
Security News
minimatch Patches 3 High-Severity ReDoS Vulnerabilities
minimatch patched three high-severity ReDoS vulnerabilities that can stall the Node.js event loop, and Socket has released free certified patches.
babi
Advanced tools

a text editor, eventually...
pip install babi
babi works best in a virtualenv
I used to use the text editor nano, frequently I typo this. on a qwerty
keyboard, when the right hand is shifted left by one, nano becomes babi.
here is a youtube video where I discuss the motivation for creating and using
babi instead of nano:
currently you can quit babi by using ^X (or via esc +
:q).
these are all of the current key bindings in babi
pre-commit run --files <filename>flake8 <filename> for python filesin prompts (search, search replace, command):
syntax highlighting should work out of the box!
if you want a custom theme find a visual studio code theme, convert it to
json (if it is not already json) and put it at ~/.config/babi/theme.json.
a helper script is provided to make this easier: ./bin/download-theme NAME URL
to get the most out of babi's built in keyboard shortcuts, a few settings must be changed on macos with Terminal.app:
⌃ → and ⌃ ← conflict)⌃ →: \033[1;5C⌃ ←: \033[1;5D⇧ ↑: \033[1;2A⇧ ↓: \033[1;2B⇧ →: \033[1;2C⇧ ←: \033[1;2Dmost things work! here's a few screenshots
this opens the file, displays it, and can be edited and can save! unknown keys are displayed as errors in the status bar. babi will scroll if the cursor goes off screen either from resize events or from movement. babi can edit multiple files. babi has a command mode (so you can quit it like vim :q!). babi also supports syntax highlighting








FAQs
a text editor
We found that babi demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
minimatch patched three high-severity ReDoS vulnerabilities that can stall the Node.js event loop, and Socket has released free certified patches.

Research
/Security News
Socket uncovered 26 malicious npm packages tied to North Korea's Contagious Interview campaign, retrieving a live 9-module infostealer and RAT from the adversary's C2.

Research
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.