Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
event-target-shim-es5
Advanced tools
[![npm version](https://img.shields.io/npm/v/event-target-shim-es5.svg)](https://www.npmjs.com/package/event-target-shim-es5) ![Node.js CI](https://github.com/compulim/event-target-shim-es5/workflows/Node.js%20CI/badge.svg)
This package is based on event-target-shim
. Although the original package contains an ES5 bundle, it did not contains an ES5 module. Importing the module directly or indirectly may break web apps running on ES5 browsers.
On install, this package will transpile your version of event-target-shim
to make it compatible with ES5 browsers.
Package authors should consider importing this package instead of event-target-shim
, so your packages will not break your users due to having event-target-shim
as a transient dependency.
To install in your project, run:
npm install event-target-shim event-target-shim-es5
In your code:
import EventTarget, { defineEventAttribute } from 'event-target-shim-es5';
class YourComponent extends EventTarget {
handleClick() {
this.dispatchEvent(new Event('click'));
}
}
defineEventAttribute(YourComponent.prototype, 'click');
On postinstall
, this package will run Babel and Webpack to transpile event-target-shim
into a single file.
This package peer-depends on event-target-shim
. Thus, you can select your own version of event-target-shim
.
event-target-shim
When you update event-target-shim
, re-run npm install event-target-shim-es5
to get the latest package transpiled.
Instead of importing this package, there are alternative workarounds you can use.
You can copy the source code of event-target-shim
into your web app and use your build pipeline transpile the original package.
When copying, be sure to include the original license and continue to depends on the package to make sure npm audit
will scan for vulnerabilities.
Webpack do not transpile code under /node_modules/
unless specified explicitly. You can modify webpack.config.js
to include /node_modules/event-target-shim/
and use babel-loader
to transpile it on-the-fly.
Like us? Star us.
Want to make it better? File us an issue.
Don't like something you see? Submit a pull request.
FAQs
[![npm version](https://img.shields.io/npm/v/event-target-shim-es5.svg)](https://www.npmjs.com/package/event-target-shim-es5) ![Node.js CI](https://github.com/compulim/event-target-shim-es5/workflows/Node.js%20CI/badge.svg)
The npm package event-target-shim-es5 receives a total of 232 weekly downloads. As such, event-target-shim-es5 popularity was classified as not popular.
We found that event-target-shim-es5 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.