Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
console-dot
Advanced tools
I can't believe I shipped to github and npm without a README. I'm usually a stickler for at least a placeholder //TODO
version.
So, I made this mostly for me. Probably to solve a bad debug habit of rabbit holing via console.log
. "Oh, ok let's just add a bunch of console.logs (sometimes on the server) and see whats happening." This module does not implement a better debugging method it simply enables you (read: me) to use this one more efficiently.
Plain and simple example, we want to see what a function is doing so we add this to the callback:
fs.readFile('path/to/file', function () {
console.log('debug: we read the file?');
console.log(arguments);
console.log('++++++++++++++++++++++')
});
Becomes:
fs.readFile('path/to/file', console.callback(true, 'debug: we read the file?'));
npm install console-dot
console = require('console-dot');
// access to console.callback have been gifted to you
// TODO
Because of this guy. I'm probably starting out wrong but I am atleast trying, Olivier.
Essentially does the above basic implementation modifying console
to to provide a callback()
method that returns a curried function with your message. Keystroke savers, etc.
FAQs
Lazy debugging console syntax for callbacks & promises.
The npm package console-dot receives a total of 0 weekly downloads. As such, console-dot popularity was classified as not popular.
We found that console-dot demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.