
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
smogonA typed, low-level wrapper around Smogon's analysis and statistics endpoints
used to ergonomically fetch raw data via point queries from the source. smogon has
zero-dependencies and is agnostic to your project's choice of network layer - this package helps you
build a request and process the response. There is support for scraping analyses from Smogon's HTML
(discouraged), directly performing Dex RPCs, dealing with naming and cutoff discontinuities in the
usage statistics available from https://smogon.com/stats/, and
determining the optimal dates to fetch statistics for a given format.
import {Analyses, Statistics} from 'smogon';
// Performing a Dex RPC
const analysis = Analyses.process(await request(Analyses.request('Mr. Mime', 3)));
// Determining the 'best' date to fetch weighted statistics for
const format = 'gen6vgc2016';
const latest = await Statistics.latestDate(format, true);
const stats = Stats.process(await request(Statistics.url(latest.date, format)));
This package is distributed under the terms of the MIT License.
FAQs
Low-level wrapper around Smogon's analyses and usage statistics
The npm package smogon receives a total of 1,334 weekly downloads. As such, smogon popularity was classified as popular.
We found that smogon demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.