Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Client library for the fuzzy.io RESTful API
Add this line to your application's Gemfile:
gem 'fuzzy_io'
And then execute:
$ bundle
Or install it yourself as:
$ gem install fuzzy_io
This gem handles the most basic usage of Fuzzy.io.
# Require the module
require 'fuzzy_io'
# Your API key (get one from https://fuzzy.io/)
API_KEY = 'YOUR_API_KEY_HERE'
# Create an account object
acct = FuzzyIo::Account.new API_KEY
# ID of the agent you want to call; get it from https://fuzzy.io/
AGENT_ID = 'AGENT_ID_HERE'
# Inputs; map of string or symbol to numbers
inputs = {
input1: 10,
input2: 30
}
# Ask the agent to evaluate the inputs; returns two values!
outputs, evaluation_id = acct.evaluate AGENT_ID, inputs
# Outputs is all the outputs
puts outputs["output1"]
# An opaque ID for the evaluation
puts evaluation_id
# For feedback, provide a performance metric
performance = {
performance1: 3
}
fb = acct.feedback evaluation_id, performance
Class representing a single account; you can use it to do evaluations and give feedback.
Takes a string representing the API key. You can get the key on the top of your account page on https://fuzzy.io/ .
Takes a string representing the agent ID, and a hash mapping input names (strings or symbols) to numbers.
Response is two values (2!) -- a map of the output names to numbers, and a string for the evaluation ID.
Takes a string for the evaluation ID, and a hash mapping performance metrics to numbers. You can provide more than one metric.
The metrics will be optimized to increase -- so, number of clicks, profit on sale, etc. If you have a number that will go towards negative infinity, multiple it by -1. If you have a number that will go toward zero, give its inverse (1/x).
git checkout -b my-new-feature
)git commit -am 'Add some feature'
)git push origin my-new-feature
)FAQs
Unknown package
We found that fuzzy_io demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.