
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

An XML parser/stringifier for digger container data
var XML = require('digger-xml');
var data = XML.parse('<folder name="hello"><thing name="thing" /></folder>');
var xml_string = XML.stringify(data);
data becomes:
[{
name:'hello',
_digger:{
tag:'folder'
},
_children:[{
name:'thing',
_digger:{
tag:'thing'
}
}]
}]
xml_string becomes:
<folder name="hello"><thing name="thing" /></folder>
as a node module:
$ npm install digger-xml
or in the browser using browserify
Both versions work the same in the browser or on the server.
The server version uses xmldom for the XML parsing.
The browser version uses the native browser parsers.
Takes a string and returns digger data
var data = XML.parse('<folder name="hello"><thing name="thing" /></folder>');
If there is an 'attr' element as a direct child - it is applied as an attribute of the parent:
<blog title="my post">
<attr name="content">hello world</attr>
</blog>
This is turned into:
[{
content:'hello world',
_digger:{
tag:'blog'
}
}]
Takes an array of digger data and returns an XML string.
Attributes are turned into nodes if they are strings and more than 32 chars long or container a \n char.
var XML = require('digger-xml');
var data = [{
content:"hello \nworld",
_digger:{
tag:'blog'
}
}]
var xml_string = XML.stringify(data);
This outputs:
<blog title="my post">
<attr name="content">hello
world</attr>
</blog>
There are 2 sets of tests one for the npm node version and one for the component.
To run the server tests:
$ make test
And the browser ones (using phantomjs which you need to install):
$ make browser-test
MIT
FAQs
The XML parser for digger container data
The npm package digger-xml receives a total of 14 weekly downloads. As such, digger-xml popularity was classified as not popular.
We found that digger-xml demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.