
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
js-component-tools
Advanced tools
js-component-tools
JavaScript tooling for working with WebAssembly Components
A Bytecode Alliance project
JS Component Tools is a fully native JS tool for working with the emerging WebAssembly Components specification in JavaScript.
Features include:
This tool is designed primarily for working with already-created Component binaries, and not for creating Component binaries to begin with. For creating Components, see the Cargo Component project for Rust and Wit Bindgen for various guest bindgen helpers.
Note: This is an experimental project, no guarantees are provided for stability or support and breaking changes may be made in future.
npm install js-component-tools
JS Component Tools can be used as either a library or as a CLI via the jsct
CLI command.
See the example workflow page for a full usage example.
The below is an outline of the available API functions, see api.d.ts file for the exact options.
transpile(component: Uint8Array, opts?): Promise<{ files: Record<string, Uint8Array> }>
Transpile a Component to JS.
Transpilation options:
name?: string
- name for the generated JS file.instantiation?: bool
- instead of a direct ES module, output the raw instantiation function for custom virtualization.map?: Record<string, string>
- remap component importsvalidLiftingOptimization?: bool
- optimization to reduce code sizenoNodejsCompat?: bool
- disables Node.js compatible outputtlaCompat?: bool
- enable compat in JS runtimes without TLA supportbase64Cutoff?: number
- size in bytes, under which Wasm modules get inlined as base64.js?: bool
- convert Wasm into JS instead for execution compatibility in JS environments without Wasm support.minify?: bool
- minify the output JS.optimize?: bool
- optimize the component with Binaryen wasm-opt first.optArgs?: string[]
- if using optimize, custom optimization options (defaults to best optimization, but this is very slow)opt(component: Uint8Array, opts?): Promise<{ component: Uint8Array }>
Optimize a Component with the Binaryen Wasm-opt project.
parse(wat: string): Uint8Array
Parse a compoment WAT to output a Component binary.
print(component: Uint8Array): string
Print the WAT for a Component binary.
componentNew(coreWasm: Uint8Array | null, opts?): Uint8Array
"WIT Component" Component creation tool.
componentWit(component: Uint8Array): string
Extract the WIT world from a component binary.
Usage: jsct <command> [options]
JSCT - WebAssembly JS Component Tools
JS Component Transpilation Bindgen & Wasm Tools for JS
Options:
-V, --version output the version number
-h, --help display help for command
Commands:
transpile [options] <component-path> Transpile a WebAssembly Component to JS + core Wasm for JavaScript execution
opt [options] <component-file> optimizes a Wasm component, including running wasm-opt Binaryen optimizations
wit [options] <component-path> extract the WIT from a WebAssembly Component [wasm-tools component wit]
print [options] <input> print the WebAssembly WAT text for a binary file [wasm-tools print]
parse [options] <input> parses the Wasm text format into a binary file [wasm-tools parse]
new [options] [module] create a WebAssembly component adapted from a component core Wasm [wasm-tools component new]
help [command] display help for command
This project is licensed under the Apache 2.0 license with the LLVM exception. See LICENSE for more details.
Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in this project by you, as defined in the Apache-2.0 license, shall be licensed as above, without any additional terms or conditions.
FAQs
JavaScript tooling for working with WebAssembly Components
The npm package js-component-tools receives a total of 12 weekly downloads. As such, js-component-tools popularity was classified as not popular.
We found that js-component-tools demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.