
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
SimJS updated with ES2015 and updated toolchain
SIM.JS Updated is a general-purpose Discrete Event Simulation library written entirely in JavaScript.
The original implementation was written in 2011, and can be found at http://www.simjs.com
Note, the documentation on that site is slightly out of date. We're using standard ES2015 classes and idioms now, which should improve code readability. The documentation in the git repository has been updated though, and you should use that as your reference.
SIM.JS is a library for modeling discrete time event systems:
The library provides constructs to create Entities which are the active actors in the system and encapsulate the state and logic of the system operations.
The entities contend for resources, which can be Facilities (services that are requested by entities; facilities have a maximum limit on number of concurrent users) and Buffers (resources that can store finite amount of tokens; entities store or retrieve tokens from the buffers).
The entities communicate by waiting on Events or by sending Messages.
Statistics recording and analysis capability is provided by Data Series (collection of discrete, time-independent observations), Time Series (collection of discrete, time-dependent observations) and Population (the behavior of population growth and decline).
SIM.JS also provides a random number generation library to generate seeded random variates from various distributions, including uniform, exponential, normal, gamma, pareto and others.
SIM.JS is written in idiomatic EcmaScript 2015 JavaScript. The library is written in event-based design paradigm: the changes in system states are notified via callback functions. The design takes advantage of the powerful feature sets of JavaScript: prototype based inheritance, first-class functions, closures, anonymous functions, runtime object modifications and so on. Of course, a knowledge of these principles is not required (a lot of this is behind the scenes), but we do certainly hope that using SIM.JS will be a pleasurable experience for the amateur as well as the experienced JavaScript programmer.
FAQs
SimJS updated with ES2015 and updated toolchain
The npm package simjs receives a total of 8 weekly downloads. As such, simjs popularity was classified as not popular.
We found that simjs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.