
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
strickland
Advanced tools
Strickland is a JavaScript validation framework with a focus on extensibility and composition
Strickland is a JavaScript validation framework with a focus on extensibility and composability. It is built with pure, universal JavaScript and while it works well with React, Redux, and other UI libraries, Strickland is not coupled to any other library or application type.
Strickland is a unique and robust approach to building validation into your application.
Strickland focuses not on being a bloated collection of validators, but instead on enabling you to create your application's collection of validators and compose them together easily.
There are three core concepts you need to know with Strickland:
Strickland validators are pure functions that accept values and return validation results. Here is an extremely simple validator that validates that the value supplied is the letter 'A', returning the validation result as a boolean.
function letterA(value) {
return (value === 'A');
}
Strickland's default export is a validate
function that accepts a validator function and the value to validate against the validator; it returns the validation result.
import validate from 'strickland';
function letterA(value) {
return (value === 'A');
}
const result = validate(letterA, 'B');
Strickland normalizes validation results to always be objects with isValid
and value
properties.
If the validator returns a falsy value, then isValid
will be false
. If the validator returns true
, then isValid
will be true
. If the validator returns an object, the truthiness of its isValid
property will be used on the result's isValid
property.
The value
on the validation result will always be the value that was validated.
import validate from 'strickland';
function letterA(value) {
// We can return a validation result as a boolean
return (value === 'A');
// Or as an object
// return {
// isValid: (value === 'A')
// };
}
const result = validate(letterA, 'B');
// Either way, the result will match:
//
// result = {
// isValid: false,
// value: 'B'
// }
MIT
2.0.2 (2018-12-12)
FAQs
Strickland is a JavaScript validation framework with a focus on extensibility and composition
The npm package strickland receives a total of 340 weekly downloads. As such, strickland popularity was classified as not popular.
We found that strickland demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.