Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Convert strings between different variable naming formats.
This library requires the following to run:
Install with npm:
npm install varname
Load the library into your code with a require
call:
const varname = require('varname');
Convert a variable name to camelBack format (capitalize the first letter of all but the first word).
name: (string) The variable name to convert.
return: (string) Returns the converted variable name.
varname.camelback('foo_bar_baz'); // 'fooBarBaz'
Convert a variable name to CamelCase format (capitalize the first letter of each word).
name: (string) The variable name to convert.
return: (string) Returns the converted variable name.
varname.camelcase('foo_bar_baz'); // 'FooBarBaz'
Convert a variable name to dash format.
name: (string) The variable name to convert.
return: (string) Returns the converted variable name.
varname.dash('FooBarBaz'); // 'foo-bar-baz'
Convert a variable name to underscore format.
name: (string) The variable name to convert.
return: (string) Returns the converted variable name.
varname.underscore('FooBarBaz'); // 'foo_bar_baz'
Split a string into separate variable parts. This allows you to write your own format converters easily.
name: (string) The variable name to split.
return: (array) Returns an array of parts.
varname.split('fooBarBaz');
varname.split('FooBarBaz');
varname.split('FOOBarBAZ');
varname.split('foo-bar-baz');
varname.split('foo_bar_baz');
varname.split('♥~foo|bar|baz~♥');
// all return ['foo', 'bar', 'baz']
The contributing guide is available here. All contributors must follow this library's code of conduct.
Licensed under the MIT license.
Copyright © 2015, Rowan Manning
FAQs
Convert strings between different variable naming formats
The npm package varname receives a total of 25,112 weekly downloads. As such, varname popularity was classified as popular.
We found that varname demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.