
Research
/Security News
Malicious npm Packages Target WhatsApp Developers with Remote Kill Switch
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
Fast, small and purely functional utility library.
$ npm install tily
/object
– for objects/string
– for strings/promise
– for promises/array
– for arrays or array-like objects/function
– for functions – composition, currying and so
on, also a set of simple functions (noop, T, F)/is
– set of type checking methods/
– root contains utilities which don't satisfy any of the above
categories or are universalimport pathOr from 'tily/object/pathOr';
import compose from 'tily/function/compose';
import toLower from 'tily/string/toLower';
import map from 'tily/array/map';
const toLowerName = compose(toLower, pathOr(['name'], ''));
const result = map(toLowerName)([{name: 'testA'}, {name: 'testb'}]);
$ npm run benchmark
Utility | Lodash | Ramda | Tily |
---|---|---|---|
clone | 120,807 ops/sec | 112,053 ops/sec | 293,572 ops/sec |
array/filter | 2,080,728 ops/sec | 1,849,633 ops/sec | 2,046,113 ops/sec |
is/empty | 1,506,963 ops/sec | 474,177 ops/sec | 3,731,564 ops/sec |
function/flip | 7,528,745 ops/sec | 3,735,143 ops/sec | 3,490,207 ops/sec |
object/path | 12,023,128 ops/sec | 8,894,639 ops/sec | 7,587,076 ops/sec |
string/trim | 4,215,928 ops/sec | 1,034,655 ops/sec | 6,029,794 ops/sec |
Library | Bundle size |
---|---|
import _ from 'lodash' | 70.1 kb |
import ... from 'lodash/...' | 21.8 kb |
import R from 'ramda' | 41.3 kb |
import ... from 'ramda/src/...' | 10 kb |
import ... from 'tily/...' | 2.32 kb |
For detailed comparison with specific libraries see COMPARE.md
FAQs
Fast, small and purely functional utility library
The npm package tily receives a total of 378 weekly downloads. As such, tily popularity was classified as not popular.
We found that tily demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
Research
/Security News
Socket uncovered 11 malicious Go packages using obfuscated loaders to fetch and execute second-stage payloads via C2 domains.
Security News
TC39 advances 11 JavaScript proposals, with two moving to Stage 4, bringing better math, binary APIs, and more features one step closer to the ECMAScript spec.