John-David Dalton

icon indicating a website link https://bsky.app/profile/jddalton.bsky.social

icon company Socket.dev icon location Remote icon location Lodash creator • sometimes TC39 delegate • protecting supply chains at https://Socket.dev • Ex (Bun, Salesforce, Node core, Electron WG, Microsoft)

Results 394 comments of John-David Dalton

ESTree compatible AST

If you provide the string the user can do things like [fast-json](https://github.com/alemures/fast-json#readme). This allows for them to choose which serializer (`JSON.parse` or otherwise) to use.

ESTree compatible AST

As a test of raw parse power I tried parsing [`babylon.max.js`](https://cdn.babylonjs.com/babylon.max.js) which s 10.6MB of JS. It takes `acorn` ~700ms and `swc` ~2 seconds, so I can see what you...

feat: add dependency review tool

@UlisesGascon Thank you! I think this is a perfect one for [Socket.dev](https://socket.dev). Let's hold this PR and nitpick it a bit.

Issue: "Based on Underscore.js 1.8.3" is visible in the code.

Obviously in no way is a code comment and copyright attribution a security issue. This is B A N A N A S.