Installations
npm install @parcel/babylon-walkDeveloper Guide
Typescript
No
Module System
CommonJS
Min. Node Version
>= 12.0.0
Node Version
16.13.2
NPM Version
lerna/3.22.1/node@v16.13.2+x64 (linux)
Releases
Contributors
Languages
JavaScript (84.04%)
Rust (13.67%)
TypeScript (0.89%)
HTML (0.74%)
CSS (0.36%)
Vue (0.08%)
Shell (0.05%)
Elm (0.03%)
SCSS (0.03%)
GLSL (0.02%)
Less (0.02%)
Pug (0.02%)
XSLT (0.02%)
Makefile (0.01%)
Sass (0.01%)
Stylus (0.01%)
MDX (0.01%)
Developer
Download Statistics
Total Downloads
4,064,475
Last Day
439
Last Week
2,484
Last Month
9,355
Last Year
141,275
GitHub Statistics
43,616 Stars
3,400 Commits
2,266 Forks
449 Watching
259 Branches
411 Contributors
Bundle Size
282.32 kB
Minified
51.26 kB
Minified + Gzipped
Sponsor this package
Maintainers
Package Meta Information
Latest Version
2.2.1
Package Id
@parcel/babylon-walk@2.2.1
Unpacked Size
75.39 kB
Size
13.24 kB
File Count
17
NPM Version
lerna/3.22.1/node@v16.13.2+x64 (linux)
Node Version
16.13.2
Total Downloads
Cumulative downloads
Total Downloads
4,064,475
Last day
12.3%
439
Compared to previous day
Last week
-13.6%
2,484
Compared to previous week
Last month
50.1%
9,355
Compared to previous month
Last year
-62.3%
141,275
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
2
babylon-walk
Lightweight AST traversal tools for Babylon ASTs.
Babylon is the parser used by the Babel project, which supplies the wonderful babel-traverse module for walking Babylon ASTs. Problem is, babel-traverse is very heavyweight, as it is designed to supply utilities to make all sorts of AST transformations possible. For simple AST walking without transformation, babel-traverse brings a lot of overhead.
This module loosely implements the API of Acorn parser's walk module, which is a lightweight AST walker for the ESTree AST format.
In my tests, babylon-walk's ancestor walker (the most complex walker provided by this module) is about 8 times faster than babel-traverse, if the visitors are cached and the same AST is used for all runs. It is about 16 times faster if a fresh AST is used every run.
Installation
1$ npm install babylon-walk
API
1var walk = require('babylon-walk');
walk.simple(node, visitors, state)
Do a simple walk over the AST. node should be the AST node to walk, and visitors an object containing Babel visitors. Each visitor function will be called as (node, state), where node is the AST node, and state is the same state passed to walk.simple.
When walk.simple is called with a fresh set of visitors, it will first "explode" the visitors (e.g. expanding Visitor(node, state) {} to Visitor() { enter(node, state) {} }). This exploding process can take some time, so it is recommended to cache your visitors and communicate state leveraging the state parameter. (One difference between the linked article and babylon-walk is that the state is only accessible through the state variable, never as this.)
All babel-types aliases (e.g. Expression) and the union syntax (e.g. 'Identifier|AssignmentPattern'(node, state) {}) work.
walk.ancestor(node, visitors, state)
Do a simple walk over the AST, but memoizing the ancestors of the node and making them available to the visitors. node should be the AST node to walk, and visitors an object containing Babel visitors. Each visitor function will be called as (node, state, ancestors), where node is the AST node, state is the same state passed to walk.ancestor, and ancestors is an array of ancestors to the node (with the outermost node being [0] and the current node being [ancestors.length - 1]). If state is not specified in the call to walk.ancestor, the state parameter will be set to ancestors.
When walk.ancestor is called with a fresh set of visitors, it will first "explode" the visitors (e.g. expanding Visitor(node, state) {} to Visitor() { enter(node, state) {} }). This exploding process can take some time, so it is recommended to cache your visitors and communicate state leveraging the state parameter. (One difference between the linked article and babylon-walk is that the state is only accessible through the state variable, never as this.)
All babel-types aliases (e.g. Expression) and the union syntax (e.g. 'Identifier|AssignmentPattern'(node, state) {}) work.
walk.recursive(node, visitors, state)
Do a recursive walk over the AST, where the visitors are responsible for continuing the walk on the child nodes of their target node. node should be the AST node to walk, and visitors an object containing Babel visitors. Each visitor function will be called as (node, state, c), where node is the AST node, state is the same state passed to walk.recursive, and c is a function that takes a single node as argument and continues walking that node. If no visitor for a node is provided, the default walker algorithm will still be used.
When walk.recursive is called with a fresh set of visitors, it will first "explode" the visitors (e.g. expanding Visitor(node, state) {} to Visitor() { enter(node, state) {} }). This exploding process can take some time, so it is recommended to cache your visitors and communicate state leveraging the state parameter. (One difference between the linked article and babylon-walk is that the state is only accessible through the state variable, never as this.)
