Security News
Supply Chain Attack Detected in Solana's web3.js Library
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
twly (pronounced "towel-E") is a static analysis tool which can help you keep your code DRY (Don't Repeat Yourself) by letting you know where you have copy and pasted entire files or portions of them. Run twly on a directory, and twly will magically generate a report for you indicating what has been repeated and in which files. twly is language agnostic and can be used on any text document.
npm install -g twly
or to include in some project npm install twly --save-dev
twly has some default configuration, which translates into following configuration JSON object
{
"threshold": 95,
"ignore": ["node_modules/**/*.*", "bower_components/**/*.*", ".git/**/*.*"],
"minLines": 4,
"minChars": 100
}
twly reads the config file .trc
. This file should contain a JSON object. For example, below is an example .trc
file if you wanted to do the following:
{
"threshold": 89.5,
"ignore": ["foo.txt", "bar.txt", "node_modules/**"],
"minLines": 7,
"minChars": 200
}
You can use twly by simply running the command twly
. This will analyze all the files and recurse into subdirectories in your current working directory by default. You can also pass twly a glob pattern... If for example you wanted all javascript files in your current directory and all subdirectories: twly '**/*.js'
. This will analyze all CSS files in your current working directory twly '*.css'
.
For a list of available CLI arguments run command twly --help
.
See the node-glob project for options on how to specify files.
FAQs
Wanna get DRY?
We found that twly demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.