
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
tims-ocr-api
Advanced tools
TIMS OCR提供两种接口:
将Socket接口封装成OCR.scan()这样的Node.js接口。
API Document: https://yyssc.github.io/tims-ocr-api/jsdoc/
ocr_srv并启动./start.shnpm install tims-ocr-api -g
ocr --help
# 远程图片
ocr http://7pun4e.com1.z0.glb.clouddn.com/test.jpg
# 本地图片
ocr ./test.jpg

npm install tims-ocr-api --save
FYI examples
var host = '127.0.0.1';
var port = '39456';
var ocr = require('tims-ocr-api').create(host, port);
// 本地图片
ocr.upload('/tmp/test.jpg').then(function (result) {
return console.log(result)
}).catch(function (err) {
console.log('err', err);
})
make test
DEBUG=* make test # show debug log
mocha --ui tdd -g 'utils' # only test 'utils', and use TDD interface
make cov # Coverage rate
Note: travis-ci.org will run this test https://travis-ci.org/yyssc/tims-ocr-api
grunt [jsdoc]
The generated API document is located in out/ dir.
.utility/push-jsdoc-to-gh-pages.sh will called when travis-ci finished Unittest, to push out/ dir to branch gh-pages of current repo.
TODO: out/ should generated automatically.
You could use a mock test for testing.
https://github.com/yyssc/mock-tims-ocr
FAQs
OCR for TIMS-server API
The npm package tims-ocr-api receives a total of 13 weekly downloads. As such, tims-ocr-api popularity was classified as not popular.
We found that tims-ocr-api demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.