New Show Hacker News story: Show HN: Socket web extension – free NPM supply chain protection

Show HN: Socket web extension – free NPM supply chain protection
3 by 101arrowz | 0 comments on Hacker News.
Hey HN, I'm Arjun, an 18-year-old intern at Socket. I've been working on a project that I'm really excited to share with you all - a browser extension that makes it easier to check the security of NPM packages before you use them. You can try the extension on any Chromium-based browser or on Firefox. - Chrome extension: < https://chrome.google.com/webstore/detail/socket-security/jb... > - Firefox add-on: < https://addons.mozilla.org/en-US/firefox/addon/socket-securi... > Socket scans NPM packages for malware, vulnerabilities, code smell, and unwanted behavior using AI and some very powerful in-house static analysis we've been perfecting over the last 2 years. As the primary developer of Parcel.js' web extension transformer (< https://parceljs.org/recipes/web-extension/ >), I thought it would be cool to use my own work on Parcel to create a useful extension during my internship at Socket. The extension displays scores alongside each package indicating quality, security, maintenance, and other useful metrics. It also tells you if a package accesses the network when it shouldn't need to, or if it runs malware in an install script. You can learn more about its features in my blog post: < https://socket.dev/blog/socket-web-extension > Feel free to ask any questions you have about Socket, the extension or even my work on Parcel. Excited to hear your feedback! - Arjun

Comments

Post a Comment

Popular posts from this blog

New Show Hacker News story: Show HN: Natural language Twitter search using Codex

Show HN: Natural language Twitter search using Codex 3 by andyk | 0 comments on Hacker News. We built a structured search engine for Twitter called Bird SQL, available at https://ift.tt/7BU0hHb . Our search interface uses OpenAI Codex to translate natural language to SQL. Our backend then verifies the SQL, executes it, and displays the results on the web app. This makes large structured datasets like a scrape of Twitter easy for anyone to explore. As background, while working on text-to-SQL as a general problem, we came to believe one of its most powerful applications is as a search tool because: - SQL is hard to write by hand and prone to errors - It allows you to iterate quickly if you’re exploring a new dataset - A lot of contextual information that you’d normally have to internalize (e.g. your data’s schema) can be automatically generated and offloaded to the language model Using large language models (LLMs) like Codex to write the SQL for you means you don’t have to worry about
Read more

Internet Download Manager Universal Crack is Here ! [IDM 6.25 Build 10 UPDATED]

Image
Internet Download Manager Universal Crack Internet Download Manager aka IDM developers release a new build of  their well-known Download  Accelerator; Internet Download Manager  regularly. So everybody who uses pirated versions get so  pissed off that they have to find a new version of crack every time when an IDM update comes. So  we made a really awesome fix for that An Universal Web Crack. A new era in scene world. Web crack is a new concept of cracks that download and update crack content as the target program gets updated.  So whenever IDM releases a new version. Update your crack using built-in updater and apply crack. Easy as that ! You can simply trust crack because it has a history of more than 3 year with regular updates, and also it has more than 10000K worldwide downloads. How to Crack any IDM Version ? Install the latest version of IDM / Or update via quick update (yes its possible now)  Turn off any virus guards Download and 
Read more

New Show Hacker News story: Show HN: Movis – A Video Editing Library in Python

Show HN: Movis – A Video Editing Library in Python 2 by rezoolab | 0 comments on Hacker News. Originally, this library was created due to my motivation to make videos in Python. Of course, I considered other Python libraries, but I decided to create a new library for video editing because I needed the following features and also for study purposes: - The existence of composition. Especially, the ability to perform advanced video editing by inserting compositions within compositions. - The ability to add animations based on keyframes. - Effects like chroma key and drop shadow. - A caching mechanism to render the same frame quickly. - Various blending modes. These features, despite being standard in proprietary video editing software, were not present in previous Python libraries. Currently, I am using this library to automatically generate videos from raw materials. I would be grateful for any comments, thoughts, or requests.
Read more