Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
@types/moment
Advanced tools
Stub TypeScript definitions entry for Moment, which provides its own types definitions
@types/moment provides TypeScript type definitions for the Moment.js library, which is used for parsing, validating, manipulating, and formatting dates.
Parsing Dates
This feature allows you to parse dates from strings into Moment.js objects, which can then be manipulated or formatted as needed.
const moment = require('moment');
const date = moment('2023-10-01');
console.log(date.format('YYYY-MM-DD'));
Formatting Dates
This feature allows you to format Moment.js date objects into human-readable strings using various format tokens.
const moment = require('moment');
const date = moment();
console.log(date.format('MMMM Do YYYY, h:mm:ss a'));
Manipulating Dates
This feature allows you to manipulate dates by adding or subtracting time units such as days, months, or years.
const moment = require('moment');
let date = moment();
date = date.add(7, 'days');
console.log(date.format('YYYY-MM-DD'));
Validating Dates
This feature allows you to validate whether a given date string conforms to a specified format.
const moment = require('moment');
const isValid = moment('2023-10-01', 'YYYY-MM-DD', true).isValid();
console.log(isValid);
date-fns provides a comprehensive set of functions for working with dates in JavaScript. It is modular and allows you to import only the functions you need, which can result in smaller bundle sizes compared to Moment.js.
Luxon is a modern JavaScript library for working with dates and times. It is built on top of the native JavaScript Date object and provides a more comprehensive and immutable API compared to Moment.js.
Day.js is a minimalist JavaScript library that is similar to Moment.js but with a much smaller footprint. It aims to be a drop-in replacement for Moment.js with a similar API but better performance and smaller size.
This is a stub types definition for Moment (https://github.com/moment/moment). Moment provides its own type definitions, so you don't need @types/moment installed!
2.13.0 See full changelog
Plus 3 new locales and locale fixes.
FAQs
Stub TypeScript definitions entry for Moment, which provides its own types definitions
The npm package @types/moment receives a total of 264,898 weekly downloads. As such, @types/moment popularity was classified as popular.
We found that @types/moment demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.