A querystring parser and serializer with nesting support

qs parses and serializes URL query strings in JavaScript, with support for nested objects, arrays, and built-in safety limits that prevent abuse from oversized or deeply-nested inputs.

Custom React PropType validators

For use with React PropTypes. Will error on any prop not explicitly specified.

Polyfill/shim for util.promisify in node versions < v8

ECMAScript spec abstract operations.

ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim

No description.

No description.

Determine if your dependency graph's stated "engines" criteria is met.

No description.

Merge multiple istanbul coverage reports into one.

Tools to validate and secure your npm ecosystem lockfiles.

Object.keys shim

Read from and write to a JSON file, minimizing diffs and preserving formatting.

Get and robustly cache all JS language-level intrinsics at first require time.

No description.

Command line tool for creating or updating a .npmignore file based on .gitignore.

Turn an array into a list of comma-separated values, appropriate for use in an English sentence.

Use `npx aud` instead of `npm audit`, whether you have a lockfile or not!

CLI to list all repos a user has access to, and report on their configuration in aggregate.

ES7 (proposed) SIMD numeric type shim/polyfill

A lightweight Deferred implementation, on top of Promises/A+

Provide a package name, get a list of every version, and who published it.

ECMAScript "ToPrimitive" algorithm. Provides ES5 and ES6/ES2015 versions.

Ensure that when you `npm publish`, the "latest" tag is only set for the truly latest version.

My shareable `eslint` config.

Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.

Sometimes you have to do horrible things, like use the global object to share a singleton. Abstract that away, with this!

Store information about any JS value in a side channel. Uses WeakMap if available.

Shared travis-ci configs.

Given a package name and a version number, or a path to a package.json, what specifiers does it expose?

No description.

A GitHub action to require "allow edits" to be checked on a PR.

Use npm's Arborist to get a dependency tree for a package.

GitHub Action to automatically rebase PRs

No description.

GitHub actions I use for CI.

My personal tsconfig(s), so my open source projects can share them.

Get an iterator for any JS language value. Works robustly across all environments, all versions.

Robustly `.call.bind()` a function.

Get JSON docs on both Node and Browsers

Keeping the project alive.

Spec-compliant polyfill for String.prototype.matchAll ESnext proposal.

The require hook will bind itself to node's require and automatically uglify files on the fly.

ES spec-like internal slots.

Look up HTML tag names via HTML Element constructors, and vice versa.

A simple cache for a few of the JS Error constructors.

JavaScript Style Guide

A CLI for OpenSSF Scorecard data.

List unused files in your package.

a useful wrapper for `util.parseArgs`

Give a regex, get a robust predicate function that tests it against a string.

Given an object and a property, replaces a property descriptor (or deletes it), and returns a thunk to restore it.

List your dependency graph, grouped by publishers.

Unbox a boxed JS primitive value.

What private fields does this object have?

CLI for npmjs.com/validate-npm-package-name

TC39 meeting agendas

Robust call-bound JavaScript intrinsics, using `call-bind` and `get-intrinsic`.

ESLint plugin with rules that help validate proper imports.

Status, process, and documents for ECMA262

A function that returns the normally hidden `AsyncFunction` constructor

`Array.prototype.concat`, but made safe by ignoring Symbol.isConcatSpreadable

Safely generate an npm lockfile and output it to the filename of your choice.

Helper functions around Function call/apply/bind, for use in `call-bind`

Given an object, and a value, return a tuple of the property name, and the object on which it is an own property.

Set, but safe from prototype modifications.

Returns an arbitrary generator function, or undefined if generator syntax is unsupported.

Given an npm module name, get a map of npm version numbers to deprecation messages.

a PURL parser and serializer

Node Version Manager - Simple bash script to manage multiple active node.js versions

Utility package to determine if an `Array.prototype` method properly boxes the callback's receiver and third argument.

simple way to create a ReadableWritable stream that works

No description.

Push an array of items into an array, while being robust against prototype modification.

ECMA-402 Intl spec's internal `FallbackSymbol`

Firefox 17-26 iterators throw a StopIteration object to indicate "done". This normalizes it.

Set a function's name property

Set a function's length property

Function that returns an arbitrary `async function`, or undefined if `async function` syntax is unsupported.

ECMAScript 5 compatibility shims for legacy JavaScript engines

`Object.defineProperty`, but not IE 8's broken one.

Begin app

Polyfill/shim for `document.contains`

Prune unused footnote references in GitHub-flavored Markdown

No description.

Store information about any JS value in a side channel, using a linked list.

React specific linting rules for ESLint

Given two valid integers in string form, return the larger of the two.

Robustly get the [[Prototype]] of an object. Uses the best available method.

Define a data property on an object. Will fall back to assignment in an engine without descriptors.

Iterate any iterable JS value. Works robustly in all environments, all versions.

No description.

Fixtures of ES values, for testing purposes.

An open-source tool for scoring and auditing CVE Numbering Authorities (CNAs) based on the quality, timeliness, and completeness of their vulnerability disclosures.

Function that returns an arbitrary arrow function, or undefined if arrow function syntax is unsupported.

Tool to show the difference in a php packagist package's major version downloads over the past month

Transform comments in JS files between multiple styles - single-line, multi-line, both, and more to come!

Ensures the only DefinitelyTyped (`@types`) packages you have installed are the ones you need.

A cli to generate a complete git co-authors list, including existing co-authors, for use in a commit message.

