
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Type checking package for JavaScript, include just once in your entrypoint like
index.js
require('isitnot');
isString('') //true
isNotString(()=>{}) //true
isStringAndNotEmpty('') //false
isStringAndNotEmpty(' ') //false
isStringAndNotEmpty('hey') //true
isEmptyString({}) //false
isEmptyString('') //true
isNotEmptyString('') //false
isEmail('a@b.c') //true
isNotEmail('whatever@domain') //true
isVariableName('var') //true (technically not, but it can be a property of an object accessed without ['...'])
isVariableName('oh dear') //false
isVariableName('0rel') //false cannot start with number
isVariableName('var0') //true
isNotVariableName('a@a') //true
isArray([]) // true
isArray({}) // false
isEmptyArray([]) // true
isEmptyArray(['1']) // false
isNotEmptyArray([]) // false
isObject([]) // FALSE, arrays are not objects for this library
isObject({}) // true
isNotObject('') //true
isEmptyObject([]) //false
isNotEmptyObject({a: 1}) //true
isNumber(1) //true
isNotNumber(NaN) //true
isInt(0) //true
isNotInt(1.2) //true
isEmpty([]) //true
isEmpty('') //true
isEmpty(' ') //true
isEmpty({}) //true
isEmpty(null) //true
isEmpty(undefined) //true
isEmpty(0) //false
isNotEmpty('hey') //true
isDate('') //false
isNotDate('') //true
isDate(new Date()) //true
isDate('1970-01-01T00:00:00.000Z') //true
isDate('1970-01-01T00:00:00') //true
isDate('1970-01-01T00:00') //true
isDate('1970-01-01') //true
isDate('0000-00-00') //false
isDate('1970-13-01') //false (bad month)
isDate('1970-01-32') //false (bad day)
isDate('2017-02-29') //false (not leap year)
FAQs
Intuitive type checking functions exposed globally
We found that isitnot demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.