Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
typewriter
Advanced tools
A compiler for generating strongly typed analytics clients via Segment Protocols
💪 Strongly Typed Analytics: Generates strongly-typed Segment analytics clients that provide compile-time errors, along with intellisense for event/property names, types and descriptions.
👮 Analytics Testing: Validate your instrumentation matches your spec before deploying to production, so you can fail your CI builds without a manual analytics QA process.
🌐 Cross-Language Support: Supports native clients for analytics.js
, analytics-node
, analytics-android
and analytics-ios
.
✨ Segment Protocols: Built-in support to sync your typewriter
clients with your centralized Segment Tracking Plans.
# Walks you through setting up a `typewriter.yml` and generating your first client.
$ npx typewriter init
For more instructions on setting up your typewriter
client, such as adding it to your CI, see our documentation.
typewriter
or propose support for a new language, see our contributors documentation.Check the instructions on our documentation
$ npx typewriter@7 build
FAQs
A compiler for generating strongly typed analytics clients via Segment Protocols
We found that typewriter demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 290 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.