
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
babel-plugin-object-to-json-parse
Advanced tools
[](https://circleci.com/gh/nd-02110114/3dmol-sandbox/tree/master) [
// before
const data = { foo: 42, bar: 1337 };
// after
const data = JSON.parse('{"foo":42,"bar":1337}');
$ npm install babel-plugin-object-to-json-parse -D
or
$ yarn add babel-plugin-object-to-json-parse -D
.babelrc
{
"plugins": ["object-to-json-parse"]
}
minJSONStringSize
(number
, defaults to 1024
)The minJSONStringSize
option will prevent the plugin from replacing an expression if the length of the JSON string given to JSON.parse
is smaller than minJSONStringSize
. For example, the following ensures all replacements have a string size of at least 1kb.
{
"plugins": [
["object-to-json-parse", {
"minJSONStringSize": 1024
}]
]
}
I just made this plugin for my understanding about AST and babel plugin.
I decided not to support partially JSON expression like below.
Partially JSON expressions such as [notValid, {isValid:true}] ensuring {isValid:true} is transformed.
const data = { bar: invalid_object, foo: 'foo' }
↓
const data = { bar: invalid_object, JSON.parse('{"foo": "foo"}')}
This is because I think most large objects are not partially JSON expressions. JSON.parse() is much faster in the case that object is 10 kB or larger. Converting small object to JSON.parse expression is not meaningful.
I don't care about some backwards compatibilities like this issue.
$ git clone git@github.com:nd-02110114/babel-plugin-object-to-json-parse.git
$ cd babel-plugin-object-to-json-parse
$ yarn install
// example
$ yarn build && yarn example
// test
$ yarn test
FAQs
 [](https://opensource.org/license
The npm package babel-plugin-object-to-json-parse receives a total of 1,035 weekly downloads. As such, babel-plugin-object-to-json-parse popularity was classified as popular.
We found that babel-plugin-object-to-json-parse demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.