Unlike other babylon-walk walkers, walk.recursive does not call the exit visitor, only the enter (the default) visitor, of a specific node type.
All babel-types aliases (e.g. Expression) and the union syntax (e.g. 'Identifier|AssignmentPattern'(node, state) {}) work.
In the following example, we are trying to count the number of functions in the outermost scope. This means, that we can simply walk all the statements and increment a counter if it is a function declaration or expression, and then stop walking. Note that we do not specify a visitor for the Program node, and the default algorithm for walking Program nodes is used (which is what we want). Also of note is how I bring the visitors object outside of countFunctions so that the object can be cached to improve performance.
1import * as t from 'babel-types'; 2import {parse} from 'babylon'; 3import * as walk from 'babylon-walk'; 4 5const visitors = { 6 Statement(node, state, c) { 7 if (t.isVariableDeclaration(node)) { 8 for (let declarator of node.declarations) { 9 // Continue walking the declarator 10 c(declarator); 11 } 12 } else if (t.isFunctionDeclaration(node)) { 13 state.counter++; 14 } 15 }, 16 17 VariableDeclarator(node, state) { 18 if (t.isFunction(node.init)) { 19 state.counter++; 20 } 21 }, 22}; 23 24function countFunctions(node) { 25 const state = { 26 counter: 0, 27 }; 28 walk.recursive(node, visitors, state); 29 return state.counter; 30} 31 32const ast = parse(` 33 // Counts 34 var a = () => {}; 35 36 // Counts 37 function b() { 38 // Doesn't count 39 function c() { 40 } 41 } 42 43 // Counts 44 const c = function d() {}; 45`); 46 47countFunctions(ast); 48// = 3
walk.traverse(node, visitors, state)
Visitors get called as (path, state). Every Path has these methods (similar to @babel/traverse):
skip()replaceWith(node)remove()
Caveat
For those of you migrating from Acorn to Babylon, there are a few things to be aware of.
-
The visitor caching suggestions do not apply to Acorn's walk module, but do for babylon-walk.
-
babylon-walk does not provide any of the other functions Acorn's walk module provides (e.g.
make,findNode*). -
babylon-walk does not use a
basevariable. The walker algorithm is the same as what babel-traverse uses.- That means certain nodes that are not walked by Acorn, such as the
propertyproperty of a non-computedMemberExpression, are walked by babylon-walk.
- That means certain nodes that are not walked by Acorn, such as the
License
MIT
No vulnerabilities found.
Reason
30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Reason
no dangerous workflow patterns detected
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
binaries present in source code
Details
- Warn: binary detected: packages/core/integration-tests/test/integration/wasm-async/add.wasm:1
- Warn: binary detected: packages/core/integration-tests/test/integration/wasm-dynamic/add.wasm:1
- Warn: binary detected: packages/core/integration-tests/test/integration/wasm-sourcemap-transformer/index.wasm:1
- Warn: binary detected: packages/core/integration-tests/test/integration/wasm-sync/add.wasm:1
- Warn: binary detected: packages/core/integration-tests/test/integration/workers-with-other-loaders/add.wasm:1
Reason
Found 1/30 approved changesets -- score normalized to 0
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: jobLevel 'deployments' permission set to 'write': .github/workflows/ci.yml:133
- Info: jobLevel 'contents' permission set to 'read': .github/workflows/tag-release.yml:22
- Warn: jobLevel 'deployments' permission set to 'write': .github/workflows/tag-release.yml:23
- Warn: no topLevel permission defined: .github/workflows/canary-release.yml:1
- Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:11
- Warn: no topLevel permission defined: .github/workflows/dev-release.yml:1
- Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yml:26
- Info: found token with 'none' permissions: .github/workflows/stale.yml:1
- Warn: no topLevel permission defined: .github/workflows/tag-release.yml:1
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/ci.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/ci.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/ci.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/ci.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/ci.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/ci.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/ci.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/ci.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/ci.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/ci.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/ci.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/ci.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/ci.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/ci.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/ci.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/ci.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/ci.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/ci.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/ci.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/ci.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/ci.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:166: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/ci.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:175: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/ci.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/ci.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:157: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:158: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:182: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:220: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:224: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:228: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:241: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:249: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:268: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:288: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/release.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/stale.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/stale.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tag-release.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/tag-release.yml/v2?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tag-release.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/tag-release.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/tag-release.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/tag-release.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/tag-release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/tag-release.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/tag-release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/tag-release.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/tag-release.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/tag-release.yml/v2?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/tag-release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/parcel-bundler/parcel/tag-release.yml/v2?enable=pin
- Info: 0 out of 30 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 29 third-party GitHubAction dependencies pinned
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 16 are checked with a SAST tool
Reason
14 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: RUSTSEC-2024-0421 / GHSA-h97m-ww89-6jmq
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-6vfc-qv3f-vr6c
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-qrpm-p2h7-hrv2
- Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
- Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
- Warn: Project is vulnerable to: GHSA-558p-m34m-vpmq
- Warn: Project is vulnerable to: GHSA-cf4h-3jhx-xvhq
- Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975
Score
3.3
/10
Last Scanned on 2025-01-27
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More