
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
closurecompiler-externs
Advanced tools
A collection of node.js externs for use with ClosureCompiler.js.

A collection of node.js externs for use with Closure Compiler / ClosureCompiler.js.
See: Advanced Compilation and Externs for details
If an extern file refers to a module that's usually loaded through var modulename = require("modulename"), a comment
is added on top of the file. For example for the fs module:
/**
BEGIN_NODE_INCLUDE
var fs = require('fs');
END_NODE_INCLUDE
*/
NOTE: This comment on its own does nothing. But if you stick to the template, that is including the fs module exactly the same way naming it also "fs", the compiler will know how to handle the module and its subcomponents. For example:
// This is bad:
var EventEmitter = require("events").EventEmitter;
// This is good:
var events = require("events");
var EventEmitter = events.EventEmitter;
If a file requires a dependency, it is named in the @fileoverview declaration. You should then include the dependency
in your compile step, too.

Externs are automatically syntax-validated through a ClosureCompiler.js test run. This does not imply that the extern is complete or does actually represent the underlying API (but it should).
ClosureCompiler.js depends on an npm distribution of this repository.
As a result, specifiying --externs=node automatically includes all node.js specific externs in your compile step. If
you are using non-core modules, you may still need additional externs
for these.
Apache License, Version 2.0 - http://www.apache.org/licenses/LICENSE-2.0.html
This repository is not officially supported by Google, Joyent or individual module authors. If the closure compiler license header is used in a file, it is just there so signal that it is ok to include it in official closure channels. All rights belong to their respective owners.
FAQs
A collection of node.js externs for use with ClosureCompiler.js.
The npm package closurecompiler-externs receives a total of 516 weekly downloads. As such, closurecompiler-externs popularity was classified as not popular.
We found that closurecompiler-externs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.