Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
could-be-class
Advanced tools
Checks if an object could be an instantiable class.
This module also works with those classes that are written in ES5 style.
"use strict";
const assert = require("assert");
const couldBeClass = require("could-be-class").default;
var str = "This is a string";
assert.ok(!couldBeClass(str));
var num = 123;
assert.ok(!couldBeClass(num));
class A { }
assert.ok(couldBeClass(A));
function B() {
this.name = this.constructor.name;
}
assert.ok(couldBeClass(B));
function C() {
this["name"] = this.constructor.name;
}
assert.ok(couldBeClass(C));
function D() { }
D.prototype.show = function () { }
assert.ok(couldBeClass(D));
function E() { }
Object.defineProperty(E.prototype, "size", {
get() {
return this.length;
}
});
assert.ok(couldBeClass(E));
function TsEs5Class() {
var _this = _super.call(this) || this;
_this.desc = "This class form might be generated from TypeScript to ES5";
}
assert.ok(couldBeClass(TsEs5Class));
function notClass() {
console.log("this is not a class");
}
assert.ok(!couldBeClass(notClass));
function aMethod() {
this.desc = "this is a method instead of a class";
}
assert.ok(!couldBeClass(aMethod));
function default_1() {
this.dec = "this might be a class generated by typescript";
}
assert.ok(couldBeClass(default_1));
function default_2() {
console.log("this is not class");
}
assert.ok(!couldBeClass(default_2));
function* GenFunc() {
this.desc = "Error will be thrown if trying to instantiate a Generator function.";
}
assert.ok(!couldBeClass(GenFunc));
if (parseFloat(process.version.slice(1)) >= 7.6) {
// this block should only appear when you NodeJS version higher than 7.6,
// otherwise a SyntaxError will be thrown.
async function AsyncFunc() {
this.desc = "Error will be thrown if trying to instantiate an async function.";
}
assert.ok(!couldBeClass(AsyncFunc));
}
console.log("#### OK ####"); // should outout OK
Commonly, any functions (except async, generator and arrow functions) in JavaScript could be instantiated as a class constructor, however, in most cases, a class written in ES5 style will carry some special fingerprints that the detector can test if it could be a class constructor or just a pure function.
WARN This module only performs about 98% percent of accuracy when testing ES5 class.
FAQs
Checks if an object could be an instantiable class.
The npm package could-be-class receives a total of 213 weekly downloads. As such, could-be-class popularity was classified as not popular.
We found that could-be-class demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.