![Oracle Drags Its Feet in the JavaScript Trademark Dispute](https://cdn.sanity.io/images/cgdhsj6q/production/919c3b22c24f93884c548d60cbb338e819ff2435-1024x1024.webp?w=400&fit=max&auto=format)
Security News
Oracle Drags Its Feet in the JavaScript Trademark Dispute
Oracle seeks to dismiss fraud claims in the JavaScript trademark dispute, delaying the case and avoiding questions about its right to the name.
umd-free-zone
Advanced tools
Creates a define and exports free zone for your UMD scripts to safely register globally
umd-free-zone is meant to prevent your UMD-compatible scripts from falling for unwanted global AMD and CommonJS shims.
Just add umd-free-zone/start.js before your scripts and umd-free-zone/end.js after them.
This will ensure your scripts register globally.
Imagine you want to load the UMD compatible React from unpkg
and intend for it to become a global (window.React
).
Yet, you have an evil Mailchimp script that brutally exports a global define
function, and you can't guarantee your React will load before the nasty AMD leak.
umd-free-zone
to the rescue! Just add it before and after the scripts you want to become global.
React will fall for the alien global define
.
// Nasty script that globally defines a `define` function
<script src="https://downloads.mailchimp.com/js/signup-forms/popup/embed.js"></script>
<script src="https://unpkg.com/react@16.1.1/umd/react.production.min.js"></script>
<script> window.React // undefined! Ouch. </script>
Wrap your scripts in umd-free-zone
start and end:
// Nasty script that globally defines a `define` function
<script src="https://downloads.mailchimp.com/js/signup-forms/popup/embed.js"></script>
<script src="https://unpkg.com/umd-free-zone@0.1.3/start.js"></script>
<script src="https://unpkg.com/react@16.1.1/umd/react.production.min.js"></script>
<script> window.React // undefined! Ouch. </script>
<script src="https://unpkg.com/umd-free-zone@0.1.3/end.js"></script>
// The leaky AMD works as usual from here onwards, if you want it to.
FAQs
Creates a define and exports free zone for your UMD scripts to safely register globally
The npm package umd-free-zone receives a total of 0 weekly downloads. As such, umd-free-zone popularity was classified as not popular.
We found that umd-free-zone demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Oracle seeks to dismiss fraud claims in the JavaScript trademark dispute, delaying the case and avoiding questions about its right to the name.
Security News
The Linux Foundation is warning open source developers that compliance with global sanctions is mandatory, highlighting legal risks and restrictions on contributions.
Security News
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.