
Security News
Meet Socket at Black Hat Europe and BSides London 2025
Socket is heading to London! Stop by our booth or schedule a meeting to see what we've been working on.
@pinnacle0/codemod
Advanced tools
This package provide various codemod to refactor code related to other pinnacle published packages.
Codemod does not guarantee 100% accuracy, please double check your source file after transform.
npm install -g @pinnacle0/codemod
or to install locally in order to use JavaScript API provided by use
pnpm add -D @pinnacle0/codemod
There to two way to execute the code: using command line and through JavaScript API
# list all avaliable codemod
pinnacle-codemod list
# Transform file, add --dry flat to dry-run
pinnacle-codemod transform <codemod> <path>
# Help for advanced usage
pinnacle-codemod --help
It is recommanded to run transform with --dry flag first to make sure there are going to be no error during transform.
import { run } from '@pinnacle0/codemod'
// eg:
run('select-your-code-mod', './src/**/*.ts' , { dry: true });
use new-codemod script to generate new template for creating the new codemod.
use codgen script to auto update the codemod list and type.
@babel/parser is used to parse the source code to AST, and use recast to travel and transform the tree node.
The main reason of using recast instead of @babel/travse and @babel/generator is the former tries to preserve the style of original code as much as possible where later do not.
Unable to preserve code style of JSX
Parse HTML entities incorrectly
MIT
FAQs
Provide codemod by using babel and recast
We found that @pinnacle0/codemod demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket is heading to London! Stop by our booth or schedule a meeting to see what we've been working on.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.