
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
futurescript
Advanced tools
A functional style, but highly readable language that compiles to JavaScript.
Please visit https://futurescript.org/ to learn the language.
npm install futurescript -g
The generated JS works on any JS environment that supports ECMAScript 2017, including browser and Node.js.
fus (compile | c) [--map] <file-or-directory> [<target-file-or-directory>]
fus (legacy-compile | lc) [--map] <file-or-directory> [<target-file-or-directory>]
fus (version | v | --version)
fus --help
To compile (to .mjs), use compile or c.
To compile (to .js), use legacy-compile or lc.
Those two are exactly the same except for the file extension.
--map will add the line numbers of the source to the generated code. Useful for debugging. (Note: this is not "source map", which is another technology.)
Because we use a very sophisticated versioning model that all historical compilers are kept, there's really no need to install it to your project directory - conflicts are very unlikely. But if you really "hate global", to avoid waste of disk space, it should be stated in "devDependencies", not "dependencies" (particularly when you're writing a middleware).
Compile "a.fus" to "a.mjs":
fus compile a.fus
Compile for debugging:
fus compile --map a.fus
Compile the whole "lib" directory to "target":
fus compile lib target
See "develop.md".
See history.
See "LICENSE.txt".
FAQs
A functional style, but highly readable language that compiles to JavaScript.
The npm package futurescript receives a total of 60 weekly downloads. As such, futurescript popularity was classified as not popular.
We found that futurescript demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.