
Research
Security News
The Growing Risk of Malicious Browser Extensions
Socket researchers uncover how browser extensions in trusted stores are used to hijack sessions, redirect traffic, and manipulate user behavior.
isomorphic-xml2js
Advanced tools
npm install --save isomorphic-xml2js
A drop-in replacement for xml2js that uses the built in DOMParser/XMLSerializer when bundled for the browser, drastically reducing the bundle size (~129k for node-xml2js, currently ~6k for isomorphic-xml2js). Simply exports xml2js when used in a node.js environment.
The goal is to support as much of the xml2js API as reasonably possible. Some features may be dropped if they are found to be unreasonably difficult to implement or if they excessively increase the bundle size or reduce performance.
strict: false
has no effect. Parsing malformed XML documents is unsupported.async: true
has no effect. Parsing is always synchronous, even though the API is callback-based to match node-xml2js.options.renderOpts
is ignored and XML documents are not pretty printed.
<xslt:output indent="yes" />
attribute is not supported in Firefox, Edge or IE and so doesn't seem portable enough to be worth it. Non-built-in methods of pretty printing XML may be too much of an increase in bundle size for a feature that's usually only useful at development time.validator
is not implemented.includeWhiteChars: false
is specified, even though such CDATA is preserved in node-xml2js.new
may give a runtime error depending on the ES target level in your bundler config.addListener
and on
methods on xml2js.Parser
are not supported.0.1.3 2018-06-06
FAQs
XML parsing for browser and node.js
The npm package isomorphic-xml2js receives a total of 2,346 weekly downloads. As such, isomorphic-xml2js popularity was classified as popular.
We found that isomorphic-xml2js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover how browser extensions in trusted stores are used to hijack sessions, redirect traffic, and manipulate user behavior.
Research
Security News
An in-depth analysis of credential stealers, crypto drainers, cryptojackers, and clipboard hijackers abusing open source package registries to compromise Web3 development environments.
Security News
pnpm 10.12.1 introduces a global virtual store for faster installs and new options for managing dependencies with version catalogs.