
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
简体中文 | English
JavaScript 函数库、工具类
![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
|---|---|---|---|---|---|
| 7+ ✔ | Latest ✔ | Latest ✔ | Latest ✔ | Latest ✔ | 6+ ✔ |
npm install xe-utils
Using nodejs
const XEUtils = require('xe-utils')
<script src="https://cdn.jsdelivr.net/npm/xe-utils"></script>
import XEUtils from 'xe-utils'
XEUtils.toDateString(Date.now())
// 2018-01-01 10:30:28
XEUtils.toStringDate('2018-01-01 10:30:00')
// Mon Jan 01 2018 10:30:00 GMT+0800 (中国标准时间)
这样按需引入方法,可以使体积达到最小
单个导入,包的大小 gzip >≈ 60B+,按需导入
import each from 'xe-utils/each'
import toDateString from 'xe-utils/toDateString'
each({ a: 11, b: 22, c: 33 }, function (item, key){
console.log(item)
})
// 11
// 22
// 33
toDateString(Date.now(), 'yyyy-MM-dd HH:mm:ss')
// 2018-01-01 10:30:28
import XEUtils from 'xe-utils/ctor'
import each from 'xe-utils/each'
import toDateString from 'xe-utils/toDateString'
import toFixedNumber from 'xe-utils/toFixedNumber'
XEUtils.mixin({
each,
toDateString,
toFixedNumber
})
XEUtils.toDateString(Date.now(), 'yyyy-MM-dd HH:mm:ss')
// 2018-01-01 10:30:28
按功能导入所有方法
import XEUtils from 'xe-utils/ctor'
import objectMethods from 'xe-utils/object'
import arrayMethods from 'xe-utils/array'
import baseMethods from 'xe-utils/base'
import numberMethods from 'xe-utils/number'
import dateMethods from 'xe-utils/date'
import stringMethods from 'xe-utils/string'
import functionMethods from 'xe-utils/function'
import urlMethods from 'xe-utils/url'
import webMethods from 'xe-utils/web'
XEUtils.mixin(
// Object
objectMethods,
// Array
arrayMethods,
// Base
baseMethods,
// Number
numberMethods,
// Date
dateMethods,
// String
stringMethods,
// Function
functionMethods,
// URL
urlMethods,
// Web
webMethods
)
Thank you to everyone who contributed to this project.
MIT © 2017-present, Xu Liangzhan
FAQs
JavaScript 函数库、工具类
The npm package xe-utils receives a total of 10,227 weekly downloads. As such, xe-utils popularity was classified as popular.
We found that xe-utils demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.