// npm package

fixed-round

Math.round with fixed, formats a number using fixed-point notation and returns a number.

npmjs.com tarball repo homepage

versions

maintainers

license

ISC

first publish

2017-06-29

publisher

atool

tarball

1,996 B

AUTO-PUBLISHED·1 version indexed·latest published 2018-08-26

// publisher campaignby atool

9 caught packages from this account

This is not an isolated catch. The same publisher has shipped 8 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.

// offending code· @1.0.2· 1 file flagged

llm: benign · 0.85

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@1.0.2·2018-08-26·AUTO-PUBLISHED·publisher: atool

heuristic 75/100

static flags 1

llm benign (0.85) via ollama

publisher-multi-name-burst:5osv-flagged:MAL-2026-4134public-github-push

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

// offending code· 1 file flaggedpatterns: 1

--- package/package.json (excerpt) ---
{
  "name": "fixed-round",
  "version": "1.0.2",
  "description": "Math.round with fixed, formats a number using fixed-point notation and returns a number.",
  "main": "index.js",
  "scripts": {
    "test-travis": "nyc npm test && nyc report --reporter=lcov",
    "test": "mocha test.js"
  },
  "repository": {
    "type": "git",
    "url": "git+https://github.com/TCharts/fixed-round.git"
  },
  "keywords": [
    "round",
    "toFixed",
    "fixed-round"
  ],
  "author": "ProtoTeam",
  "license": "ISC",
  "bugs": {
    "url": "https://github.com/TCharts/fixed-round/issues"
  },
  "homepage": "https://github.com/TCharts/fixed-round#readme",
  "devDependencies": {
    "coveralls": "^2.11.6",
    "expect": "^1.14.0",
    "mocha": "^2.4.5",
    "nyc": "^5.6.0"
  }
}


--- package.json (entry) ---
{
  "name": "fixed-round",
  "version": "1.0.2",
  "description": "Math.round with fixed, formats a number using fixed-point notation and returns a number.",
  "main": "index.js",
  "scripts": {
    "test-travis": "nyc npm test && nyc report --reporter=lcov",
    "test": "mocha test.js"
  },
  "repository": {
    "type": "git",
    "url": "git+https://github.com/TCharts/fixed-round.git"
  },
  "keywords": [
    "round",
    "toFixed",
    "fixed-round"
  ],
  "author": "ProtoTeam",
  "license": "ISC",
  "bugs": {
    "url": "https://github.com/TCharts/fixed-round/issues"
  },
  "homepage": "https://github.com/TCharts/fixed-round#readme",
  "devDependencies": {
    "coveralls": "^2.11.6",
    "expect": "^1.14.0",
    "mocha": "^2.4.5",
    "nyc": "^5.6.0"
  }
}


--- index.js (entry) ---
/**
 * Created by hustcc.
 * Contract: i@hust.cc
 */


/**
 * 四舍五入一个数字，可以指定小数位
 * @param number
 * @param fixed
 * @returns {number}
 */
function fixedRound(number, fixed) {
  if (!fixed) fixed = 0;

  var n = Number(number);

  if (fixed === 0) return Math.round(n);
  var t = Math.pow(10, fixed);
  return Math.round(n * t) / t;
}

module.exports = fixedRound;