
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
"Rabobank receives monthly deliveries of customer statement records. This information is delivered in two formats, CSV and XML. These records need to be validated."
# install dependencies
npm i
# run tests
npm run test
# build
npm run build
# install the CLI globally
npm install -g .
# run the CLI
rabo -h
Simply run the CLI in a folder containing the input files (XML or CSV). The CLI
will scan the folder and generate a JSON report of the failed transactions in
the same folder. For more options, see the help menu (rabo -h).
You can also run the CLI with npx:
npx rabo
The challenge is to implement an I/O API that can process the customer statement records and generate a report on any invalid records.
The customer statement records can be delivered in two file formats: CSV or
XML. Records within these files need to be parsed and validated.
Any record that does not meet these requirements should be written to a report.
My approach consists of three steps:
As this is a challenge, there are some requirements missing. Additional to the requirements I received initially, I was also told:
"A requirement we would put to you is that the report should be easy to use for further processing. Think about what is necessary for a user/another application to best navigate this report, what information should be in it and how can it best be presented and used."
JSON format for the
report as a default.1: I imagine, and am working under the assumption, that a statement processor would more likely exist in an automated environment, e.g. as part of a pipeline, rather than be implemented in a UI. Of course, it would still be easy to support a manual file upload too.
FAQs
Rabobank Customer Statement Processor
We found that rabo demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.