
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
modern-node-polyfills
Advanced tools
modern polyfills for node native modules based on jspm-core
A way to enable using Node native modules in non-node (Browser, Cloudflare, Deno, ...) environemnts with modern polyfills from JSPM.
Here are the modules that are supported in modern-node-polyfills.
import { polyfillPath } from "modern-node-polyfills";
console.log(await polyfillPath("fs"))
// /home/bagher/project/@jspm/core/nodelibs/browser/fs.js
polyfillPath
This function returns the path of the requested module.
await polyfillPath("fs");
await polyfillPath("node:fs") // Modules can have the `node` prefix
polyfillContent
It returns the bundled content of a specific node module instead of a path.
console.log(await polyfillContent("fs"));
// the bundled source of `fs`
inject
This function tries to do the work of @rollup/plugin-inject plugin! but it also adds a new option called expressions
which is for replacing javascript expressions like __filename
.
console.log(await inject("console.log(__filename);", {
// replaces every global __filename with "/"
expressions: { __filename: "/" },
modules: {
// replaces every global `Buffer` with the imported `Buffer` from the polyfill buffer
Buffer: [await polyfillPath("buffer"), "Buffer"],
}
}))
// logs `console.log("/")`
polyfillGlobals
A way to polyfill all global node expressions, in this case, process
,
Buffer
, global
, setImmediate
, clearImmediate
, __dirname
and __filename
. It's possible to customize the __filename
and __dirname
values in the second argument of this function.
console.log(await polyfillGlobals(`
console.log(global);
console.log(process);
console.log(Buffer);
console.log(setImmediate);
console.log(clearImmediate);
`))
// shows the polyfilled content
As a third argument, it's possible to change the path of those global polyfills or
even disable them using null
.
const content = await polyfillGlobals(
`
console.log(global)
console.log(process);
console.log(Buffer);
console.log(setImmediate);
console.log(clearImmediate);
`,
{},
{
process: "/here/process.js",
Buffer: null,
global: null,
setImmediate: null,
clearImmediate: null,
}
);
Feel free to let me know what you need for this package or what issue you have, I'd be happy!
FAQs
modern polyfills for node native modules based on jspm-core
The npm package modern-node-polyfills receives a total of 21,265 weekly downloads. As such, modern-node-polyfills popularity was classified as popular.
We found that modern-node-polyfills demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.