
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@alloc/quick-lru
Advanced tools
This is a CommonJS-only fork of quick-lru.
Useful when you need to cache something and limit memory usage.
See the algorithm section for implementation details.
$ npm install @alloc/quick-lru
const QuickLRU = require('@alloc/quick-lru');
const lru = new QuickLRU({maxSize: 1000});
lru.set('🦄', '🌈');
lru.has('🦄');
//=> true
lru.get('🦄');
//=> '🌈'
Returns a new instance.
Type: object
Required
Type: number
The target maximum number of items before evicting the least recently used items.
Note: The dual-cache algorithm may physically retain up to twice
maxSizeentries for performance reasons, even though the reported cache size does not exceedmaxSize.
Type: number
Default: Infinity
The maximum number of milliseconds an item should remain in cache. By default maxAge will be Infinity, which means that items will never expire.
Lazy expiration happens upon the next write or read call.
Individual expiration of an item can be specified by the set(key, value, options) method.
Optional
Type: (key, value) => void
Called right before an item is evicted from the cache due to capacity pressure or TTL expiration.
Useful for side effects or for items like object URLs that need explicit cleanup (revokeObjectURL).
This callback is not called for manual removals via delete() or clear().
The instance is iterable so you can use it directly in a for…of loop.
Both key and value can be of any type.
Set an item. Returns the instance.
Individual expiration of an item can be specified with the maxAge option. If not specified, the global maxAge value will be used in case it is specified on the constructor, otherwise the item will never expire.
Get an item.
Check if an item exists.
Get an item without marking it as recently used.
Get the remaining time to live (in milliseconds) for the given item, or undefined if the item is not in the cache.
Infinity if the item has no expiration.Delete an item.
Returns true if the item is removed or false if the item doesn't exist.
Delete all items.
Update the maxSize, discarding items as necessary. Insertion order is mostly preserved, though this is not a strong guarantee.
Useful for on-the-fly tuning of cache sizes in live systems.
Iterable for all the keys.
Iterable for all the values.
Iterable for all entries, starting with the oldest (ascending in recency).
Iterable for all entries, starting with the newest (descending in recency).
The stored item count.
This library implements a variant of the hashlru algorithm using two Map objects. One map holds recently added or accessed entries, while the other holds older entries. When the recent map reaches maxSize, it replaces the older map and a new recent map is created.
This avoids the frequent delete operations required by a traditional linked-list LRU and supports keys of any type and undefined values. The tradeoff is that the two maps may physically retain up to twice the target maxSize between rotations. Use a strict-size cache when that temporary memory overhead is unacceptable.
lru-cache is another popular LRU cache implementation. It offers a rich set of features like item expiration, cache resizing, and a more extensive API for cache manipulation. Compared to @alloc/quick-lru, it might be more suitable for applications requiring these advanced features, but it could also be heavier in terms of performance and resource usage.
tiny-lru is a minimalistic LRU cache implementation focused on performance and a small footprint. It provides basic LRU cache functionality similar to @alloc/quick-lru but with fewer features. It's an excellent choice for projects where simplicity and efficiency are paramount.
FAQs
Simple “Least Recently Used” (LRU) cache
The npm package @alloc/quick-lru receives a total of 6,279,217 weekly downloads. As such, @alloc/quick-lru popularity was classified as popular.
We found that @alloc/quick-lru demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.