Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
hubba-reports gem - auto-generate github statistics / analytics reports from github api data (stars, timeline, traffic, top pages, top referrers, etc.)
See the hubba gem on how to collect github data (daily, weekly, monthly, etc.).
Hubba has about a dozen built-in reports (for now):
ReportSummary
- A-Z list of your repos by orgs with stars and size in kbReportStars
- your repos ranked by starsReportTimeline
- your repos in reverse chronological order by creationReportUpdates
- your repos in reverse chronological order by last commitLook into the /reports directory for all reports and, yes, you can - on how to code your very own.
If you only generate a single built-in report, use:
require 'hubba/reports'
report = Hubba::ReportSummary.new( './repos.yml' )
report.save( './SUMMARY.md' )
If you generate more reports, (re)use the in-memory statistics cache / object:
stats = Hubba.stats( './repos.yml' )
report = Hubba::ReportSummary.new( stats )
report.save( './SUMMARY.md' )
report = Hubba::ReportStars.new( stats )
report.save( './STARS.md' )
report = Hubba::ReportTimeline.new( stats )
report.save( './TIMELINE.md' )
report = Hubba::ReportUpdates.new( stats )
report.save( './UPDATES.md' )
# ...
A-Z list of your repos by orgs with stars and size in kb. Results in:
geraldb (11)
austria ★1 (552 kb) · catalog ★3 (156 kb) · chelitas ★1 (168 kb) · geraldb.github.io ★1 (520 kb) · logos ★1 (363 kb) · sandbox ★2 (529 kb) · talks ★200 (16203 kb) · web-proxy-win ★8 (152 kb) · webcomponents ★1 (164 kb) · webpub-reader ★3 (11 kb) · wine.db.tools ★1 (252 kb)
...
(Live Example - SUMMARY.md
)
Your repos ranked by stars. Results in:
- ★2936 openblockchains/awesome-blockchains (2514 kb)
- ★851 planetjekyll/awesome-jekyll-plugins (148 kb)
- ★604 factbook/factbook.json (7355 kb)
- ★593 openfootball/football.json (2135 kb)
- ★570 openmundi/world.db (1088 kb)
- ★552 openblockchains/programming-blockchains (552 kb)
- ★547 mundimark/awesome-markdown (83 kb)
- ★532 planetjekyll/awesome-jekyll (110 kb)
- ★489 cryptocopycats/awesome-cryptokitties (4154 kb)
- ★445 openfootball/world-cup (638 kb)
...
(Live Example: STARS.md
)
Your repos in reverse chronological order by creation. Results in:
2020
9
- 2020-09-18 ★1 yorobot/workflow (83 kb)
6
- 2020-06-27 ★2 yorobot/sport.db.more (80 kb)
- 2020-06-24 ★1 yorobot/stage (554 kb)
- 2020-06-11 ★1 yorobot/cache.csv (336 kb)
...
(Live Example: TIMELINE.md
)
Your repos in reverse chronological order by last commit. Results in:
committed / pushed / updated / created
- (1d) yorobot/backup ★4 - 2020-10-08 (=/=) / 2020-10-08 (=) / 2020-10-08 / 2015-04-04 - ‹› (1595 kb)
- (1d) yorobot/logs ★1 - 2020-10-08 (=/=) / 2020-10-08 (=) / 2020-10-08 / 2016-09-13 - ‹› (172 kb)
- (1d) rubycoco/git ★9 - 2020-10-08 (=/=) / 2020-10-08 (=) / 2020-10-08 / 2015-11-16 - ‹› (88 kb)
- (1d) openfootball/football.json ★593 - 2020-10-08 (=/=) / 2020-10-08 (=) / 2020-10-08 / 2015-09-17 - ‹› (2135 kb)
- (2d) yorobot/workflow ★1 - 2020-10-07 (=/=) / 2020-10-07 (=) / 2020-10-07 / 2020-09-18 - ‹› (83 kb)
- (2d) rubycoco/webclient ★5 - 2020-10-07 (=/=) / 2020-10-07 (=) / 2020-10-07 / 2012-06-02 - ‹› (39 kb)
- (3d) footballcsv/belgium ★1 - 2020-10-06 (=/=) / 2020-10-06 (=) / 2020-10-06 / 2014-07-25 - ‹› (314 kb)
- (3d) footballcsv/england ★105 - 2020-10-06 (=/=) / 2020-10-06 (=) / 2020-10-06 / 2014-07-23 - ‹› (8666 kb)
- (3d) footballcsv/austria ★1 - 2020-10-06 (=/=) / 2020-10-06 (=) / 2020-10-06 / 2018-07-16 - ‹› (91 kb)
- (3d) footballcsv/espana ★15 - 2020-10-06 (=/=) / 2020-10-06 (=) / 2020-10-06 / 2014-07-23 - ‹› (1107 kb)
- (3d) footballcsv/deutschland ★5 - 2020-10-06 (=/=) / 2020-10-06 (=) / 2020-10-06 / 2014-07-25 - ‹› (1343 kb)
...
(Live Example: UPDATES.md
)
That's all for now.
Use
gem install hubba-reports
or add the gem to your Gemfile
gem 'hubba-reports'
The hubba
scripts are dedicated to the public domain.
Use it as you please with no restrictions whatsoever.
FAQs
Unknown package
We found that hubba-reports demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.