Security News
38% of CISOs Fear They’re Not Moving Fast Enough on AI
CISOs are racing to adopt AI for cybersecurity, but hurdles in budgets and governance may leave some falling behind in the fight against cyber threats.
@arenamovediza/modern
Advanced tools
Another testing npm package used to learn how to do it
Made following this tutorial
Some of the things I want to remember about its content, thigs i've learned by myself, and from other sources:
npx npm-packlist
to see the contents that will be included in the published version (DIDN'T WORK) -> use npm publish --dry-run
instead.files
option is included in the package.json
, it will include some unnecesary files, so be careful.files
option, it will still always include these files (which are very important):
npm publish --access=public
. We could also define that option inside our package.json (I don't remember how XD).declare module '@your/package_name'
. This way those using Typescript will still be able to use your library.
ESM = EcmaScript Modules I've read this article to understand some of these points Of course, it was more informative to read the documentation about this topic
.js
files are treated as commonJS by node (and I think they are interpreted like so by bundlers)..mjs
are always treated as ESM and .cjs
as commonJS no matter what's inside the nearest package.json
filetype="module"
inside the package.json
file all .js
files will be treated as ESM. If we want to treat them as CommonJS we must change the extension to .cjs
type="commonjs"
inside the package.json file or if we totally ignore that property at all .js
files will be treated as CommonJS. If we want to treat them as ESM we must change the extension to .mjs
type="module"
and use .cjs
for thos commonJS files.type="commonjs"
and use .mjs
for those ESM files..mjs
for those ESM filesEven though we have various testing libraries, the one I'm using here is vitest. I didn't find good documentation about it, but was led by the hype. However, it's working fine with my minimal setup, which is being commited at the same time of these words.
FAQs
Another testing npm package used to learn how to do it
The npm package @arenamovediza/modern receives a total of 2 weekly downloads. As such, @arenamovediza/modern popularity was classified as not popular.
We found that @arenamovediza/modern demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
CISOs are racing to adopt AI for cybersecurity, but hurdles in budgets and governance may leave some falling behind in the fight against cyber threats.
Research
Security News
Socket researchers uncovered a backdoored typosquat of BoltDB in the Go ecosystem, exploiting Go Module Proxy caching to persist undetected for years.
Security News
Company News
Socket is joining TC54 to help develop standards for software supply chain security, contributing to the evolution of SBOMs, CycloneDX, and Package URL specifications.