
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
deferred-require
Advanced tools
A require function that defers actual reads until the first use of the required object
Using this module requires that you run node with the --harmony_proxies and
--harmony_collections flags.
deferredRequire = require 'deferred-require'
myHugeModule = require 'my-huge-module'
# ... some time later ...
myHugeModule.doSomething() # the module isn't loaded and required until here
This npm exports a single top-level function, deferredRequire, which you can
use just as you would use node's global require function. When you require a
module with deferredRequire, no code is actually loaded or evaluated until
the module you require is first used. This is achieved through the magic of
harmony proxies.
Warning: Because of instability in the v8 proxy implementation when combined
with "exotic objects" like arrays, strings, and dates, you should only use
deferredRequire with modules that export regular objects or functions as their
top-level module. This is true of almost every npm module, so in practice this
shouldn't be a big issue.
FAQs
A require function that defers actual reads until the first use of the required object
The npm package deferred-require receives a total of 2 weekly downloads. As such, deferred-require popularity was classified as not popular.
We found that deferred-require demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.