Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
common-ground
Advanced tools
Common-ground can convert files using a Simplified CommonJS Wrapper to vanilla CommonJS lickity Split using Esprima and Escodegen
Common-ground can convert files using a Simplified CommonJS Wrapper to vanilla CommonJS lickity Split using Esprima and Escodegen
Do you have AMD code that has a Simplified CommonJS Wrapper?
If you do it will look something like this
define(function(require, exports, module) {
var a = require('a'),
b = require('b');
//Return the module value
return function () {};
});
var commonGround = require('common-ground');
commonGround.write(pathToInput, pathToOutput, callback(err)); // Convert file from input path and write to output path
commonGround.convert(string); // return a string with anonymous define removed
commonGround.convertDir(pathToInput, pathToOutput, callback(err)); // Convert an entire directory recursively
##CLI
If this module is installed with the -g
flag it will install a simple cli
Usage: common-ground [path to entry] [path to output(optional)]
Standard Options:
-h Show this message
In lieu of a formal styleguide, take care to maintain the existing coding style. Add unit tests for any new or changed functionality. Lint and test your code using Grunt.
(Nothing yet)
Copyright (c) 2014 Myles Borins. Licensed under the MPL 2.0 license.
FAQs
Common-ground can convert files using a Simplified CommonJS Wrapper to vanilla CommonJS lickity Split using Esprima and Escodegen
The npm package common-ground receives a total of 2 weekly downloads. As such, common-ground popularity was classified as not popular.
We found that common-ground demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.