
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
obvious-closure-library
Advanced tools
This is Medium's fork of the Google Closure Library.
We try to keep it reasonably up to date, but only after testing that it is compatible with our products. There may occasionally be changes introduced to work around temporary issues or to try out fixes in preparation of upstream patches.
The package number reflects the date that we last merged the fork. We rebase our changes on top of origin/master, so that our modifications are always on top of the closure-library master changes.
require('obvious-closure-library').bootstrap()
goog.require('goog.string.linkify')
goog.string.linkify.linkifyPlainText('Hello www.world.com')
The repository contains a lot of test files and demos, as such we include a
postinstall script that removes these files from the node_modules
directory
when installed via NPM.
This project isn't intended for external contribution, we suggest instead you send patches directly.
Closure Library is a powerful, low-level JavaScript library designed for building complex and scalable web applications. It is used by many Google web applications, such as Google Search, Gmail, Google Docs, Google+, Google Maps, and others.
For more information, visit the Google Developers or GitHub sites.
Developers, please see the Generated API Documentation.
See also the goog.ui Demos
FAQs
Fork of closure-library that allows installation via NPM.
The npm package obvious-closure-library receives a total of 153 weekly downloads. As such, obvious-closure-library popularity was classified as not popular.
We found that obvious-closure-library demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.