
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Compose a javascript application into one distributable file by using annotations in your code.
// main.js
(function () {
var some_code_here;
/**
* Include foo.js here.
* @include("src/foo.js")
* @include("src/bar.js")
*/
console.log('And some more here...');
}());
// src/foo.js
var string = 'This is foo.js';
// src/bar.js
var bar = string.toUpperCase();
When compiled, the code looks like this:
(function () {
var some_code_here;
var string = 'This is foo.js';
var bar = string.toUpperCase();
console.log('And some more here...');
}());
Compile the code using the command-line app:
isc <input-file> <output-file> --verbose --minify
Or use node.js:
require('./src/isc.js')({
input : 'in.js', // Input file
output : 'out.js', // Output file
verbose : true, // Display verbose output?
minify : true // Minify source? (only works if 'output' is also specified
});
Note; If no output file is specified, the compiled source is printed instead. Minifying the source will not work in this case. Minified source is exported as .min.js. Taking the example above, the file
out.min.jswould be generated.
FAQs
Inline Source Composer
We found that isc demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.