
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Command-Line Argument Sorting and Parsing, for JavaScript
CLASP stands for Command-Line Argument Sorting and Parsing. The first CLASP library was a C library with a C++ wrapper. There have been several implementations in other languages. CLASP.js is the JavaScript version.
T.B.C.
Install using npm install clasp-js.
Use it via require('clasp-js').
NOTE: the name clasp-js follows NPM's package-name rules, but breaks with one of the tips - the one about not including js or node in the name - because there are multiple CLASP libraries, and there already exists a clasp package in NPM.
T.B.C.
Examples are provided in the examples directory, along with a markdown description for each. A detailed list TOC of them is provided in EXAMPLES.md.
Defect reports, feature requests, and pull requests are welcome on https://github.com/synesissoftware/CLASP.js.
CLASP.js is inspired by the C/C++ CLASP library, which is documented in the articles:
An Introduction to CLASP, Matthew Wilson, CVu, January 2012;
Anatomy of a CLI Program written in C, Matthew Wilson, CVu, September 2012; and
Anatomy of a CLI Program written in C++, Matthew Wilson, CVu, September 2015;
CLASP.js is released under the 3-clause BSD license. See LICENSE for details.
FAQs
CLASP for JavaScript
We found that clasp-js demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.