Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Generate QR Code universally, in any runtime, to ANSI, Unicode or SVG.
# Using npm
npm install uqr
# Using yarn
yarn add uqr
# Using pnpm
pnpm add uqr
import {
encode,
renderANSI,
renderSVG,
renderUnicode,
renderUnicodeCompact,
} from 'uqr'
const svg = renderSVG('Hello, World!')
const ansi = renderANSI('https://192.168.1.100:3000', {
// Error correction level
ecc: 'L',
// Border width
border: 2,
})
// display QR Code in terminal
console.log(ansi)
encode
Encode plain text or binary data into QR Code represented by a 2D array.
import { encode } from 'uqr'
const {
data, // 2D array of boolean, representing the QR Code
version, // QR Code version
size, // size of the QR Code
} = encode(text, options)
renderANSI
Render QR Code to ANSI colored string.
import { renderANSI } from 'uqr'
const string = renderANSI(text, options)
console.log(string)
renderUnicode
Render QR Code to Unicode string for each pixel. By default it uses █
and ░
to represent black and white pixels, and it can be customizable.
import { renderUnicode } from 'uqr'
const string = renderUnicode(text, {
blackChar: '█',
whiteChar: '░',
// ...other options
})
renderUnicodeCompact
Render QR Code with two rows into one line with unicode ▀
, ▄
, █
,
. It is useful when you want to display QR Code in terminal with limited height.
import { renderUnicodeCompact } from 'uqr'
const string = renderUnicodeCompact(text, options)
console.log(string)
renderSVG
Render QR Code to SVG string.
import { renderSVG } from 'uqr'
const string = renderSVG(text, options)
QR Code generation algorithm is modified from nayuki/QR-Code-generator by Project Nayuki.
CLI renders are inspired by qrcode-terminal.
MIT License
FAQs
Generate QR Code universally, in any runtime, to ANSI, Unicode or SVG.
The npm package uqr receives a total of 896,603 weekly downloads. As such, uqr popularity was classified as popular.
We found that uqr demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.