
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
dc-polyfill
Advanced tools
dc-polyfill: Diagnostics Channel PolyfillThis package provides a polyfill (or ponyfill) for the diagnostics_channel core Node.js module (including TracingChannel) for use with older versions of Node.js. It aims to remain simple, with zero dependencies, and only takes up a few kilobytes of space.
If your module or application uses
diagnostics_channeland needs to run on multiple versions of Node.js then it is recommended that you userequire('dc-polyfill')instead ofrequire('diagnostics_channel').
dc-polyfill backports features and bugfixes that are added to Node.js core. If a feature hasn't been backported then please open a Pull Request or create an issue.
Since this package recreates a Node.js API, read the Node.js diagnostics_channel documentation to understand what it does.
| Version | |
|---|---|
| Oldest Supported Node.js Version | 12.17.0 |
| Target Node.js DC API Version | 20.6.0 |
Note that
dc-polyfillcurrently has theTracingChannel#hasSubscribersgetter backported from Node.js v22 however it doesn't yet support the tracing channel early exit feature. Once that's been added we'll delete this clause and update the above table.
Whenever the currently running version of Node.js ships with diagnostics_channel (i.e. v16+, v15.14+, v14.17+), dc-polyfill will make sure to use the global registry of channels provided by the core module. For older versions of Node.js dc-polyfill instead uses its own global collection of channels. This global collection remains in the same location and is shared across all instances of dc-polyfill. This avoids the issue wherein multiple versions of an npm library installed in a module dependency hierarchy would otherwise provide different singleton instances.
Ideally, this package will forever remain backwards compatible, there will never be a v2.x release, and there will never be an additional global channel collection.
Install the module in your project:
npm install dc-polyfill
Replace any existing require('diagnostics_channel') calls:
const diagnostics_channel = require('dc-polyfill');
When a Pull Request is created the test suite runs against dozens of versions of Node.js. Notably, versions right before a change and versions right after a change, the first version of a release line, and the last version of a release line. To test locally it's recommended to use a node version management tool, such as nvm, to test changes with.
See LICENSE.txt for full details.
MIT License - Copyright (c) 2023 Datadog, Inc.
FAQs
A polyfill for the internal diagnostics_channel module
The npm package dc-polyfill receives a total of 1,910,962 weekly downloads. As such, dc-polyfill popularity was classified as popular.
We found that dc-polyfill demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.