
Security News
minimatch Patches 3 High-Severity ReDoS Vulnerabilities
minimatch patched three high-severity ReDoS vulnerabilities that can stall the Node.js event loop, and Socket has released free certified patches.
lightweight rectangle packer

pack is a box packing algorithm which attempts to determine the most compact configuration for a set of rectangles. To this end, it employs the first-fit decreasing (FFD) algorithm to place the boxes, using the length of the layout's shortest side length as a heuristic.
Unlike traditional bin packing algorithms, the boxes here are placed in a single container that grows appropriately as they are packed inside. This property makes it ideal for assembling spritesheets given a list of images.
pack(sizes) -> layoutArranges a list of [ width, height ] pairs into the most compact layout possible. The result will be reminiscent of the following data structure:
var layout = {
size: [ 13, 8 ],
boxes: [
{ size: [ 5, 3 ], position: [ 0, 0 ] },
{ size: [ 6, 5 ], position: [ 0, 3 ] }
{ size: [ 5, 4 ], position: [ 6, 0 ] },
{ size: [ 2, 4 ], position: [ 11, 0 ] },
{ size: [ 7, 4 ], position: [ 6, 4 ] },
{ size: [ 1, 3 ], position: [ 5, 0 ] },
]
}
FAQs
lightweight rectangle packer
The npm package pack receives a total of 994 weekly downloads. As such, pack popularity was classified as not popular.
We found that pack demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
minimatch patched three high-severity ReDoS vulnerabilities that can stall the Node.js event loop, and Socket has released free certified patches.

Research
/Security News
Socket uncovered 26 malicious npm packages tied to North Korea's Contagious Interview campaign, retrieving a live 9-module infostealer and RAT from the adversary's C2.

Research
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.