Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
ultimate-comparison
Advanced tools
[![Build Status](https://travis-ci.org/ultimate-comparisons/ultimate-comparison-BASE.svg?branch=master)](https://travis-ci.org/ultimate-comparisons/ultimate-comparison-BASE) [![Issue Count](https://codeclimate.com/github/ultimate-comparisons/ultimate-comp
This is an ultimate comparison framework written in Angular.
Create a new repository on GitHub. In the following called "ultimate-THING-comparison" and located at https://github.com/example.com/ultimate-THING-comparison, replace THING
by your comparison (e.g., web-framework
).
Create local repository (in a git bash, Windows shell does not work)
mkdir ultimate-THING-comparison
cd ultimate-THING-comparison
git init
git fetch --depth=1 -n https://github.com/ultimate-comparisons/ultimate-comparison-BASE.git
git reset --hard $(git commit-tree FETCH_HEAD^{tree} -m "initial commit")
Create push to your GitHub repository
git remote add origin git@github.com:example.com/ultimate-THING-comparison.git
git push -u origin master
master
branch and updates should be pulled from the update
branch.
This is the save route because the update
branch does not include configuration files.comparison-configuration/comparison.json
defines the main properties of the comparison and the details dialog.In the details dialog the values of the keys header-label
, body
, and body-attachment-tags
matches level 2 headers in the comparison-elements files. The type of the body-attachment-tags
must be labels and body
will be parsed as markdown formated text.
3. The file comparison-configuration/table.json
defines the table columns.
tag:
References a level 2 header of the comparison elements (Performance
, Description
, License
, Showcase
) or the level 1 header and its content (tag
, url
, descr
).display:
Allows the user to hide a colum by default. It is possible to dynamically hide or display column by clicking on the configuration button and toggle the columns on/off.name:
Allows the user to change the display name (default display name is defined by tag
).order
: Sorts the column ascending or descending, allowed values: asc
, desc
type:
Style of the content.type.tag:
Either a label, a text, or a url.type.class:
Set a label class (e. g. label label-info
). Will be ignored if value class is set.type.values:
{
"name": "slow",
"description": "Overall performance above 200ms",
"class": "label-danger",
"color": "red",
"foreground": "black",
"weight": 2
}
weight
allows sorting of attributes, if multiple values are allowed. Ascending and descending is set by the order
attribute in the column. Without weight, the name is used for sorting.repo
: Signals that the column is dependent on a read repository (up to now only GitHub ones).
4. The file comparison-configuration/criteria.json
defines filter criterias for the table data.
tag:
References a level 2 header of the comparison elements (Performance
, Description
, License
, Showcase
)name:
Display name (replaces tag
).placeholder:
Placeholder for the select box.values:
Filter values.and_search:
Defines if all filter value must match or at least one.number_search
: Allow range searches. Ignores given values.For each thing, create a markdown file in comparison-elements
.
You can base it on template.md
.
If one column depends on a repository (repo
-attribute in table.json true), you have to define a section (## section title
) and add the repository as first list item, eg:
## Repo
- https://github.com/ultimate-comparisons/ultimate-comparison-BASE
If you have two possibilities to get notified for future updates:
repos-to-update.list
(via PR) and give write access to the user ultimate-comparison-genie
. You'll get a PR every time the master branch is updated.
The format for repos-to-update.list
is <your username>/<your repo name>
, eg. ultimate-comparisons/ultimate-comparison-BASE
.choco install nodejs
via chocolateynpm install --global --production windows-build-tools
sourcechoco install jdk8
Install pandoc (Version 1.17.2) pandoc-citeproc
wget https://github.com/jgm/pandoc/releases/download/1.17.2/pandoc-1.17.2-1-amd64.deb
sudo dpkg -i pandoc-1.17.2-1-amd64.deb
choco install pandoc
Update npm (sudo): npm install -g npm
Test dependencies:
java -version
npm -version
npm install
npm start
(starts the web page)
See docs/Update_YOUR_Comparison.md
The code is licensed under MIT, the content (located at comparison-elements
) under CC0-1.0.
See README-THING.template for a README skeletton for your ultimate-THING-comparison.
[v2.0.0-alpha.32] – 2020-02-21
package.json
FAQs
> This is the ultimate comparison framework written in [Angular](https://angular.io/). > It is released on npm as [ultimate-comparison](https://www.npmjs.com/package/ultimate-comparison).
The npm package ultimate-comparison receives a total of 9 weekly downloads. As such, ultimate-comparison popularity was classified as not popular.
We found that ultimate-comparison demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.