
Security News
Node.js Drops Bug Bounty Rewards After Funding Dries Up
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.
@onelinecode/onelinecode
Advanced tools

A collection of utilities and helpers following the principle: Keep it as simple as possible in one line of code.
As long as we area dealing with JavaScript, the library assumes that the user provides valid input. No type checking or other verifications of the arguments are part of the functions. The library tires to use the simplest and most performant code possible. To keep the functions as simple as possible they will be reduced to the core functionality: "one function should have one specific functionality only".
New functions will be added every time there is an article being published.
All functions are written in ESNext esmodules (./src) and available as
-umd (./dist/index.js) with the onelinecode namespace (e.g. window.onlinecode)
-commonjs (./dist/index.cjs.js)
-esm (./dist/index.esm.js)
See ./doc/array.md
$ npm i @onelinecode/onelinecode
$ yarn add @onelinecode/onelinecode
For example, you want to shallowClone an array:
import { shallowClone } from '@onelinecode/onelinecode/array';
let array = [1];
let arrayClone = shallowClone(array);
The library has 100% code coverage with ava and passes the build on Build status from travis-ci.
If you are interested in discussion a specific function, please see the corresponding article from the series on dev.to.
Please don't hesitate to comment, give feedback. I appreciate every input or comment. We can and should learn from each others opinion and knowledge. Please stick to a respectful style of discussion and read the code of conduct like the articles or star the repository.
Licensed under the MIT license. MIT - http://www.opensource.org/licenses/mit-license.php
FAQs
Awesome javascript in one line of code
The npm package @onelinecode/onelinecode receives a total of 5 weekly downloads. As such, @onelinecode/onelinecode popularity was classified as not popular.
We found that @onelinecode/onelinecode demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.