Product
Socket Now Supports uv.lock Files
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
@black-box/bb
Advanced tools
Preserve your precious JavaScript functions from the future, using Black-Box.
Black-Box is a set of abstractions for software development concerns including: types, functions, databases, files, queues, network services, and deployments.
In Black-Box all of your lovingly-hand-written ESM modules are modeled as a tree of "codepoints." Black-Box indexes the ESM contents by name and type. Black-Box also provides a way to re-cast your handwritten functions into new trees that are tailored for better utility in specific domains. Tailored target domains include web services, reactive data stores, command line interfaces, web-based user interfaces, and native apps.
Black-Box tree transformations are similar to compilation. Black-Box takes input files and produces output files. One key difference from compilation is that Black-Box output files always make direct reference to the file containing the hand-written code. This helps provide a better IDE experience without the need for sourcemaps or other ephemera. That said, Black-Box can also help orchestrate more traditional compilation tooling as well, with a full file dependency tracking system as part of its overall build services.
Although extremely type-centric, for the time being Black-Box is doggedly not written in Typescript. However Black-Box makes extensive use of Typescript inside of JSDoc type annotations.
Launch ETA: Likely sometime post-2022.
FAQs
Preserve your precious JavaScript functions from the future, using Black-Box.
The npm package @black-box/bb receives a total of 2 weekly downloads. As such, @black-box/bb popularity was classified as not popular.
We found that @black-box/bb demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.