Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
A Javascript library for working with native objects. http://sugarjs.com/
Public stable releases will be made available on the site and also exist in release/
.
Any push made to master
branch will have its unit tests passing, although maybe not
in all browsing environments (IE, etc) to ensure that it is stable, at least to a certain degree.
I will also include a minified version that will also have its unit tests run against it here:
release/sugar-edge.min.js
Unit tests can be run through the shell script at ./unit_tests/node.sh
.
Sugar includes 11 localizations in the main package:
In addition to these major locales, custom locales can be added using:
Date.setFormat(LOCALE_CODE, LOCALIZATION_OBJECT)
More documentation to come soon, but for now refer to lib/locales.js
for examples of what kind of data and formats are required in localization objects. All localizations, including those not found in the main package will be kept in this file.
If you do add a custom format for your locale, please consider forking and adding it to the repo! This especially includes the addition of new locales, but also new formats or tweaks to existing locales. Not everything can be added to the main package, but I would like to have as many languages/formats as possible available. When adding a locale contribution, the most important thing is to add unit tests that assert the correct format. These unit tests are found at unit_tests/environments/sugar/date_LOCALE.js
. Simply add or adjust the formats for the locale (the more tests, the better!) and issue me a pull request -- I will update the code to add these locales/formats. Have a look at other unit tests files for an example of the unit testing format.
Lib comparisons to various other libraries can be seen at http://sugarjs.com/libs. This is one of the areas where contributions are most welcome, as I don't have extensive knowledge of many different libraries, and there is so much to cover. To contribute simply find or create the appropriate lib name in docs/libs
, and follow the format provided. This will be an ongoing process, and I will push changes here out to the site every so often.
For other contributions, please add well formed unit tests in the sugar environment at unit_tests/environments/sugar/MODULE.js
. Unit tests can be run directly in the browser from unit_tests/sugar.html
, and should all be passing in all major browsers (Webkit,Mozilla,Opera, and IE6+). Node.js unit tests should also be passing and can be run in the console with unit_tests/node.sh
. Also of note is unit_tests/prototype.html
, however depending on various circumstances not all tests may be passing, so it's good to do a before/after. Mootools can be ignored for the time being.
FAQs
A Javascript utility library for working with native objects.
The npm package sugar receives a total of 27,774 weekly downloads. As such, sugar popularity was classified as popular.
We found that sugar demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.