The repository for high quality TypeScript type definitions.

Automatically check repositories health and quality and build reports that help us understand the current state of Sauce Labs repositories

Walk through a folder and figure out what goes in an npm package

ECMAScript 5/6 compatibility tables

`Object.getOwnPropertyDescriptor`, but accounts for IE's broken implementation.

Validate an object in the "exports" field.

Info about an npm project - which lockfile version, which lockfile(s) are present, etc.

Helper package to shim a method into `Array.prototype[Symbol.unscopables]`

Define an accessor property on an object. Will either throw, or fall back to assignment in loose mode, in an engine without descriptors.

`AsyncIterator.prototype`, or a shared object to use.

Iterate any JS iterator. Works robustly in all environments, all versions.

Node.js JavaScript runtime :sparkles::turtle::rocket::sparkles:

An easy way to create, parse and validate forms in node.js

Get an iterator for an array that's robust against prototype modification.

Encode and decode HTML entities

Safely create a BigInt from a numerical string, even one larger than MAX_SAFE_INTEGER.

browser-side require() the node.js way

A book series on JavaScript. @YDKJS on twitter.

A safer .hasOwnProperty() where property name comes first: `hasOwn(name, obj)`

Implements the node.js require.resolve() algorithm

a through stream that starts paused and resumes on the next tick

🏆Open Source Security Foundation (OpenSSF) Best Practices Badge (formerly Core Infrastructure Initiative (CII) Best Practices Badge)

a package manager for JavaScript, report bugs & get support at:

Evict a module from `require.cache` so the next `require` re-evaluates it fresh, with a `restore` to put the original back

npm fetcher

ECMAScript 6 (Harmony) compatibility shims for legacy JavaScript engines

a glob matcher in javascript

Introduce await.all / await.race / await.allSettled / await.any to simplify the usage of Promises

Robustly set the [[Prototype]] of an object. Uses the best available method.

A simple list of possible Typed Array names.

Robustly get an object's own property keys (strings and symbols), including non-enumerables when possible.

Encode and decode a string using the "look between X and Y on your keyboard" meme format

No description.

Static AST checker for a11y rules on JSX elements.

Array.prototype.includes spec-compliant polyfill

Store information about any JS value in a side channel, using a WeakMap for objects and a Map for primitives.

Store information about any JS value in a side channel, using a Map.

Mirror (copy) the own property descriptors from one object, onto another.

streaming unbzip2 implementatio in pure javascript for node and browsers

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

Tool for analyzing TypeScript types of npm packages

Simple function to extend objects

Apache Struts is a free, open-source, MVC framework for creating elegant, modern Java web applications

Exercise: introduction to repository management

A better forEach

ES spec-compliant shim for String.prototype.padStart

A promise implementation of Promises/A+, and with es7 promise enhancements.

No description.

A Swiss Army knife for language tags.

No description.

ECMAScript Abstract Operations for "getting properties" (Get, GetV, GetMethod)

Command line tool for generating a changelog from git tags and commit history

The current time in milliseconds, from the most precise monotonic clock available (`performance.now` → `process.hrtime` → `Date.now` → `new Date().getTime()`), for measuring elapsed time.

The Node.js® Website

command-line tool to validate a `.nvmrc` file

Web IDL Standard

No description.

Staging repo for development of native port of TypeScript

Test suites for Web platform specs — including WHATWG, W3C, and others

HTML Standard

Repository for the Package-URL website - based on Docusaurus.

A Ruby library for parsing, validating, and generating Package URLs (PURLs) as defined by the PURL specification

A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby

A function that returns the normally hidden `AsyncGeneratorFunction` constructor

Array.prototype.every spec-compliant polyfill

The content behind MDN Web Docs

🐉 Vue Component Framework

The definitive JavaScript type testing library

No description.

We all depend on Open Source. Pay your share through Open Source Pledge.

A robust & optimized ES3-compatible polyfill for the `Array.of` method in ECMAScript 6.

A ponyfill for Buffer.from

A template for ECMAScript proposals

GitHub Skills: Introduction to Secret Scanning

Exercise: Secure your Repository Supply Chain

Administrative space for policies of the TSC

ES2017 spec-compliant shim for Object.entries

Find built-in ESLint rules you don't have in your custom config

ES Proposal spec-compliant shim for Promise.try

Give your JavaScript the ability to speak many languages.

Use CSS-in-JavaScript with themes for React without being tightly coupled to one implementation

ES Proposal spec-compliant shim for Promise.prototype.finally

A better [].reduce

Official ES proposal-compliant polyfill for Object.fromEntries

Mirror of Apache Struts site

ES2017 spec-compliant shim for Object.values

Simple ES6 Array.prototype.findIndex polyfill for older environments.

Provides metadata and conversions from repository urls for Github, Bitbucket and Gitlab

A robust & optimized ES3-compatible polyfill for the `String.prototype.startsWith` method in ECMAScript 6.

Begin app

node/npm module to imitate fs.execSync

fast HTTP/1.1 benchmarking tool written in Node.js

OSS-Fuzz - continuous fuzzing for open source software.

Simple, programmatic `/etc/hosts` manipulation (in node.js)

A port of jQuery.extend that actually works on node.js

No description.

List of my projects and resume

A modern runtime for JavaScript and TypeScript.

Object.prototype.hasOwnProperty

📩 Makes CommonJS incompatible files browserifyable.