Installations

npm install safe-array-concat

Pull Requests

Open

0

Total

1

Closed

0

Merged

1

Issues

Open

1

Total

3

Closed

2

Releases

Unable to fetch releases

Developer

ljharb

Developer Guide

BETA

Module System

CommonJS, ESM

Min. Node Version

>=0.4

Typescript Support

Yes

Node Version

21.7.0

NPM Version

10.5.0 Statistics

5 Stars

29 Commits

1 Forks

2 Watching

1 Branches

2 Contributors

Updated on 05 Sept 2023

Languages

JavaScript (100%)

Total Downloads

Cumulative downloads

Total Downloads

1,420,740,830

Last day

-4.7%

4,870,648

Compared to previous day

Last week

2.1%

27,660,318

Compared to previous week

Last month

6.7%

115,724,547

Compared to previous month

Last year

316.1%

1,145,453,955

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

4

call-bind get-intrinsic has-symbols isarray

Dev Dependencies

21

Versions

safe-array-concat

Array.prototype.concat, but made safe by ignoring Symbol.isConcatSpreadable

Getting started

1npm install --save safe-array-concat

Usage/Examples

1var safeConcat = require('safe-array-concat');
2var assert = require('assert');
3
4assert.deepEqual([].concat([1, 2], 3, [[4]]), [1, 2, 3, [4]], 'arrays spread as expected with normal concat');
5assert.deepEqual(safeConcat([1, 2], 3, [[4]]), [1, 2, 3, [4]], 'arrays spread as expected with safe concat');
6
7String.prototype[Symbol.isConcatSpreadable] = true;
8assert.deepEqual([].concat('foo', Object('bar')), ['foo', 'b', 'a', 'r'], 'spreadable String objects are spread with normal concat!!!');
9assert.deepEqual(safeConcat('foo', Object('bar')), ['foo', Object('bar')], 'spreadable String objects are not spread with safe concat');
10
11Array.prototype[Symbol.isConcatSpreadable] = false;
12assert.deepEqual([].concat([1, 2], 3, [[4]]), [[], [1, 2], 3, [[4]]], 'non-concat-spreadable arrays do not spread with normal concat!!!');
13assert.deepEqual(safeConcat([1, 2], 3, [[4]]), [1, 2, 3, [4]], 'non-concat-spreadable arrays still spread with safe concat');

Tests

Simply clone the repo, npm install, and run npm test

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

10

License

Determines if the project has defined a license.

9

Security-Policy

Determines if the project has published a security policy.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

Maintained

Determines if the project is "actively maintained".

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

Score

4.4

/10

Last Scanned on 2024-11-18

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More