
Security News
New React Server Components Vulnerabilities: DoS and Source Code Exposure
New DoS and source code exposure bugs in React Server Components and Next.js: what’s affected and how to update safely.
buildo-lodash-ts
Advanced tools
lodash + typescript have a few problems when used together.
@types/lodash typing, this doesn't work:import pick from 'lodash/pick'
If you want to import granularly, you have to import pick = require('lodash/pick'), which is custom TS syntax.
import pickByF = require('lodash/fp/pickByF') // no types for `lodash/fp`
lodash functions have quite loose/funky apis, while in reality we use them in fairly standard/strict ways.
Since most of the times having to account for many overrides produces a very loose final type for the consumer,
it could be a good idea to stricten typings to match the subset of the api we use normally.At the moment, this repo partially solves problem 1:
in the final project we can import x from 'buildo-lodash-ts/lib/x without custom syntax.
For 2, we'll need to wait (or contribute) proper support.
For 3, this might be a good place to restrict types, but nothing is done at the moment.
We'll evaluate whether it makes sense to keep this repo or kill it
(potentially updating an external library if you want to use a "new" lodash function might be too much of a burden)
in the next few weeks.
FAQs
`lodash` + `typescript` have a few problems when used together.
The npm package buildo-lodash-ts receives a total of 0 weekly downloads. As such, buildo-lodash-ts popularity was classified as not popular.
We found that buildo-lodash-ts demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
New DoS and source code exposure bugs in React Server Components and Next.js: what’s affected and how to update safely.

Security News
Socket CEO Feross Aboukhadijeh joins Software Engineering Daily to discuss modern software supply chain attacks and rising AI-driven security risks.

Security News
GitHub has revoked npm classic tokens for publishing; maintainers must migrate, but OpenJS warns OIDC trusted publishing still has risky gaps for critical projects.