
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@anexia/rxjs-spy-devtools-plugin
Advanced tools
rxjs-spy-devtools-plugin
Install in your project: yarn add rxjs-spy-devtools-plugin
Add the plugin to your: rxjs-spy
import DevToolsPlugin from 'rxjs-spy-devtools-plugin';
const spy = create();
const devtoolsPlugin = new DevToolsPlugin(spy, {
verbose: false,
});
spy.plug(devtoolsPlugin);
// We must teardown the spy if we're hot-reloading:
if (module.hot) {
if (module.hot) {
module.hot.dispose(() => {
spy.teardown();
});
}
}
Tag the streams that you wish to inspect in devtools.
Load the chrome extension
yarn start
yarn build
yarn deploy
yarn start
. This will continuously build the package when you make changes in /src
.yarn link
. This allows yarn to install the package via symlinks.yarn link rxjs-spy-devtools-plugin
. This tells yarn to install the package from the dist folder.Now any changes that you make in /src
should be automatically reflected in the repository where you linked the package.
Later, you might want to use the published version of the package again. Run yarn unlink rxjs-spy-devtools-plugin
from within the linked repo (i.e. ardoq-front).
FAQs
RxJS DevTools plugin for rxjs-spy
The npm package @anexia/rxjs-spy-devtools-plugin receives a total of 2 weekly downloads. As such, @anexia/rxjs-spy-devtools-plugin popularity was classified as not popular.
We found that @anexia/rxjs-spy-devtools-plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.