
Security News
GitHub Actions Pricing Whiplash: Self-Hosted Actions Billing Change Postponed
GitHub postponed a new billing model for self-hosted Actions after developer pushback, but moved forward with hosted runner price cuts on January 1.
node-retrieve-globals
Advanced tools
Execute a string of JavaScript using Node.js and return the global variable values and functions.
Execute a string of JavaScript using Node.js and return the global variable values and functions.
var, let, const, function, Array and Object destructuring assignment.vm.vm module to execute JavaScript
node:vm module is not a security mechanism. Do not use it to run untrusted code.codeGeneration (e.g. eval) is disabled by default; use setCreateContextOptions({codeGeneration: { strings: true, wasm: true } }) to re-enable.--experimental-vm-modules flag (for vm.Module support). (v5.0.0 and newer)vm.Module is stable and --experimental-vm-modules is no longer necessary. (v5.0.0 and newer)Available on npm
npm install node-retrieve-globals
Works from Node.js with ESM and CommonJS:
import { RetrieveGlobals } from "node-retrieve-globals";
// const { RetrieveGlobals } = await import("node-retrieve-globals");
And then:
let code = `var a = 1;
const b = "hello";
function hello() {}`;
let vm = new RetrieveGlobals(code);
await vm.getGlobalContext();
Returns:
{ a: 1, b: "hello", hello: function hello() {} }
let code = `let ref = myData;`;
let vm = new RetrieveGlobals(code);
await vm.getGlobalContext({ myData: "hello" });
Returns:
{ ref: "hello" }
// Defaults shown
let options = {
reuseGlobal: false, // re-use Node.js `global`, important if you want `console.log` to log to your console as expected.
dynamicImport: false, // allows `import()`
addRequire: false, // allows `require()`
experimentalModuleApi: false, // uses Module#_compile instead of `vm` (you probably don’t want this and it is bypassed by default when vm.Module is supported)
};
await vm.getGlobalContext({}, options);
v6.0.0 Changes import and require to be project relative (not relative to this package on the file system).v5.0.0 Removes sync API, swap to async-only. Better compatibility with --experimental-vm-modules Node flag.v4.0.0 Swap to use Module._compile as a workaround for #2 (Node regression with experimental modules API in Node v20.10+)v3.0.0 ESM-only package. Node 16+FAQs
Execute a string of JavaScript using Node.js and return the global variable values and functions.
The npm package node-retrieve-globals receives a total of 30,220 weekly downloads. As such, node-retrieve-globals popularity was classified as popular.
We found that node-retrieve-globals demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
GitHub postponed a new billing model for self-hosted Actions after developer pushback, but moved forward with hosted runner price cuts on January 1.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.