
Security News
Risky Biz Podcast: Making Reachability Analysis Work in Real-World Codebases
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
cbin
provides a simple interface for reading and writing binary data in JavaScript.
There are lots of similar implementations. The highlights of this one:
There are two classes, Reader
and Writer
, with 3 constructor parameters:
data
(required for Writer), a Uint8Array
accessed through the class.endian
(optional), one of the following values:
Endian.little
(0, the default)Endian.big
(1)Endian.native
(0 or 1 depending on the system)pos
(optional), the current byte position (default is 0).The parameters become correspondingly named class members.
Accessing the members directly is fine, and the preferred way to access individual bytes. Methods with buffer overflow checks are provided for various data types:
u8
for unsigned 8-bit integer.u16
for unsigned 16-bit integer.u32
for unsigned 32-bit integer.f64
for 64-bit IEEE double precision float.The methods on Reader
take no parameters. On Writer
the only parameter is the value to write.
Both methods update the pos
member. The methods on Writer
return this
, which allows chaining them.
Reading past the end of input throws an error.
If input is streamed in chunks, pass them to the push
method.
Reading past the current chunk automatically switches to the next, if possible.
Example:
const { Reader, Writer, Endian } = require('cbin');
const writer = new Writer(new Uint8Array(13), Endian.big);
writer.data[writer.pos++] = 0;
writer.u32(0x12345678).f64(-1);
// Prints: 0012345678bff0000000000000
console.log(Buffer.from(writer.data).toString('hex'));
const reader = new Reader(writer.data, Endian.big, 5);
// Prints: -1
console.log(reader.f64());
For TypeScript, a const enum values CEndian.little
and CEndian.big
are provided.
They compile to numeric constants for a tiny size and speed improvement.
Copyright (c) 2017 BusFaster Ltd
FAQs
Binary data IO
The npm package cbin receives a total of 0 weekly downloads. As such, cbin popularity was classified as not popular.
We found that cbin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.