
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
@date-io/core
Advanced tools
This project is a part of date-io monorepo. This particular package contains an implemented interface (typescript declaration) for all available implementations.
Get more information here
Moment.js is a standalone date manipulation library that offers a wide range of functionalities including parsing, validation, manipulation, and formatting of dates. Unlike @date-io/core, Moment.js is not an abstraction over different date libraries but a complete solution in itself. However, it's larger in size and has been considered legacy with the recommendation for new projects to consider alternatives.
Date-fns provides over 200 functions to manipulate dates in JavaScript, such as formatting, parsing, and calculations on dates. It's modular, allowing developers to include only the parts they need, which can result in smaller bundle sizes compared to Moment.js. Date-fns is used directly for manipulation rather than serving as an abstraction layer like @date-io/core.
Dayjs is a lightweight date library that offers a similar API to Moment.js but with a much smaller footprint. It includes plugins for additional functionalities such as localized formatting and timezone support. While it provides direct date manipulation capabilities, it does not abstract over other date libraries like @date-io/core does.
Luxon is a powerful, modern library for working with dates and times. It offers comprehensive features for parsing, formatting, manipulating, and querying dates and times. Luxon is designed with immutability and internationalization in mind. Unlike @date-io/core, Luxon is a standalone library focused on providing a rich set of date-time utilities rather than serving as an interface to unify different date libraries.
FAQs
Abstraction over common javascript date management libraries
The npm package @date-io/core receives a total of 764,097 weekly downloads. As such, @date-io/core popularity was classified as popular.
We found that @date-io/core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.