Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
ts-linked-list
Advanced tools
Yet another yet another doubly linked list, written in TypeScript.
Creating and publishing linked lists is quite popular, so the package name and all imaginable alternatives to it are already taken.
npm install @tuelsch/linked-list
import LinkedList from '@tuelsch/linked-list';
// Create a list with however many arguments of whatever type you like
const list = new LinkedList(1, 'two', { n: 3 }, () => 4);
// Create a list from an array alternatively
const listFromArray = LinkedList.fromArray([1, 2, 3, 'whatever']);
// Do something with it
list.forEach(data => doSomethingUseful(data));
Detailed documentation is available at https://tuelsch.github.io/linked-list/.
This is automatically generated from jsDoc-like comments by TypeDoc, a documentation generator specifically written for TypeScript.
This library was created to explore automated tools related to code quality control, so here's what I've come up with.
This library does not have any dependencies, so the first badge is easy to keep green. The second will be more useful in the future to check wether the devtools need an update.
As this library does not have any dependencies, there will be no vulnerabilities. However, this may change in the future, so it's good someone keeps an eye on it.
Testing the library is essential today, I used Travis CI to check if the tests run successfully.
Two separate tools are keeping watch here. Setting up either was easy and their results are matching. I'm not sure what the other benefits/drawbacks are so I'm keeping both around until one or the other proves to be more useful.
Codeclimate helps proofread the source code and gives feedback on what a machine thinks is clean code. It's not quite like your buddy giving advice, but it's free and can help you improve your code towards a generally accepted way of coding.
FAQs
A doubly linked list written in TypeScript
We found that ts-linked-list demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.