Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Utilities for cloning, extending, and de-referencing objects in shallow, deep, and safe ways
Utilities for cloning, extending, and de-referencing objects in shallow, deep, and safe ways
npm install --save extendr
import * as pkg from ('extendr')
const pkg = require('extendr')
<script type="module">
import * as pkg from '//dev.jspm.io/extendr@7.10.0'
</script>
This package is published with the following editions:
extendr
aliases extendr/index.cjs
which uses the Editions Autoloader to automatically select the correct edition for the consumer's environmentextendr/source/index.js
is ESNext source code for Node.js 6 || 8 || 10 || 12 || 14 || 16 || 18 || 20 || 21 with Require for modulesextendr/edition-browsers/index.js
is ESNext compiled for web browsers with Require for modulesextendr/edition-node-4/index.js
is ESNext compiled for Node.js 4 || 6 || 8 || 10 || 12 || 14 || 16 || 18 || 20 || 21 with Require for modulesThis project provides its type information via inline JSDoc Comments. To make use of this in TypeScript, set your maxNodeModuleJsDepth
compiler option to 5
or thereabouts. You can accomplish this via your tsconfig.json
file like so:
{
"compilerOptions": {
"maxNodeModuleJsDepth": 5
}
}
Discover the release history by heading on over to the HISTORY.md
file.
Discover how to contribute via the CONTRIBUTING.md
file.
Unless stated otherwise all works are:
and licensed under:
v7.10.0 2024 January 2
FAQs
Utilities for cloning, extending, and de-referencing objects in shallow, deep, and safe ways
The npm package extendr receives a total of 35,780 weekly downloads. As such, extendr popularity was classified as popular.
We found that extendr demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.