Period: 2026-01-23 to 2026-01-30 Generated: 2026-01-30 08:53
| Metric | Value |
|---|---|
| Total commits | 523 |
| Contributors | 62 |
| Username | Date (UTC) | Lines Added | Lines Removed | |
|---|---|---|---|---|
| Sam | 2026-01-16 02:17 | 95 | 2 | |
| Martin Brennan | 2026-01-16 01:43 | 52 | 0 | |
| Jordan Vidrine | 2026-01-16 00:33 | 5 | 1 | |
| Sam | 2026-01-15 22:41 | 481 | 206 | |
| Michael Brown | 2026-01-15 20:11 | 1 | 17 | |
| Sam | 2026-01-15 20:36 | 33 | 5 | |
| Michael Brown | 2026-01-15 20:19 | 2 | 0 | |
| Michael Brown | 2026-01-15 00:06 | 0 | 0 | |
| Michael Brown | 2026-01-14 23:14 | 15 | 1 |
Version: 1.0.0 Protocol Version: 2024-11-05 Last Updated: 2026-01-10
| #!/usr/bin/env ruby | |
| # frozen_string_literal: true | |
| # Check JavaScript manifests/lockfiles for Wiz "Shai Hulud 2.0" compromised | |
| # packages. | |
| # | |
| # Fetches the official package list from Wiz's public IOC repo and scans every | |
| # `pnpm-lock.yaml`, `yarn.lock`, `package-lock.json`, `npm-shrinkwrap.json`, and | |
| # `package.json` under the repository. Reports any compromised packages found | |
| # along with the manifest/lockfile path. |
| # frozen_string_literal: true | |
| require "benchmark" | |
| require "memory_profiler" | |
| require "active_support" | |
| require "active_support/core_ext/object/blank" | |
| def test_fast | |
| @cache = ENV["TESTING"].presence if !defined?(@cache) | |
| @cache | |
| end |
| #!/usr/bin/env ruby | |
| require "psych" | |
| require "psych/pure" | |
| yaml_source = <<~YAML | |
| --- | |
| before_array: value1 | |
| # Comment before the problematic array | |
| flow_array_with_comment: [ |
| #!/usr/bin/env ruby | |
| require "psych" | |
| require "psych/pure" | |
| yaml_source = <<~YAML | |
| hierarchy: | |
| - name: "osfamily/major release" | |
| paths: | |
| # Comment above first item |