
Security News
Potemkin Understanding in LLMs: New Study Reveals Flaws in AI Benchmarks
New research reveals that LLMs often fake understanding, passing benchmarks but failing to apply concepts or stay internally consistent.
tsimportlib
Advanced tools
> Currently an alpha-quality, best-effort implementation. > May be unnecessary if you use TypeScript's `"module": "NodeNext", "moduleResolution": "NodeNext"`
Currently an alpha-quality, best-effort implementation.
May be unnecessary if you use TypeScript's"module": "NodeNext", "moduleResolution": "NodeNext"
Node.js allows dynamic import()
calls within CommonJS file. TypeScript transforms import()
into require()
when targetting CommonJS.
This presents a problem when a .ts
file compiled to CommonJS wants to do a truly async, dynamic import of a native ESM module. How do we
avoid TypeScript's transformation from import()
to require()
?
This library implements a workaround. Replace import('lib')
with dynamicImport('lib', module)
.
import {dynamicImport} from 'tsimportlib';
async function main() {
const dynamicallyImportedEsmModule = await dynamicImport('truly-esm-module', module) as typeof import('truly-esm-module');
}
async function loadPlugin(name: string) {
// In this example, plugins may or may not be native ESM, so we use dynamic import to support both.
const dynamicallyImportedPlugin = await dynamicImport(name, module) as MyPluginInterface;
}
Due to Node.js limitations, we must use the CommonJS resolver to locate modules. This should work well enough for third-party modules, but may not work for dual-mode modules or ones that suppress importing of their package.json file. As a fallback you can pass an absolute path to the target module.
FAQs
> Currently an alpha-quality, best-effort implementation. > May be unnecessary if you use TypeScript's `"module": "NodeNext", "moduleResolution": "NodeNext"`
The npm package tsimportlib receives a total of 10,329 weekly downloads. As such, tsimportlib popularity was classified as popular.
We found that tsimportlib demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
New research reveals that LLMs often fake understanding, passing benchmarks but failing to apply concepts or stay internally consistent.
Security News
Django has updated its security policies to reject AI-generated vulnerability reports that include fabricated or unverifiable content.
Security News
ECMAScript 2025 introduces Iterator Helpers, Set methods, JSON modules, and more in its latest spec update approved by Ecma in June 2025.