Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
shift-spec-idl
Advanced tools
This document defines an interface for an abstract syntax tree that can be used to represent the structure of an ECMAScript program. The interface is intended to be able to represent any structurally valid ECMAScript program (according to the latest version of ECMA-262) while minimising the number of invalid programs that may be represented.
This specification is defined using the Web IDL standard with the following extended attributes:
TypeIndicator
: This extended attribute may be applied to a readonly
attribute to indicate the following:
NonEmpty
: This extended attribute may be applied to any attribute with a
Sequence or Array type to disallow the zero-length inhabitant of that type.This specification currently supports ECMAScript 2019 as defined in the latest version of ECMA-262 at the time of this writing. Stability of this data structure is not guaranteed between releases of ECMA-262.
This section is reserved for a listing of implementations that conform to this specification as well as tools that operate on those data types. To add your own implementation to this list, please open a Pull Request. Implementations should be ordered by submission date within a category that appropriately describes their purpose.
The following design decisions showcase characteristics of the Shift AST design goals.
Block
and VariableDeclaration
are separate from
BlockStatement
and VariableDeclarationStatement
respectively in order to
avoid usage of those statements where other types of statements are not
allowed.AssignmentExpression
is separate from BinaryExpression
because ES6
restricts the left operand of AssignmentExpression
to bindings (12.14.1),
and this restriction could be represented with a sufficiently advanced type
system. Similarly, ComputedAssignmentExpression
further restricts its left
operand, and is consequently separated. All other binary expressions are
grouped together.None right now!
Copyright 2014 Shape Security, Inc.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
FAQs
Shift AST specification IDL files
We found that shift-spec-idl demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.