Security News
Fluent Assertions Faces Backlash After Abandoning Open Source Licensing
Fluent Assertions is facing backlash after dropping the Apache license for a commercial model, leaving users blindsided and questioning contributor rights.
A client-side CommonJS `require` implementation that does NOT require a precompilation build step nor server-side middleware. It instead utilizes synchronous `XMLHttpRequest`s and `eval` instead, which does impose a series of limitations unless you're wil
"breq" (browser-require) is a client-side CommonJS require
implementation that does NOT require a
precompilation build step nor server-side middleware. It instead utilizes synchronous
XMLHttpRequest
s and eval
instead, which does impose a series of limitations
unless you're willing to generate a whole mess of 404
s.
Terrible for performance, nice for dynamic ease of use.
Download the production version or the development version.
In your web page:
<script src="dist/breq.min.js"></script>
<script>
var mod = require("./someCjsModule.js");
</script>
Given the browser-based nature of "breq", there are some important limitations to keep in mind that
differ from Node's require.resolve
lookup algorithms:
XMLHttpRequest
./
./
../
node_modules
dynamic lookup for named modules as this
would usually result in a series of 404
s before it is located.Some ideas for future exploration in "breq":
setModuleRoot
or
a config property like require.paths
] where we can seek out named modules, e.g.
require.setModuleRoot("/node_modules/"); var mod = require("myCjsModule"); // path will [first] resolve to "/node_modules/myCjsModule/index.js"
4. Allow consumers to set a configuration option that _does_ enable the actual Node-style lookup
algorithm, keeping in mind that this setup will likely produce an exceptionally large quantity
of `404`s. This would also include auto-appending the ".js" extension during some of the lookup
attempts if it is not already present, e.g.
```js
var mod = require("./myCjsModule"); // path will resolve to "./myCjsModule.js"
FAQs
A client-side CommonJS `require` implementation that does NOT require a precompilation build step nor server-side middleware. It instead utilizes synchronous `XMLHttpRequest`s and `eval` instead, which does impose a series of limitations unless you're wil
We found that breq demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Fluent Assertions is facing backlash after dropping the Apache license for a commercial model, leaving users blindsided and questioning contributor rights.
Research
Security News
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
Security News
The UK is proposing a bold ban on ransomware payments by public entities to disrupt cybercrime, protect critical services, and lead global cybersecurity efforts.