
Security News
minimatch Patches 3 High-Severity ReDoS Vulnerabilities
minimatch patched three high-severity ReDoS vulnerabilities that can stall the Node.js event loop, and Socket has released free certified patches.
browserify transform that compiles a selection of ES6 features to valid ES5,
because in hindsight we can do without most of ES6:
fat arrows - make inline functions cute-lookingtemplate strings / tagged templates - enable DSLs inside of JSconst - using const by default makes it easy to spot where values are
being redeclaredVia package.json (recommended):
{
"browserify": {
"transform": [
"es2020"
]
}
}
Via CLI:
$ browserify client.js -t es2020
Via Node API:
const browserify = require('browserify')
browserify('./client.js')
.transform('es2020')
.bundle()
.pipe(process.stdout)
Not really. The TC39 does not represent my interests, and the features they introduce are not useful for the stuff I'm doing. I'm bloody serious. A few good things have been introduced, so that's what we're backporting to older browsers.
If the TC39 had an open standards process perhaps this wasn't needed. But as it stands they're an unwelcoming club, so I get to poke fun at this situation that otherwise fills me with sadness. Feel free to poke fun at me too. Or if you're angry that someone would make fun of the hard work the TC39 has done, feel free to ignore this project. Do whatever, I'm doing the same.
Maybe. Open an issue, make a case and we can discuss it. Just remember that this project is not democratically governed.
$ npm install es2020
FAQs
browserify transform that compiles a selection of ES6 to valid ES5
We found that es2020 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
minimatch patched three high-severity ReDoS vulnerabilities that can stall the Node.js event loop, and Socket has released free certified patches.

Research
/Security News
Socket uncovered 26 malicious npm packages tied to North Korea's Contagious Interview campaign, retrieving a live 9-module infostealer and RAT from the adversary's C2.

Research
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.