
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
mgnify-sourmash-component
Advanced tools
A web component to select FastA file and generate sourmash signatures locally.
mgnify-sourmash-componentA web component that let you select FastA sequence files and creates sketches (KmerMinHash signatures) using Sourmash.
The demo in GH pages can be seen HERE.
You can add the following inn your HTML:
<mgnify-sourmash-component id="sourmash" ksize="31" scaled="1000" />
And use it via events in your javascript:
document
.getElementById('sourmash')
.addEventListener('sketched', (evt) =>
console.log(`The signature for ${evt.detail.filename} has been created`)
);
document
.getElementById('sourmash')
.addEventListener('sketchedall', (evt) =>
console.log(
`Processing of all these files have finished: ${Object.keys(
evt.detail.signatures
)}`
)
);
directory: boolean = falseSets the File chooser to select directories instead of files.
show_directory_checkbox: boolean = falseDisplays or not a checkbox to select the mode(directory) of the file chooser
show_signatures: boolean = falseDisplays or not the signatures once they are calculated.
num: number = 0Create a standard MinHash with no more than <num> k-mers kept. This will produce sketches identical to mash sketches. num is incompatible with scaled.
ksize: number = 31Create a sketch at this k-mer size; can provide more than one time in a parameter string. Typically ksize is between 4 and 100.
is_protein: boolean = falseCreates a protein kind of sketch.
dayhoff: boolean = falseCreates a dayhoff kind of sketch.
hp: boolean = falseCreates a hp kind of sketch.
seed: number = 42Murmurhash seed
scaled: number = 1000Create a scaled MinHash with k-mers sampled deterministically at 1 per <scaled> value.
track_abundance: boolean = falseCreate abundance-weighted (or not) sketches.
selectedFiles: Array<File> = nullThe selectedFiles property holds the array of files that are or have been processed by this component.
progress: {[filename: string]: number}The progress property is an object where the key are the filenames of the selected files and the value is a float from 0 to 100 reporting how much of the file has been read and processed.
The signatures property is an object where the key are the filenames of the selected files and the value is the calculated signature as a string in JSON format. If a filename is not in this object, means that the signature has not yet been calculated, you can check the progress property to see how far it has been read.
sketchedThe sketched event is fired when a single file read is completed and a signature for has been calculated.
| Bubbles | Yes |
|---|---|
| Cancelable | No |
detail: {
filename: string,
signature: string, //it is given as a string but it is in JSON format, so you could safely use JSON.parse
}
sketchedallThe sketchedall event is fired when all the requested files have been read and proccessed.
If a signature couldn't be generated, its value in the returned object will be null.
| Bubbles | Yes |
|---|---|
| Cancelable | No |
detail: {
signatures: {
[filename: string]: string;
};
}
FAQs
A web component to select FastA file and generate sourmash signatures locally.
We found that mgnify-sourmash-component demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.