Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Absurdum is a Javascript utility library built with a focus on providing idempotent side-effect free functions and clear/readable modular source for tree shaking.
This package provides a variety of entry-points for all JS platforms
All top-level operator namespaces (ie [arrays, objects, strings]
) can be imported from the index
import { arrays, objects, strings } from 'path/to/absurdum/index.js';
The minified version can be imported from
import { arrays, objects, strings } from 'path/to/absurdum/index.min.js';
Top-level ES module namespaces are provided for Node/Bundlers
import { arrays, objects, strings } from 'absurdum';
Individual operators can be imported from their parent namespaces
import { chunk, find } from 'absurdum/arrays';
import { assign, invert } from 'absurdum/objects';
import { camelCase, repeat } from 'absurdum/strings';
Note: Webpack's tree-shaking algorithm doesn't handle multi-layered exports. To optimize bundle size, prefer individual operator imports.
For Node users who rely on CommonJS, top-level namespaces are provided
const arrays = require('absurdum').arrays;
const objects = require('absurdum').objects;
const strings = require('absurdum').strings;
Note: CJS entry-points are backward-compatible with all non-EOL versions of Node
Import an operator and feed it some inputs
import { reverse } from 'absurdum/arrays';
const input = ['a', 'b', 'c', 'd'];
const output = reverse(input);
console.log(output);
// > ['d', 'c', 'b', 'a']
Tip: For VSCode users. Input type-checking, intellisense, and inline documentation are all supported.
FAQs
Reductio Ad Absurdum - The Ridiculous Application of Reduce
The npm package absurdum receives a total of 13 weekly downloads. As such, absurdum popularity was classified as not popular.
We found that absurdum demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.