Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@are/f-fetch
Advanced tools
f-fetch
is a JavaScript wrapper for functional fetch
.
npm i @are1000/f-fetch
import { request } from '@are1000/f-fetch'
import target from '@are1000/f-fetch/operators/target'
import when from '@are1000/f-fetch/operators/when'
import parse from '@are1000/f-fetch/operators/parse'
import map from '@are1000/f-fetch/operators/map'
import error from '@are1000/f-fetch/operators/error'
/*
You can alternatively import like this:
import { target, when, parse, map, error } from '@are1000/f-fetch/operators'
*/
const req = request(
target('GET', 'https://example.com', 'api', 'users', 5),
when(r => r.ok, parse('json'), map(res => res.entities)),
when(r => r.status === 404, error(NotFoundError)),
when(r => r.status === 500, error(InternalServerError)),
)
const entities = await req.run()
To use f-fetch
, import the module using npm or yarn.
npm install @are1000/f-fetch
Then, import the main request
builder and pass any amount of operators inside.
The operators are not executed until the method run
is called, so any custom operators
that contain time sentitive logic are safe.
const req = request(...)
const response = await req.run()
You can additionally pass values to the run
function. They will become available
in certain operators (i.e. json
).
const req = request(
...,
json((query) => ({ query }))
)
const response = await req.run('myQuery')
You can also extend existing requests by adding more operators:
const req1 = request(...)
const req2 = req1.extend(...)
target(method: string, ...url: Array<string | number>)
Sets the method and the URL of the request.
After the method, you can pass an arbitrary amount of URL fragments -
they will be joined using the /
character.
appendUrl(...url: Array<string | number>)
Join current URL with URL fragments using /
character. Useful for extending
requests.
json(obj: JSON)
| json((...Args) => JSON)
Sets the request body to an JSON object (internally uses JSON.stringify).
It also correctly sets Content-Type
header.
If you pass a function instead, you can access the arguments from request().run
.
body(data: string, type: string)
Sets the request body to a string. You must pass the Content-Type
as a second
argument.
timeout(delay: number)
Timeouts the request after a number of milliseconds passed.
headers(obj: Record<string, string>)
Appends the request headers.
when(predicate: (response: Response) => boolean, ...operators: Array<Operator>)
Conditional operator that executes other operators only on success and only if the predicate returns true.
whenError(predicate: (error: Error) => boolean, ...operators: Array<Operator>)
Conditional operator that executes other operators only on failure and only if the predicate returns true.
parse(format: 'json' | 'text' | 'blob' | 'arrayBuffer')
Operator that parses response body into one of available formats.
error<T extends Error>(errorClass: T)
If this operator is invoked, it will throw.
It passes the response object as the first argument to the error constructor.
map(mapper: <T>(res: T) => T)
Maps the response object. Useful for transformations.
project(keys: Array<string>, mapper?: <T>(obj: T) => T)
When the response is an array of objects, it transforms the objects in such a way, that only the keys that are included in the argument go through.
You can optionally pass a second argument that will be used to map through every projected object.
prop(key: string)
When the response is an object, return the value of key. Otherwise returns null.
custom(creator: (...Args) => Operator)
Creates a custom operator. It is used to group common and repeating operators into one.
The creator function has to return an operator instance or an array of operator instances.
hook(hookName: string, handler: (args, { params, data, ctx }))
Hooks into internals of f-fetch
. Only use if you know what you are doing!
Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.
FAQs
Functional fetch wrapper
We found that @are/f-fetch demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.