
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
formatted-error
Advanced tools
This is a JavaScript Error object that lets you use placeholders in your error message, then it replaces them with the values supplied in the parameters object.
This project might seem silly or downright stupid at first, especially since you can already put values directly into your error like this...
throw new Error(`Error ${code} occurred.`)
That was pretty simple!
There is however this really annoying project where we can't hard-code our error messages because we don't know what the error message is, or even what the parameters are, until after the configuration is loaded.
So that's why we created this error....
| Argument | Type | Description |
|---|---|---|
| message | string | The final error message with the placeholders replaced. |
| original | object | The original error message with the placeholders intact. |
| params | object | Nested object containing the values for the placeholders. |
Right now the formatted errors use curly braces { and } to encapsulate the placeholders.
The value inside the curly braces must map to a property on our parameters object. Below our
placeholder {name} is being mapped to the param.name property.
const FormattedError = require('formatted-error');
try{
let message = "{name}, we have a problem!";
let params = {
name: 'Houston'
};
throw new FormattedError(message, params);
} catch (error) {
// Outputs "Houston, we have a problem!"
console.log(error.message);
}
This time we are going to provide a nested object for the parameters. In order to get that value,
our placeholder will want to separate the object levels with a period {user.profile.nickname}.
Then our error knows the value can be found at params['user']['profile']['nickname'].
const FormattedError = require('formatted-error');
try{
throw new FormattedError("Hello {user.profile.nickname}!", {
user: { profile: { nickname: 'Captain Awesome' } }
});
} catch (error) {
// Outputs "Hello Captain Awesome!"
console.log(error.message);
}
Arrays can serve many purposes, which is why their contents don't always convert to string, but when all the values are primitives (strings, numbers, booleans), then we know that we can join them together...
const FormattedError = require('formatted-error');
try{
throw new FormattedError("Here are a few of my favorite things {primitives}!", {
primitives: ['pizza', 42, true]
});
} catch (error) {
// Outputs "Here are a few of my favorite things pizza, 42, true!"
console.log(error.message);
}
If a placeholder's value is an array of complex functions and objects then the placeholder will be ignored completed, as we haven't decided how to handle dealing with those yet. Since these errors are meant to use messages and parameters created by the end-user, we don't exactly want to execute any functions they supply.
const FormattedError = require('formatted-error');
try{
throw new FormattedError("Here is my {ignore} placeholder!", {
ignore: [
{ name: 'Joseph' },
{ name: 'Jacob' },
{ name: 'Schmidt' },
]
});
} catch (error) {
// Outputs "Here is my {ignore} placeholder!"
console.log(error.message);
}
FAQs
Allows you to use placeholders in your errors.
We found that formatted-error demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.