Mastodawn

Saw this in transitive dependencies (express -> qs -> side-channel -> get-intrinsic): https://github.com/ljharb/get-intrinsic Anyone have a clue what this is good for? I can't figure out why someone is using GetIntrinsic('%Math.pow%')(10) instead of like Math.pow(10)? #JavaScript #npm

GitHub - ljharb/get-intrinsic: Get and robustly cache all JS language-level intrinsics at first require time.

Get and robustly cache all JS language-level intrinsics at first require time. - ljharb/get-intrinsic

GitHub

Show thread

Mathias Panzenböck May 26

I also don't understand why you would be using side-channel instead of just WeakMap? side-channel is by the same author as get-intrinsic. Also its so many small packages depending on more packages. This somehow all feels suspicious. Wish express and body-parser wouldn't use qs. #JavaScript #npm #express