
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
to-anything
Advanced tools
Sanitize your user input by safely converting the input to strings, integers, and decimals, preventing injecton attacks.
A simple module for converting values into expected types. To-Anything guarantees that you'll get the type you're looking for. For example to.integer('X') returns 0 instead of NaN. This module is not for everybody or for everything, but it's very handy for web applications where you just need a foolproof way to get the values/types that you expect.
npm install to-anything
var to = require('to-anything');
// Examples
var name = to.string(' First Last '); // -> 'First Last'; (auto trimming of strings)
var aNumber = to.integer('1'); // -> 1
var aFloat = to.decimal('23.346'); // -> 23.346
var aFloatFromCurrency = to.decimal('$12,345.67'); // -> 12345.67
// Boolean
var aBoolean = to.boolean('1'); // -> true
var aBoolean = to.boolean('true'); // -> true
var aBoolean = to.boolean(1); // -> true
var aBoolean = to.boolean('0'); // -> false
var aBoolean = to.boolean('false'); // -> false
var aBoolean = to.boolean('no'); // -> false
var aBoolean = to.boolean(''); // -> false
// Dates
var aDate = to.date('06/23/2015') // -> Date object
var aDate = to.date('2015-06-23') // -> Date object
var aDate = to.date(1435090371078) // -> Date object
Mocha tests incuded.
FAQs
Sanitize your user input by safely converting the input to strings, integers, and decimals, preventing injecton attacks.
The npm package to-anything receives a total of 3 weekly downloads. As such, to-anything popularity was classified as not popular.
We found that to-anything demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.