
Security News
Risky Biz Podcast: Making Reachability Analysis Work in Real-World Codebases
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
parcel-resolver-obfuscator
Advanced tools
This plugin allows you to obfuscate entry javascript files using javascript-obfuscator.
To get started using your favourite package manager.
yarn add -D parcel-plugin-obfuscate
npm install -D parcel-plugin-obfuscate
yarn cross-env NODE_ENV=production parcel build ./index.js
npx cross-env NODE_ENV=production parcel build ./index.js
This runs cross-env which sets NODE_ENV to production
which enables this plugin in parcel and later obfuscates the compiled code.
from this:
// original
class Something {
constructor(){
this.type = "js";
}
}
to this:
// obfuscated
var _0x53ed=['type'];(function(_0x5de549,_0xe388a2){var _0x3bfb0e=function(_0x284f19){while(--_0x284f19){_0x5de549['push'](_0x5de549['shift']());}};_0x3bfb0e(++_0xe388a2);}(_0x53ed,0x13f));var _0x168c=function(_0x3efb93,_0x362405){_0x3efb93=_0x3efb93-0x0;var _0x4682eb=_0x53ed[_0x3efb93];return _0x4682eb;};class Something{constructor(){this[_0x168c('0x0')]='js';}}
This plugin has basic test to ensure that everything works as expected. You can find these tests under test
or run them using the test
script.
yarn test
npm run test
FAQs
Uses javascript-obfuscator to obfuscate entry files
We found that parcel-resolver-obfuscator demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.