Security News
tea.xyz Spam Plagues npm and RubyGems Package Registries
Tea.xyz, a crypto project aimed at rewarding open source contributions, is once again facing backlash due to an influx of spam packages flooding public package registries.
@putout/operator-declare
Advanced tools
Readme
🐊Putout operator adds ability to declare variables that has references with no definitions. Most likely you prefer using Declarator plugin type based on current Operator.
npm i putout @putout/operator-declare
If you want to create 🐊Putout plugin
that will declare variables according to your needs just:
const {operator} = require('putout');
const {declare} = operator;
module.exports = declare({
fs: `import fs from 'fs/promises'`,
});
When you need different declarations for ESM
and CommonJS
you can use:
const {operator} = require('putout');
const {declare} = operator;
module.exports = declare({
fs: {
esm: `import fs from 'fs/promises'`,
comomnjs: `const fs = require('fs')`, // drop when not needed
},
});
Plugin supports options, so you can pass it in .putout.json
:
{
"rules": {
"putout/declare": ["on", {
"declarations": {
"fs": "import fs from 'fs/promises'"
}
}]
}
}
If for some reason you don't need some kind of declaration, add dismiss
field and it will be ignored:
{
"rules": {
"putout/declare": ["on", {
"declarations": {
"fs": "import fs from 'fs/promises'"
},
"dismiss": ["fs"]
}]
}
}
Can be used with ESLint's putout/evaluate:
{
"rules": {
"putout/declare": ["on", {
"declarations": {
"superMethod": "import superMethod from '__putout_evaluate: join(`./`, basename(__filename), `.js`)'"
}
}]
}
}
If you have a file index.spec.js
:
+ import superMethod from './index.js'
superMethod();
MIT
FAQs
🐊Putout operator adds ability to declare referenced variables that was not defined
The npm package @putout/operator-declare receives a total of 4,869 weekly downloads. As such, @putout/operator-declare popularity was classified as popular.
We found that @putout/operator-declare demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Tea.xyz, a crypto project aimed at rewarding open source contributions, is once again facing backlash due to an influx of spam packages flooding public package registries.
Security News
As cyber threats become more autonomous, AI-powered defenses are crucial for businesses to stay ahead of attackers who can exploit software vulnerabilities at scale.
Security News
UnitedHealth Group disclosed that the ransomware attack on Change Healthcare compromised protected health information for millions in the U.S., with estimated costs to the company expected to reach $1 billion.