|minor|patch
Publish:
$ npm publish
FAQs
Core library for building Map Explorer components
The npm package mapexplorer-core receives a total of 6 weekly downloads. As such, mapexplorer-core popularity was classified as not popular.
We found that mapexplorer-core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.