
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
stupid-code
Advanced tools
stupid-code is a tool that helps developers scan and identify code in their projects that they consider to be poorly written or "stupid."
You can install stupid-code globally or as a development dependency in your project.
npm install -g stupid-code
npm install --save-dev stupid-code
You can run stupid-code using the command line interface.
-p, --path <name>: Specify the directory path to scan.-c, --code <code>: Specify the code snippet to search for.-s, --sourceType <type>: Specify the JavaScript source type. Defaults to 'module'.-o, --output <name>: Specify the output file path. Defaults to 'output.html'.-i, --ignore <name>: Specify the ignore pattern. Defaults to 'node_modules/**'. stupidcode -p ./src -c "console.log('debug')"
This command scans the ./src directory for occurrences of console.log('debug').
stupidcode -p ./src -c "var x = 1;" -s script
This command scans the ./src directory for the code var x = 1; in files considered as JavaScript scripts.
stupidcode -p ./src -c "debugger;" -o results.html
This command scans the ./src directory for occurrences of debugger; and writes the output to results.html.
stupidcode -p ./src -c "eval(" -i "test/**"
This command scans the ./src directory for occurrences of eval( while ignoring files in the test directory.
You can find the source code and contribute to this project at GitHub - opopeieie/stupid-code.
FAQs
Stupid
The npm package stupid-code receives a total of 0 weekly downloads. As such, stupid-code popularity was classified as not popular.
We found that stupid-code demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.