
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
encoding is a simple wrapper around iconv-lite to convert strings from one encoding to another.
Initially encoding was a wrapper around node-iconv (main) and iconv-lite (fallback) and was used as the encoding layer for Nodemailer/mailparser. Somehow it also ended up as a dependency for a bunch of other project, none of these actually using node-iconv. The loading mechanics caused issues for front-end projects and Nodemailer/malparser had moved on, so node-iconv was removed.
Install through npm
npm install encoding
Require the module
var encoding = require("encoding");
Convert with encoding.convert()
var resultBuffer = encoding.convert(text, toCharset, fromCharset);
Where
Output of the conversion is always a Buffer object.
Example
var result = encoding.convert("ÕÄÖÜ", "Latin_1");
console.log(result); //<Buffer d5 c4 d6 dc>
MIT
iconv-lite is a popular encoding conversion library that offers similar functionalities to 'encoding'. It supports numerous encodings and is often used for converting buffers to different character encodings. Unlike 'encoding', it does not rely on native Node.js modules and is purely JavaScript, which can be advantageous for compatibility and ease of use.
buffer-encoding is another package that provides encoding and decoding functionalities for buffers. It allows for easy conversion between different character encodings. It is similar to 'encoding' but might have a different API or support different sets of encodings.
FAQs
Convert encodings, uses iconv-lite
The npm package encoding receives a total of 0 weekly downloads. As such, encoding popularity was classified as not popular.
We found that encoding demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.