Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
survey-analytics
Advanced tools
The SurveyJS Dashboard library lets you build survey data dashboards and simplify survey data analysis with interactive and customizable charts and tables. Visualize your insights and analyze survey results in one view.
Clone the repo
git clone https://github.com/surveyjs/survey-analytics.git
cd survey-analytics
Install dependencies
Make sure that you have Node.js v6.0.0 or later and npm v2.7.0 or later installed.
npm install
Build the library
npm run build:prod
You can find the built scripts and style sheets in the packages
folder.
Run test examples
npm start
This command runs a local HTTP server at http://localhost:8080/.
Run unit tests
npm test
SurveyJS Dashboard is not available for free commercial usage. If you want to integrate it into your application, you must purchase a commercial license(s) for software developer(s) who will be working with the SurveyJS product's APIs and implementing their integration.
FAQs
SurveyJS analytics Library.
The npm package survey-analytics receives a total of 8,139 weekly downloads. As such, survey-analytics popularity was classified as popular.
We found that survey-analytics demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.