Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
resolved-graph
Advanced tools
Generates and updates a graph of nodes and links with resolved relationships for ease of traversal and extraction
Also check out Resolved Graph Query, a fledgling query language for this package available here
This is a tiny package that takes a more or less standard graph and make its entities directly accesible (and iterable with standard methods) through memory, like so:
import { Graph } from 'resolved-graph'
const graph: Graph = {
nodes: [
{
id: 'Tommy ',
},
{
id: 'Viktoria ',
},
],
links: [
{
id: 'is in love with ',
from: 'Tommy ',
to: 'Viktoria ',
},
{
id: 'is head over heels for ',
from: 'Viktoria ',
to: 'Tommy ',
},
],
}
Now, lets resolve it:
import { Graph, ResolvedGraph } from 'resolved-graph'
//...
const resolvedGraph = new ResolvedGraph(graph)
...And try it out for size:
//...
for (const node of resolvedGraph.nodes) {
for (const link of node.from) {
const nextNode = link.to
console.log(node.id + link.id + nextNode.id)
}
}
Expected output:
Tommy is in love with Viktoria
Viktoria is head over heels for Tommy
You can define the type of the 'data' prop on both nodes and links. This will preserve intellisense even after resolving the graph, making it easy to traverse your data in code. However - as with any self respecting JS application - there is no runtime typechecking ;)
//...
interface NodeData {
name: string
}
interface LinkData {
label: string
}
const graph: Graph<NodeData, LinkData> = {
nodes: [
{
id: '1',
data: { name: 'Tommy' },
},
{
id: '2',
data: { name: 'Viktoria' },
},
],
links: [
{
id: '3',
from: '1',
to: '2',
data: { label: 'is in love with' },
},
{
id: '4',
from: '2',
to: '1',
data: { label: 'is head over heels for' },
},
],
}
You can use the .findNode
, .findNodes
, .findLink
or .findLinks
functions to easily query for certain entities. For example, lets find all nodes with name Tommy in the data prop and that has any links to a node with id '2':
//...
console.log(resolvedGraph.findNodes({ data: { name: 'Tommy' }, from: [{ to: { id: '2' } }] }))
Expected output:
[
{
id: '1',
data: { name: 'Tommy' },
to: [[Object]],
from: [[Object]],
},
]
As mentioned above, you can use Resolved Graph Query for more advanced use cases such as recursive queries
As long as you use the standard methods found on the ResolvedGraph class, it should keep up with all resolutions for you. You can chuck in whatever properties you like on the nodes & links, as long as you stay away from 'id', 'to' and 'from'. The dissolve() method breaks the circular references and returns a simpler Graph object safe for JSON. No checks are made on other properties so that's up to you.
This project is currently only for my amusement. With that said, I'm glad you found it and welcome any requests!
FAQs
Generates and updates a graph of nodes and links with resolved relationships for ease of traversal and extraction
The npm package resolved-graph receives a total of 1 weekly downloads. As such, resolved-graph popularity was classified as not popular.
We found that resolved-graph demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.