Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
speech-to-text
Advanced tools
A speech recognition module.
It's designed to listen continuously to a user (i.e. pauses are ok), and then converts that speech to text.
npm install speech-to-text
import SpeechToText from 'speech-to-text';
const onAnythingSaid = text => console.log(`Interim text: ${text}`);
const onFinalised = text => console.log(`Finalised text: ${text}`);
const onFinishedListening = () => console.log('Done listening.');
try {
const listener = new SpeechToText(onAnythingSaid, onFinalised, onFinishedListening);
listener.startListening();
} catch (error) {
console.log(error);
}
Demo here.
The constructor will throw an error if speech recognition is not supported by the browser.
if (
!('webkitSpeechRecognition' in window) &&
!('SpeechRecognition' in window)
) {
throw new Error("This browser doesn't support speech recognition. Try Google Chrome or Firefox.");
}
Initiates listening to speech input and will continue to call the callback functions provided until the speech recognition stops listening. After which you'll need to call this function again.
Does just that. Stops listening.
MIT
FAQs
A speech to text module.
The npm package speech-to-text receives a total of 407 weekly downloads. As such, speech-to-text popularity was classified as not popular.
We found that speech-to-text demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.