2019-02-23 Saturday - Background Reading on JavaScript Rule Engines

Work-in-progress notes here:
https://github.com/intltechventures/Lab.JavaScript/blob/master/RuleEngines.md

2018-07-07 Saturday - Exploring Scala.js

https://www.scala-js.org/

https://www.scala-js.org/tutorial/basic/

Writing client-side web applications in Scala 
http://www.lihaoyi.com/hands-on-scala-js/

2017-07-11 Tuesday - JavaScript Security/Audit/Vulnerability Checks

So, quite often, I have need to analyze a massively long list of JavaScript modules that are used in a vendor's solution, when I'm providing Enterprise Architecture oversight and assessment during the vendor evaluation phase of client RFP efforts.

To provide some confidence that there are no lurking serious security concerns with any of the JavaScript modules used in the vendor solution (and equally important - to identify those that are at, or beyond, end-of-life) - I would like to find a tool that would allow me to submit a file with the list of module names (with version numbers) - via a command line tool - and receive back some form of a report/analysis - identifying which ones may pose a high risk.

This posting is a placeholder for tools that I find that might be of utility in this effort - and hopefully of use to some future reader.

First, a quick survey of a Google search to help identify initial problem/solution domain articles to review:

• https://documentation.codeship.com/basic/languages-frameworks/nodejs/
• http://www.infoworld.com/article/3181432/javascript/safety-in-nodejs-nodesource-to-certify-npm-modules.html
• https://techbeacon.com/13-tools-checking-security-risk-open-source-dependencies-0
• https://blog.risingstack.com/controlling-node-js-security-risk-npm-dependencies/
• https://geekflare.com/nodejs-security-scanner/
• https://developers.redhat.com/blog/2017/04/12/using-snyk-nsp-and-retire-js-to-identify-and-fix-vulnerable-dependencies-in-your-node-js-applications/
• https://www.npmjs.com/package/snyk
• https://github.com/snyk/vulnerabilitydb
• https://nodesource.com/blog/nine-security-tips-to-keep-express-from-getting-pwned/
• https://channel9.msdn.com/coding4fun/blog/Guarding-the-code-with-Package-Security-Alerts-and-Roslyn-Security-Guard
• https://techcrunch.com/2016/10/11/facebook-partners-with-google-others-to-launch-a-new-javascript-package-manager/
• https://blogs.msdn.microsoft.com/visualstudioalmrangers/2017/01/17/manage-your-open-source-usage-and-security-in-your-pipeline/
• http://blog.myget.org/post/2016/10/14/Checking-potential-vulnerabilities-in-project-dependencies.aspx
• http://blog.bithound.io/checking-your-npm-dependencies-for-security-vulnerabilities/
• https://www.npmjs.com/package/auditjs
• https://www.npmjs.com/package/urbanjs-tool-nsp
• https://github.com/urbanjs/urbanjs-tools
• https://www.npmjs.com/package/urbanjs-tool-retire
• https://www.npmjs.com/package/run-jst-snyk
• https://www.npmjs.com/package/recink-snyk
• https://www.npmjs.com/package/nsp-audit-package
• https://www.npmjs.com/package/owdit
• https://github.com/nodesecurity/nsp

I'll post an update next week based on what I find to be of practical use from the above list.

2014-12-21 Sunday - JDK8, JavaScript, Nashorn, JJS, Eclipse Luna

This posting is a placeholder for links to some useful information as I explore the JavaScript processing capabilities of JDK8's Nashorn (JJS) within an Exclipse Luna environment.

Nashorn JavaScript Engine with JDK8 - Hello World
http://ladstatt.blogspot.com/2013/09/nashorn-javascript-engine-with-jdk8.html

Java 8 Nashorn Tutorial
http://winterbe.com/posts/2014/04/05/java8-nashorn-tutorial/

Nashorn: JavaScript made great in Java 8
http://www.javaworld.com/article/2144908/scripting-jvm-languages/nashorn--javascript-made-great-in-java-8.html

The Two Pillars of JavaScript
Part 1: How to Escape the 7th Circle of Hell
https://medium.com/javascript-scene/the-two-pillars-of-javascript-ee6f3281e7f3

The Two Pillars of JavaScript
Part 2: Functional Programming
https://medium.com/javascript-scene/the-two-pillars-of-javascript-pt-2-functional-programming-a63aa53a41a4

Mozilla Developer Network, JavaScript Guide
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Guide

w3schools JavaScript Tutorial
http://www.w3schools.com/js/

Processing.js
http://processingjs.org/

2011-10-10 Monday - Interesting Links

A few interesting things that I'm come across recently:



Web Standards Update for Microsoft Visual Studio 2010 SP1
http://visualstudiogallery.msdn.microsoft.com/a15c3ce9-f58f-42b7-8668-53f6cdc2cd83
Web Essentials
http://visualstudiogallery.msdn.microsoft.com/6ed4c78f-a23e-49ad-b5fd-369af0c2107f
Regex Editor
http://visualstudiogallery.msdn.microsoft.com/55c24bf1-2636-4f94-831d-28db8505ce00



Google Dart Language specification
http://www.dartlang.org/docs/technical-overview/index.html
http://www.dartlang.org/docs/spec/dartLangSpec.pdf

Google's email: The Future of Javascript
http://pastebin.com/NUMTTrKj



Craig Dickson's JavaOne 2011 presentation: Dead-Simple Deployment: Headache-Free Java Web Applications in the Cloud
http://craigsdickson.com/post/dead-simple-deployment-headache-free-java-web-applications-in-the-cloud-slideshare/

Apache Commons IO 2.1 released
http://commons.apache.org/io/upgradeto2_1.html

2011-08-25 Thursday - JavaScript Rule Engines?

I spent a few minutes this afternoon doing some searches for possible Web UI based JavaScript Rule Engines…and came across some of these articles which may be of interest for possible strategies on how to easily package Web User Interface business rules…

Not specifically recommending this for adoption...more of an interesting observation...as I'm currently doing some research for a client engagement...

http://hydrogen.informatik.tu-cottbus.de/wiki/index.php/A_JavaScript-based_rule_engine

http://hydrogen.informatik.tu-cottbus.de/wiki/index.php/A_JSON-based_rule_language

Invoke dynamic languages dynamically, Part 1: Introducing the Java scripting API

http://www.ibm.com/developerworks/java/library/j-javascripting1/

Invoke dynamic languages dynamically, Part 2: Find, execute, and change scripts at run time

http://www.ibm.com/developerworks/java/library/j-javascripting2/

Creating a simple rules engine using the Java scripting API

http://www.mcqueeney.com/roller/page/tom?entry=creating_a_simple_rules_engine

jsonrules: A Rule Engine in the Web browser (2009 – alpha version was published, not much activity since)
http://code.google.com/p/jsonrules/

Simplify dynamic JavaScript UIs by applying the Model-View-View Model (MVVM) pattern

http://knockoutjs.com/

2009-07-19 Sunday - JavaScript Resources

I wanted a bit of JavaScript to track how many days until my next voyage adventure begins - and happened to find just what I needed on javascriptkit.com

2009-07-11 Saturday - The Yahoo! User Interface Library (YUI)

The Yahoo! User Interface Library (YUI), currently at release 2.7.0

The YUI Library is a set of utilities and controls, written in JavaScript, for building richly interactive web applications using techniques such as DOM scripting, DHTML and AJAX. YUI is available under a BSD license and is free for all uses. The YUI project includes the YUI Library and two build-time tools: YUI Compressor (minification) and YUI Doc (documentation engine for JavaScript code).

I came across this JavaScript library while looking inside the predic8.com Membrane SOA Registry war file.