Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
micromark-util-events-to-acorn
Advanced tools
micromark utility to try and parse events w/ acorn
micromark utility to try and parse events with acorn.
This package is ESM only. In Node.js (version 16+), install with npm:
npm install micromark-util-events-to-acorn
In Deno with esm.sh
:
import {eventsToAcorn} from 'https://esm.sh/micromark-util-events-to-acorn@2'
In browsers with esm.sh
:
<script type="module">
import {eventsToAcorn} from 'https://esm.sh/micromark-util-events-to-acorn@2?bundle'
</script>
import {eventsToAcorn} from 'micromark-util-events-to-acorn'
// A factory that uses the utility:
/** @type {Tokenizer} */
function factoryMdxExpression(effects, ok, nok) {
return start
// …
// …
// Gnostic mode: parse w/ acorn.
const result = eventsToAcorn(this.events.slice(eventStart), {
acorn,
acornOptions,
start: pointStart,
expression: true,
allowEmpty,
prefix: spread ? '({' : '',
suffix: spread ? '})' : ''
})
// …
// …
}
This module exports the identifier eventsToAcorn
.
There is no default export.
The export map supports the development
condition.
Run node --conditions development module.js
to get instrumented dev code.
Without this condition, production code is loaded.
eventsToAcorn(events, options)
events
(Array<Event>
)
— eventsoptions
(Options
)
— configuration (required)Result (Result
).
Options
Configuration (TypeScript type).
acorn
(Acorn
, required)
— typically acorn
, object with parse
and parseExpressionAt
fieldstokenTypes
(Array<TokenType>
], required)
— names of (void) tokens to consider as data; 'lineEnding'
is always
includedacornOptions
(AcornOptions
, optional)
— configuration for acorn
start
(Point
, optional, required if allowEmpty
)
— place where events startprefix
(string
, default: ''
)
— text to place before eventssuffix
(string
, default: ''
)
— text to place after eventsexpression
(boolean
, default: false
)
— whether this is a program or expressionallowEmpty
(boolean
, default: false
)
— whether an empty expression is allowed (programs are always allowed to be
empty)Result
Result (TypeScript type).
estree
(Program
or undefined
)
— Programerror
(Error
or undefined
)
— error if unparseableswallow
(boolean
)
— whether the error, if there is one, can be swallowed and more JavaScript
could be validThis package is fully typed with TypeScript.
It exports the additional types Acorn
,
AcornOptions
, Options
, and
Result
.
Projects maintained by the unified collective are compatible with maintained versions of Node.js.
When we cut a new major release, we drop support for unmaintained versions of
Node.
This means we try to keep the current release line,
micromark-util-events-to-acorn@^2
, compatible with Node.js 16.
This package works with micromark
version 3
and later.
This package is safe.
See contributing.md
in micromark/.github
for ways
to get started.
See support.md
for ways to get help.
This project has a code of conduct. By interacting with this repository, organisation, or community you agree to abide by its terms.
FAQs
micromark utility to try and parse events w/ acorn
The npm package micromark-util-events-to-acorn receives a total of 847,691 weekly downloads. As such, micromark-util-events-to-acorn popularity was classified as popular.
We found that micromark-util-events-to-acorn demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.