Product
Socket Now Supports uv.lock Files
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
@black-box/bb
Advanced tools
Preserve your precious JavaScript functions from the future, using Black-Box.
Black-Box is a set of abstractions for Javascript software development concerns including: types, pure functions, reactive systems, databases, files, queues, network services, and deployments.
In Black-Box all of your lovingly-hand-written ESM modules are modeled as a tree of "codepoints." Black-Box indexes the ESM contents by name and type. Black-Box also provides a way to re-cast your handwritten functions into new trees that are tailored for better utility in specific domains. These domains include web services, reactive data stores, command line interfaces, web-based user interfaces, and mobile native apps.
Black-Box tree transformations are similar to compilation. Black-Box takes input files and produces output files. One key difference from traditional compilation is that Black-Box output files always make direct reference to the file containing the hand-written code. The handwritten code is the code that runs, not a copy of the handwritten code. This simplification improves the IDE experience without the need for sourcemaps or other ephemera. That said, Black-Box can also help orchestrate the application of more traditional compilation tools to your codepoints as well. Blacklight includes a full file-dependency tracking system which works well with both forms of compilation described here.
Although extremely type-centric, for the time being Black-Box is doggedly not written in Typescript. Black-Box does however make extensive use of Typescript inside of JSDoc type annotations, in every JS file that makes it up.
Launch ETA: Likely sometime post-2022.
FAQs
Preserve your precious JavaScript functions from the future, using Black-Box.
The npm package @black-box/bb receives a total of 2 weekly downloads. As such, @black-box/bb popularity was classified as not popular.
We found that @black-box/bb demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.