
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
@jcbhmr/esmurl
Advanced tools
🎁 Create a self-contained ESM blob: URL using a function & local import.meta

🎁 Create a self-contained ESM blob: URL using a function & local
import.meta

npm install @jcbhmr/esmurl
🛑 Currently only Node.js is supported. Check #5 for more details.
import esmurl from "@jcbhmr/esmurl";
const url = esmurl(import.meta, async () => {
const url = await import("node:url");
const { default: isOdd } = await import("is-odd");
const { hello } = await import("./greetings.js");
console.log("/ as a file: URL => %s", url.pathToFileURL("/").href);
console.log(hello("George"));
console.log("Is 100 odd? %s", isOdd(100));
return 42;
});
const m = await import(url);
console.log("Return value is exposed as default export: %s", m.default);
FAQs
🎁 Create a self-contained ESM blob: URL using a function & local import.meta
The npm package @jcbhmr/esmurl receives a total of 0 weekly downloads. As such, @jcbhmr/esmurl popularity was classified as not popular.
We found that @jcbhmr/esmurl demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.