
Security News
Follow-up and Clarification on Recent Malicious Ruby Gems Campaign
A clarification on our recent research investigating 60 malicious Ruby gems.
= Skab
This is a tool to help run statistical analyses of A/B testing experiments we run here at Songkick.
We use this util mainly to generate CSV files that we can plot using Google Docs in order to determine if an A/B test is a success or a failure.
== Getting started
gem install skab
skab
command line== Command line arguments
skab [output] [model] [model_args]
The command line accepts a variable number of arguments:
output
is the name of the output module to use to print datamodel
is the name of the model used to model the process to analyse== Outputs
Skab is able to output different statistics, all based on the model used to generate the distribution.
We currently support two main outputs:
== Models
Skab currently supports two models to generate a distribution of the mean depending on the actual observed values:
=== The poisson model
The poisson model accepts two integer parameters: A and B. Each parameter corresponds to the measured number of events occuring in group A or B, respectively.
The distribution outputs a list of probability for each mean depending on the A or B group, according to the poisson law of small numbers.
Here is an example, with 1450 events observed for group A and 1430 for group B:
skab distribution poisson 1450 1430
It is worth noting that the Poisson distribution is expensive to compute for large numbers (> 100), so this model uses an approximation using a normal distribution (using a variance of delta).
=== The binomial model
The binomial model is used to generate a distribution of success rates depending on a number of trials and successes for each group A and B.
The distribution outputs a list of probable success rates and their respective probability for groups A and B.
For example, this command generate the binomial distribution with:
200 successes out of 450 trials for group A
220 successes out of 470 trials for group B
skab distribution binomial 450 200 470 220
== Known issues
This software relies on Hash ordering to display values in the correct order. On Ruby versions older than 1.9, hash ordering wasn't guaranteed, and this will cause some output to be inconsistent (mainly differential CSV and summary outputs).
== LICENSE
The MIT License
Copyright © 2012 Songkick
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
FAQs
Unknown package
We found that skab demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.
Security News
ESLint now supports parallel linting with a new --concurrency flag, delivering major speed gains and closing a 10-year-old feature request.
Research
/Security News
A malicious Go module posing as an SSH brute forcer exfiltrates stolen credentials to a Telegram bot controlled by a Russian-speaking threat actor.