
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
normalize-argv
Advanced tools
Normalize process.argv array when use electron or nwjs and it production build. Usually production build has one argument less
Useful while needs to use command arguments in electron or nwjs app.
Inspired by RoyalBingBong comment in this issue
npm install normalize-argv --save
When you starts develop build by elecrtron . your-argument
var argv = require('normalize-argv')();
/*
* it is not necessary to assign to var
* because it modify original process.arg variable
*/
console.log(process.argv);
var program = require('commander');
/* remember to add 'normalize-argv' before argv parsers,
* because some of them tries to extract name of app from second arv
* and as you know second argv is '.' for electron
*
* better way is to use constructor for Commander for example:
*/
var Command = require('commander').Command;
var program = new Command('your-app-name');
Sometimes you need to start app by electron ./build your-argument
var argv = require('normalize-argv')('./build');
MIT
FAQs
Normalize process.argv array when use electron or nwjs and it production build. Usually production build has one argument less
We found that normalize-argv demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.