
Security News
OpenGrep Restores Fingerprinting in JSON and SARIF Outputs
OpenGrep has restored fingerprint and metavariable support in JSON and SARIF outputs, making static analysis more effective for CI/CD security automation.
@ms-cloudpack/esm-stub-utilities
Advanced tools
This library contains utilities for generating ESM stubs for CommonJS modules. Some bundlers require this for extracting named exports needed to produce a browser-compatible ESM bundle.
Call writeESMStubs
to generate stubs for CJS entries of a package:
import { writeESMStubs } from '@ms-cloudpack/esm-stub-utilities';
const esmStub = await writeESMStubs({
inputPath: '/path/to/package',
entries: {
'./entry1': './cjsEntry1.js',
'./entry2': './cjsEntry2.js',
},
});
When evaluating named entries in the exports
of the cjs file, the library is loaded in the node process. A few libraries are used to simulate the browser environment in order for the script to load. (E.g. some libraries will reference window
on load, and therefore must be parsed in an environment that accommodates this.)
Libraries which export a default
entry in their exports
will have that value preserved as the default
export in the stub. However libraries which have an object exported which don't have a default
key will have the entire object exported as the default.
Libraries which export a function or literal value as the exports
result will have a default export for that entry.
Some libraries don't export anything. In this case, the stub will simply import the entry.
Exported members that are keywords will be ignored. (E.g. module.exports = { 'delete': "foo" };
would be considered an empty export.)
FAQs
Generates ESM stubs for CommonJS entry files.
The npm package @ms-cloudpack/esm-stub-utilities receives a total of 286 weekly downloads. As such, @ms-cloudpack/esm-stub-utilities popularity was classified as not popular.
We found that @ms-cloudpack/esm-stub-utilities demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
OpenGrep has restored fingerprint and metavariable support in JSON and SARIF outputs, making static analysis more effective for CI/CD security automation.
Security News
Security experts warn that recent classification changes obscure the true scope of the NVD backlog as CVE volume hits all-time highs.
Security Fundamentals
Attackers use obfuscation to hide malware in open source packages. Learn how to spot these techniques across npm, PyPI, Maven, and more.