
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
semiless.js
Advanced tools
Forget about the semicolons safely.
I really dislike semicolons, they add a lot of visual noise, with no real benefits, but it's a shame that javascript kind of botched up statement termination. But worry not, this tool is here to help with those deficiencies
If you type something like this:
var myNumber = 32
(function(text){ console.log(text) })(myNumber)
you will get en error message, since this would like to invoke 32 as a function :
error in file: /opt/code/mysuperproject/js_source/forms.js
2 : (function(text){ console.log(text) })(myNumber),
if a line starts with one of these :
/ + - * ( [ & % | < > = ^
Of course, an error is only raised if the error is real, for example this will not cause and error:
if (
(cat && dog) &&
(turtle && penguin)
)
++animalPairsCount
because the & symbol clearly signals that you want to continue on the next line, since there is no other meaning for symbol without a next statement, after that the double plus signs will close the previous statement
This will recoursively check all folders and files, if the file extension matches
var semiless = require('semiless')
var errors = semiless.fileChecker('js_source', [.js, .ts])
if (errors) {
console.error(errors)
} else {
console.log('no error found in source files')
}
FAQs
Safely forget the semicolons
We found that semiless.js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.