
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
soc is a simple object composer, that allows you to compose/merge objects together.
Note this will change the values of the object reference you pass in initially, otherwise soc will create an object to compose for you.
You use soc by requiring the soc module
var soc = require('soc')
Give soc an object to wrap or just invoke soc, soc will use an empty object by default.
soc will return an object that wraps over the object reference you passed in.
That returned object will allow you to compose with the object you gave it.
soc() //=> soc({})
will return the merge and unwrap methods wrapping the object state.
if you want to keep building on top of that object, use the merge method to copy properties over to the initial object.
The cool part is soc will recursively return new soc objects after you finish merging so you can keep composing with objects.
soc = soc()
soc.merge({foo: 'foo'}) //=> soc({foo: 'foo'})
once you're finished merging the object you created with soc, use unwrap to return the final object
soc = soc()
soc.merge({foo: 'foo'}).merge({bar: 'bar'}).unwrap() //=> {foo: 'foo', bar: 'bar'}
FAQs
a simple object composer
The npm package soc receives a total of 12 weekly downloads. As such, soc popularity was classified as not popular.
We found that soc demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.