Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
A unified module to work with localStorage, sessionStorage and cookie with the same API
Simple localStorage, sssionStorage and cookie operating library with the single API. It fully supports regular js.
Actually, it is a modern and well-typed version of strg.js
with yarn:
yarn add strg.ts
or with npm:
npm i strg.ts
So, the strg.ts
contains three objects with single API:
localstore
- localStorage wrapper
sessionstore
- sessionStorage wrapper
cookiestore
- cookie wrapper
and the fourth object storage
, that is localstore
if localStorage is supported or cookiestore
otherwise.
bonus: fifth object available
with flags of available APIs:
interface Available {
local: boolean,
session: boolean,
cookie: boolean
}
Each of APIs has 5 functions:
set(key, value)
: sets key-value pair. JSON is supported in values
get(key)
: returns just value for the key. returns undefined
if no value found
getAll()
: returns object with all key-value pairs. JSON is parsed. returns {}
on empty store
remove(key)
: removes key. returns undefined
removeAll()
: remove all key-value pairs, returns undefined
In case of cookiestore
, function set
takes five params: key, value, expires, path, secure
expires
: Date, number or string, that can be used in Date
constructor
path
: string, path for cookie
secure
: bool, secure flag for cookie
Also, all objects contain two additional fields:
s
: Storage object or document.cookie, for example: window.localStorage
type
: string, storage type, for example 'localStorage'
storage.set('a', 1); // 1
storage.set('b', {c: [1, '2', {d: 3}]})); // {"c":[1,"2",{"d":3}]}
storage.getAll(); // {"a":1,"b":{"c":[1,"2",{"d":3}]}}
storage.set('c', 'some string'); // "some string"
storage.remove('b'); // undefined
storage.getAll(); // {"a":1,"c":"some string"}
storage.removeAll(); // undefined
storage.getAll(); // {}
yarn test
# serve test
And then just open test/test.html with browser (with serve it will be http://localhost:5000/test)
MIT
FAQs
A unified module to work with localStorage, sessionStorage and cookie with the same API
The npm package strg.ts receives a total of 0 weekly downloads. As such, strg.ts popularity was classified as not popular.
We found that strg.ts demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.