Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
readabilitySAX
Advanced tools
#readabilitySAX a fast and platform independent readability port
##About This is a port of the algorithm used by the Readability bookmarklet to extract relevant pieces of information out of websites to a SAX parser.
The advantage over other ports, e.g. arrix/node-readability, is a smaller memory footprint and a much faster execution. In my tests, most pages, even large ones, were finished within 15ms (on node, see below for more information). It works with Rhino, so it runs on YQL, which may have interesting uses. And it works within a browser.
The Readability extraction algorithm was completely ported, but some adjustments were made:
<article>
and <section>
tags are recognized and gain a higher value
If a heading is part of the pages <title>
, it is removed (Readability removed any single <h2>
, and ignored other tags)
henry
and instapaper-body
are classes to show an algorithm like this where the content is. readabilitySAX recognizes them and adds additional points
Every bit of code that was taken from the original algorithm was optimized, eg. RegExps should now perform faster (they were optimized & use RegExp#test
instead of String#match
, which doesn't force the interpreter to build an array)
Some improvements made by GGReadability (an Obj-C port of Readability) were adopted
height
or width
attributes are high - icon sized images (<= 32px) get skipped##HowTo
###Installing readabilitySAX (node)
This module is available on npm
as readabilitySAX
. Just run
npm install readabilitySAX
#####CLI A command line interface (CLI) may be installed via
npm install -g readabilitySAX
It's then available via
readability <domain> [<format>]
To get this readme, just run
readability https://github.com/FB55/readabilitySAX
The format is optional (it's either text
or html
, the default value is text
).
###Usage
#####Node
Just run require("readabilitySAX")
. You'll get an object containing three methods:
Readability(settings)
: The readability constructor. It works as a handler for htmlparser2
. Read more about it in the wiki!
WritableStream(settings, cb)
: A constructor that unites htmlparser2
and the Readability
constructor. It's a writable stream, so simply .write
all your data to it. Your callback will be called once .end
was called. Bonus: You can also .pipe
data into it!
createWritableStream(settings, cb)
: Returns a new instance of the WritableStream
. (It's a simple factory method.)
There are two methods available that are deprecated and will be removed in a future version:
get(link, [settings], callback)
: Gets a webpage and process it.
process(data)
: Takes a string, runs readabilitySAX and returns the page.
Please don't use those two methods anymore. Streams are the way you should build interfaces in node, and that's what I want encourage people to use.
#####Browsers
I started to implement simplified SAX-"parsers" for Rhino/YQL (using E4X) and the browser (using the DOM) to increase the overall performance on those platforms. The DOM version is inside the /browsers
dir.
A demo of how to use readabilitySAX inside a browser may be found at jsFiddle. Some basic example files are inside the /browsers
directory.
#####YQL
A table using E4X-based events is available as the community table redabilitySAX
, as well as here.
##Parsers (on node)
Most SAX parsers (as sax.js) fail when a document is malformed XML, even if it's correct HTML. readabilitySAX should be used with htmlparser2, my fork of the htmlparser
-module (used by eg. jsdom
), which corrects most faults. It's listed as a dependency, so npm should install it with readabilitySAX.
##Performance
#####Speed Using a package of 724 pages from CleanEval (their website seems to be down, try to google it), readabilitySAX processed all of them in 5768 ms, that's an average of 7.97 ms per page.
The benchmark was done using tests/benchmark.js
on a MacBook (late 2010) and is probably far from perfect.
Performance is the main goal of this project. The current speed should be good enough to run readabilitySAX on a singe-threaded web server with an average number of requests. That's an accomplishment!
#####Accuracy The main goal of CleanEval is to evaluate the accuracy of an algorithm.
// TODO
##Todo
#!
)<a>
tagsFAQs
the readability script ported to a sax parser
The npm package readabilitySAX receives a total of 6,281 weekly downloads. As such, readabilitySAX popularity was classified as popular.
We found that readabilitySAX demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.