Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
als-require
Advanced tools
als-require
is a lightweight utility that enables the importation and modification of CommonJS modules before execution in both browser and Node.js environments.
Capabilities of als-require
:
Where it can be particularly useful:
To install als-require
, use npm:
npm install als-require
Import in nodejs:
const Require = require('als-require')
const module = Require.getModule('./some/path')
Import in browser:
<script src="/node_modules/als-require/require.js"></script>
<script>
Require.getModule('./some/path')
.then(module => {
// ...
})
</script>
als-require
has two files for NodeJS and browser which has same structure and api.
Each file includes Require
class with folowing structure:
class Require {
static getModule(path, context) {}
static contents = {}
constructor(path, context = {}) {
this.modules = {}
this.contents = {}
this.path = path
this.context = context
}
getContent(path = this.path, from = Require.relativePath) {}
build(modules = this.modules) {}
}
The structure above describes only properties and methods for usage, without additional properties and methods which used as private methods.
The constructor gets two arguments: path and context.
path
(String): relative path to module for requirecontext
(Object): shared object which will be available in all modulesHere explanation what each method and property used for:
Require.getModule
- quick way to get contents and build them in one step
contents
, modules
and result
Require.contents
- includes modules contents and their children list and used as cacherequire.getContent()
- used for reading module file's contents
Require.contents
and to require.contents
async
and NodeJS version is sync
require.build()
- builds all modules results
require.modules
- includes all module's resultsrequire.result
- has the main module result (export)const Require = require('als-require')
const path = './relative/path/to/module'
const context = {} // shared object for all modules empty object by default
const mod = new Require(path,context)
mod.getContent() // reading all modules
for(const path in mod.contents) {
mod.contents[path] = mod.contents[path] // modify if needed
}
mod.build() // build the result
mod.result // includes the result of main module
mod.modules // object with all module`s results {relativePath:moduleResult,...}
If you want to use node modules libraries, you need to specify relative path.
<script src="/node_modules/als-require/require.js"></script>
<script>
const path = './relative/path/to/module'
const context = {} // shared object for all modules empty object by default
const mod = new Require(path,context)
const promise = mod.getContent() // fetching all modules
promise.then(mod => {
for(const path in mod.contents) {
mod.contents[path] = mod.contents[path] // modify if needed
}
mod.build() // build the result
mod.result // includes the result of main module
mod.modules // object with all module`s results {relativePath:moduleResult,...}
})
</script>
Require
class not requiring node_modules packages. All node packages returns null as result.
You can include node module by requiring it's full path. Here is example:
const somePackage = require('some-package');
const somePackage1 = require('./node_modules/some-package/index.js');
module.exports = {somePackage,somePackage1}
In case above somePackage
is null
but somePackage1
should be the package.
The context
object is a shared space accessible by all modules loaded by als-require
. This allows modules to read and write shared data, enabling more interactive and dynamic module behaviors.
Make sure you are using the context
for static value (like constants and common variables and functions) and not dynamic, cause it available to all require's results.
als-require
throwing errors in case of cyclic dependencies and if some module throwing error.
For the case of module's error, Require
adds to stack modules paths which has called.
FAQs
A utility for using CommonJS require in the browser and creating bundles.
The npm package als-require receives a total of 21 weekly downloads. As such, als-require popularity was classified as not popular.
We found that als-require demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.