Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
bottom-line-utils
Advanced tools
This library is deprecated. Please switch to [@ezez/utils](https://www.npmjs.com/package/@ezez/utils).
This library is deprecated. Please switch to @ezez/utils.
Latest documentation of deprecated version can be found here: documentation.
npm install bottom-line-utils
Library comes with basic TypeScript support. Some very dynamic methods (like get/set) requires typecasting, and I can't do much about it. Those shouldn't be often needed with clean code and TypeScript anyway.
Both ESM and CJS code is bundled within library. With recent Node.js and/or bundlers you will get optimized ESM code automatically and older stuff will fallback to CJS code.
Lodash complexity that causes big bundle sizes just for using single function. Lodash is trying to cover each possible
use case, even very rare while typical observed use case of lodash is basic methods used on basic data. As an example,
let's take a _.pick
method that simply returns an object, based on source object, with just some properties copied.
Easy, right? Few lines of code? Lodash makes that 114 imports!
bottom-line
aims to:
map
/forEach
etc.),get
),Underscore character is often used for utils JS libraries. Dollar is taken by jQuery and other DOM related libraries. Others easy to type on standard layout keyboard, non a-z characters aren't valid JS variable name starters. "Underscore" is taken. Low-dash ("lodash") is taken. How else could I name a line on the bottom?
Oh, about npm name. bottom-line
is free. But NPM encourages to use it just until you try to publish the package. Then
it says the name is too similar to another package (not telling which one). It happens to me way too often :( I've run
out of ideas to I just went with bottom-line-utils
.
defaultTo
)Methods will be added as I need them. I am open for suggestions and PRs. See next heading for list of methods that I want to add.
(TODO)
This library is fully unit tested and can be used on production.
MIT
FAQs
This library is deprecated. Please switch to [@ezez/utils](https://www.npmjs.com/package/@ezez/utils).
The npm package bottom-line-utils receives a total of 59 weekly downloads. As such, bottom-line-utils popularity was classified as not popular.
We found that bottom-line-utils demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.