
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
vfile-statistics
Advanced tools
vfile utility to count messages per category: failures, warnings, etc
vfile utility to count messages per category (fatal, warn, info, etc).
This tiny package gives you stats about messages in files.
This is really tiny, you could do it yourself, but this is useful as a building block.
This package is ESM only. In Node.js (version 16+), install with npm:
npm install vfile-statistics
In Deno with esm.sh:
import {statistics} from 'https://esm.sh/vfile-statistics@3'
In browsers with esm.sh:
<script type="module">
import {statistics} from 'https://esm.sh/vfile-statistics@3?bundle'
</script>
import {VFile} from 'vfile'
import {statistics} from 'vfile-statistics'
const file = new VFile({path: '~/example.md'})
file.message('This could be better')
file.message('That could be better')
try {
file.fail('This is terribly wrong')
} catch {}
file.info('This is perfect')
console.log(statistics(file))
Yields:
{fatal: 1, nonfatal: 3, warn: 2, info: 1, total: 4}
This package exports the identifier statistics.
There is no default export.
statistics(file)Get stats for a file, list of files, or list of messages.
file (Array<VFile>, Array<VFileMessage>,
VFile, or VFileMessage)
— file, message, or list of files or messagesStatistics (Statistics).
StatisticsStatistics (TypeScript type).
fatal — fatal errors (fatal: true)warn — warning messages (fatal: false)info — informational messages (fatal: undefined)nonfatal — warning or info messagestotal — all messagesThis package is fully typed with TypeScript.
It exports the additional type Statistics.
Projects maintained by the unified collective are compatible with maintained versions of Node.js.
When we cut a new major release, we drop support for unmaintained versions of
Node.
This means we try to keep the current release line, vfile-statistics@^3,
compatible with Node.js 16.
See contributing.md in vfile/.github for ways to
get started.
See support.md for ways to get help.
This project has a code of conduct. By interacting with this repository, organization, or community you agree to abide by its terms.
FAQs
vfile utility to count messages per category: failures, warnings, etc
The npm package vfile-statistics receives a total of 470,258 weekly downloads. As such, vfile-statistics popularity was classified as popular.
We found that vfile-statistics demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.

Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.

Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.