
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
nodent-compiler
Advanced tools
NoDent is a small module for Nodejs that implements the JavaScript ES7 keywords async
and await
. These make writing, reading and understanding asynchronous and callback methods more implicit and embedded in the language. It works by transforming the ES7 JavaScript keywords await
and async
to fully-ES5 compatible code.
This is the core compiler implementation. The main documentation and details for the CLI, require hook and package options, performance and testing can be found here.
var NodentCompiler = require('nodent-compiler');
var compiler = new NodentCompiler() ;
var es5ReadySourceCode = compiler.compile(
sourceCode,
filename,
{ sourcemap:false, promises: true, noRuntime: true, es6target: true }
).code;
new NodentCompiler(opts)
creates a new NodentCompiler. Note that instances of a NodentCompiler can (and should) be reused to improve compilation performance since internal structures are cached. opts
is an optional set of options containing:
log:<null|function> // Called by the compiler to report a compilation warning.
compiler.compile(sourceCode, filename, options)
compiles ES7 source code containing async
and await
to ES5 source code.
sourceCode:<string> // The source to compiler
filename:<?string> // Optional original filename for source maps
options:<object>:
es7:<boolean>, // Compile in es7 mode
promises:<boolean>, // Compile in Promises mode
generators:<boolean>, // Compile in generator mode
engine:<boolean>, // Compile in engine mode
sourcemap:<boolean>, // Create a sourcemap for the browser's debugger
wrapAwait:<boolean>, // Allow 'await' on non-Promise expressions
lazyThenables:<boolean>,// Evaluate async bodies lazily in 'es7' mode.
noRuntime:<boolean>, // Only compatible with promises & engine. Generate pure ES5 code for an environment that support Promises natively or as a global declaration.
es6target:<boolean> // Compile code assuming an ES6 target (as of v3.1.0, this only requires support for arrow functions)
nodent-runtime
must be available to generated code if es7
or generators
is set, or noRuntime
is falsy.
Promises
must be available to generated code if promises
, generators
or engine
is set.
To generate code that requires no runtime support other than Promises
, set promises
and noRuntime
.
FAQs
NoDent - Asynchronous Javascript language extensions
The npm package nodent-compiler receives a total of 13,575 weekly downloads. As such, nodent-compiler popularity was classified as popular.
We found that nodent-compiler demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.