Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
github.com/ThreeDotsLabs/watermill
Watermill is a Go library for working efficiently with message streams. It is intended for building event driven applications, enabling event sourcing, RPC over messages, sagas and basically whatever else comes to your mind. You can use conventional pub/sub implementations like Kafka or RabbitMQ, but also HTTP or MySQL binlog if that fits your use case.
Pick what you like the best or see in order:
Building distributed and scalable services is rarely as easy as some may suggest. There is a lot of hidden knowledge that comes with writing such systems. Just like you don't need to know the whole TCP stack to create a HTTP REST server, you shouldn't need to study all of this knowledge to start with building message-driven applications.
Watermill's goal is to make communication with messages as easy to use as HTTP routers. It provides the tools needed to begin working with event-driven architecture and allows you to learn the details on the go.
At the heart of Watermill there is one simple interface:
func(*Message) ([]*Message, error)
Your handler receives a message and decides whether to publish new message(s) or return an error. What happens next is up to the middlewares you've chosen.
You can find more about our motivations in our Introducing Watermill blog post.
All publishers and subscribers have to implement an interface:
type Publisher interface {
Publish(topic string, messages ...*Message) error
Close() error
}
type Subscriber interface {
Subscribe(ctx context.Context, topic string) (<-chan *Message, error)
Close() error
}
Supported Pub/Subs:
github.com/ThreeDotsLabs/watermill-amqp/v2
)github.com/ThreeDotsLabs/watermill-bolt
)github.com/ThreeDotsLabs/watermill-firestore
)github.com/ThreeDotsLabs/watermill-googlecloud
)github.com/ThreeDotsLabs/watermill-http
)github.com/ThreeDotsLabs/watermill-io
)github.com/ThreeDotsLabs/watermill-kafka/v2
)github.com/ThreeDotsLabs/watermill-nats
)github.com/ThreeDotsLabs/watermill-redisstream
)github.com/ThreeDotsLabs/watermill-sql/v2
)All Pub/Subs implementation documentation can be found in the documentation.
Can't find your favorite Pub/Sub or library integration? Check Awesome Watermill.
If you know another library or are an author of one, please add it to the list.
Please check our contributing guide.
Watermill v1.0.0 has been released and is production-ready. The public API is stable and will not change without changing the major version.
To ensure that all Pub/Subs are stable and safe to use in production, we created a set of tests that need to pass for each of the implementations before merging to master. All tests are also executed in stress mode - that means that we are running all the tests 20x in parallel.
All tests are run with the race condition detector enabled (-race
flag in tests).
For more information about debugging tests, you should check tests troubleshooting guide.
Initial tools for benchmarking Pub/Subs can be found in watermill-benchmark.
All benchmarks are being done on a single 16 CPU VM instance, running one binary and dependencies in Docker Compose.
These numbers are meant to serve as a rough estimate of how fast messages can be processed by different Pub/Subs. Keep in mind that the results can be vastly different, depending on the setup and configuration (both much lower and higher).
Here's the short version for message size of 16 bytes.
Pub/Sub | Publish (messages / s) | Subscribe (messages / s) |
---|---|---|
GoChannel | 315,776 | 138,743 |
Redis Streams | 59,158 | 12,134 |
NATS Jetstream (16 Subscribers) | 50,668 | 34,713 |
Kafka (one node) | 41,492 | 101,669 |
SQL (MySQL, batch size=100) | 6,371 | 2,794 |
SQL (PostgreSQL, batch size=1) | 2,831 | 9,460 |
Google Cloud Pub/Sub | 3,027 | 28,589 |
AMQP (RabbitMQ) | 2,770 | 14,604 |
If you didn't find the answer to your question in the documentation, feel free to ask us directly!
Please join us on the #watermill
channel on the Three Dots Labs Discord.
It processes streams!
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.