Commit activity
Last 12 weeks · 0 commits
Community health
2 of 6 standards met
42
✓README✓License○Contributing○Code of Conduct○Issue Template○PR Template
Recent PRs & issues
Quiet · 5 in progress · Last activity 6y ago
See all on GitHub →
Listed a few additional files and folders which are currently included in the published npm package, while they should not be.
The directory is currently included in the published npm package but is not needed by consumers. This PR adds a file to exclude test files from the tarball, reducing the package size. Before: After: Test files no longer shipped.
Affected Package: node-delegates v1.0.0 Vulnerability Location(s): Method of class . Description: The latest version of node-delegates (v1.0.0) is vulnerable to Prototype Pollution through its entry function constructor. An attacker can manipulate the input to the and to inject or alter properties within the global prototype chain. The implications of this vulnerability can lead to other injection-based attacks, particularly if the library is integrated into an application in a way that interacts with sensitive Node.js APIs (such as exec or eval). This could potentially allow an attacker to execute arbitrary commands within the context of the application. Proof of Concept (PoC):
Recent fixes
I'm seeing a ~~25%~~ 75% improvement. I created a branch with a performance test comparing new and old versions here. Getting it to run is a bit hinky due to circular dependency conflicts (otherwise I would have included in the PR). I don't think you need the performance test long term anyways. Once it's convinced you this is a good way to go, it's done it's job and can be discarded. Running the performance test ~~The only problem with my implementation is that it will fail if you use any punctuation in your property names.~~ (fixed) Todo: [x] fix special character compilation
Structured data for AI agents
Repository: tj/node-delegates. Description: Nodejs method and accessor delegation utility Stars: 430, Forks: 53. Primary language: JavaScript. Languages: JavaScript (98.2%), Makefile (1.8%). License: MIT. Open PRs: 5, open issues: 8. Last activity: 6y ago. Community health: 42%. Top contributors: tj, PlasmaPower.