Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
flashbackjs
Advanced tools
Flashback is a JavaScript debugger that records and shows what lines in your code were run recently and with what values **for every line of your project without ever setting a breakpoint**. It's a debugger, but with a time machine.
Flashback is a JavaScript debugger that records and shows what lines in your code were run recently and with what values for every line of your project without ever setting a breakpoint. It's a debugger, but with a time machine.
Flashback works via Babel. The following assumes you have Babel set up in your project.
npm install -S flashbackjs
.babelrc
:{
"plugins": [
"flashbackjs/babel/visitor"
]
}
When some code runs in your browser (say a click handler on a button), you can see the Flashback for that code in VSCode next to the code itself.
Flashback is still in early development. It currently only works in browser-based apps. Node support is coming soon, which should allow you to add Flashback "intellisense" to your API routes and other server-side code.
Flashback is pretty early proof of concept. If you're interested in contributing, please reach out! I'd love to have your help.
Current improvements to be made:
Warning: Flashback is highly unoptimal piece of junk. Prepare for facepalms.
Flashback works by wrapping every line of your code with an instrumenting function that records the line number and the values of all variables in the scope of that line.
When a line is run, Flashback records the values of all variables at every line of your code and sends it back to VSCode via a websocket. VSCode then uses this data to show you the Flashback for the code you're currently looking at.
FAQs
Flashback is a JavaScript debugger that records and shows what lines in your code were run recently and with what values **for every line of your project without ever setting a breakpoint**. It's a debugger, but with a time machine.
We found that flashbackjs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.