Security News
RubyGems.org Adds New Maintainer Role
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Makes all modules in Node get loaded in strict mode.
require('use-strict')
// That's it, now everything is strict forever.
// in other words: FTFY, YOU'RE WELCOME.
Strict mode in JavaScript is virtually always a great thing. It
prevents accidental global leakage, turns silent mistakes into errors,
and removes with
and arguments.callee
and their sordid
complexities. It's mostly a Good Thing.
Unfortunately, it also removes octal literals, which is kind of a bummer. You can pass octal strings to Node's functions that deal with file modes, and they'll do the right thing, so it's not completely horrible.
The implementation works by patching Node's internal module.wrapper
array, and then freezing it, so that further modifications are not
possible.
This means that error printouts that occur on the first line of a node module will be off by a few characters, since Node does a bit of math to account for its wrapper script, which will now be off by 13 characters. This is probably not a big problem, and not really worth working around.
Also, this means that the current module will not be affected. You
should still "use strict"
in the module that does
require('use-strict')
. This module applies strictness to all
future modules loaded by your program.
Note You can also run node --use_strict
and get the same effect
without any of the caveats.
FAQs
Makes all modules in Node get loaded in strict mode.
The npm package use-strict receives a total of 34,713 weekly downloads. As such, use-strict popularity was classified as popular.
We found that use-strict demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.
Security News
Research
Socket's threat research team has detected five malicious npm packages targeting Roblox developers, deploying malware to steal credentials and personal data.