Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
@atomiq/promisify
Advanced tools
Convert idiomatic async functions that expect callbacks to EcmaScript 2015 promises.
promisify-iojs
is a very lightweight implementation that wraps callback-style async
functions with native io.js promises.
Promisify an object or function and it will walk over all member properites and up prototype chains to ensure all callback-style async functions are converted to promises. The easiest thing is to just promisify modules when loading them.
promisify-iojs
looks for functions that have one of the following names as the last
parameter: callback
, cb
, done
, callback_
, cb_
. It recognizes both standard
functional declarations as well as ES6 fat arrow functions.
Under the hood, @atomiq/promisify uses denodeify to create the promise wrapper over individual async functions.
This package uses the new scoped package support available with npm
versions greater than 2.7.0.
If you're not familiar with using scoped packages, see this page.
const promisify = require('@atomiq/promisify');
const fs = promisify(require('fs'));
let f = require('path').join(__dirname, './file.txt');
fs.readFile(f, 'utf8')
.then(data => {
// do something with data
})
.catch(err => {
// handle error
});
});
By promisifying fs
, you can use the above style instead of the typical
callback style shown below:
var fs = require('fs');
var f = require('path').join(__dirname, './file.txt');
fs.readFile(f, 'utf8', function(err, data) {
if (err) {
// handle error
} else {
do something with data
}
}
var asyncFunc = function(callback) {
// call back with result asynchronously
setImmediate(() => callback(null, true));
}
// or, with with io.js fat arrow support (`node --harmony_arrow_functions`)
let asyncFunc = callback => {
// call back with result asynchronously
setImmediate(() => callback(null, true));
};
let p = promisify(asyncFunc);
p().then(result => {
// do something with result
}).catch(err => {
// handle error
});
For trivial examples, promises might not seem to offer much of a difference over standard callback-style async functions. However, one of the nice features of promises is that promise handlers can be chained, avoiding the "Pyramid of Doom" of nested callbacks in more complicated control flow situations. This makes control flow logic easier to write and easier to follow. Compare the following example:
Idiomatic Node async callbacks
asyncFunc(function(err, data) {
if (err) { /* handle error */ }
anotherAsyncFunc(function(err, data) {
if (err) { /* handle error */ }
andAnotherAsyncFunc(function(err, data) {
if (err) { /* handle error */ }
// finish processing data
});
});
});
Promise version
asyncFunc(function(data) {
// process data
return anotherAsyncFunc();
})
.then(function(data) {
// process data
return andAnotherAsyncfunc();
})
.then(function(data) {
// finish processing data
})
.catch(function(err) {
// handle error
});
FAQs
Convert callback-based functions to use io.js promises
The npm package @atomiq/promisify receives a total of 2 weekly downloads. As such, @atomiq/promisify popularity was classified as not popular.
We found that @atomiq/promisify demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.