Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
A simple JavaScript object to string converter.
This converts a JavaScript value to a string that is interpretable JavaScript.
var jsWriter = require('js-writer');
var stringRepresentation = jsWriter({
a: 42,
b: 'foo',
'big-string': `an ES6 string
with line breaks`,
getMagic: function () { return 42; }
});
console.log(stringRepesentation);
// Output:
// {a:42,b:"foo","big-string":"an ES6 string\nwith line breaks",getMagic:function () { return 42; }}
Passing a handlers
object in the options with the (optional) keys of date
or function
allows
you to override the behaviour of these types. The function receives the value, and should return a
string of the string representation required.
var s = jsWriter({ f: function foo(a, b) { return a + b; } }, {
handlers: {
'function': function (funcValue) {
return JSON.stringify({ type: 'function', name: funcValue.name });
}
}
});
// s == '{f:{"type":"function","name":"foo"}}'
JSON.stringify
The output is not JSON, it is JavaScript, so object keys that do not need to be quoted aren't, and functions are outputted as interpretable functions (note that normal unbound functions use the native .toString()
implementation, so include their source). Dates are recreated by parsing the .toISOString()
output (this is done to aid readability, rather than using the native .getTime()
value).
This was developed for use with unexpected-react in order to support snapshot testing with jest and have better matching of functions.
Only basic native types are supported (number including NaN, string, undefined, function, Object, Array, Date).
ES6 collection types (Map
and Set
) are planned, but not yet set when.
FAQs
A simple JavaScript object to string converter.
The npm package js-writer receives a total of 258 weekly downloads. As such, js-writer popularity was classified as not popular.
We found that js-writer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.