Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
object-additions
Advanced tools
Object Additions is a set Object
utility methods. This package plays nice with others by not forcing you to "pollute" the global Object
object. On the other hand, it provides a means to add them to the global Object
object, if that's how you roll.
If you opt-in to adding these methods to the global Object
object, each of them will only be added if members don't already exist with their given name.
The current suite includes:
isString
isNumber
isUndefined
isDate
isFunction
extend
values
To get a reference to the additions, while NOT modifying the global Object
object, just require the package:
var additions = require("object-additions").object;
additions.isString("hi");
// -> true
If, on the other hand, you want to just add these to the global Object
object, call the add
method:
require("object-additions").add();
Object.isString("hi");
// -> true
These additions are inspired (and sometimes directly copied from) Prototype.js
Grab a copy of the source, and require it in your app:
require("./path/to/object-additions").add();
Or install it with NPM:
$ npm install object-additions
Then require it in your app:
require("object-additions").add();
FAQs
Methods which extend the Object object.
The npm package object-additions receives a total of 88 weekly downloads. As such, object-additions popularity was classified as not popular.
We found that object-additions demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.