
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Wfreq is a graphical user interface text analysis tool. It displays word frequencies from a text file selected through a Dialog Box.
Create a text file containing:
require 'wfreq'
Wfreq.run
save the text file as "wfreq.rbw" or "wfreq.rb" on your desktop if you are using Microsoft Windows as an Operating System. If Ruby is in your PATH, clicking on this Ruby file will start the Widget.
This utility app opens a window with a large text frame and a menu on the menubar. Select a file name from the OpenFile Dialog box. Once selected, the frequencies are displayed in the text window sorted in a descending area, each word followed by its frequency.
If you want to save the result appearing in the text window, choose save from the file menu and enter the desired filename. It is possible to edit the text area, so that you may delete certain lines which contains irrelevant words such as "the, of, is" or any lines below the first highest frequency words, before saving the result into a file.
To clear the Text Area select Close or New from the File Menu
FAQs
Unknown package
We found that wfreq demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.