Last 12 weeks · 0 commits
2 of 6 standards met
I'm seeing a ~~25%~~ 75% improvement. I created a branch with a performance test comparing new and old versions here. Getting it to run is a bit hinky due to circular dependency conflicts (otherwise I would have included in the PR). I don't think you need the performance test long term anyways. Once it's convinced you this is a good way to go, it's done it's job and can be discarded. Running the performance test ~~The only problem with my implementation is that it will fail if you use any punctuation in your property names.~~ (fixed) Todo: [x] fix special character compilation
Repository: tj/node-delegates. Description: Nodejs method and accessor delegation utility Stars: 431, Forks: 54. Primary language: JavaScript. Languages: JavaScript (98.2%), Makefile (1.8%). License: MIT. Open PRs: 5, open issues: 8. Last activity: 6y ago. Community health: 42%. Top contributors: tj, PlasmaPower.
Affected Package: node-delegates v1.0.0 Vulnerability Location(s): Method of class . Description: The latest version of node-delegates (v1.0.0) is vulnerable to Prototype Pollution through its entry function constructor. An attacker can manipulate the input to the and to inject or alter properties within the global prototype chain. The implications of this vulnerability can lead to other injection-based attacks, particularly if the library is integrated into an application in a way that interacts with sensitive Node.js APIs (such as exec or eval). This could potentially allow an attacker to execute arbitrary commands within the context of the application. Proof of Concept (PoC):