Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
A ruby image comparison tool powered by Odiff in OCamel.
A strong candidate against the veteran players on the internet like pixelmatch and ImageMagick
Impressive benchmarks from Odiff
.
Install the gem and add to the application's Gemfile by executing:
bundle add rodiff
If bundler is not being used to manage dependencies, install the gem by executing:
gem install rodiff
This gem wraps the standalone executable of the Odiff
. These executables are platform specific, there are separate gems per platform, but the suitable gem will automatically be selected for your machine.
Supported platforms are:
Odiff
If you are not able to use the vendored standalone executables, a local installation of the Odiff
executable can be configured by setting an environment variable named ODIFF_INSTALL_DIR
to the directory path containing the executable.
For example, if you've installed the odiff-bin
npm package and had the binaries downloaded at /path/to/node_modules/bin/odiff
, then you should set your environment variable like so:
ODIFF_INSTALL_DIR=/path/to/node_modules/bin
or, for relative paths like ./node_modules/.bin/odiff
:
ODIFF_INSTALL_DIR=node_modules/.bin
After checking out the repo, run bin/setup
to install dependencies. Then, run bundle exec rspec
to run the tests. You can also run bin/console
for an interactive prompt that will allow you to experiment.
To install this gem onto your local machine, run bundle exec rake install
. To release a new version, update the version number in version.rb
, and then run bundle exec rake release
, which will create a git tag for the version, push git commits and the created tag, and push the .gem
file to rubygems.org.
ERROR: Cannot find the odiff executable
for supported platformSome users are reporting this error even when running on one of the supported platforms:
A possible cause of this is that Bundler has not been told to include gems for your current platform. Please check your Gemfile.lock
file to see whether your native platform is included in the PLATFORMS
section. If necessary, run:
bundle lock --add-platform <platform-name>
and re-bundle.
Another common cause of this is that bundler is configured to always use the "ruby" platform via the
BUNDLE_FORCE_RUBY_PLATFORM
config parameter being set to true
. Please remove this configuration:
bundle config unset force_ruby_platform
# or
bundle config set --local force_ruby_platform false
and re-bundle.
See https://bundler.io/man/bundle-config.1.html for more information.
Rodiff is released under the MIT License. Odiff is released under the MIT License.
Bug reports and pull requests are welcome on GitHub at https://github.com/ryancyq/rodiff.
FAQs
Unknown package
We found that rodiff demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.