xlib
xlib copied to clipboard
Novaleaf
Your isomorphic toolbox
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.19 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}
Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.6 to 1.0.7. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...
Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...
Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.0.4 to 3.0.8. Commits 782c264 3.0.8 6ade2da fix: trim pattern a6f52b0 3.0.7 e4cd434 fix: treat nocase:true as always having magic e6bbe1c publishConfig for 3.0 5b7cd33 3.0.6 20b4b56...
as shown here, json.parse() has exploit possibility: https://github.com/hapijs/bourne either use ```bourne``` or port it's proto inspection regex into our ```jsonx``` util this security issue isn't exploitable by default. it requires...
allow logger to direct output to https://github.com/fluent/fluent-logger-node allow any fluentd target as a recipient. this will allow projects to customize log recipients Also as a bonus, projects running on google-cloud...
something like: ```typescript /** get the name of the current function, and all functions under it in the call stack */ function getFunctionName( /** where to start on the call...
use new ILogResults interface to make the output more useful. definition is already added to v15 logging.ts
node v10 adds webworker support. all modern browsers now have it too. create async versions of jsonx and make it the default usage.